Wh04m1001 / IFaultrepElevatedDataCollectionUAC

134 stars 31 forks source link

What the Proc6 method does #3

Closed tingtho closed 1 year ago

tingtho commented 1 year ago

Hi, I'm trying to explore this Auto-Elevated COM component. image

I found the virtual table in Faultrep.dll via IDA Pro. image

this function is an export function of another dll, but when I try to check the imported dll, there is no information about this function in this dll, I know it may be related to the RPC marshaling. image

All in all I would like to know how you know what the Proc6 function does and how to find the definition of the function (by ida reverse or other methods)?

Thank you :)