search

tyranid / oleviewdotnet

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container
GNU General Public License v3.0
1.1k stars 182 forks source link

Compatibility Issue with Windows 11 #42

Open bluestar628 opened 1 year ago

bluestar628 commented 1 year ago

Hello, I'm encountering an incompatibility problem with Windows 11(tested version Windows11 22H2 22621.1992) while using oleviewdotnet. It seems that there are several interfaces where the function parameters of the VARIANT type are recognized as the FC_USER_MARSHAL type (which is the default type when recognition fails). Here are two examples:

Example 1:

CLSID: 8856f961-340a-11d0-a96b-00c04fd705a2 IID: 3050f804-98b5-11cf-bb82-00aa00bdce0b Proc3 Example 2:

CLSID: 011b3619-fe63-4814-8a84-15a194ce9ce3 IID: 37b03538-a4c8-11d2-b634-00c04f79498e Proc16 I kindly request assistance in resolving this issue. Thank you very much.

tyranid commented 1 year ago

Okay I think I found the issue, just down to not covering a new instruction sequence when looking up the imported function. Try it again. I have done some refactoring of the code as well so it's not quite the same as it was.