I am attempting to intercept a call from a specific function in my code. Unfortunately, the function call is to an interface and not an actual call. This interface is then sent to a different dll. I would like to be able to overwrite the location in memory to test a problem, but since I don't know what dll to attach to, I can't. The function is in IWbemLocator, and the call is to ConnectServer. I can monitor the call stack, but that is it.
How can I find out what dll this function is actually calling, and then how can I attach to that dll to monitor (or modify) that call?