details here:

http://blog.acrossecurity.com/2011/05/anatomy-of-com-server-...