Method and system for dynamic interception of function calls to dynamic link libraries into a windowed operating system

摘要

Methods and system for dynamically intercepting exported functions for dynamic link libraries for a process in a windowed operating system. The methods and system allow calls to exported functions in a dynamic link library on a windowed operating system to be dynamically intercepted. The methods and system include using an interception driver to determine if any exported function calls should be intercepted, and an interception dynamic link library to dynamically intercept exported functions calls. The interception dynamic link library includes an interception table to record exported functions that will be intercepted and a global interception function. The global interception function includes one or more calls to before-interception functions, replacement functions and after-interception functions that can be called with a pre-determined priority for an intercepted function. The methods and system may be used to determine what resources a process uses on a windowed operating system, alter the behavior of specific functions in order to alter how an application executes, or for other monitoring or debugging purposes. The methods and system are not process or application specific can be used to intercept exported function calls for virtually any process on a windowed operating system such as Windows 95, Windows 98, Windows NT and others, and supports dynamic interception of multiple exported functions for multiple processes.