Enhanced hook function for use with different versions of a dynamically loaded library

摘要

A hooking system for hooking predetermined references to predetermined dynamically loaded library (DLL) functions includes a DLL version identifier provided by a hook entry code to an enhanced hook. The hook entry code is dynamically generated during runtime of an affected software application. The version identifier enables unambiguous communication of a single enhanced hook with functions of multiple versions of identically named DLLs loaded into the same isolated process memory area.

主权项

1. A method, comprising operations of:
identifying, during execution of a software application, a first reference to a function in the software application, wherein the first reference corresponds to a first version of a dynamically loaded library (DLL) with a first version of the function; dynamically generating a first hook-entry code configured to uniquely identify the first version of the function, wherein a first return address corresponding to the first version of the function is used to generate the first hook-entry code; and replacing the first reference with the first hook-entry code.