Windows: How to intercept Win32 disk I/O API
问题 On Windows, all disk I/O ultimately happens via Win32 API calls like CreateFile , SetFilePointer , etc. Now, is it possible to intercept these disk I/O Win32 calls and hook in your own code, at run time, for all dynamically-linked Windows applications? That is, applications that get their CreateFile functionality via a Windows DLL instead of a static, C library. Some constraints that I have are: No source code: I won't have the source code for the processes I'd like to intercept. Thread