This on should be interesting for everyone.
Let's explain it on example: you have a application like Norton PreScan utility (scans just system partition on the system where is started from). Now, let's say we have started that application and we want to scan other than system partition. The question is: is it possible to intercept calls in order to make this application working with other partition ?
I think that this app asks the system for some variable like %SYSTEMROOT% in order to determine system partition. Can I intercept that in order to "lie" the application about the variable?

Also on this topic, is it the some kind of API calls monitor application that will help me to determine this ?

It should be possible. Search Google for API HOOK (only german results - use this for english).
Maybe you'll only have to hook "SHGetSpecialFolderLocation", maybe you've gotta hook more.

bobby hat folgendes geschrieben:

Also on this topic, is it the some kind of API calls monitor application that will help me to determine this ?

Google: API MONITOR (english)

raziel