METHOD OF RECALL OF ORIGINAL FUNCTION AFTER ITS INTERCEPTION WITH SAVING OF STACK OF PARAMETERS Russian patent published in 2015 - IPC G06F9/42 G06F21/12 

FIELD: physics, computer engineering.

SUBSTANCE: invention relates to computer engineering. The method of recall of application function during anti-virus check contains the stages during which application functions are intercepted; the anti-virus analysis of parameters of application function recall is performed; a stack of the application for recall of the application function is prepared, in the case if the anti-virus analysis of parameters has not gave results, the address of return of original function before interception is recorded into the stack to the address following the current index of the stack for the purpose of saving of the stack of parameters during function recall; the application function is recalled.

EFFECT: ensuring correct interception of the application functions during anti-virus check by recall of the application function after its interception with saving of the stack of parameters.

6 dwg