KANKOSHEV / edgegdi_hook

edgegdi_hook

Let us take a look at BitBlt in gdi32.dll...

Windows Version 10.0.18363.1350

Windows Version 10.0.19042.746 (20H2)

Example PoC

We can abuse this to hook various exported gdi32 functions with only one .data patch...