Awesome
edgegdi_hook
Let us take a look at BitBlt in gdi32.dll...
Windows Version 10.0.18363.1350
Windows Version 10.0.19042.746 (20H2)
Example PoC
We can abuse this to hook various exported gdi32 functions with only one .data patch...
Let us take a look at BitBlt in gdi32.dll...
Windows Version 10.0.18363.1350
Windows Version 10.0.19042.746 (20H2)
We can abuse this to hook various exported gdi32 functions with only one .data patch...