edgegdi_hook Let us take a look at BitBlt in gdi32.dll... Windows Version 10.0.18363.1350 Windows Version 10.0.19042.746 (20H2) Example PoC We can abuse this to hook various exported gdi32 functions with only one .data patch...