Preventivka Vyřešeno

[CZechBoY]

čau,
mohl by mi na to někdo mrknout?
Občas mi laguje fifa a chtěl bych prověřit jestli za tím není něco víc než jen zalagovaný widle.
Díky


Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 22:10:23, on 27. 4. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.16537)

FIREFOX: 27.0.1 (cs)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
D:\Program Files (x86)\RescueTime\RescueTime.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Users\czech_000\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera_crashreporter.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
D:\Program Files (x86)\Opera\20.0.1387.91\opera.exe
C:\Users\czech_000\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - D:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: DebugBar BHO - {69FC0024-10EB-480A-BBF2-3BF4E78E17B1} - D:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - D:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - D:\Program Files (x86)\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Global Startup: RescueTime.lnk = D:\Program Files (x86)\RescueTime\RescueTime.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\Program Files (x86)\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Inspect Element with DebugBar - res://D:\Program Files (x86)\Core Services\DebugBar\DebugInfoBar.dll/247
O8 - Extra context menu item: Odeslat do Bluetooth - C:\Program Files (x86)\Intel\Bluetooth\btSendToObject.htm
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: Odeslat do Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Odeslat do Bluetooth - {2F56DCAA-153B-4479-B4E2-547405B34FB9} - C:\Program Files (x86)\Intel\Bluetooth\btSendToPage.htm (file missing) (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... 5.15.0.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{71455945-BABD-4FB1-B236-685344ED7763}: NameServer = 8.8.8.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{E9489A65-DA61-493A-B076-7DD4756071B6}: NameServer = 8.8.8.8
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Acunetix WVS Scheduler v8 (AcuWVSSchedulerv8) - Unknown owner - D:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour Service - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - D:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Úložná technologie Intel® Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: iPod Service - Apple Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - D:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - D:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - D:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Unknown owner - C:\Windows\system32\sfrem01.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Soluto Launcher Service (SolutoLauncherService) - Soluto - D:\Program Files\Soluto\SolutoLauncherService.exe
O23 - Service: Soluto Remote Service (SolutoRemoteService) - GlavSoft LLC. - D:\Program Files\Soluto\SolutoRemoteService.exe
O23 - Service: Soluto PCGenome Core Service (SolutoService) - Soluto - D:\Program Files\Soluto\SolutoService.exe
O23 - Service: Glasovne poruke (Speechsrv) - Unknown owner - D:\Program Files (x86)\LAN Voice Chat\Speechs.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - D:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - D:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - D:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - D:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 13020 bytes

[Reklama]

[Orcus]

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

[CZechBoY]

Na ten ATF máš nějakej starej návod, :( Select all found tam není, ale je tam Select all


# AdwCleaner v3.204 - Report created 28/04/2014 at 11:28:47
# Updated 26/04/2014 by Xplode
# Operating System : Windows 8 Pro (64 bits)
# Username : czech_000 - NTB
# Running from : C:\Users\czech_000\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\czech_000\daemonprocess.txt
Folder Found : C:\Users\czech_000\.android

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Users\czech_000\AppData\Roaming\Mozilla\Firefox\Profiles\qtewduse.default-1376041014175\prefs.js ]

Line Found : user_pref("extensions.noredirect.list", "^hxxps?://(?:[^/]+\\.)?mozilla\\.(?:org|com)::13:::^hxxps?://(?:[^/]+\\.)?google\\.com::13:::^hxxp://agoga\\.com::3:::^hxxp://(?:[^/]+\\.)?websearch\\.verizon\[...]

-\\ Google Chrome v34.0.1847.131

[ File : C:\Users\czech_000\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R5].txt - [1074 octets] - [28/04/2014 11:28:47]

########## EOF - C:\AdwCleaner\AdwCleaner[R5].txt - [1134 octets] ##########









Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 28. 4. 2014
Čas skenování: 11:47:19
Protokol:
Správce: Ano

Verze: 2.00.1.1004
Databáze malwaru: v2014.04.28.04
Databáze rootkitů: v2014.03.27.01
Licence: Premium
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Chameleon: Zapnuto

OS: Windows 8
CPU: x64
Souborový systém: NTFS
Uživatel: czech_000

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 326554
Uplynulý čas: 15 min, 27 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Shuriken: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(No malicious items detected)

Moduly: 0
(No malicious items detected)

Klíče registru: 0
(No malicious items detected)

Hodnoty registru: 0
(No malicious items detected)

Data registru: 0
(No malicious items detected)

Složky: 0
(No malicious items detected)

Soubory: 0
(No malicious items detected)

Fyzické sektory: 0
(No malicious items detected)


(end)

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[CZechBoY]

# AdwCleaner v3.205 - Report created 28/04/2014 at 19:40:41
# Updated 28/04/2014 by Xplode
# Operating System : Windows 8 Pro (64 bits)
# Username : czech_000 - NTB
# Running from : C:\Users\czech_000\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\czech_000\.android
File Deleted : C:\Users\czech_000\daemonprocess.txt

***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Users\czech_000\AppData\Roaming\Mozilla\Firefox\Profiles\qtewduse.default-1376041014175\prefs.js ]

Line Deleted : user_pref("extensions.noredirect.list", "^hxxps?://(?:[^/]+\\.)?mozilla\\.(?:org|com)::13:::^hxxps?://(?:[^/]+\\.)?google\\.com::13:::^hxxp://agoga\\.com::3:::^hxxp://(?:[^/]+\\.)?websearch\\.verizon\[...]

-\\ Google Chrome v34.0.1847.131

[ File : C:\Users\czech_000\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R5].txt - [1214 octets] - [28/04/2014 11:28:47]
AdwCleaner[R6].txt - [1274 octets] - [28/04/2014 19:39:44]
AdwCleaner[S2].txt - [1201 octets] - [28/04/2014 19:40:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1261 octets] ##########






~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8 Pro x64
Ran by czech_000 on po 28. 04. 2014 at 19:48:03,46
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 28. 04. 2014 at 19:55:13,54
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~









RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 8 (6.2.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : czech_000 [Práva správce]
Mód : Kontrola -- Datum : 04/28/2014 19:58:55
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤
[Address] EAT @explorer.exe (AssocCreate) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983B20)
[Address] EAT @explorer.exe (AssocGetPerceivedType) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5984940)
[Address] EAT @explorer.exe (AssocIsDangerous) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599CFBC)
[Address] EAT @explorer.exe (AssocQueryKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A870)
[Address] EAT @explorer.exe (AssocQueryKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983A20)
[Address] EAT @explorer.exe (AssocQueryStringA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E60C)
[Address] EAT @explorer.exe (AssocQueryStringByKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E440)
[Address] EAT @explorer.exe (AssocQueryStringByKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59841A0)
[Address] EAT @explorer.exe (AssocQueryStringW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989CC0)
[Address] EAT @explorer.exe (ChrCmpIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A03C)
[Address] EAT @explorer.exe (ChrCmpIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A02C)
[Address] EAT @explorer.exe (ColorAdjustLuma) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F7A8)
[Address] EAT @explorer.exe (ColorHLSToRGB) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BFF0)
[Address] EAT @explorer.exe (ColorRGBToHLS) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BF30)
[Address] EAT @explorer.exe (ConnectToConnectionPoint) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59842B0)
[Address] EAT @explorer.exe (DelayLoadFailureHook) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F8F0)
[Address] EAT @explorer.exe (DllGetClassObject) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AD448)
[Address] EAT @explorer.exe (DllGetVersion) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5995AE0)
[Address] EAT @explorer.exe (GUIDFromStringW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F786)
[Address] EAT @explorer.exe (GetAcceptLanguagesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997D0)
[Address] EAT @explorer.exe (GetAcceptLanguagesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A40)
[Address] EAT @explorer.exe (GetMenuPosFromID) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A60)
[Address] EAT @explorer.exe (HashData) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997C0)
[Address] EAT @explorer.exe (IStream_Copy) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A1A0)
[Address] EAT @explorer.exe (IStream_Read) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B80)
[Address] EAT @explorer.exe (IStream_ReadPidl) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989980)
[Address] EAT @explorer.exe (IStream_ReadStr) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981120)
[Address] EAT @explorer.exe (IStream_Reset) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986340)
[Address] EAT @explorer.exe (IStream_Size) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A180)
[Address] EAT @explorer.exe (IStream_Write) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986320)
[Address] EAT @explorer.exe (IStream_WritePidl) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF194)
[Address] EAT @explorer.exe (IStream_WriteStr) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986350)
[Address] EAT @explorer.exe (IUnknown_AtomicRelease) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A09C)
[Address] EAT @explorer.exe (IUnknown_Exec) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B80)
[Address] EAT @explorer.exe (IUnknown_GetSite) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860B0)
[Address] EAT @explorer.exe (IUnknown_GetWindow) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982D20)
[Address] EAT @explorer.exe (IUnknown_QueryService) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983300)
[Address] EAT @explorer.exe (IUnknown_QueryStatus) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59ABBA8)
[Address] EAT @explorer.exe (IUnknown_Set) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981130)
[Address] EAT @explorer.exe (IUnknown_SetSite) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983310)
[Address] EAT @explorer.exe (IntlStrEqWorkerA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E3C)
[Address] EAT @explorer.exe (IntlStrEqWorkerW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E2C)
[Address] EAT @explorer.exe (IsCharSpaceA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A80)
[Address] EAT @explorer.exe (IsCharSpaceW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981140)
[Address] EAT @explorer.exe (IsInternetESCEnabled) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997B0)
[Address] EAT @explorer.exe (IsOS) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B60)
[Address] EAT @explorer.exe (MLFreeLibrary) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9EF4)
[Address] EAT @explorer.exe (MLLoadLibraryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9F48)
[Address] EAT @explorer.exe (MLLoadLibraryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9FA8)
[Address] EAT @explorer.exe (ParseURLA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997A0)
[Address] EAT @explorer.exe (ParseURLW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C250)
[Address] EAT @explorer.exe (PathAddBackslashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B2C)
[Address] EAT @explorer.exe (PathAddBackslashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983C00)
[Address] EAT @explorer.exe (PathAddExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CCC)
[Address] EAT @explorer.exe (PathAddExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CBC)
[Address] EAT @explorer.exe (PathAppendA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CAC)
[Address] EAT @explorer.exe (PathAppendW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A10)
[Address] EAT @explorer.exe (PathBuildRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A05C)
[Address] EAT @explorer.exe (PathBuildRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A06C)
[Address] EAT @explorer.exe (PathCanonicalizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C9C)
[Address] EAT @explorer.exe (PathCanonicalizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CF0)
[Address] EAT @explorer.exe (PathCombineA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B5C)
[Address] EAT @explorer.exe (PathCombineW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983C10)
[Address] EAT @explorer.exe (PathCommonPrefixA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DAC)
[Address] EAT @explorer.exe (PathCommonPrefixW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D9C)
[Address] EAT @explorer.exe (PathCompactPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AF90)
[Address] EAT @explorer.exe (PathCompactPathExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AD80)
[Address] EAT @explorer.exe (PathCompactPathExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986530)
[Address] EAT @explorer.exe (PathCompactPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599EB08)
[Address] EAT @explorer.exe (PathCreateFromUrlA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999790)
[Address] EAT @explorer.exe (PathCreateFromUrlAlloc) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999780)
[Address] EAT @explorer.exe (PathCreateFromUrlW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836E0)
[Address] EAT @explorer.exe (PathFileExistsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C0C)
[Address] EAT @explorer.exe (PathFileExistsAndAttributesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985930)
[Address] EAT @explorer.exe (PathFileExistsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983690)
[Address] EAT @explorer.exe (PathFindExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C3C)
[Address] EAT @explorer.exe (PathFindExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810C0)
[Address] EAT @explorer.exe (PathFindFileNameA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BFC)
[Address] EAT @explorer.exe (PathFindFileNameW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981090)
[Address] EAT @explorer.exe (PathFindNextComponentA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999AE0)
[Address] EAT @explorer.exe (PathFindNextComponentW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A210)
[Address] EAT @explorer.exe (PathFindOnPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B610)
[Address] EAT @explorer.exe (PathFindOnPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989170)
[Address] EAT @explorer.exe (PathFindSuffixArrayA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B534)
[Address] EAT @explorer.exe (PathFindSuffixArrayW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59853D0)
[Address] EAT @explorer.exe (PathGetArgsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599962C)
[Address] EAT @explorer.exe (PathGetArgsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C880)
[Address] EAT @explorer.exe (PathGetCharTypeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999648)
[Address] EAT @explorer.exe (PathGetCharTypeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986480)
[Address] EAT @explorer.exe (PathGetDriveNumberA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D5C)
[Address] EAT @explorer.exe (PathGetDriveNumberW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981050)
[Address] EAT @explorer.exe (PathIsContentTypeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599ABAC)
[Address] EAT @explorer.exe (PathIsContentTypeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A2C0)
[Address] EAT @explorer.exe (PathIsDirectoryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B404)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B334)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599EE78)
[Address] EAT @explorer.exe (PathIsDirectoryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59854D0)
[Address] EAT @explorer.exe (PathIsFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D6C)
[Address] EAT @explorer.exe (PathIsFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986200)
[Address] EAT @explorer.exe (PathIsLFNFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CFC)
[Address] EAT @explorer.exe (PathIsLFNFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CEC)
[Address] EAT @explorer.exe (PathIsNetworkPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A07C)
[Address] EAT @explorer.exe (PathIsNetworkPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829A0)
[Address] EAT @explorer.exe (PathIsPrefixA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D8C)
[Address] EAT @explorer.exe (PathIsPrefixW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D7C)
[Address] EAT @explorer.exe (PathIsRelativeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D4C)
[Address] EAT @explorer.exe (PathIsRelativeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983680)
[Address] EAT @explorer.exe (PathIsRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C8C)
[Address] EAT @explorer.exe (PathIsRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CE0)
[Address] EAT @explorer.exe (PathIsSameRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D1C)
[Address] EAT @explorer.exe (PathIsSameRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D0C)
[Address] EAT @explorer.exe (PathIsSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A834)
[Address] EAT @explorer.exe (PathIsSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E948)
[Address] EAT @explorer.exe (PathIsUNCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B3C)
[Address] EAT @explorer.exe (PathIsUNCServerA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C1C)
[Address] EAT @explorer.exe (PathIsUNCServerShareA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C2C)
[Address] EAT @explorer.exe (PathIsUNCServerShareW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E60)
[Address] EAT @explorer.exe (PathIsUNCServerW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E70)
[Address] EAT @explorer.exe (PathIsUNCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981040)
[Address] EAT @explorer.exe (PathIsURLA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999770)
[Address] EAT @explorer.exe (PathIsURLW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836C0)
[Address] EAT @explorer.exe (PathMakePrettyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599BCB0)
[Address] EAT @explorer.exe (PathMakePrettyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989FC0)
[Address] EAT @explorer.exe (PathMakeSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A8C0)
[Address] EAT @explorer.exe (PathMakeSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981270)
[Address] EAT @explorer.exe (PathMatchSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BAC)
[Address] EAT @explorer.exe (PathMatchSpecExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B8C)
[Address] EAT @explorer.exe (PathMatchSpecExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B7C)
[Address] EAT @explorer.exe (PathMatchSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B9C)
[Address] EAT @explorer.exe (PathParseIconLocationA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BEC)
[Address] EAT @explorer.exe (PathParseIconLocationW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E20)
[Address] EAT @explorer.exe (PathQuoteSpacesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BCC)
[Address] EAT @explorer.exe (PathQuoteSpacesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982D00)
[Address] EAT @explorer.exe (PathRelativePathToA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B14)
[Address] EAT @explorer.exe (PathRelativePathToW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999AF4)
[Address] EAT @explorer.exe (PathRemoveArgsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599BC74)
[Address] EAT @explorer.exe (PathRemoveArgsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986450)
[Address] EAT @explorer.exe (PathRemoveBackslashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CDC)
[Address] EAT @explorer.exe (PathRemoveBackslashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983730)
[Address] EAT @explorer.exe (PathRemoveBlanksA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BBC)
[Address] EAT @explorer.exe (PathRemoveBlanksW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BD0)
[Address] EAT @explorer.exe (PathRemoveExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C7C)
[Address] EAT @explorer.exe (PathRemoveExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E30)
[Address] EAT @explorer.exe (PathRemoveFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B4C)
[Address] EAT @explorer.exe (PathRemoveFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5984040)
[Address] EAT @explorer.exe (PathRenameExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C6C)
[Address] EAT @explorer.exe (PathRenameExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C5C)
[Address] EAT @explorer.exe (PathSearchAndQualifyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599961C)
[Address] EAT @explorer.exe (PathSearchAndQualifyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982E00)
[Address] EAT @explorer.exe (PathSetDlgItemPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AC50)
[Address] EAT @explorer.exe (PathSetDlgItemPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E9D0)
[Address] EAT @explorer.exe (PathSkipRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D2C)
[Address] EAT @explorer.exe (PathSkipRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A20)
[Address] EAT @explorer.exe (PathStripPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D3C)
[Address] EAT @explorer.exe (PathStripPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986220)
[Address] EAT @explorer.exe (PathStripToRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C4C)
[Address] EAT @explorer.exe (PathStripToRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E50)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B6C)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982DF0)
[Address] EAT @explorer.exe (PathUndecorateA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A75C)
[Address] EAT @explorer.exe (PathUndecorateW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59864D0)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A86C)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E984)
[Address] EAT @explorer.exe (PathUnquoteSpacesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BDC)
[Address] EAT @explorer.exe (PathUnquoteSpacesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BE0)
[Address] EAT @explorer.exe (QISearch) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981010)
[Address] EAT @explorer.exe (SHAllocShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829D0)
[Address] EAT @explorer.exe (SHAnsiToAnsi) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A310)
[Address] EAT @explorer.exe (SHAnsiToUnicode) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A320)
[Address] EAT @explorer.exe (SHAutoComplete) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BE10)
[Address] EAT @explorer.exe (SHCopyKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2F0)
[Address] EAT @explorer.exe (SHCopyKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A070)
[Address] EAT @explorer.exe (SHCreateMemStream) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832B0)
[Address] EAT @explorer.exe (SHCreateShellPalette) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982890)
[Address] EAT @explorer.exe (SHCreateStreamOnFileA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0DC)
[Address] EAT @explorer.exe (SHCreateStreamOnFileEx) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986070)
[Address] EAT @explorer.exe (SHCreateStreamOnFileW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59864A0)
[Address] EAT @explorer.exe (SHCreateStreamWrapper) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F792)
[Address] EAT @explorer.exe (SHCreateThread) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E80)
[Address] EAT @explorer.exe (SHCreateThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B30)
[Address] EAT @explorer.exe (SHCreateThreadWithHandle) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986400)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0FC)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0EC)
[Address] EAT @explorer.exe (SHDeleteKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2E0)
[Address] EAT @explorer.exe (SHDeleteKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982C60)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AEFB8)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AEF48)
[Address] EAT @explorer.exe (SHDeleteValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A10C)
[Address] EAT @explorer.exe (SHDeleteValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CA0)
[Address] EAT @explorer.exe (SHEnumKeyExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A290)
[Address] EAT @explorer.exe (SHEnumKeyExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A280)
[Address] EAT @explorer.exe (SHEnumValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A250)
[Address] EAT @explorer.exe (SHEnumValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A1D0)
[Address] EAT @explorer.exe (SHFormatDateTimeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F004)
[Address] EAT @explorer.exe (SHFormatDateTimeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F070)
[Address] EAT @explorer.exe (SHFreeShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829E0)
[Address] EAT @explorer.exe (SHGetInverseCMAP) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A0830)
[Address] EAT @explorer.exe (SHGetThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989140)
[Address] EAT @explorer.exe (SHGetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59843C0)
[Address] EAT @explorer.exe (SHGetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B20)
[Address] EAT @explorer.exe (SHGetViewStatePropertyBag) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986FA0)
[Address] EAT @explorer.exe (SHIsChildOrSelf) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983510)
[Address] EAT @explorer.exe (SHIsLowMemoryMachine) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59ABC3C)
[Address] EAT @explorer.exe (SHLoadIndirectString) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983340)
[Address] EAT @explorer.exe (SHLockShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF838)
[Address] EAT @explorer.exe (SHMessageBoxCheckA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AADD4)
[Address] EAT @explorer.exe (SHMessageBoxCheckW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AAF00)
[Address] EAT @explorer.exe (SHOpenRegStream2A) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0AC)
[Address] EAT @explorer.exe (SHOpenRegStream2W) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59843F0)
[Address] EAT @explorer.exe (SHOpenRegStreamA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0CC)
[Address] EAT @explorer.exe (SHOpenRegStreamW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0BC)
[Address] EAT @explorer.exe (SHPackDispParamsV) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5987DB0)
[Address] EAT @explorer.exe (SHPropertyBag_ReadStrAlloc) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B1598)
[Address] EAT @explorer.exe (SHPropertyBag_WriteBSTR) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B1498)
[Address] EAT @explorer.exe (SHQueryInfoKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A230)
[Address] EAT @explorer.exe (SHQueryInfoKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A210)
[Address] EAT @explorer.exe (SHQueryValueExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A120)
[Address] EAT @explorer.exe (SHQueryValueExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59863A0)
[Address] EAT @explorer.exe (SHRegCloseUSKey) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A70)
[Address] EAT @explorer.exe (SHRegCreateUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A58)
[Address] EAT @explorer.exe (SHRegCreateUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982640)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A44)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A34)
[Address] EAT @explorer.exe (SHRegDeleteUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A24)
[Address] EAT @explorer.exe (SHRegDeleteUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A14)
[Address] EAT @explorer.exe (SHRegDuplicateHKey) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1F0)
[Address] EAT @explorer.exe (SHRegEnumUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59999FC)
[Address] EAT @explorer.exe (SHRegEnumUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59999DC)
[Address] EAT @explorer.exe (SHRegEnumUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999998)
[Address] EAT @explorer.exe (SHRegEnumUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982590)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999984)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C220)
[Address] EAT @explorer.exe (SHRegGetBoolValueFromHKCUHKLM) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986330)
[Address] EAT @explorer.exe (SHRegGetIntW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1E0)
[Address] EAT @explorer.exe (SHRegGetPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1C0)
[Address] EAT @explorer.exe (SHRegGetPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A240)
[Address] EAT @explorer.exe (SHRegGetUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999948)
[Address] EAT @explorer.exe (SHRegGetUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A280)
[Address] EAT @explorer.exe (SHRegGetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2A4)
[Address] EAT @explorer.exe (SHRegGetValueFromHKCUHKLM) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986EBC)
[Address] EAT @explorer.exe (SHRegGetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59821B0)
[Address] EAT @explorer.exe (SHRegOpenUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999928)
[Address] EAT @explorer.exe (SHRegOpenUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999908)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59998E0)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982610)
[Address] EAT @explorer.exe (SHRegQueryUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59998A0)
[Address] EAT @explorer.exe (SHRegQueryUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999860)
[Address] EAT @explorer.exe (SHRegSetPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1A0)
[Address] EAT @explorer.exe (SHRegSetPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A180)
[Address] EAT @explorer.exe (SHRegSetUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999838)
[Address] EAT @explorer.exe (SHRegSetUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999810)
[Address] EAT @explorer.exe (SHRegWriteUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997E4)
[Address] EAT @explorer.exe (SHRegWriteUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59825E0)
[Address] EAT @explorer.exe (SHRegisterValidateTemplate) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B58E0)
[Address] EAT @explorer.exe (SHReleaseThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A08C)
[Address] EAT @explorer.exe (SHRunIndirectRegClientCommand) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599C95C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA27C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CC0)
[Address] EAT @explorer.exe (SHSetThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B10)
[Address] EAT @explorer.exe (SHSetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A14C)
[Address] EAT @explorer.exe (SHSetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59863D0)
[Address] EAT @explorer.exe (SHSkipJunction) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982E20)
[Address] EAT @explorer.exe (SHStrDupA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A260)
[Address] EAT @explorer.exe (SHStrDupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981070)
[Address] EAT @explorer.exe (SHStripMneumonicA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA900)
[Address] EAT @explorer.exe (SHStripMneumonicW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982DB0)
[Address] EAT @explorer.exe (SHUnicodeToAnsi) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832E0)
[Address] EAT @explorer.exe (SHUnicodeToAnsiCP) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F7B9)
[Address] EAT @explorer.exe (SHUnicodeToUnicode) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A300)
[Address] EAT @explorer.exe (SHUnlockShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF818)
[Address] EAT @explorer.exe (ShellMessageBoxA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599C604)
[Address] EAT @explorer.exe (ShellMessageBoxW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F54C)
[Address] EAT @explorer.exe (StrCSpnA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EEC)
[Address] EAT @explorer.exe (StrCSpnIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EDC)
[Address] EAT @explorer.exe (StrCSpnIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999ECC)
[Address] EAT @explorer.exe (StrCSpnW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A30)
[Address] EAT @explorer.exe (StrCatBuffA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FDC)
[Address] EAT @explorer.exe (StrCatBuffW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FEC)
[Address] EAT @explorer.exe (StrCatChainW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DCC)
[Address] EAT @explorer.exe (StrCatW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FCF8)
[Address] EAT @explorer.exe (StrChrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FCC)
[Address] EAT @explorer.exe (StrChrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F9C)
[Address] EAT @explorer.exe (StrChrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810E0)
[Address] EAT @explorer.exe (StrChrNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F8C)
[Address] EAT @explorer.exe (StrChrNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FBC)
[Address] EAT @explorer.exe (StrChrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981080)
[Address] EAT @explorer.exe (StrCmpCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DEC)
[Address] EAT @explorer.exe (StrCmpCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982C90)
[Address] EAT @explorer.exe (StrCmpICA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981100)
[Address] EAT @explorer.exe (StrCmpICW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810F0)
[Address] EAT @explorer.exe (StrCmpIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983650)
[Address] EAT @explorer.exe (StrCmpLogicalW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DDC)
[Address] EAT @explorer.exe (StrCmpNA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EBC)
[Address] EAT @explorer.exe (StrCmpNCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E0C)
[Address] EAT @explorer.exe (StrCmpNCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DFC)
[Address] EAT @explorer.exe (StrCmpNIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EAC)
[Address] EAT @explorer.exe (StrCmpNICA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860A0)
[Address] EAT @explorer.exe (StrCmpNICW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B70)
[Address] EAT @explorer.exe (StrCmpNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983670)
[Address] EAT @explorer.exe (StrCmpNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983770)
[Address] EAT @explorer.exe (StrCmpW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810B0)
[Address] EAT @explorer.exe (StrCpyNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FFC)
[Address] EAT @explorer.exe (StrCpyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FD38)
[Address] EAT @explorer.exe (StrDupA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E4C)
[Address] EAT @explorer.exe (StrDupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B50)
[Address] EAT @explorer.exe (StrFormatByteSize64A) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC00)
[Address] EAT @explorer.exe (StrFormatByteSizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FBF4)
[Address] EAT @explorer.exe (StrFormatByteSizeEx) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832D0)
[Address] EAT @explorer.exe (StrFormatByteSizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC60)
[Address] EAT @explorer.exe (StrFormatKBSizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FB74)
[Address] EAT @explorer.exe (StrFormatKBSizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FBE0)
[Address] EAT @explorer.exe (StrFromTimeIntervalA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A8AC8)
[Address] EAT @explorer.exe (StrFromTimeIntervalW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A8A44)
[Address] EAT @explorer.exe (StrIsIntlEqualA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E3C)
[Address] EAT @explorer.exe (StrIsIntlEqualW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E2C)
[Address] EAT @explorer.exe (StrNCatA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FCB8)
[Address] EAT @explorer.exe (StrNCatW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC74)
[Address] EAT @explorer.exe (StrPBrkA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F5C)
[Address] EAT @explorer.exe (StrPBrkW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59861E0)
[Address] EAT @explorer.exe (StrRChrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FAC)
[Address] EAT @explorer.exe (StrRChrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F7C)
[Address] EAT @explorer.exe (StrRChrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F6C)
[Address] EAT @explorer.exe (StrRChrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986210)
[Address] EAT @explorer.exe (StrRStrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E9C)
[Address] EAT @explorer.exe (StrRStrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E8C)
[Address] EAT @explorer.exe (StrRetToBSTR) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860D0)
[Address] EAT @explorer.exe (StrRetToBufA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F9E8)
[Address] EAT @explorer.exe (StrRetToBufW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981110)
[Address] EAT @explorer.exe (StrRetToStrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FA98)
[Address] EAT @explorer.exe (StrRetToStrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983330)
[Address] EAT @explorer.exe (StrSpnA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F0C)
[Address] EAT @explorer.exe (StrSpnW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EFC)
[Address] EAT @explorer.exe (StrStrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E7C)
[Address] EAT @explorer.exe (StrStrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986490)
[Address] EAT @explorer.exe (StrStrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810D0)
[Address] EAT @explorer.exe (StrStrNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E5C)
[Address] EAT @explorer.exe (StrStrNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E6C)
[Address] EAT @explorer.exe (StrStrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983660)
[Address] EAT @explorer.exe (StrToInt64ExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F2C)
[Address] EAT @explorer.exe (StrToInt64ExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F3C)
[Address] EAT @explorer.exe (StrToIntA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F4C)
[Address] EAT @explorer.exe (StrToIntExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F1C)
[Address] EAT @explorer.exe (StrToIntExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59861F0)
[Address] EAT @explorer.exe (StrToIntW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810A0)
[Address] EAT @explorer.exe (StrTrimA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E1C)
[Address] EAT @explorer.exe (StrTrimW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983320)
[Address] EAT @explorer.exe (UrlApplySchemeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999760)
[Address] EAT @explorer.exe (UrlApplySchemeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999750)
[Address] EAT @explorer.exe (UrlCanonicalizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999740)
[Address] EAT @explorer.exe (UrlCanonicalizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836B0)
[Address] EAT @explorer.exe (UrlCombineA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999728)
[Address] EAT @explorer.exe (UrlCombineW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983750)
[Address] EAT @explorer.exe (UrlCompareA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999714)
[Address] EAT @explorer.exe (UrlCompareW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999704)
[Address] EAT @explorer.exe (UrlCreateFromPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996F4)
[Address] EAT @explorer.exe (UrlCreateFromPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BF0)
[Address] EAT @explorer.exe (UrlEscapeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996E4)
[Address] EAT @explorer.exe (UrlEscapeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983720)
[Address] EAT @explorer.exe (UrlFixupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996D4)
[Address] EAT @explorer.exe (UrlGetLocationA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996C4)
[Address] EAT @explorer.exe (UrlGetLocationW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996B4)
[Address] EAT @explorer.exe (UrlGetPartA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599969C)
[Address] EAT @explorer.exe (UrlGetPartW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983700)
[Address] EAT @explorer.exe (UrlHashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999688)
[Address] EAT @explorer.exe (UrlHashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999678)
[Address] EAT @explorer.exe (UrlIsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999668)
[Address] EAT @explorer.exe (UrlIsNoHistoryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59995EC)
[Address] EAT @explorer.exe (UrlIsNoHistoryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981150)
[Address] EAT @explorer.exe (UrlIsOpaqueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599960C)
[Address] EAT @explorer.exe (UrlIsOpaqueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59995FC)
[Address] EAT @explorer.exe (UrlIsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836A0)
[Address] EAT @explorer.exe (UrlUnescapeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999658)
[Address] EAT @explorer.exe (UrlUnescapeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836D0)
[Address] EAT @explorer.exe (WhichPlatform) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA6D0)
[Address] EAT @explorer.exe (wnsprintfA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A93AC)
[Address] EAT @explorer.exe (wnsprintfW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9318)
[Address] EAT @explorer.exe (wvnsprintfA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A93F8)
[Address] EAT @explorer.exe (wvnsprintfW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9368)

[CZechBoY]

[Address] EAT @explorer.exe (GdipAddPathArc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC868)
[Address] EAT @explorer.exe (GdipAddPathArcI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC7C8)
[Address] EAT @explorer.exe (GdipAddPathBezier) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F400)
[Address] EAT @explorer.exe (GdipAddPathBezierI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F31C)
[Address] EAT @explorer.exe (GdipAddPathBeziers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F258)
[Address] EAT @explorer.exe (GdipAddPathBeziersI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F174)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EAC4)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E90C)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E824)
[Address] EAT @explorer.exe (GdipAddPathClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E9E0)
[Address] EAT @explorer.exe (GdipAddPathCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F094)
[Address] EAT @explorer.exe (GdipAddPathCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EE94)
[Address] EAT @explorer.exe (GdipAddPathCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0ED74)
[Address] EAT @explorer.exe (GdipAddPathCurve3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EC90)
[Address] EAT @explorer.exe (GdipAddPathCurve3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EB90)
[Address] EAT @explorer.exe (GdipAddPathCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EF78)
[Address] EAT @explorer.exe (GdipAddPathEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E3FC)
[Address] EAT @explorer.exe (GdipAddPathEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E378)
[Address] EAT @explorer.exe (GdipAddPathLine) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB964)
[Address] EAT @explorer.exe (GdipAddPathLine2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F61C)
[Address] EAT @explorer.exe (GdipAddPathLine2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F538)
[Address] EAT @explorer.exe (GdipAddPathLineI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB8E0)
[Address] EAT @explorer.exe (GdipAddPathPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DF7C)
[Address] EAT @explorer.exe (GdipAddPathPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E280)
[Address] EAT @explorer.exe (GdipAddPathPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E1E0)
[Address] EAT @explorer.exe (GdipAddPathPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E11C)
[Address] EAT @explorer.exe (GdipAddPathPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E038)
[Address] EAT @explorer.exe (GdipAddPathRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E730)
[Address] EAT @explorer.exe (GdipAddPathRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E6AC)
[Address] EAT @explorer.exe (GdipAddPathRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E5E8)
[Address] EAT @explorer.exe (GdipAddPathRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E4E8)
[Address] EAT @explorer.exe (GdipAddPathString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DDBC)
[Address] EAT @explorer.exe (GdipAddPathStringI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DCD4)
[Address] EAT @explorer.exe (GdipAlloc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C99ADC)
[Address] EAT @explorer.exe (GdipBeginContainer) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB1C4)
[Address] EAT @explorer.exe (GdipBeginContainer2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB100)
[Address] EAT @explorer.exe (GdipBeginContainerI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB000)
[Address] EAT @explorer.exe (GdipBitmapApplyEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02874)
[Address] EAT @explorer.exe (GdipBitmapConvertFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02B20)
[Address] EAT @explorer.exe (GdipBitmapCreateApplyEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0295C)
[Address] EAT @explorer.exe (GdipBitmapGetHistogram) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0278C)
[Address] EAT @explorer.exe (GdipBitmapGetHistogramSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02740)
[Address] EAT @explorer.exe (GdipBitmapGetPixel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02E18)
[Address] EAT @explorer.exe (GdipBitmapLockBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C490)
[Address] EAT @explorer.exe (GdipBitmapSetPixel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB31E0)
[Address] EAT @explorer.exe (GdipBitmapSetResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB4880)
[Address] EAT @explorer.exe (GdipBitmapUnlockBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C5C8)
[Address] EAT @explorer.exe (GdipClearPathMarkers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F848)
[Address] EAT @explorer.exe (GdipCloneBitmapArea) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02F04)
[Address] EAT @explorer.exe (GdipCloneBitmapAreaI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE12D8)
[Address] EAT @explorer.exe (GdipCloneBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A32C)
[Address] EAT @explorer.exe (GdipCloneCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05450)
[Address] EAT @explorer.exe (GdipCloneFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF996C)
[Address] EAT @explorer.exe (GdipCloneFontFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9C18)
[Address] EAT @explorer.exe (GdipCloneImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB70D8)
[Address] EAT @explorer.exe (GdipCloneImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02538)
[Address] EAT @explorer.exe (GdipCloneMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB360)
[Address] EAT @explorer.exe (GdipClonePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10184)
[Address] EAT @explorer.exe (GdipClonePen) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07048)
[Address] EAT @explorer.exe (GdipCloneRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B8FC)
[Address] EAT @explorer.exe (GdipCloneStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8CF0)
[Address] EAT @explorer.exe (GdipClosePathFigure) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FA28)
[Address] EAT @explorer.exe (GdipClosePathFigures) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F988)
[Address] EAT @explorer.exe (GdipCombineRegionPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B538)
[Address] EAT @explorer.exe (GdipCombineRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B6F4)
[Address] EAT @explorer.exe (GdipCombineRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B654)
[Address] EAT @explorer.exe (GdipCombineRegionRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB88A4)
[Address] EAT @explorer.exe (GdipComment) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9878)
[Address] EAT @explorer.exe (GdipConvertToEmfPlus) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF80FC)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF7FFC)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF7EFC)
[Address] EAT @explorer.exe (GdipCreateAdjustableArrowCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04B88)
[Address] EAT @explorer.exe (GdipCreateBitmapFromDirectDrawSurface) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D030A4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB06FC)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFileICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03330)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGdiDib) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAB994)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D031D4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHBITMAP) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C92F28)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHICON) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7B2C)
[Address] EAT @explorer.exe (GdipCreateBitmapFromResource) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0300C)
[Address] EAT @explorer.exe (GdipCreateBitmapFromScan0) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA84A4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDFF40)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStreamICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03480)
[Address] EAT @explorer.exe (GdipCreateCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2F6C)
[Address] EAT @explorer.exe (GdipCreateCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0551C)
[Address] EAT @explorer.exe (GdipCreateEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02DB0)
[Address] EAT @explorer.exe (GdipCreateFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB97BC)
[Address] EAT @explorer.exe (GdipCreateFontFamilyFromName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8DD4)
[Address] EAT @explorer.exe (GdipCreateFontFromDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9520)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9408)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontW) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9380)
[Address] EAT @explorer.exe (GdipCreateFromHDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9D848)
[Address] EAT @explorer.exe (GdipCreateFromHDC2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0196C)
[Address] EAT @explorer.exe (GdipCreateFromHWND) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D018CC)
[Address] EAT @explorer.exe (GdipCreateFromHWNDICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0182C)
[Address] EAT @explorer.exe (GdipCreateHBITMAPFromBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA3830)
[Address] EAT @explorer.exe (GdipCreateHICONFromBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB779C)
[Address] EAT @explorer.exe (GdipCreateHalftonePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9ED8)
[Address] EAT @explorer.exe (GdipCreateHatchBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A198)
[Address] EAT @explorer.exe (GdipCreateImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6D10)
[Address] EAT @explorer.exe (GdipCreateLineBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0984C)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2150)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2044)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0961C)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09514)
[Address] EAT @explorer.exe (GdipCreateLineBrushI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09738)
[Address] EAT @explorer.exe (GdipCreateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA74C8)
[Address] EAT @explorer.exe (GdipCreateMatrix2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB244)
[Address] EAT @explorer.exe (GdipCreateMatrix3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C3C0)
[Address] EAT @explorer.exe (GdipCreateMatrix3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C274)
[Address] EAT @explorer.exe (GdipCreateMetafileFromEmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAB18)
[Address] EAT @explorer.exe (GdipCreateMetafileFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAA30)
[Address] EAT @explorer.exe (GdipCreateMetafileFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA854)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAC0C)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmfFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA93C)
[Address] EAT @explorer.exe (GdipCreatePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF200)
[Address] EAT @explorer.exe (GdipCreatePath2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D103C4)
[Address] EAT @explorer.exe (GdipCreatePath2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D1023C)
[Address] EAT @explorer.exe (GdipCreatePathGradient) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08778)
[Address] EAT @explorer.exe (GdipCreatePathGradientFromPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08598)
[Address] EAT @explorer.exe (GdipCreatePathGradientI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0864C)
[Address] EAT @explorer.exe (GdipCreatePathIter) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CEE0)
[Address] EAT @explorer.exe (GdipCreatePen1) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAA7E8)
[Address] EAT @explorer.exe (GdipCreatePen2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7D40)
[Address] EAT @explorer.exe (GdipCreateRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8040)
[Address] EAT @explorer.exe (GdipCreateRegionHrgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BA00)
[Address] EAT @explorer.exe (GdipCreateRegionPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BB94)
[Address] EAT @explorer.exe (GdipCreateRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD9CC)
[Address] EAT @explorer.exe (GdipCreateRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD918)
[Address] EAT @explorer.exe (GdipCreateRegionRgnData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BAC8)
[Address] EAT @explorer.exe (GdipCreateSolidFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5630)
[Address] EAT @explorer.exe (GdipCreateStreamOnFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CCAB24)
[Address] EAT @explorer.exe (GdipCreateStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8EA0)
[Address] EAT @explorer.exe (GdipCreateTexture) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2A40)
[Address] EAT @explorer.exe (GdipCreateTexture2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09EC4)
[Address] EAT @explorer.exe (GdipCreateTexture2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09C40)
[Address] EAT @explorer.exe (GdipCreateTextureIA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09D10)
[Address] EAT @explorer.exe (GdipCreateTextureIAI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09BF0)
[Address] EAT @explorer.exe (GdipDeleteBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5170)
[Address] EAT @explorer.exe (GdipDeleteCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB3498)
[Address] EAT @explorer.exe (GdipDeleteCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05308)
[Address] EAT @explorer.exe (GdipDeleteEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02D60)
[Address] EAT @explorer.exe (GdipDeleteFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA834C)
[Address] EAT @explorer.exe (GdipDeleteFontFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9CD0)
[Address] EAT @explorer.exe (GdipDeleteGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9D378)
[Address] EAT @explorer.exe (GdipDeleteMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA73FC)
[Address] EAT @explorer.exe (GdipDeletePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF2E0)
[Address] EAT @explorer.exe (GdipDeletePathIter) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CE4C)
[Address] EAT @explorer.exe (GdipDeletePen) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA521C)
[Address] EAT @explorer.exe (GdipDeletePrivateFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF924C)
[Address] EAT @explorer.exe (GdipDeleteRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA76B8)
[Address] EAT @explorer.exe (GdipDeleteStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8C7C)
[Address] EAT @explorer.exe (GdipDisposeImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C91CE0)
[Address] EAT @explorer.exe (GdipDisposeImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6B70)
[Address] EAT @explorer.exe (GdipDrawArc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0040C)
[Address] EAT @explorer.exe (GdipDrawArcI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00360)
[Address] EAT @explorer.exe (GdipDrawBezier) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00208)
[Address] EAT @explorer.exe (GdipDrawBezierI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00114)
[Address] EAT @explorer.exe (GdipDrawBeziers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFFF8)
[Address] EAT @explorer.exe (GdipDrawBeziersI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFEDC)
[Address] EAT @explorer.exe (GdipDrawCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0EF0)
[Address] EAT @explorer.exe (GdipDrawClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF140)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEF38)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEE44)
[Address] EAT @explorer.exe (GdipDrawClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF05C)
[Address] EAT @explorer.exe (GdipDrawCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF7B4)
[Address] EAT @explorer.exe (GdipDrawCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF59C)
[Address] EAT @explorer.exe (GdipDrawCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF4A8)
[Address] EAT @explorer.exe (GdipDrawCurve3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF374)
[Address] EAT @explorer.exe (GdipDrawCurve3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF268)
[Address] EAT @explorer.exe (GdipDrawCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF6D0)
[Address] EAT @explorer.exe (GdipDrawDriverString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD9A8)
[Address] EAT @explorer.exe (GdipDrawEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFB64)
[Address] EAT @explorer.exe (GdipDrawEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFAD4)
[Address] EAT @explorer.exe (GdipDrawImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2DF0)
[Address] EAT @explorer.exe (GdipDrawImageFX) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD004)
[Address] EAT @explorer.exe (GdipDrawImageI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2D6C)
[Address] EAT @explorer.exe (GdipDrawImagePointRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD77C)
[Address] EAT @explorer.exe (GdipDrawImagePointRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD6B8)
[Address] EAT @explorer.exe (GdipDrawImagePoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD658)
[Address] EAT @explorer.exe (GdipDrawImagePointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD53C)
[Address] EAT @explorer.exe (GdipDrawImagePointsRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD2CC)
[Address] EAT @explorer.exe (GdipDrawImagePointsRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD134)
[Address] EAT @explorer.exe (GdipDrawImageRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA2664)
[Address] EAT @explorer.exe (GdipDrawImageRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA25C4)
[Address] EAT @explorer.exe (GdipDrawImageRectRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDEFC4)
[Address] EAT @explorer.exe (GdipDrawImageRectRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDEE90)
[Address] EAT @explorer.exe (GdipDrawLine) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D005D8)
[Address] EAT @explorer.exe (GdipDrawLineI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00548)
[Address] EAT @explorer.exe (GdipDrawLines) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACA40)
[Address] EAT @explorer.exe (GdipDrawLinesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAC958)
[Address] EAT @explorer.exe (GdipDrawPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDAFA0)
[Address] EAT @explorer.exe (GdipDrawPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF998)
[Address] EAT @explorer.exe (GdipDrawPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF8EC)
[Address] EAT @explorer.exe (GdipDrawPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC27D0)
[Address] EAT @explorer.exe (GdipDrawPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC26E0)
[Address] EAT @explorer.exe (GdipDrawRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACD30)
[Address] EAT @explorer.exe (GdipDrawRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACC90)
[Address] EAT @explorer.exe (GdipDrawRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFDC0)
[Address] EAT @explorer.exe (GdipDrawRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFC88)
[Address] EAT @explorer.exe (GdipDrawString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE018)
[Address] EAT @explorer.exe (GdipEmfToWmfBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC6A28)
[Address] EAT @explorer.exe (GdipEndContainer) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAF58)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCE6C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCDD0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC9D4)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC894)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCC38)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCB80)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC6D0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC5E0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC15C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBFD4)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC41C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC328)
[Address] EAT @explorer.exe (GdipFillClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE524)
[Address] EAT @explorer.exe (GdipFillClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE310)
[Address] EAT @explorer.exe (GdipFillClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE210)
[Address] EAT @explorer.exe (GdipFillClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE440)
[Address] EAT @explorer.exe (GdipFillEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF768)
[Address] EAT @explorer.exe (GdipFillEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE990)
[Address] EAT @explorer.exe (GdipFillPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE654)
[Address] EAT @explorer.exe (GdipFillPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE850)

[CZechBoY]

[Address] EAT @explorer.exe (GdipFillPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE79C)
[Address] EAT @explorer.exe (GdipFillPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC29AC)
[Address] EAT @explorer.exe (GdipFillPolygon2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEB04)
[Address] EAT @explorer.exe (GdipFillPolygon2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEA20)
[Address] EAT @explorer.exe (GdipFillPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC28BC)
[Address] EAT @explorer.exe (GdipFillRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5870)
[Address] EAT @explorer.exe (GdipFillRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA57DC)
[Address] EAT @explorer.exe (GdipFillRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFED28)
[Address] EAT @explorer.exe (GdipFillRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEC28)
[Address] EAT @explorer.exe (GdipFillRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD354)
[Address] EAT @explorer.exe (GdipFindFirstImageItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03730)
[Address] EAT @explorer.exe (GdipFindNextImageItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03680)
[Address] EAT @explorer.exe (GdipFlattenPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDAEC4)
[Address] EAT @explorer.exe (GdipFlush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01764)
[Address] EAT @explorer.exe (GdipFree) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C99A74)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapFillState) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D045B0)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04A10)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapMiddleInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04720)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04898)
[Address] EAT @explorer.exe (GdipGetAllPropertyItems) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB11D8)
[Address] EAT @explorer.exe (GdipGetBrushType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A27C)
[Address] EAT @explorer.exe (GdipGetCellAscent) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9708)
[Address] EAT @explorer.exe (GdipGetCellDescent) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9644)
[Address] EAT @explorer.exe (GdipGetClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8424)
[Address] EAT @explorer.exe (GdipGetClipBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB938)
[Address] EAT @explorer.exe (GdipGetClipBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7B04)
[Address] EAT @explorer.exe (GdipGetCompositingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD0E0)
[Address] EAT @explorer.exe (GdipGetCompositingQuality) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01478)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04EF4)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04DBC)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeCaps) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05198)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05058)
[Address] EAT @explorer.exe (GdipGetCustomLineCapType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0539C)
[Address] EAT @explorer.exe (GdipGetCustomLineCapWidthScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04C84)
[Address] EAT @explorer.exe (GdipGetDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC35E8)
[Address] EAT @explorer.exe (GdipGetDpiX) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00A68)
[Address] EAT @explorer.exe (GdipGetDpiY) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8AD8)
[Address] EAT @explorer.exe (GdipGetEffectParameterSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02C8C)
[Address] EAT @explorer.exe (GdipGetEffectParameters) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02C18)
[Address] EAT @explorer.exe (GdipGetEmHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9A70)
[Address] EAT @explorer.exe (GdipGetEncoderParameterList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0419C)
[Address] EAT @explorer.exe (GdipGetEncoderParameterListSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04260)
[Address] EAT @explorer.exe (GdipGetFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8C70)
[Address] EAT @explorer.exe (GdipGetFamilyName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9984)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9178)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF90BC)
[Address] EAT @explorer.exe (GdipGetFontHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9660)
[Address] EAT @explorer.exe (GdipGetFontHeightGivenDPI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9A64)
[Address] EAT @explorer.exe (GdipGetFontSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8CF0)
[Address] EAT @explorer.exe (GdipGetFontStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8B6C)
[Address] EAT @explorer.exe (GdipGetFontUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8BF0)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilyMonospace) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9DC4)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySansSerif) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9EAC)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySerif) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9E38)
[Address] EAT @explorer.exe (GdipGetHatchBackgroundColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A030)
[Address] EAT @explorer.exe (GdipGetHatchForegroundColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D084E4)
[Address] EAT @explorer.exe (GdipGetHatchStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A0E4)
[Address] EAT @explorer.exe (GdipGetHemfFromMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC5A24)
[Address] EAT @explorer.exe (GdipGetImageAttributesAdjustedPalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01A18)
[Address] EAT @explorer.exe (GdipGetImageBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03CEC)
[Address] EAT @explorer.exe (GdipGetImageDecoders) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD9270)
[Address] EAT @explorer.exe (GdipGetImageDecodersSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD9428)
[Address] EAT @explorer.exe (GdipGetImageDimension) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03C28)
[Address] EAT @explorer.exe (GdipGetImageEncoders) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C96798)
[Address] EAT @explorer.exe (GdipGetImageEncodersSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C969D8)
[Address] EAT @explorer.exe (GdipGetImageFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0396C)
[Address] EAT @explorer.exe (GdipGetImageGraphicsContext) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA9214)
[Address] EAT @explorer.exe (GdipGetImageHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9B680)
[Address] EAT @explorer.exe (GdipGetImageHorizontalResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03B3C)
[Address] EAT @explorer.exe (GdipGetImageItemData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D035D0)
[Address] EAT @explorer.exe (GdipGetImagePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE05B4)
[Address] EAT @explorer.exe (GdipGetImagePaletteSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE067C)
[Address] EAT @explorer.exe (GdipGetImagePixelFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9B588)
[Address] EAT @explorer.exe (GdipGetImageRawFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB18F4)
[Address] EAT @explorer.exe (GdipGetImageThumbnail) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D037E0)
[Address] EAT @explorer.exe (GdipGetImageType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6EA0)
[Address] EAT @explorer.exe (GdipGetImageVerticalResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03A50)
[Address] EAT @explorer.exe (GdipGetImageWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C344)
[Address] EAT @explorer.exe (GdipGetInterpolationMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01108)
[Address] EAT @explorer.exe (GdipGetLineBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D090C8)
[Address] EAT @explorer.exe (GdipGetLineBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07A4C)
[Address] EAT @explorer.exe (GdipGetLineColors) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09360)
[Address] EAT @explorer.exe (GdipGetLineGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09198)
[Address] EAT @explorer.exe (GdipGetLinePresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08E88)
[Address] EAT @explorer.exe (GdipGetLinePresetBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09004)
[Address] EAT @explorer.exe (GdipGetLineRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07C48)
[Address] EAT @explorer.exe (GdipGetLineRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09280)
[Address] EAT @explorer.exe (GdipGetLineSpacing) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9B34)
[Address] EAT @explorer.exe (GdipGetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetLineWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08AA0)
[Address] EAT @explorer.exe (GdipGetLogFontA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9B0C)
[Address] EAT @explorer.exe (GdipGetLogFontW) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8EEC)
[Address] EAT @explorer.exe (GdipGetMatrixElements) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA75F0)
[Address] EAT @explorer.exe (GdipGetMetafileDownLevelRasterizationLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9F20)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromEmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAE8C)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAE34)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAD14)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFADC4)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromWmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAEE4)
[Address] EAT @explorer.exe (GdipGetNearestColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D006F8)
[Address] EAT @explorer.exe (GdipGetPageScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00BD0)
[Address] EAT @explorer.exe (GdipGetPageUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00C84)
[Address] EAT @explorer.exe (GdipGetPathData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FB68)
[Address] EAT @explorer.exe (GdipGetPathFillMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FC14)
[Address] EAT @explorer.exe (GdipGetPathGradientBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0797C)
[Address] EAT @explorer.exe (GdipGetPathGradientBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07A4C)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D084E4)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08034)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07F98)
[Address] EAT @explorer.exe (GdipGetPathGradientFocusScales) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D071BC)
[Address] EAT @explorer.exe (GdipGetPathGradientGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07B00)
[Address] EAT @explorer.exe (GdipGetPathGradientPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D080E0)
[Address] EAT @explorer.exe (GdipGetPathGradientPointCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07DB4)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07764)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09004)
[Address] EAT @explorer.exe (GdipGetPathGradientRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07C48)
[Address] EAT @explorer.exe (GdipGetPathGradientRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09280)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07CF8)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorsWithCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D082FC)
[Address] EAT @explorer.exe (GdipGetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetPathGradientWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08AA0)
[Address] EAT @explorer.exe (GdipGetPathLastPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F6E0)
[Address] EAT @explorer.exe (GdipGetPathPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FE14)
[Address] EAT @explorer.exe (GdipGetPathPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FCC8)
[Address] EAT @explorer.exe (GdipGetPathTypes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FF24)
[Address] EAT @explorer.exe (GdipGetPathWorldBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D680)
[Address] EAT @explorer.exe (GdipGetPathWorldBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D4FC)
[Address] EAT @explorer.exe (GdipGetPenBrushFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05D44)
[Address] EAT @explorer.exe (GdipGetPenColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF640)
[Address] EAT @explorer.exe (GdipGetPenCompoundArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D056CC)
[Address] EAT @explorer.exe (GdipGetPenCompoundCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0586C)
[Address] EAT @explorer.exe (GdipGetPenCustomEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0674C)
[Address] EAT @explorer.exe (GdipGetPenCustomStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D068FC)
[Address] EAT @explorer.exe (GdipGetPenDashArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0591C)
[Address] EAT @explorer.exe (GdipGetPenDashCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06B5C)
[Address] EAT @explorer.exe (GdipGetPenDashCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05A94)
[Address] EAT @explorer.exe (GdipGetPenDashOffset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05BE4)
[Address] EAT @explorer.exe (GdipGetPenDashStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05C94)
[Address] EAT @explorer.exe (GdipGetPenEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06C10)
[Address] EAT @explorer.exe (GdipGetPenFillType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFB50)
[Address] EAT @explorer.exe (GdipGetPenLineJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06AAC)
[Address] EAT @explorer.exe (GdipGetPenMiterLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D065F0)
[Address] EAT @explorer.exe (GdipGetPenMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06498)
[Address] EAT @explorer.exe (GdipGetPenStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06CC0)
[Address] EAT @explorer.exe (GdipGetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0624C)
[Address] EAT @explorer.exe (GdipGetPenUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06EE4)
[Address] EAT @explorer.exe (GdipGetPenWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF6E0)
[Address] EAT @explorer.exe (GdipGetPixelOffsetMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D013C4)
[Address] EAT @explorer.exe (GdipGetPointCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10030)
[Address] EAT @explorer.exe (GdipGetPropertyCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03F08)
[Address] EAT @explorer.exe (GdipGetPropertyIdList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03E6C)
[Address] EAT @explorer.exe (GdipGetPropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB57EC)
[Address] EAT @explorer.exe (GdipGetPropertyItemSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB5760)
[Address] EAT @explorer.exe (GdipGetPropertySize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFEF0)
[Address] EAT @explorer.exe (GdipGetRegionBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B260)
[Address] EAT @explorer.exe (GdipGetRegionBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B0C4)
[Address] EAT @explorer.exe (GdipGetRegionData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0ABA8)
[Address] EAT @explorer.exe (GdipGetRegionDataSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AC7C)
[Address] EAT @explorer.exe (GdipGetRegionHRgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB866C)
[Address] EAT @explorer.exe (GdipGetRegionScans) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A4EC)
[Address] EAT @explorer.exe (GdipGetRegionScansCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A60C)
[Address] EAT @explorer.exe (GdipGetRegionScansI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A3EC)

[CZechBoY]

[Address] EAT @explorer.exe (GdipGetRenderingOrigin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D015D4)
[Address] EAT @explorer.exe (GdipGetSmoothingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAA70)
[Address] EAT @explorer.exe (GdipGetSolidFillColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09964)
[Address] EAT @explorer.exe (GdipGetStringFormatAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8A30)
[Address] EAT @explorer.exe (GdipGetStringFormatDigitSubstitution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8390)
[Address] EAT @explorer.exe (GdipGetStringFormatFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8B58)
[Address] EAT @explorer.exe (GdipGetStringFormatHotkeyPrefix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF87E0)
[Address] EAT @explorer.exe (GdipGetStringFormatLineAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8908)
[Address] EAT @explorer.exe (GdipGetStringFormatMeasurableCharacterRangeCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF856C)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStopCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8698)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStops) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF85DC)
[Address] EAT @explorer.exe (GdipGetStringFormatTrimming) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8260)
[Address] EAT @explorer.exe (GdipGetTextContrast) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D011B0)
[Address] EAT @explorer.exe (GdipGetTextRenderingHint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8160)
[Address] EAT @explorer.exe (GdipGetTextureImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDE20)
[Address] EAT @explorer.exe (GdipGetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetTextureWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDCCC)
[Address] EAT @explorer.exe (GdipGetVisibleClipBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB7D0)
[Address] EAT @explorer.exe (GdipGetVisibleClipBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB690)
[Address] EAT @explorer.exe (GdipGetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA780C)
[Address] EAT @explorer.exe (GdipGraphicsClear) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB19E8)
[Address] EAT @explorer.exe (GdipGraphicsSetAbort) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D025EC)
[Address] EAT @explorer.exe (GdipImageForceValidation) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6F4C)
[Address] EAT @explorer.exe (GdipImageGetFrameCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0478)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0204)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE02A4)
[Address] EAT @explorer.exe (GdipImageRotateFlip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE3500)
[Address] EAT @explorer.exe (GdipImageSelectActiveFrame) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03F94)
[Address] EAT @explorer.exe (GdipImageSetAbort) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02690)
[Address] EAT @explorer.exe (GdipInitializePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02A30)
[Address] EAT @explorer.exe (GdipInvertMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C100)
[Address] EAT @explorer.exe (GdipIsClipEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB884)
[Address] EAT @explorer.exe (GdipIsEmptyRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AF40)
[Address] EAT @explorer.exe (GdipIsEqualRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AD48)
[Address] EAT @explorer.exe (GdipIsInfiniteRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8268)
[Address] EAT @explorer.exe (GdipIsMatrixEqual) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BCA0)
[Address] EAT @explorer.exe (GdipIsMatrixIdentity) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7760)
[Address] EAT @explorer.exe (GdipIsMatrixInvertible) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BDC4)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D080)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CFF8)
[Address] EAT @explorer.exe (GdipIsStyleAvailable) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF97B8)
[Address] EAT @explorer.exe (GdipIsVisibleClipEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB5D4)
[Address] EAT @explorer.exe (GdipIsVisiblePathPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D344)
[Address] EAT @explorer.exe (GdipIsVisiblePathPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D2C8)
[Address] EAT @explorer.exe (GdipIsVisiblePoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB4F0)
[Address] EAT @explorer.exe (GdipIsVisiblePointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB480)
[Address] EAT @explorer.exe (GdipIsVisibleRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB37C)
[Address] EAT @explorer.exe (GdipIsVisibleRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB2F0)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AA08)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A98C)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A7A8)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A70C)
[Address] EAT @explorer.exe (GdipLoadImageFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D044D4)
[Address] EAT @explorer.exe (GdipLoadImageFromFileICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04314)
[Address] EAT @explorer.exe (GdipLoadImageFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA9F24)
[Address] EAT @explorer.exe (GdipLoadImageFromStreamICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D043F4)
[Address] EAT @explorer.exe (GdipMeasureCharacterRanges) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFDC28)
[Address] EAT @explorer.exe (GdipMeasureDriverString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD7D0)
[Address] EAT @explorer.exe (GdipMeasureString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFDDF0)
[Address] EAT @explorer.exe (GdipMultiplyLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA8BC)
[Address] EAT @explorer.exe (GdipMultiplyPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06094)
[Address] EAT @explorer.exe (GdipMultiplyTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00F58)
[Address] EAT @explorer.exe (GdipNewInstalledFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF93A0)
[Address] EAT @explorer.exe (GdipNewPrivateFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF92EC)
[Address] EAT @explorer.exe (GdipPathIterCopyData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C4A8)
[Address] EAT @explorer.exe (GdipPathIterEnumerate) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C598)
[Address] EAT @explorer.exe (GdipPathIterGetCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C93C)
[Address] EAT @explorer.exe (GdipPathIterGetSubpathCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C888)
[Address] EAT @explorer.exe (GdipPathIterHasCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C728)
[Address] EAT @explorer.exe (GdipPathIterIsValid) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C7D4)
[Address] EAT @explorer.exe (GdipPathIterNextMarker) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CAB4)
[Address] EAT @explorer.exe (GdipPathIterNextMarkerPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C9F0)
[Address] EAT @explorer.exe (GdipPathIterNextPathType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CB98)
[Address] EAT @explorer.exe (GdipPathIterNextSubpath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CD5C)
[Address] EAT @explorer.exe (GdipPathIterNextSubpathPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CC84)
[Address] EAT @explorer.exe (GdipPathIterRewind) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C680)
[Address] EAT @explorer.exe (GdipPlayMetafileRecord) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBEF4)
[Address] EAT @explorer.exe (GdipPlayTSClientRecord) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF79F8)
[Address] EAT @explorer.exe (GdipPrivateAddFontFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9020)
[Address] EAT @explorer.exe (GdipPrivateAddMemoryFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8F74)
[Address] EAT @explorer.exe (GdipRecordMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD2A54)
[Address] EAT @explorer.exe (GdipRecordMetafileFileName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA510)
[Address] EAT @explorer.exe (GdipRecordMetafileFileNameI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA40C)
[Address] EAT @explorer.exe (GdipRecordMetafileI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA66C)
[Address] EAT @explorer.exe (GdipRecordMetafileStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA2B0)
[Address] EAT @explorer.exe (GdipRecordMetafileStreamI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA1AC)
[Address] EAT @explorer.exe (GdipReleaseDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC3508)
[Address] EAT @explorer.exe (GdipRemovePropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03DE0)
[Address] EAT @explorer.exe (GdipResetClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC2D60)
[Address] EAT @explorer.exe (GdipResetImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02358)
[Address] EAT @explorer.exe (GdipResetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetPageTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00D38)
[Address] EAT @explorer.exe (GdipResetPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D100E0)
[Address] EAT @explorer.exe (GdipResetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06198)
[Address] EAT @explorer.exe (GdipResetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0106C)
[Address] EAT @explorer.exe (GdipRestoreGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB81E8)
[Address] EAT @explorer.exe (GdipReversePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F7A8)
[Address] EAT @explorer.exe (GdipRotateLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB700)
[Address] EAT @explorer.exe (GdipRotatePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotatePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05E0C)
[Address] EAT @explorer.exe (GdipRotateTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotateWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00DE0)
[Address] EAT @explorer.exe (GdipSaveAdd) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D040F8)
[Address] EAT @explorer.exe (GdipSaveAddImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04040)
[Address] EAT @explorer.exe (GdipSaveGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7F9C)
[Address] EAT @explorer.exe (GdipSaveImageToFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C95FD0)
[Address] EAT @explorer.exe (GdipSaveImageToStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFC80)
[Address] EAT @explorer.exe (GdipScaleLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScaleMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA738)
[Address] EAT @explorer.exe (GdipScalePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScalePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05EDC)
[Address] EAT @explorer.exe (GdipScaleTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScaleWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00E94)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapFillState) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04660)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04AC0)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapMiddleInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D047D0)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04948)
[Address] EAT @explorer.exe (GdipSetClipGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBDEC)
[Address] EAT @explorer.exe (GdipSetClipHrgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBB08)
[Address] EAT @explorer.exe (GdipSetClipPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBCDC)
[Address] EAT @explorer.exe (GdipSetClipRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA69B0)
[Address] EAT @explorer.exe (GdipSetClipRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6910)
[Address] EAT @explorer.exe (GdipSetClipRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBBD4)
[Address] EAT @explorer.exe (GdipSetCompositingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB3358)
[Address] EAT @explorer.exe (GdipSetCompositingQuality) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0152C)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04FA0)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04E5C)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeCaps) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05250)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05104)
[Address] EAT @explorer.exe (GdipSetCustomLineCapWidthScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04D24)
[Address] EAT @explorer.exe (GdipSetEffectParameters) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02CEC)
[Address] EAT @explorer.exe (GdipSetEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B7C4)
[Address] EAT @explorer.exe (GdipSetImageAttributesCachedBackground) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01BC8)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorKeys) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7460)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02284)
[Address] EAT @explorer.exe (GdipSetImageAttributesGamma) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0205C)
[Address] EAT @explorer.exe (GdipSetImageAttributesNoOp) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01F54)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01E38)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannelColorProfile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01D74)
[Address] EAT @explorer.exe (GdipSetImageAttributesRemapTable) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01C70)
[Address] EAT @explorer.exe (GdipSetImageAttributesThreshold) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02164)
[Address] EAT @explorer.exe (GdipSetImageAttributesToIdentity) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02448)
[Address] EAT @explorer.exe (GdipSetImageAttributesWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01B10)
[Address] EAT @explorer.exe (GdipSetImagePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D038AC)
[Address] EAT @explorer.exe (GdipSetInfinite) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B860)
[Address] EAT @explorer.exe (GdipSetInterpolationMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE1170)
[Address] EAT @explorer.exe (GdipSetLineBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE273C)
[Address] EAT @explorer.exe (GdipSetLineColors) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09454)
[Address] EAT @explorer.exe (GdipSetLineGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09214)
[Address] EAT @explorer.exe (GdipSetLineLinearBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08C10)
[Address] EAT @explorer.exe (GdipSetLinePresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08CD0)
[Address] EAT @explorer.exe (GdipSetLineSigmaBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2A58)
[Address] EAT @explorer.exe (GdipSetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetLineWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08B50)
[Address] EAT @explorer.exe (GdipSetMatrixElements) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA7E0)
[Address] EAT @explorer.exe (GdipSetMetafileDownLevelRasterizationLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA068)
[Address] EAT @explorer.exe (GdipSetPageScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00B1C)
[Address] EAT @explorer.exe (GdipSetPageUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9E40)
[Address] EAT @explorer.exe (GdipSetPathFillMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF4BC)
[Address] EAT @explorer.exe (GdipSetPathGradientBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D078A8)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08444)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07EDC)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07E68)
[Address] EAT @explorer.exe (GdipSetPathGradientFocusScales) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07104)
[Address] EAT @explorer.exe (GdipSetPathGradientGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07BB0)
[Address] EAT @explorer.exe (GdipSetPathGradientLinearBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08C10)
[Address] EAT @explorer.exe (GdipSetPathGradientPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D080E0)
[Address] EAT @explorer.exe (GdipSetPathGradientPresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D075C4)
[Address] EAT @explorer.exe (GdipSetPathGradientSigmaBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07504)
[Address] EAT @explorer.exe (GdipSetPathGradientSurroundColorsWithCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08110)
[Address] EAT @explorer.exe (GdipSetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetPathGradientWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07458)
[Address] EAT @explorer.exe (GdipSetPathMarker) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F8E8)
[Address] EAT @explorer.exe (GdipSetPenBrushFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7974)
[Address] EAT @explorer.exe (GdipSetPenColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC08F8)
[Address] EAT @explorer.exe (GdipSetPenCompoundArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D057B0)
[Address] EAT @explorer.exe (GdipSetPenCustomEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06814)
[Address] EAT @explorer.exe (GdipSetPenCustomStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D069C4)
[Address] EAT @explorer.exe (GdipSetPenDashArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D059D8)
[Address] EAT @explorer.exe (GdipSetPenDashCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06D70)
[Address] EAT @explorer.exe (GdipSetPenDashOffset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05B44)
[Address] EAT @explorer.exe (GdipSetPenDashStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC0860)
[Address] EAT @explorer.exe (GdipSetPenEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAABC0)
[Address] EAT @explorer.exe (GdipSetPenLineCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06E18)
[Address] EAT @explorer.exe (GdipSetPenLineJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAC50)
[Address] EAT @explorer.exe (GdipSetPenMiterLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D066A0)
[Address] EAT @explorer.exe (GdipSetPenMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06548)
[Address] EAT @explorer.exe (GdipSetPenStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAB30)
[Address] EAT @explorer.exe (GdipSetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06368)
[Address] EAT @explorer.exe (GdipSetPenUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06F94)
[Address] EAT @explorer.exe (GdipSetPenWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6B50)
[Address] EAT @explorer.exe (GdipSetPixelOffsetMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE346C)
[Address] EAT @explorer.exe (GdipSetPropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB4558)
[Address] EAT @explorer.exe (GdipSetRenderingOrigin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D016AC)
[Address] EAT @explorer.exe (GdipSetSmoothingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA1DB8)
[Address] EAT @explorer.exe (GdipSetSolidFillColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6C1C)
[Address] EAT @explorer.exe (GdipSetStringFormatAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8AC0)
[Address] EAT @explorer.exe (GdipSetStringFormatDigitSubstitution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF843C)
[Address] EAT @explorer.exe (GdipSetStringFormatFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8BE8)
[Address] EAT @explorer.exe (GdipSetStringFormatHotkeyPrefix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8870)
[Address] EAT @explorer.exe (GdipSetStringFormatLineAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8998)
[Address] EAT @explorer.exe (GdipSetStringFormatMeasurableCharacterRanges) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF84E8)
[Address] EAT @explorer.exe (GdipSetStringFormatTabStops) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8728)
[Address] EAT @explorer.exe (GdipSetStringFormatTrimming) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF82F8)
[Address] EAT @explorer.exe (GdipSetTextContrast) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01264)
[Address] EAT @explorer.exe (GdipSetTextRenderingHint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0130C)
[Address] EAT @explorer.exe (GdipSetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetTextureWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDF10)
[Address] EAT @explorer.exe (GdipSetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD014)
[Address] EAT @explorer.exe (GdipShearMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C19C)
[Address] EAT @explorer.exe (GdipStartPathFigure) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FAC8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericDefault) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8DF8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericTypographic) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8D90)
[Address] EAT @explorer.exe (GdipTestControl) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF81EC)
[Address] EAT @explorer.exe (GdipTransformMatrixPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC110)
[Address] EAT @explorer.exe (GdipTransformMatrixPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDBFE4)
[Address] EAT @explorer.exe (GdipTransformPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D804)
[Address] EAT @explorer.exe (GdipTransformPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0098C)
[Address] EAT @explorer.exe (GdipTransformPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D007AC)
[Address] EAT @explorer.exe (GdipTransformRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B374)
[Address] EAT @explorer.exe (GdipTranslateClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBA4C)
[Address] EAT @explorer.exe (GdipTranslateClipI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB9EC)
[Address] EAT @explorer.exe (GdipTranslateLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA68C)
[Address] EAT @explorer.exe (GdipTranslatePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslatePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05FB8)
[Address] EAT @explorer.exe (GdipTranslateRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B4BC)
[Address] EAT @explorer.exe (GdipTranslateRegionI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B45C)
[Address] EAT @explorer.exe (GdipTranslateTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslateWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7EEC)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C038)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BE78)
[Address] EAT @explorer.exe (GdipWarpPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D914)
[Address] EAT @explorer.exe (GdipWidenPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DA68)
[Address] EAT @explorer.exe (GdipWindingModeOutline) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DBD0)
[Address] EAT @explorer.exe (GdiplusNotificationHook) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10510)
[Address] EAT @explorer.exe (GdiplusNotificationUnhook) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D104AC)
[Address] EAT @explorer.exe (GdiplusShutdown) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C988CC)
[Address] EAT @explorer.exe (GdiplusStartup) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C932B0)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 ac3.msn.com


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST1000LM024 HN-M101MBB +++++
--- User ---
[MBR] af2d5d26254f379ef01a9d18b0ba1e96
[BSP] e5564d3a591cf8403f708aa9e7a52e9a : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 718848 | Size: 150775 MB
2 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 309506048 | Size: 1500 MB
3 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 312578048 | Size: 801242 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_04282014_195855.txt >>

[jaro3]

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

[CZechBoY]

RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 8 (6.2.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : czech_000 [Práva správce]
Mód : Odebrat -- Datum : 04/29/2014 23:48:02
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤
[Address] EAT @explorer.exe (AssocCreate) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983B20)
[Address] EAT @explorer.exe (AssocGetPerceivedType) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5984940)
[Address] EAT @explorer.exe (AssocIsDangerous) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599CFBC)
[Address] EAT @explorer.exe (AssocQueryKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A870)
[Address] EAT @explorer.exe (AssocQueryKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983A20)
[Address] EAT @explorer.exe (AssocQueryStringA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E60C)
[Address] EAT @explorer.exe (AssocQueryStringByKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E440)
[Address] EAT @explorer.exe (AssocQueryStringByKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59841A0)
[Address] EAT @explorer.exe (AssocQueryStringW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989CC0)
[Address] EAT @explorer.exe (ChrCmpIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A03C)
[Address] EAT @explorer.exe (ChrCmpIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A02C)
[Address] EAT @explorer.exe (ColorAdjustLuma) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F7A8)
[Address] EAT @explorer.exe (ColorHLSToRGB) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BFF0)
[Address] EAT @explorer.exe (ColorRGBToHLS) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BF30)
[Address] EAT @explorer.exe (ConnectToConnectionPoint) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59842B0)
[Address] EAT @explorer.exe (DelayLoadFailureHook) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F8F0)
[Address] EAT @explorer.exe (DllGetClassObject) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AD448)
[Address] EAT @explorer.exe (DllGetVersion) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5995AE0)
[Address] EAT @explorer.exe (GUIDFromStringW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F786)
[Address] EAT @explorer.exe (GetAcceptLanguagesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997D0)
[Address] EAT @explorer.exe (GetAcceptLanguagesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A40)
[Address] EAT @explorer.exe (GetMenuPosFromID) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A60)
[Address] EAT @explorer.exe (HashData) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997C0)
[Address] EAT @explorer.exe (IStream_Copy) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A1A0)
[Address] EAT @explorer.exe (IStream_Read) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B80)
[Address] EAT @explorer.exe (IStream_ReadPidl) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989980)
[Address] EAT @explorer.exe (IStream_ReadStr) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981120)
[Address] EAT @explorer.exe (IStream_Reset) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986340)
[Address] EAT @explorer.exe (IStream_Size) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A180)
[Address] EAT @explorer.exe (IStream_Write) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986320)
[Address] EAT @explorer.exe (IStream_WritePidl) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF194)
[Address] EAT @explorer.exe (IStream_WriteStr) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986350)
[Address] EAT @explorer.exe (IUnknown_AtomicRelease) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A09C)
[Address] EAT @explorer.exe (IUnknown_Exec) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B80)
[Address] EAT @explorer.exe (IUnknown_GetSite) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860B0)
[Address] EAT @explorer.exe (IUnknown_GetWindow) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982D20)
[Address] EAT @explorer.exe (IUnknown_QueryService) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983300)
[Address] EAT @explorer.exe (IUnknown_QueryStatus) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59ABBA8)
[Address] EAT @explorer.exe (IUnknown_Set) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981130)
[Address] EAT @explorer.exe (IUnknown_SetSite) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983310)
[Address] EAT @explorer.exe (IntlStrEqWorkerA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E3C)
[Address] EAT @explorer.exe (IntlStrEqWorkerW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E2C)
[Address] EAT @explorer.exe (IsCharSpaceA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A80)
[Address] EAT @explorer.exe (IsCharSpaceW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981140)
[Address] EAT @explorer.exe (IsInternetESCEnabled) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997B0)
[Address] EAT @explorer.exe (IsOS) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B60)
[Address] EAT @explorer.exe (MLFreeLibrary) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9EF4)
[Address] EAT @explorer.exe (MLLoadLibraryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9F48)
[Address] EAT @explorer.exe (MLLoadLibraryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9FA8)
[Address] EAT @explorer.exe (ParseURLA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997A0)
[Address] EAT @explorer.exe (ParseURLW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C250)
[Address] EAT @explorer.exe (PathAddBackslashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B2C)
[Address] EAT @explorer.exe (PathAddBackslashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983C00)
[Address] EAT @explorer.exe (PathAddExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CCC)
[Address] EAT @explorer.exe (PathAddExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CBC)
[Address] EAT @explorer.exe (PathAppendA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CAC)
[Address] EAT @explorer.exe (PathAppendW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A10)
[Address] EAT @explorer.exe (PathBuildRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A05C)
[Address] EAT @explorer.exe (PathBuildRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A06C)
[Address] EAT @explorer.exe (PathCanonicalizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C9C)
[Address] EAT @explorer.exe (PathCanonicalizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CF0)
[Address] EAT @explorer.exe (PathCombineA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B5C)
[Address] EAT @explorer.exe (PathCombineW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983C10)
[Address] EAT @explorer.exe (PathCommonPrefixA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DAC)
[Address] EAT @explorer.exe (PathCommonPrefixW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D9C)
[Address] EAT @explorer.exe (PathCompactPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AF90)
[Address] EAT @explorer.exe (PathCompactPathExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AD80)
[Address] EAT @explorer.exe (PathCompactPathExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986530)
[Address] EAT @explorer.exe (PathCompactPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599EB08)
[Address] EAT @explorer.exe (PathCreateFromUrlA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999790)
[Address] EAT @explorer.exe (PathCreateFromUrlAlloc) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999780)
[Address] EAT @explorer.exe (PathCreateFromUrlW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836E0)
[Address] EAT @explorer.exe (PathFileExistsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C0C)
[Address] EAT @explorer.exe (PathFileExistsAndAttributesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985930)
[Address] EAT @explorer.exe (PathFileExistsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983690)
[Address] EAT @explorer.exe (PathFindExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C3C)
[Address] EAT @explorer.exe (PathFindExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810C0)
[Address] EAT @explorer.exe (PathFindFileNameA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BFC)
[Address] EAT @explorer.exe (PathFindFileNameW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981090)
[Address] EAT @explorer.exe (PathFindNextComponentA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999AE0)
[Address] EAT @explorer.exe (PathFindNextComponentW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A210)
[Address] EAT @explorer.exe (PathFindOnPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B610)
[Address] EAT @explorer.exe (PathFindOnPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989170)
[Address] EAT @explorer.exe (PathFindSuffixArrayA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B534)
[Address] EAT @explorer.exe (PathFindSuffixArrayW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59853D0)
[Address] EAT @explorer.exe (PathGetArgsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599962C)
[Address] EAT @explorer.exe (PathGetArgsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C880)
[Address] EAT @explorer.exe (PathGetCharTypeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999648)
[Address] EAT @explorer.exe (PathGetCharTypeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986480)
[Address] EAT @explorer.exe (PathGetDriveNumberA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D5C)
[Address] EAT @explorer.exe (PathGetDriveNumberW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981050)
[Address] EAT @explorer.exe (PathIsContentTypeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599ABAC)
[Address] EAT @explorer.exe (PathIsContentTypeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A2C0)
[Address] EAT @explorer.exe (PathIsDirectoryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B404)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B334)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599EE78)
[Address] EAT @explorer.exe (PathIsDirectoryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59854D0)
[Address] EAT @explorer.exe (PathIsFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D6C)
[Address] EAT @explorer.exe (PathIsFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986200)
[Address] EAT @explorer.exe (PathIsLFNFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CFC)
[Address] EAT @explorer.exe (PathIsLFNFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CEC)
[Address] EAT @explorer.exe (PathIsNetworkPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A07C)
[Address] EAT @explorer.exe (PathIsNetworkPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829A0)
[Address] EAT @explorer.exe (PathIsPrefixA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D8C)
[Address] EAT @explorer.exe (PathIsPrefixW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D7C)
[Address] EAT @explorer.exe (PathIsRelativeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D4C)
[Address] EAT @explorer.exe (PathIsRelativeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983680)
[Address] EAT @explorer.exe (PathIsRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C8C)
[Address] EAT @explorer.exe (PathIsRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CE0)
[Address] EAT @explorer.exe (PathIsSameRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D1C)
[Address] EAT @explorer.exe (PathIsSameRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D0C)
[Address] EAT @explorer.exe (PathIsSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A834)
[Address] EAT @explorer.exe (PathIsSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E948)
[Address] EAT @explorer.exe (PathIsUNCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B3C)
[Address] EAT @explorer.exe (PathIsUNCServerA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C1C)
[Address] EAT @explorer.exe (PathIsUNCServerShareA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C2C)
[Address] EAT @explorer.exe (PathIsUNCServerShareW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E60)
[Address] EAT @explorer.exe (PathIsUNCServerW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E70)
[Address] EAT @explorer.exe (PathIsUNCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981040)
[Address] EAT @explorer.exe (PathIsURLA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999770)
[Address] EAT @explorer.exe (PathIsURLW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836C0)
[Address] EAT @explorer.exe (PathMakePrettyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599BCB0)
[Address] EAT @explorer.exe (PathMakePrettyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989FC0)
[Address] EAT @explorer.exe (PathMakeSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A8C0)
[Address] EAT @explorer.exe (PathMakeSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981270)
[Address] EAT @explorer.exe (PathMatchSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BAC)
[Address] EAT @explorer.exe (PathMatchSpecExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B8C)
[Address] EAT @explorer.exe (PathMatchSpecExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B7C)
[Address] EAT @explorer.exe (PathMatchSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B9C)
[Address] EAT @explorer.exe (PathParseIconLocationA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BEC)
[Address] EAT @explorer.exe (PathParseIconLocationW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E20)
[Address] EAT @explorer.exe (PathQuoteSpacesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BCC)
[Address] EAT @explorer.exe (PathQuoteSpacesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982D00)
[Address] EAT @explorer.exe (PathRelativePathToA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B14)
[Address] EAT @explorer.exe (PathRelativePathToW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999AF4)
[Address] EAT @explorer.exe (PathRemoveArgsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599BC74)
[Address] EAT @explorer.exe (PathRemoveArgsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986450)
[Address] EAT @explorer.exe (PathRemoveBackslashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CDC)
[Address] EAT @explorer.exe (PathRemoveBackslashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983730)
[Address] EAT @explorer.exe (PathRemoveBlanksA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BBC)
[Address] EAT @explorer.exe (PathRemoveBlanksW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BD0)
[Address] EAT @explorer.exe (PathRemoveExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C7C)
[Address] EAT @explorer.exe (PathRemoveExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E30)
[Address] EAT @explorer.exe (PathRemoveFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B4C)
[Address] EAT @explorer.exe (PathRemoveFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5984040)
[Address] EAT @explorer.exe (PathRenameExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C6C)
[Address] EAT @explorer.exe (PathRenameExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C5C)
[Address] EAT @explorer.exe (PathSearchAndQualifyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599961C)
[Address] EAT @explorer.exe (PathSearchAndQualifyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982E00)
[Address] EAT @explorer.exe (PathSetDlgItemPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AC50)
[Address] EAT @explorer.exe (PathSetDlgItemPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E9D0)
[Address] EAT @explorer.exe (PathSkipRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D2C)
[Address] EAT @explorer.exe (PathSkipRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A20)
[Address] EAT @explorer.exe (PathStripPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D3C)
[Address] EAT @explorer.exe (PathStripPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986220)
[Address] EAT @explorer.exe (PathStripToRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C4C)
[Address] EAT @explorer.exe (PathStripToRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E50)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B6C)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982DF0)
[Address] EAT @explorer.exe (PathUndecorateA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A75C)
[Address] EAT @explorer.exe (PathUndecorateW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59864D0)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A86C)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E984)
[Address] EAT @explorer.exe (PathUnquoteSpacesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BDC)
[Address] EAT @explorer.exe (PathUnquoteSpacesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BE0)
[Address] EAT @explorer.exe (QISearch) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981010)
[Address] EAT @explorer.exe (SHAllocShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829D0)
[Address] EAT @explorer.exe (SHAnsiToAnsi) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A310)
[Address] EAT @explorer.exe (SHAnsiToUnicode) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A320)
[Address] EAT @explorer.exe (SHAutoComplete) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BE10)
[Address] EAT @explorer.exe (SHCopyKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2F0)
[Address] EAT @explorer.exe (SHCopyKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A070)
[Address] EAT @explorer.exe (SHCreateMemStream) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832B0)
[Address] EAT @explorer.exe (SHCreateShellPalette) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982890)
[Address] EAT @explorer.exe (SHCreateStreamOnFileA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0DC)
[Address] EAT @explorer.exe (SHCreateStreamOnFileEx) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986070)
[Address] EAT @explorer.exe (SHCreateStreamOnFileW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59864A0)
[Address] EAT @explorer.exe (SHCreateStreamWrapper) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F792)
[Address] EAT @explorer.exe (SHCreateThread) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E80)
[Address] EAT @explorer.exe (SHCreateThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B30)
[Address] EAT @explorer.exe (SHCreateThreadWithHandle) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986400)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0FC)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0EC)
[Address] EAT @explorer.exe (SHDeleteKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2E0)
[Address] EAT @explorer.exe (SHDeleteKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982C60)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AEFB8)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AEF48)
[Address] EAT @explorer.exe (SHDeleteValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A10C)
[Address] EAT @explorer.exe (SHDeleteValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CA0)
[Address] EAT @explorer.exe (SHEnumKeyExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A290)
[Address] EAT @explorer.exe (SHEnumKeyExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A280)
[Address] EAT @explorer.exe (SHEnumValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A250)
[Address] EAT @explorer.exe (SHEnumValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A1D0)
[Address] EAT @explorer.exe (SHFormatDateTimeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F004)
[Address] EAT @explorer.exe (SHFormatDateTimeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F070)
[Address] EAT @explorer.exe (SHFreeShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829E0)
[Address] EAT @explorer.exe (SHGetInverseCMAP) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A0830)
[Address] EAT @explorer.exe (SHGetThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989140)
[Address] EAT @explorer.exe (SHGetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59843C0)
[Address] EAT @explorer.exe (SHGetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B20)
[Address] EAT @explorer.exe (SHGetViewStatePropertyBag) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986FA0)
[Address] EAT @explorer.exe (SHIsChildOrSelf) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983510)
[Address] EAT @explorer.exe (SHIsLowMemoryMachine) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59ABC3C)
[Address] EAT @explorer.exe (SHLoadIndirectString) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983340)
[Address] EAT @explorer.exe (SHLockShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF838)
[Address] EAT @explorer.exe (SHMessageBoxCheckA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AADD4)
[Address] EAT @explorer.exe (SHMessageBoxCheckW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AAF00)
[Address] EAT @explorer.exe (SHOpenRegStream2A) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0AC)
[Address] EAT @explorer.exe (SHOpenRegStream2W) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59843F0)
[Address] EAT @explorer.exe (SHOpenRegStreamA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0CC)
[Address] EAT @explorer.exe (SHOpenRegStreamW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0BC)
[Address] EAT @explorer.exe (SHPackDispParamsV) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5987DB0)
[Address] EAT @explorer.exe (SHPropertyBag_ReadStrAlloc) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B1598)
[Address] EAT @explorer.exe (SHPropertyBag_WriteBSTR) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B1498)
[Address] EAT @explorer.exe (SHQueryInfoKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A230)
[Address] EAT @explorer.exe (SHQueryInfoKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A210)
[Address] EAT @explorer.exe (SHQueryValueExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A120)
[Address] EAT @explorer.exe (SHQueryValueExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59863A0)
[Address] EAT @explorer.exe (SHRegCloseUSKey) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A70)
[Address] EAT @explorer.exe (SHRegCreateUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A58)
[Address] EAT @explorer.exe (SHRegCreateUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982640)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A44)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A34)
[Address] EAT @explorer.exe (SHRegDeleteUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A24)
[Address] EAT @explorer.exe (SHRegDeleteUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A14)
[Address] EAT @explorer.exe (SHRegDuplicateHKey) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1F0)
[Address] EAT @explorer.exe (SHRegEnumUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59999FC)
[Address] EAT @explorer.exe (SHRegEnumUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59999DC)
[Address] EAT @explorer.exe (SHRegEnumUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999998)
[Address] EAT @explorer.exe (SHRegEnumUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982590)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999984)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C220)
[Address] EAT @explorer.exe (SHRegGetBoolValueFromHKCUHKLM) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986330)
[Address] EAT @explorer.exe (SHRegGetIntW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1E0)
[Address] EAT @explorer.exe (SHRegGetPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1C0)
[Address] EAT @explorer.exe (SHRegGetPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A240)
[Address] EAT @explorer.exe (SHRegGetUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999948)
[Address] EAT @explorer.exe (SHRegGetUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A280)
[Address] EAT @explorer.exe (SHRegGetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2A4)
[Address] EAT @explorer.exe (SHRegGetValueFromHKCUHKLM) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986EBC)
[Address] EAT @explorer.exe (SHRegGetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59821B0)
[Address] EAT @explorer.exe (SHRegOpenUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999928)
[Address] EAT @explorer.exe (SHRegOpenUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999908)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59998E0)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982610)
[Address] EAT @explorer.exe (SHRegQueryUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59998A0)
[Address] EAT @explorer.exe (SHRegQueryUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999860)
[Address] EAT @explorer.exe (SHRegSetPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1A0)
[Address] EAT @explorer.exe (SHRegSetPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A180)
[Address] EAT @explorer.exe (SHRegSetUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999838)
[Address] EAT @explorer.exe (SHRegSetUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999810)
[Address] EAT @explorer.exe (SHRegWriteUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997E4)
[Address] EAT @explorer.exe (SHRegWriteUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59825E0)
[Address] EAT @explorer.exe (SHRegisterValidateTemplate) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B58E0)
[Address] EAT @explorer.exe (SHReleaseThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A08C)
[Address] EAT @explorer.exe (SHRunIndirectRegClientCommand) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599C95C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA27C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CC0)
[Address] EAT @explorer.exe (SHSetThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B10)
[Address] EAT @explorer.exe (SHSetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A14C)
[Address] EAT @explorer.exe (SHSetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59863D0)
[Address] EAT @explorer.exe (SHSkipJunction) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982E20)
[Address] EAT @explorer.exe (SHStrDupA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A260)
[Address] EAT @explorer.exe (SHStrDupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981070)
[Address] EAT @explorer.exe (SHStripMneumonicA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA900)
[Address] EAT @explorer.exe (SHStripMneumonicW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982DB0)
[Address] EAT @explorer.exe (SHUnicodeToAnsi) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832E0)
[Address] EAT @explorer.exe (SHUnicodeToAnsiCP) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F7B9)
[Address] EAT @explorer.exe (SHUnicodeToUnicode) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A300)
[Address] EAT @explorer.exe (SHUnlockShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF818)
[Address] EAT @explorer.exe (ShellMessageBoxA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599C604)
[Address] EAT @explorer.exe (ShellMessageBoxW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F54C)
[Address] EAT @explorer.exe (StrCSpnA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EEC)
[Address] EAT @explorer.exe (StrCSpnIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EDC)
[Address] EAT @explorer.exe (StrCSpnIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999ECC)
[Address] EAT @explorer.exe (StrCSpnW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A30)
[Address] EAT @explorer.exe (StrCatBuffA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FDC)
[Address] EAT @explorer.exe (StrCatBuffW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FEC)
[Address] EAT @explorer.exe (StrCatChainW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DCC)
[Address] EAT @explorer.exe (StrCatW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FCF8)
[Address] EAT @explorer.exe (StrChrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FCC)
[Address] EAT @explorer.exe (StrChrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F9C)
[Address] EAT @explorer.exe (StrChrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810E0)
[Address] EAT @explorer.exe (StrChrNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F8C)
[Address] EAT @explorer.exe (StrChrNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FBC)
[Address] EAT @explorer.exe (StrChrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981080)
[Address] EAT @explorer.exe (StrCmpCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DEC)
[Address] EAT @explorer.exe (StrCmpCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982C90)
[Address] EAT @explorer.exe (StrCmpICA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981100)
[Address] EAT @explorer.exe (StrCmpICW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810F0)
[Address] EAT @explorer.exe (StrCmpIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983650)
[Address] EAT @explorer.exe (StrCmpLogicalW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DDC)
[Address] EAT @explorer.exe (StrCmpNA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EBC)
[Address] EAT @explorer.exe (StrCmpNCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E0C)
[Address] EAT @explorer.exe (StrCmpNCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DFC)
[Address] EAT @explorer.exe (StrCmpNIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EAC)
[Address] EAT @explorer.exe (StrCmpNICA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860A0)
[Address] EAT @explorer.exe (StrCmpNICW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B70)
[Address] EAT @explorer.exe (StrCmpNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983670)
[Address] EAT @explorer.exe (StrCmpNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983770)
[Address] EAT @explorer.exe (StrCmpW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810B0)
[Address] EAT @explorer.exe (StrCpyNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FFC)
[Address] EAT @explorer.exe (StrCpyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FD38)
[Address] EAT @explorer.exe (StrDupA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E4C)
[Address] EAT @explorer.exe (StrDupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B50)
[Address] EAT @explorer.exe (StrFormatByteSize64A) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC00)
[Address] EAT @explorer.exe (StrFormatByteSizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FBF4)
[Address] EAT @explorer.exe (StrFormatByteSizeEx) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832D0)
[Address] EAT @explorer.exe (StrFormatByteSizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC60)
[Address] EAT @explorer.exe (StrFormatKBSizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FB74)
[Address] EAT @explorer.exe (StrFormatKBSizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FBE0)
[Address] EAT @explorer.exe (StrFromTimeIntervalA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A8AC8)
[Address] EAT @explorer.exe (StrFromTimeIntervalW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A8A44)
[Address] EAT @explorer.exe (StrIsIntlEqualA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E3C)
[Address] EAT @explorer.exe (StrIsIntlEqualW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E2C)
[Address] EAT @explorer.exe (StrNCatA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FCB8)
[Address] EAT @explorer.exe (StrNCatW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC74)
[Address] EAT @explorer.exe (StrPBrkA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F5C)
[Address] EAT @explorer.exe (StrPBrkW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59861E0)
[Address] EAT @explorer.exe (StrRChrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FAC)
[Address] EAT @explorer.exe (StrRChrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F7C)
[Address] EAT @explorer.exe (StrRChrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F6C)
[Address] EAT @explorer.exe (StrRChrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986210)
[Address] EAT @explorer.exe (StrRStrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E9C)
[Address] EAT @explorer.exe (StrRStrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E8C)
[Address] EAT @explorer.exe (StrRetToBSTR) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860D0)
[Address] EAT @explorer.exe (StrRetToBufA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F9E8)
[Address] EAT @explorer.exe (StrRetToBufW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981110)
[Address] EAT @explorer.exe (StrRetToStrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FA98)
[Address] EAT @explorer.exe (StrRetToStrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983330)
[Address] EAT @explorer.exe (StrSpnA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F0C)
[Address] EAT @explorer.exe (StrSpnW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EFC)
[Address] EAT @explorer.exe (StrStrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E7C)
[Address] EAT @explorer.exe (StrStrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986490)
[Address] EAT @explorer.exe (StrStrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810D0)
[Address] EAT @explorer.exe (StrStrNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E5C)
[Address] EAT @explorer.exe (StrStrNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E6C)
[Address] EAT @explorer.exe (StrStrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983660)
[Address] EAT @explorer.exe (StrToInt64ExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F2C)
[Address] EAT @explorer.exe (StrToInt64ExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F3C)
[Address] EAT @explorer.exe (StrToIntA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F4C)
[Address] EAT @explorer.exe (StrToIntExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F1C)
[Address] EAT @explorer.exe (StrToIntExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59861F0)
[Address] EAT @explorer.exe (StrToIntW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810A0)
[Address] EAT @explorer.exe (StrTrimA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E1C)
[Address] EAT @explorer.exe (StrTrimW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983320)
[Address] EAT @explorer.exe (UrlApplySchemeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999760)
[Address] EAT @explorer.exe (UrlApplySchemeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999750)
[Address] EAT @explorer.exe (UrlCanonicalizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999740)
[Address] EAT @explorer.exe (UrlCanonicalizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836B0)
[Address] EAT @explorer.exe (UrlCombineA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999728)
[Address] EAT @explorer.exe (UrlCombineW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983750)
[Address] EAT @explorer.exe (UrlCompareA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999714)
[Address] EAT @explorer.exe (UrlCompareW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999704)
[Address] EAT @explorer.exe (UrlCreateFromPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996F4)
[Address] EAT @explorer.exe (UrlCreateFromPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BF0)
[Address] EAT @explorer.exe (UrlEscapeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996E4)
[Address] EAT @explorer.exe (UrlEscapeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983720)
[Address] EAT @explorer.exe (UrlFixupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996D4)
[Address] EAT @explorer.exe (UrlGetLocationA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996C4)
[Address] EAT @explorer.exe (UrlGetLocationW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996B4)
[Address] EAT @explorer.exe (UrlGetPartA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599969C)
[Address] EAT @explorer.exe (UrlGetPartW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983700)
[Address] EAT @explorer.exe (UrlHashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999688)
[Address] EAT @explorer.exe (UrlHashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999678)
[Address] EAT @explorer.exe (UrlIsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999668)
[Address] EAT @explorer.exe (UrlIsNoHistoryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59995EC)
[Address] EAT @explorer.exe (UrlIsNoHistoryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981150)
[Address] EAT @explorer.exe (UrlIsOpaqueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599960C)
[Address] EAT @explorer.exe (UrlIsOpaqueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59995FC)
[Address] EAT @explorer.exe (UrlIsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836A0)
[Address] EAT @explorer.exe (UrlUnescapeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999658)
[Address] EAT @explorer.exe (UrlUnescapeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836D0)
[Address] EAT @explorer.exe (WhichPlatform) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA6D0)
[Address] EAT @explorer.exe (wnsprintfA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A93AC)
[Address] EAT @explorer.exe (wnsprintfW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9318)
[Address] EAT @explorer.exe (wvnsprintfA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A93F8)
[Address] EAT @explorer.exe (wvnsprintfW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9368)
[Address] EAT @explorer.exe (GdipAddPathArc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC868)
[Address] EAT @explorer.exe (GdipAddPathArcI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC7C8)
[Address] EAT @explorer.exe (GdipAddPathBezier) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F400)
[Address] EAT @explorer.exe (GdipAddPathBezierI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F31C)
[Address] EAT @explorer.exe (GdipAddPathBeziers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F258)
[Address] EAT @explorer.exe (GdipAddPathBeziersI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F174)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EAC4)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E90C)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E824)
[Address] EAT @explorer.exe (GdipAddPathClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E9E0)
[Address] EAT @explorer.exe (GdipAddPathCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F094)
[Address] EAT @explorer.exe (GdipAddPathCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EE94)
[Address] EAT @explorer.exe (GdipAddPathCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0ED74)
[Address] EAT @explorer.exe (GdipAddPathCurve3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EC90)
[Address] EAT @explorer.exe (GdipAddPathCurve3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EB90)
[Address] EAT @explorer.exe (GdipAddPathCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EF78)
[Address] EAT @explorer.exe (GdipAddPathEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E3FC)
[Address] EAT @explorer.exe (GdipAddPathEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E378)
[Address] EAT @explorer.exe (GdipAddPathLine) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB964)
[Address] EAT @explorer.exe (GdipAddPathLine2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F61C)
[Address] EAT @explorer.exe (GdipAddPathLine2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F538)
[Address] EAT @explorer.exe (GdipAddPathLineI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB8E0)
[Address] EAT @explorer.exe (GdipAddPathPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DF7C)
[Address] EAT @explorer.exe (GdipAddPathPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E280)
[Address] EAT @explorer.exe (GdipAddPathPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E1E0)
[Address] EAT @explorer.exe (GdipAddPathPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E11C)
[Address] EAT @explorer.exe (GdipAddPathPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E038)
[Address] EAT @explorer.exe (GdipAddPathRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E730)
[Address] EAT @explorer.exe (GdipAddPathRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E6AC)
[Address] EAT @explorer.exe (GdipAddPathRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E5E8)
[Address] EAT @explorer.exe (GdipAddPathRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E4E8)
[Address] EAT @explorer.exe (GdipAddPathString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DDBC)
[Address] EAT @explorer.exe (GdipAddPathStringI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DCD4)
[Address] EAT @explorer.exe (GdipAlloc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C99ADC)
[Address] EAT @explorer.exe (GdipBeginContainer) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB1C4)
[Address] EAT @explorer.exe (GdipBeginContainer2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB100)
[Address] EAT @explorer.exe (GdipBeginContainerI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB000)
[Address] EAT @explorer.exe (GdipBitmapApplyEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02874)
[Address] EAT @explorer.exe (GdipBitmapConvertFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02B20)
[Address] EAT @explorer.exe (GdipBitmapCreateApplyEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0295C)
[Address] EAT @explorer.exe (GdipBitmapGetHistogram) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0278C)
[Address] EAT @explorer.exe (GdipBitmapGetHistogramSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02740)
[Address] EAT @explorer.exe (GdipBitmapGetPixel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02E18)
[Address] EAT @explorer.exe (GdipBitmapLockBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C490)
[Address] EAT @explorer.exe (GdipBitmapSetPixel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB31E0)
[Address] EAT @explorer.exe (GdipBitmapSetResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB4880)

[CZechBoY]

[Address] EAT @explorer.exe (GdipBitmapUnlockBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C5C8)
[Address] EAT @explorer.exe (GdipClearPathMarkers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F848)
[Address] EAT @explorer.exe (GdipCloneBitmapArea) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02F04)
[Address] EAT @explorer.exe (GdipCloneBitmapAreaI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE12D8)
[Address] EAT @explorer.exe (GdipCloneBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A32C)
[Address] EAT @explorer.exe (GdipCloneCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05450)
[Address] EAT @explorer.exe (GdipCloneFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF996C)
[Address] EAT @explorer.exe (GdipCloneFontFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9C18)
[Address] EAT @explorer.exe (GdipCloneImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB70D8)
[Address] EAT @explorer.exe (GdipCloneImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02538)
[Address] EAT @explorer.exe (GdipCloneMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB360)
[Address] EAT @explorer.exe (GdipClonePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10184)
[Address] EAT @explorer.exe (GdipClonePen) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07048)
[Address] EAT @explorer.exe (GdipCloneRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B8FC)
[Address] EAT @explorer.exe (GdipCloneStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8CF0)
[Address] EAT @explorer.exe (GdipClosePathFigure) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FA28)
[Address] EAT @explorer.exe (GdipClosePathFigures) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F988)
[Address] EAT @explorer.exe (GdipCombineRegionPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B538)
[Address] EAT @explorer.exe (GdipCombineRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B6F4)
[Address] EAT @explorer.exe (GdipCombineRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B654)
[Address] EAT @explorer.exe (GdipCombineRegionRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB88A4)
[Address] EAT @explorer.exe (GdipComment) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9878)
[Address] EAT @explorer.exe (GdipConvertToEmfPlus) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF80FC)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF7FFC)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF7EFC)
[Address] EAT @explorer.exe (GdipCreateAdjustableArrowCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04B88)
[Address] EAT @explorer.exe (GdipCreateBitmapFromDirectDrawSurface) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D030A4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB06FC)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFileICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03330)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGdiDib) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAB994)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D031D4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHBITMAP) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C92F28)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHICON) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7B2C)
[Address] EAT @explorer.exe (GdipCreateBitmapFromResource) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0300C)
[Address] EAT @explorer.exe (GdipCreateBitmapFromScan0) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA84A4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDFF40)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStreamICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03480)
[Address] EAT @explorer.exe (GdipCreateCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2F6C)
[Address] EAT @explorer.exe (GdipCreateCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0551C)
[Address] EAT @explorer.exe (GdipCreateEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02DB0)
[Address] EAT @explorer.exe (GdipCreateFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB97BC)
[Address] EAT @explorer.exe (GdipCreateFontFamilyFromName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8DD4)
[Address] EAT @explorer.exe (GdipCreateFontFromDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9520)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9408)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontW) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9380)
[Address] EAT @explorer.exe (GdipCreateFromHDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9D848)
[Address] EAT @explorer.exe (GdipCreateFromHDC2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0196C)
[Address] EAT @explorer.exe (GdipCreateFromHWND) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D018CC)
[Address] EAT @explorer.exe (GdipCreateFromHWNDICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0182C)
[Address] EAT @explorer.exe (GdipCreateHBITMAPFromBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA3830)
[Address] EAT @explorer.exe (GdipCreateHICONFromBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB779C)
[Address] EAT @explorer.exe (GdipCreateHalftonePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9ED8)
[Address] EAT @explorer.exe (GdipCreateHatchBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A198)
[Address] EAT @explorer.exe (GdipCreateImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6D10)
[Address] EAT @explorer.exe (GdipCreateLineBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0984C)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2150)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2044)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0961C)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09514)
[Address] EAT @explorer.exe (GdipCreateLineBrushI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09738)
[Address] EAT @explorer.exe (GdipCreateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA74C8)
[Address] EAT @explorer.exe (GdipCreateMatrix2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB244)
[Address] EAT @explorer.exe (GdipCreateMatrix3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C3C0)
[Address] EAT @explorer.exe (GdipCreateMatrix3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C274)
[Address] EAT @explorer.exe (GdipCreateMetafileFromEmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAB18)
[Address] EAT @explorer.exe (GdipCreateMetafileFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAA30)
[Address] EAT @explorer.exe (GdipCreateMetafileFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA854)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAC0C)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmfFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA93C)
[Address] EAT @explorer.exe (GdipCreatePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF200)
[Address] EAT @explorer.exe (GdipCreatePath2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D103C4)
[Address] EAT @explorer.exe (GdipCreatePath2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D1023C)
[Address] EAT @explorer.exe (GdipCreatePathGradient) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08778)
[Address] EAT @explorer.exe (GdipCreatePathGradientFromPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08598)
[Address] EAT @explorer.exe (GdipCreatePathGradientI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0864C)
[Address] EAT @explorer.exe (GdipCreatePathIter) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CEE0)
[Address] EAT @explorer.exe (GdipCreatePen1) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAA7E8)
[Address] EAT @explorer.exe (GdipCreatePen2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7D40)
[Address] EAT @explorer.exe (GdipCreateRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8040)
[Address] EAT @explorer.exe (GdipCreateRegionHrgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BA00)
[Address] EAT @explorer.exe (GdipCreateRegionPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BB94)
[Address] EAT @explorer.exe (GdipCreateRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD9CC)
[Address] EAT @explorer.exe (GdipCreateRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD918)
[Address] EAT @explorer.exe (GdipCreateRegionRgnData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BAC8)
[Address] EAT @explorer.exe (GdipCreateSolidFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5630)
[Address] EAT @explorer.exe (GdipCreateStreamOnFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CCAB24)
[Address] EAT @explorer.exe (GdipCreateStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8EA0)
[Address] EAT @explorer.exe (GdipCreateTexture) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2A40)
[Address] EAT @explorer.exe (GdipCreateTexture2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09EC4)
[Address] EAT @explorer.exe (GdipCreateTexture2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09C40)
[Address] EAT @explorer.exe (GdipCreateTextureIA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09D10)
[Address] EAT @explorer.exe (GdipCreateTextureIAI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09BF0)
[Address] EAT @explorer.exe (GdipDeleteBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5170)
[Address] EAT @explorer.exe (GdipDeleteCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB3498)
[Address] EAT @explorer.exe (GdipDeleteCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05308)
[Address] EAT @explorer.exe (GdipDeleteEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02D60)
[Address] EAT @explorer.exe (GdipDeleteFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA834C)
[Address] EAT @explorer.exe (GdipDeleteFontFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9CD0)
[Address] EAT @explorer.exe (GdipDeleteGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9D378)
[Address] EAT @explorer.exe (GdipDeleteMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA73FC)
[Address] EAT @explorer.exe (GdipDeletePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF2E0)
[Address] EAT @explorer.exe (GdipDeletePathIter) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CE4C)
[Address] EAT @explorer.exe (GdipDeletePen) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA521C)
[Address] EAT @explorer.exe (GdipDeletePrivateFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF924C)
[Address] EAT @explorer.exe (GdipDeleteRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA76B8)
[Address] EAT @explorer.exe (GdipDeleteStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8C7C)
[Address] EAT @explorer.exe (GdipDisposeImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C91CE0)
[Address] EAT @explorer.exe (GdipDisposeImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6B70)
[Address] EAT @explorer.exe (GdipDrawArc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0040C)
[Address] EAT @explorer.exe (GdipDrawArcI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00360)
[Address] EAT @explorer.exe (GdipDrawBezier) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00208)
[Address] EAT @explorer.exe (GdipDrawBezierI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00114)
[Address] EAT @explorer.exe (GdipDrawBeziers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFFF8)
[Address] EAT @explorer.exe (GdipDrawBeziersI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFEDC)
[Address] EAT @explorer.exe (GdipDrawCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0EF0)
[Address] EAT @explorer.exe (GdipDrawClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF140)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEF38)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEE44)
[Address] EAT @explorer.exe (GdipDrawClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF05C)
[Address] EAT @explorer.exe (GdipDrawCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF7B4)
[Address] EAT @explorer.exe (GdipDrawCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF59C)
[Address] EAT @explorer.exe (GdipDrawCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF4A8)
[Address] EAT @explorer.exe (GdipDrawCurve3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF374)
[Address] EAT @explorer.exe (GdipDrawCurve3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF268)
[Address] EAT @explorer.exe (GdipDrawCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF6D0)
[Address] EAT @explorer.exe (GdipDrawDriverString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD9A8)
[Address] EAT @explorer.exe (GdipDrawEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFB64)
[Address] EAT @explorer.exe (GdipDrawEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFAD4)
[Address] EAT @explorer.exe (GdipDrawImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2DF0)
[Address] EAT @explorer.exe (GdipDrawImageFX) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD004)
[Address] EAT @explorer.exe (GdipDrawImageI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2D6C)
[Address] EAT @explorer.exe (GdipDrawImagePointRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD77C)
[Address] EAT @explorer.exe (GdipDrawImagePointRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD6B8)
[Address] EAT @explorer.exe (GdipDrawImagePoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD658)
[Address] EAT @explorer.exe (GdipDrawImagePointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD53C)
[Address] EAT @explorer.exe (GdipDrawImagePointsRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD2CC)
[Address] EAT @explorer.exe (GdipDrawImagePointsRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD134)
[Address] EAT @explorer.exe (GdipDrawImageRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA2664)
[Address] EAT @explorer.exe (GdipDrawImageRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA25C4)
[Address] EAT @explorer.exe (GdipDrawImageRectRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDEFC4)
[Address] EAT @explorer.exe (GdipDrawImageRectRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDEE90)
[Address] EAT @explorer.exe (GdipDrawLine) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D005D8)
[Address] EAT @explorer.exe (GdipDrawLineI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00548)
[Address] EAT @explorer.exe (GdipDrawLines) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACA40)
[Address] EAT @explorer.exe (GdipDrawLinesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAC958)
[Address] EAT @explorer.exe (GdipDrawPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDAFA0)
[Address] EAT @explorer.exe (GdipDrawPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF998)
[Address] EAT @explorer.exe (GdipDrawPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF8EC)
[Address] EAT @explorer.exe (GdipDrawPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC27D0)
[Address] EAT @explorer.exe (GdipDrawPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC26E0)
[Address] EAT @explorer.exe (GdipDrawRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACD30)
[Address] EAT @explorer.exe (GdipDrawRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACC90)
[Address] EAT @explorer.exe (GdipDrawRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFDC0)
[Address] EAT @explorer.exe (GdipDrawRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFC88)
[Address] EAT @explorer.exe (GdipDrawString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE018)
[Address] EAT @explorer.exe (GdipEmfToWmfBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC6A28)
[Address] EAT @explorer.exe (GdipEndContainer) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAF58)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCE6C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCDD0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC9D4)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC894)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCC38)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCB80)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC6D0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC5E0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC15C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBFD4)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC41C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC328)
[Address] EAT @explorer.exe (GdipFillClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE524)
[Address] EAT @explorer.exe (GdipFillClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE310)
[Address] EAT @explorer.exe (GdipFillClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE210)
[Address] EAT @explorer.exe (GdipFillClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE440)
[Address] EAT @explorer.exe (GdipFillEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF768)
[Address] EAT @explorer.exe (GdipFillEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE990)
[Address] EAT @explorer.exe (GdipFillPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE654)
[Address] EAT @explorer.exe (GdipFillPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE850)
[Address] EAT @explorer.exe (GdipFillPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE79C)
[Address] EAT @explorer.exe (GdipFillPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC29AC)
[Address] EAT @explorer.exe (GdipFillPolygon2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEB04)
[Address] EAT @explorer.exe (GdipFillPolygon2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEA20)
[Address] EAT @explorer.exe (GdipFillPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC28BC)
[Address] EAT @explorer.exe (GdipFillRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5870)
[Address] EAT @explorer.exe (GdipFillRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA57DC)
[Address] EAT @explorer.exe (GdipFillRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFED28)
[Address] EAT @explorer.exe (GdipFillRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEC28)
[Address] EAT @explorer.exe (GdipFillRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD354)
[Address] EAT @explorer.exe (GdipFindFirstImageItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03730)
[Address] EAT @explorer.exe (GdipFindNextImageItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03680)
[Address] EAT @explorer.exe (GdipFlattenPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDAEC4)
[Address] EAT @explorer.exe (GdipFlush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01764)
[Address] EAT @explorer.exe (GdipFree) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C99A74)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapFillState) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D045B0)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04A10)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapMiddleInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04720)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04898)
[Address] EAT @explorer.exe (GdipGetAllPropertyItems) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB11D8)
[Address] EAT @explorer.exe (GdipGetBrushType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A27C)
[Address] EAT @explorer.exe (GdipGetCellAscent) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9708)
[Address] EAT @explorer.exe (GdipGetCellDescent) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9644)
[Address] EAT @explorer.exe (GdipGetClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8424)
[Address] EAT @explorer.exe (GdipGetClipBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB938)
[Address] EAT @explorer.exe (GdipGetClipBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7B04)
[Address] EAT @explorer.exe (GdipGetCompositingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD0E0)
[Address] EAT @explorer.exe (GdipGetCompositingQuality) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01478)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04EF4)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04DBC)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeCaps) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05198)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05058)
[Address] EAT @explorer.exe (GdipGetCustomLineCapType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0539C)
[Address] EAT @explorer.exe (GdipGetCustomLineCapWidthScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04C84)
[Address] EAT @explorer.exe (GdipGetDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC35E8)
[Address] EAT @explorer.exe (GdipGetDpiX) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00A68)
[Address] EAT @explorer.exe (GdipGetDpiY) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8AD8)
[Address] EAT @explorer.exe (GdipGetEffectParameterSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02C8C)
[Address] EAT @explorer.exe (GdipGetEffectParameters) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02C18)
[Address] EAT @explorer.exe (GdipGetEmHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9A70)
[Address] EAT @explorer.exe (GdipGetEncoderParameterList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0419C)
[Address] EAT @explorer.exe (GdipGetEncoderParameterListSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04260)
[Address] EAT @explorer.exe (GdipGetFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8C70)
[Address] EAT @explorer.exe (GdipGetFamilyName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9984)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9178)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF90BC)
[Address] EAT @explorer.exe (GdipGetFontHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9660)
[Address] EAT @explorer.exe (GdipGetFontHeightGivenDPI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9A64)
[Address] EAT @explorer.exe (GdipGetFontSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8CF0)
[Address] EAT @explorer.exe (GdipGetFontStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8B6C)
[Address] EAT @explorer.exe (GdipGetFontUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8BF0)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilyMonospace) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9DC4)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySansSerif) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9EAC)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySerif) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9E38)
[Address] EAT @explorer.exe (GdipGetHatchBackgroundColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A030)
[Address] EAT @explorer.exe (GdipGetHatchForegroundColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D084E4)
[Address] EAT @explorer.exe (GdipGetHatchStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A0E4)
[Address] EAT @explorer.exe (GdipGetHemfFromMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC5A24)
[Address] EAT @explorer.exe (GdipGetImageAttributesAdjustedPalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01A18)
[Address] EAT @explorer.exe (GdipGetImageBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03CEC)
[Address] EAT @explorer.exe (GdipGetImageDecoders) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD9270)
[Address] EAT @explorer.exe (GdipGetImageDecodersSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD9428)
[Address] EAT @explorer.exe (GdipGetImageDimension) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03C28)
[Address] EAT @explorer.exe (GdipGetImageEncoders) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C96798)
[Address] EAT @explorer.exe (GdipGetImageEncodersSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C969D8)
[Address] EAT @explorer.exe (GdipGetImageFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0396C)
[Address] EAT @explorer.exe (GdipGetImageGraphicsContext) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA9214)
[Address] EAT @explorer.exe (GdipGetImageHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9B680)
[Address] EAT @explorer.exe (GdipGetImageHorizontalResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03B3C)
[Address] EAT @explorer.exe (GdipGetImageItemData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D035D0)
[Address] EAT @explorer.exe (GdipGetImagePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE05B4)
[Address] EAT @explorer.exe (GdipGetImagePaletteSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE067C)
[Address] EAT @explorer.exe (GdipGetImagePixelFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9B588)
[Address] EAT @explorer.exe (GdipGetImageRawFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB18F4)
[Address] EAT @explorer.exe (GdipGetImageThumbnail) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D037E0)
[Address] EAT @explorer.exe (GdipGetImageType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6EA0)
[Address] EAT @explorer.exe (GdipGetImageVerticalResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03A50)
[Address] EAT @explorer.exe (GdipGetImageWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C344)
[Address] EAT @explorer.exe (GdipGetInterpolationMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01108)
[Address] EAT @explorer.exe (GdipGetLineBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D090C8)
[Address] EAT @explorer.exe (GdipGetLineBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07A4C)
[Address] EAT @explorer.exe (GdipGetLineColors) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09360)
[Address] EAT @explorer.exe (GdipGetLineGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09198)
[Address] EAT @explorer.exe (GdipGetLinePresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08E88)
[Address] EAT @explorer.exe (GdipGetLinePresetBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09004)
[Address] EAT @explorer.exe (GdipGetLineRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07C48)
[Address] EAT @explorer.exe (GdipGetLineRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09280)
[Address] EAT @explorer.exe (GdipGetLineSpacing) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9B34)
[Address] EAT @explorer.exe (GdipGetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetLineWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08AA0)
[Address] EAT @explorer.exe (GdipGetLogFontA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9B0C)
[Address] EAT @explorer.exe (GdipGetLogFontW) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8EEC)
[Address] EAT @explorer.exe (GdipGetMatrixElements) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA75F0)
[Address] EAT @explorer.exe (GdipGetMetafileDownLevelRasterizationLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9F20)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromEmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAE8C)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAE34)

[CZechBoY]

[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAD14)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFADC4)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromWmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAEE4)
[Address] EAT @explorer.exe (GdipGetNearestColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D006F8)
[Address] EAT @explorer.exe (GdipGetPageScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00BD0)
[Address] EAT @explorer.exe (GdipGetPageUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00C84)
[Address] EAT @explorer.exe (GdipGetPathData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FB68)
[Address] EAT @explorer.exe (GdipGetPathFillMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FC14)
[Address] EAT @explorer.exe (GdipGetPathGradientBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0797C)
[Address] EAT @explorer.exe (GdipGetPathGradientBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07A4C)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D084E4)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08034)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07F98)
[Address] EAT @explorer.exe (GdipGetPathGradientFocusScales) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D071BC)
[Address] EAT @explorer.exe (GdipGetPathGradientGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07B00)
[Address] EAT @explorer.exe (GdipGetPathGradientPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D080E0)
[Address] EAT @explorer.exe (GdipGetPathGradientPointCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07DB4)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07764)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09004)
[Address] EAT @explorer.exe (GdipGetPathGradientRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07C48)
[Address] EAT @explorer.exe (GdipGetPathGradientRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09280)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07CF8)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorsWithCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D082FC)
[Address] EAT @explorer.exe (GdipGetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetPathGradientWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08AA0)
[Address] EAT @explorer.exe (GdipGetPathLastPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F6E0)
[Address] EAT @explorer.exe (GdipGetPathPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FE14)
[Address] EAT @explorer.exe (GdipGetPathPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FCC8)
[Address] EAT @explorer.exe (GdipGetPathTypes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FF24)
[Address] EAT @explorer.exe (GdipGetPathWorldBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D680)
[Address] EAT @explorer.exe (GdipGetPathWorldBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D4FC)
[Address] EAT @explorer.exe (GdipGetPenBrushFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05D44)
[Address] EAT @explorer.exe (GdipGetPenColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF640)
[Address] EAT @explorer.exe (GdipGetPenCompoundArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D056CC)
[Address] EAT @explorer.exe (GdipGetPenCompoundCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0586C)
[Address] EAT @explorer.exe (GdipGetPenCustomEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0674C)
[Address] EAT @explorer.exe (GdipGetPenCustomStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D068FC)
[Address] EAT @explorer.exe (GdipGetPenDashArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0591C)
[Address] EAT @explorer.exe (GdipGetPenDashCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06B5C)
[Address] EAT @explorer.exe (GdipGetPenDashCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05A94)
[Address] EAT @explorer.exe (GdipGetPenDashOffset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05BE4)
[Address] EAT @explorer.exe (GdipGetPenDashStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05C94)
[Address] EAT @explorer.exe (GdipGetPenEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06C10)
[Address] EAT @explorer.exe (GdipGetPenFillType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFB50)
[Address] EAT @explorer.exe (GdipGetPenLineJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06AAC)
[Address] EAT @explorer.exe (GdipGetPenMiterLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D065F0)
[Address] EAT @explorer.exe (GdipGetPenMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06498)
[Address] EAT @explorer.exe (GdipGetPenStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06CC0)
[Address] EAT @explorer.exe (GdipGetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0624C)
[Address] EAT @explorer.exe (GdipGetPenUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06EE4)
[Address] EAT @explorer.exe (GdipGetPenWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF6E0)
[Address] EAT @explorer.exe (GdipGetPixelOffsetMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D013C4)
[Address] EAT @explorer.exe (GdipGetPointCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10030)
[Address] EAT @explorer.exe (GdipGetPropertyCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03F08)
[Address] EAT @explorer.exe (GdipGetPropertyIdList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03E6C)
[Address] EAT @explorer.exe (GdipGetPropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB57EC)
[Address] EAT @explorer.exe (GdipGetPropertyItemSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB5760)
[Address] EAT @explorer.exe (GdipGetPropertySize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFEF0)
[Address] EAT @explorer.exe (GdipGetRegionBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B260)
[Address] EAT @explorer.exe (GdipGetRegionBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B0C4)
[Address] EAT @explorer.exe (GdipGetRegionData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0ABA8)
[Address] EAT @explorer.exe (GdipGetRegionDataSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AC7C)
[Address] EAT @explorer.exe (GdipGetRegionHRgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB866C)
[Address] EAT @explorer.exe (GdipGetRegionScans) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A4EC)
[Address] EAT @explorer.exe (GdipGetRegionScansCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A60C)
[Address] EAT @explorer.exe (GdipGetRegionScansI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A3EC)
[Address] EAT @explorer.exe (GdipGetRenderingOrigin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D015D4)
[Address] EAT @explorer.exe (GdipGetSmoothingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAA70)
[Address] EAT @explorer.exe (GdipGetSolidFillColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09964)
[Address] EAT @explorer.exe (GdipGetStringFormatAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8A30)
[Address] EAT @explorer.exe (GdipGetStringFormatDigitSubstitution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8390)
[Address] EAT @explorer.exe (GdipGetStringFormatFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8B58)
[Address] EAT @explorer.exe (GdipGetStringFormatHotkeyPrefix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF87E0)
[Address] EAT @explorer.exe (GdipGetStringFormatLineAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8908)
[Address] EAT @explorer.exe (GdipGetStringFormatMeasurableCharacterRangeCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF856C)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStopCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8698)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStops) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF85DC)
[Address] EAT @explorer.exe (GdipGetStringFormatTrimming) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8260)
[Address] EAT @explorer.exe (GdipGetTextContrast) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D011B0)
[Address] EAT @explorer.exe (GdipGetTextRenderingHint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8160)
[Address] EAT @explorer.exe (GdipGetTextureImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDE20)
[Address] EAT @explorer.exe (GdipGetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetTextureWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDCCC)
[Address] EAT @explorer.exe (GdipGetVisibleClipBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB7D0)
[Address] EAT @explorer.exe (GdipGetVisibleClipBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB690)
[Address] EAT @explorer.exe (GdipGetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA780C)
[Address] EAT @explorer.exe (GdipGraphicsClear) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB19E8)
[Address] EAT @explorer.exe (GdipGraphicsSetAbort) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D025EC)
[Address] EAT @explorer.exe (GdipImageForceValidation) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6F4C)
[Address] EAT @explorer.exe (GdipImageGetFrameCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0478)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0204)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE02A4)
[Address] EAT @explorer.exe (GdipImageRotateFlip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE3500)
[Address] EAT @explorer.exe (GdipImageSelectActiveFrame) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03F94)
[Address] EAT @explorer.exe (GdipImageSetAbort) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02690)
[Address] EAT @explorer.exe (GdipInitializePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02A30)
[Address] EAT @explorer.exe (GdipInvertMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C100)
[Address] EAT @explorer.exe (GdipIsClipEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB884)
[Address] EAT @explorer.exe (GdipIsEmptyRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AF40)
[Address] EAT @explorer.exe (GdipIsEqualRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AD48)
[Address] EAT @explorer.exe (GdipIsInfiniteRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8268)
[Address] EAT @explorer.exe (GdipIsMatrixEqual) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BCA0)
[Address] EAT @explorer.exe (GdipIsMatrixIdentity) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7760)
[Address] EAT @explorer.exe (GdipIsMatrixInvertible) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BDC4)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D080)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CFF8)
[Address] EAT @explorer.exe (GdipIsStyleAvailable) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF97B8)
[Address] EAT @explorer.exe (GdipIsVisibleClipEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB5D4)
[Address] EAT @explorer.exe (GdipIsVisiblePathPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D344)
[Address] EAT @explorer.exe (GdipIsVisiblePathPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D2C8)
[Address] EAT @explorer.exe (GdipIsVisiblePoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB4F0)
[Address] EAT @explorer.exe (GdipIsVisiblePointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB480)
[Address] EAT @explorer.exe (GdipIsVisibleRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB37C)
[Address] EAT @explorer.exe (GdipIsVisibleRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB2F0)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AA08)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A98C)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A7A8)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A70C)
[Address] EAT @explorer.exe (GdipLoadImageFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D044D4)
[Address] EAT @explorer.exe (GdipLoadImageFromFileICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04314)
[Address] EAT @explorer.exe (GdipLoadImageFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA9F24)
[Address] EAT @explorer.exe (GdipLoadImageFromStreamICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D043F4)
[Address] EAT @explorer.exe (GdipMeasureCharacterRanges) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFDC28)
[Address] EAT @explorer.exe (GdipMeasureDriverString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD7D0)
[Address] EAT @explorer.exe (GdipMeasureString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFDDF0)
[Address] EAT @explorer.exe (GdipMultiplyLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA8BC)
[Address] EAT @explorer.exe (GdipMultiplyPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06094)
[Address] EAT @explorer.exe (GdipMultiplyTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00F58)
[Address] EAT @explorer.exe (GdipNewInstalledFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF93A0)
[Address] EAT @explorer.exe (GdipNewPrivateFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF92EC)
[Address] EAT @explorer.exe (GdipPathIterCopyData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C4A8)
[Address] EAT @explorer.exe (GdipPathIterEnumerate) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C598)
[Address] EAT @explorer.exe (GdipPathIterGetCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C93C)
[Address] EAT @explorer.exe (GdipPathIterGetSubpathCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C888)
[Address] EAT @explorer.exe (GdipPathIterHasCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C728)
[Address] EAT @explorer.exe (GdipPathIterIsValid) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C7D4)
[Address] EAT @explorer.exe (GdipPathIterNextMarker) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CAB4)
[Address] EAT @explorer.exe (GdipPathIterNextMarkerPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C9F0)
[Address] EAT @explorer.exe (GdipPathIterNextPathType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CB98)
[Address] EAT @explorer.exe (GdipPathIterNextSubpath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CD5C)
[Address] EAT @explorer.exe (GdipPathIterNextSubpathPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CC84)
[Address] EAT @explorer.exe (GdipPathIterRewind) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C680)
[Address] EAT @explorer.exe (GdipPlayMetafileRecord) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBEF4)
[Address] EAT @explorer.exe (GdipPlayTSClientRecord) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF79F8)
[Address] EAT @explorer.exe (GdipPrivateAddFontFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9020)
[Address] EAT @explorer.exe (GdipPrivateAddMemoryFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8F74)
[Address] EAT @explorer.exe (GdipRecordMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD2A54)
[Address] EAT @explorer.exe (GdipRecordMetafileFileName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA510)
[Address] EAT @explorer.exe (GdipRecordMetafileFileNameI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA40C)
[Address] EAT @explorer.exe (GdipRecordMetafileI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA66C)
[Address] EAT @explorer.exe (GdipRecordMetafileStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA2B0)
[Address] EAT @explorer.exe (GdipRecordMetafileStreamI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA1AC)
[Address] EAT @explorer.exe (GdipReleaseDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC3508)
[Address] EAT @explorer.exe (GdipRemovePropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03DE0)
[Address] EAT @explorer.exe (GdipResetClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC2D60)
[Address] EAT @explorer.exe (GdipResetImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02358)
[Address] EAT @explorer.exe (GdipResetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetPageTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00D38)
[Address] EAT @explorer.exe (GdipResetPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D100E0)
[Address] EAT @explorer.exe (GdipResetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06198)
[Address] EAT @explorer.exe (GdipResetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0106C)
[Address] EAT @explorer.exe (GdipRestoreGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB81E8)
[Address] EAT @explorer.exe (GdipReversePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F7A8)
[Address] EAT @explorer.exe (GdipRotateLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB700)
[Address] EAT @explorer.exe (GdipRotatePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotatePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05E0C)
[Address] EAT @explorer.exe (GdipRotateTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotateWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00DE0)
[Address] EAT @explorer.exe (GdipSaveAdd) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D040F8)
[Address] EAT @explorer.exe (GdipSaveAddImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04040)
[Address] EAT @explorer.exe (GdipSaveGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7F9C)
[Address] EAT @explorer.exe (GdipSaveImageToFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C95FD0)
[Address] EAT @explorer.exe (GdipSaveImageToStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFC80)
[Address] EAT @explorer.exe (GdipScaleLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScaleMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA738)
[Address] EAT @explorer.exe (GdipScalePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScalePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05EDC)
[Address] EAT @explorer.exe (GdipScaleTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScaleWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00E94)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapFillState) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04660)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04AC0)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapMiddleInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D047D0)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04948)
[Address] EAT @explorer.exe (GdipSetClipGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBDEC)
[Address] EAT @explorer.exe (GdipSetClipHrgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBB08)
[Address] EAT @explorer.exe (GdipSetClipPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBCDC)
[Address] EAT @explorer.exe (GdipSetClipRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA69B0)
[Address] EAT @explorer.exe (GdipSetClipRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6910)
[Address] EAT @explorer.exe (GdipSetClipRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBBD4)
[Address] EAT @explorer.exe (GdipSetCompositingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB3358)
[Address] EAT @explorer.exe (GdipSetCompositingQuality) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0152C)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04FA0)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04E5C)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeCaps) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05250)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05104)
[Address] EAT @explorer.exe (GdipSetCustomLineCapWidthScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04D24)
[Address] EAT @explorer.exe (GdipSetEffectParameters) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02CEC)
[Address] EAT @explorer.exe (GdipSetEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B7C4)
[Address] EAT @explorer.exe (GdipSetImageAttributesCachedBackground) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01BC8)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorKeys) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7460)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02284)
[Address] EAT @explorer.exe (GdipSetImageAttributesGamma) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0205C)
[Address] EAT @explorer.exe (GdipSetImageAttributesNoOp) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01F54)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01E38)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannelColorProfile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01D74)
[Address] EAT @explorer.exe (GdipSetImageAttributesRemapTable) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01C70)
[Address] EAT @explorer.exe (GdipSetImageAttributesThreshold) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02164)
[Address] EAT @explorer.exe (GdipSetImageAttributesToIdentity) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02448)
[Address] EAT @explorer.exe (GdipSetImageAttributesWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01B10)
[Address] EAT @explorer.exe (GdipSetImagePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D038AC)
[Address] EAT @explorer.exe (GdipSetInfinite) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B860)
[Address] EAT @explorer.exe (GdipSetInterpolationMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE1170)
[Address] EAT @explorer.exe (GdipSetLineBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE273C)
[Address] EAT @explorer.exe (GdipSetLineColors) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09454)
[Address] EAT @explorer.exe (GdipSetLineGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09214)
[Address] EAT @explorer.exe (GdipSetLineLinearBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08C10)
[Address] EAT @explorer.exe (GdipSetLinePresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08CD0)
[Address] EAT @explorer.exe (GdipSetLineSigmaBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2A58)
[Address] EAT @explorer.exe (GdipSetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetLineWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08B50)
[Address] EAT @explorer.exe (GdipSetMatrixElements) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA7E0)
[Address] EAT @explorer.exe (GdipSetMetafileDownLevelRasterizationLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA068)
[Address] EAT @explorer.exe (GdipSetPageScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00B1C)
[Address] EAT @explorer.exe (GdipSetPageUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9E40)
[Address] EAT @explorer.exe (GdipSetPathFillMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF4BC)
[Address] EAT @explorer.exe (GdipSetPathGradientBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D078A8)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08444)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07EDC)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07E68)
[Address] EAT @explorer.exe (GdipSetPathGradientFocusScales) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07104)
[Address] EAT @explorer.exe (GdipSetPathGradientGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07BB0)
[Address] EAT @explorer.exe (GdipSetPathGradientLinearBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08C10)
[Address] EAT @explorer.exe (GdipSetPathGradientPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D080E0)
[Address] EAT @explorer.exe (GdipSetPathGradientPresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D075C4)
[Address] EAT @explorer.exe (GdipSetPathGradientSigmaBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07504)
[Address] EAT @explorer.exe (GdipSetPathGradientSurroundColorsWithCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08110)
[Address] EAT @explorer.exe (GdipSetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetPathGradientWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07458)
[Address] EAT @explorer.exe (GdipSetPathMarker) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F8E8)
[Address] EAT @explorer.exe (GdipSetPenBrushFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7974)
[Address] EAT @explorer.exe (GdipSetPenColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC08F8)
[Address] EAT @explorer.exe (GdipSetPenCompoundArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D057B0)
[Address] EAT @explorer.exe (GdipSetPenCustomEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06814)
[Address] EAT @explorer.exe (GdipSetPenCustomStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D069C4)
[Address] EAT @explorer.exe (GdipSetPenDashArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D059D8)
[Address] EAT @explorer.exe (GdipSetPenDashCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06D70)
[Address] EAT @explorer.exe (GdipSetPenDashOffset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05B44)
[Address] EAT @explorer.exe (GdipSetPenDashStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC0860)
[Address] EAT @explorer.exe (GdipSetPenEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAABC0)
[Address] EAT @explorer.exe (GdipSetPenLineCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06E18)
[Address] EAT @explorer.exe (GdipSetPenLineJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAC50)
[Address] EAT @explorer.exe (GdipSetPenMiterLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D066A0)
[Address] EAT @explorer.exe (GdipSetPenMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06548)
[Address] EAT @explorer.exe (GdipSetPenStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAB30)
[Address] EAT @explorer.exe (GdipSetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06368)
[Address] EAT @explorer.exe (GdipSetPenUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06F94)
[Address] EAT @explorer.exe (GdipSetPenWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6B50)
[Address] EAT @explorer.exe (GdipSetPixelOffsetMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE346C)
[Address] EAT @explorer.exe (GdipSetPropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB4558)
[Address] EAT @explorer.exe (GdipSetRenderingOrigin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D016AC)
[Address] EAT @explorer.exe (GdipSetSmoothingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA1DB8)
[Address] EAT @explorer.exe (GdipSetSolidFillColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6C1C)
[Address] EAT @explorer.exe (GdipSetStringFormatAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8AC0)
[Address] EAT @explorer.exe (GdipSetStringFormatDigitSubstitution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF843C)
[Address] EAT @explorer.exe (GdipSetStringFormatFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8BE8)
[Address] EAT @explorer.exe (GdipSetStringFormatHotkeyPrefix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8870)
[Address] EAT @explorer.exe (GdipSetStringFormatLineAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8998)
[Address] EAT @explorer.exe (GdipSetStringFormatMeasurableCharacterRanges) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF84E8)
[Address] EAT @explorer.exe (GdipSetStringFormatTabStops) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8728)
[Address] EAT @explorer.exe (GdipSetStringFormatTrimming) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF82F8)
[Address] EAT @explorer.exe (GdipSetTextContrast) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01264)
[Address] EAT @explorer.exe (GdipSetTextRenderingHint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0130C)
[Address] EAT @explorer.exe (GdipSetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetTextureWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDF10)
[Address] EAT @explorer.exe (GdipSetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD014)