Preventivka Vyřešeno

[CZechBoY]

[Address] EAT @explorer.exe (GdipShearMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C19C)
[Address] EAT @explorer.exe (GdipStartPathFigure) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FAC8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericDefault) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8DF8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericTypographic) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8D90)
[Address] EAT @explorer.exe (GdipTestControl) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF81EC)
[Address] EAT @explorer.exe (GdipTransformMatrixPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC110)
[Address] EAT @explorer.exe (GdipTransformMatrixPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDBFE4)
[Address] EAT @explorer.exe (GdipTransformPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D804)
[Address] EAT @explorer.exe (GdipTransformPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0098C)
[Address] EAT @explorer.exe (GdipTransformPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D007AC)
[Address] EAT @explorer.exe (GdipTransformRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B374)
[Address] EAT @explorer.exe (GdipTranslateClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBA4C)
[Address] EAT @explorer.exe (GdipTranslateClipI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB9EC)
[Address] EAT @explorer.exe (GdipTranslateLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA68C)
[Address] EAT @explorer.exe (GdipTranslatePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslatePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05FB8)
[Address] EAT @explorer.exe (GdipTranslateRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B4BC)
[Address] EAT @explorer.exe (GdipTranslateRegionI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B45C)
[Address] EAT @explorer.exe (GdipTranslateTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslateWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7EEC)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C038)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BE78)
[Address] EAT @explorer.exe (GdipWarpPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D914)
[Address] EAT @explorer.exe (GdipWidenPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DA68)
[Address] EAT @explorer.exe (GdipWindingModeOutline) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DBD0)
[Address] EAT @explorer.exe (GdiplusNotificationHook) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10510)
[Address] EAT @explorer.exe (GdiplusNotificationUnhook) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D104AC)
[Address] EAT @explorer.exe (GdiplusShutdown) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C988CC)
[Address] EAT @explorer.exe (GdiplusStartup) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C932B0)
[Address] EAT @explorer.exe (BiChangeApplicationStateForPackageName) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07AAB80)
[Address] EAT @explorer.exe (BiChangeSessionState) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07C53D8)
[Address] EAT @explorer.exe (BiNotifyNewSession) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07C6F0C)
[Address] EAT @explorer.exe (BiPtActivateWorkItem) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BCE0)
[Address] EAT @explorer.exe (BiPtAssociateActivationProxy) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07CA7EC)
[Address] EAT @explorer.exe (BiPtAssociateApplicationExtensionClass) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BBD0)
[Address] EAT @explorer.exe (BiPtCreateEventForPackageName) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BAC0)
[Address] EAT @explorer.exe (BiPtDeleteEvent) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BA50)
[Address] EAT @explorer.exe (BiPtDisassociateWorkItem) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081B9B0)
[Address] EAT @explorer.exe (BiPtEnumerateBrokeredEvents) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07C6A70)
[Address] EAT @explorer.exe (BiPtEnumerateWorkItemsForPackageName) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081B8C0)
[Address] EAT @explorer.exe (BiPtFreeMemory) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A5FE0)
[Address] EAT @explorer.exe (BiPtQueryBrokeredEvent) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A5DF0)
[Address] EAT @explorer.exe (BiPtQuerySystemStateBroadcastChannels) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07C6A0C)
[Address] EAT @explorer.exe (BiPtQueryWorkItem) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081B804)
[Address] EAT @explorer.exe (BiPtSignalEvent) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081B738)
[Address] EAT @explorer.exe (BiPtSignalMultipleEvents) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081B660)
[Address] EAT @explorer.exe (BiResetActiveSessionForPackage) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081B57C)
[Address] EAT @explorer.exe (BiSetActiveSessionForPackage) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081B4E0)
[Address] EAT @explorer.exe (BiUpdateLockScreenApplications) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081B430)
[Address] EAT @explorer.exe (DllCanUnloadNow) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A1340)
[Address] EAT @explorer.exe (DllGetActivationFactory) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A2F60)
[Address] EAT @explorer.exe (DllGetClassObject) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A2110)
[Address] EAT @explorer.exe (PsmBlockAppStateChangeCompletion) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BDD4)
[Address] EAT @explorer.exe (PsmIsProcessInApplication) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07B7D60)
[Address] EAT @explorer.exe (PsmQueryApplicationInformation) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A73F0)
[Address] EAT @explorer.exe (PsmQueryApplicationList) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A2770)
[Address] EAT @explorer.exe (PsmQueryCurrentAppState) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BD70)
[Address] EAT @explorer.exe (PsmQueryProcessList) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A24F0)
[Address] EAT @explorer.exe (PsmRegisterAppStateChangeNotification) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07ACF00)
[Address] EAT @explorer.exe (PsmRegisterApplicationNotification) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07A71E0)
[Address] EAT @explorer.exe (PsmSetApplicationState) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07AA870)
[Address] EAT @explorer.exe (PsmShutdownApplication) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BEC0)
[Address] EAT @explorer.exe (PsmUnblockAppStateChangeCompletion) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BE0C)
[Address] EAT @explorer.exe (PsmUnregisterAppStateChangeNotification) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD07B0A68)
[Address] EAT @explorer.exe (PsmWaitForAppResume) : ieproxy.dll -> HOOKED (C:\Windows\System32\twinapi.dll @ 0xD081BE5C)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 ac3.msn.com


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST1000LM024 HN-M101MBB +++++
--- User ---
[MBR] af2d5d26254f379ef01a9d18b0ba1e96
[BSP] e5564d3a591cf8403f708aa9e7a52e9a : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 718848 | Size: 150775 MB
2 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 309506048 | Size: 1500 MB
3 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 312578048 | Size: 801242 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_04292014_234802.txt >>
RKreport[0]_S_04282014_195855.txt;RKreport[0]_S_04292014_234758.txt

[Reklama]

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

@echo off
del /q /a /f %systemroot%\system32\drivers\etc\hosts 2>nul
echo 127.0.0.1 localhost>>%systemroot%\system32\drivers\etc\hosts
exit


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:název souboru, zde napiš: FixHosts.bat
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Poklepáním na soubor ho spusť.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

[CZechBoY]

To bys mi zase zobrazil reklamy ve skypu, to já si tam ty blokování reklam nechám...

RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 8 (6.2.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : czech_000 [Práva správce]
Mód : Odebrat -- Datum : 04/30/2014 11:44:31
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 1 ¤¤¤
[SUSP PATH] GameRanger.exe -- C:\Users\czech_000\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe [7] -> ERROR [5]

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤
[Address] EAT @explorer.exe (AssocCreate) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983B20)
[Address] EAT @explorer.exe (AssocGetPerceivedType) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5984940)
[Address] EAT @explorer.exe (AssocIsDangerous) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599CFBC)
[Address] EAT @explorer.exe (AssocQueryKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A870)
[Address] EAT @explorer.exe (AssocQueryKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983A20)
[Address] EAT @explorer.exe (AssocQueryStringA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E60C)
[Address] EAT @explorer.exe (AssocQueryStringByKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E440)
[Address] EAT @explorer.exe (AssocQueryStringByKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59841A0)
[Address] EAT @explorer.exe (AssocQueryStringW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989CC0)
[Address] EAT @explorer.exe (ChrCmpIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A03C)
[Address] EAT @explorer.exe (ChrCmpIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A02C)
[Address] EAT @explorer.exe (ColorAdjustLuma) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F7A8)
[Address] EAT @explorer.exe (ColorHLSToRGB) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BFF0)
[Address] EAT @explorer.exe (ColorRGBToHLS) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BF30)
[Address] EAT @explorer.exe (ConnectToConnectionPoint) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59842B0)
[Address] EAT @explorer.exe (DelayLoadFailureHook) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F8F0)
[Address] EAT @explorer.exe (DllGetClassObject) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AD448)
[Address] EAT @explorer.exe (DllGetVersion) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5995AE0)
[Address] EAT @explorer.exe (GUIDFromStringW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F786)
[Address] EAT @explorer.exe (GetAcceptLanguagesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997D0)
[Address] EAT @explorer.exe (GetAcceptLanguagesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A40)
[Address] EAT @explorer.exe (GetMenuPosFromID) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A60)
[Address] EAT @explorer.exe (HashData) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997C0)
[Address] EAT @explorer.exe (IStream_Copy) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A1A0)
[Address] EAT @explorer.exe (IStream_Read) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B80)
[Address] EAT @explorer.exe (IStream_ReadPidl) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989980)
[Address] EAT @explorer.exe (IStream_ReadStr) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981120)
[Address] EAT @explorer.exe (IStream_Reset) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986340)
[Address] EAT @explorer.exe (IStream_Size) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A180)
[Address] EAT @explorer.exe (IStream_Write) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986320)
[Address] EAT @explorer.exe (IStream_WritePidl) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF194)
[Address] EAT @explorer.exe (IStream_WriteStr) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986350)
[Address] EAT @explorer.exe (IUnknown_AtomicRelease) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A09C)
[Address] EAT @explorer.exe (IUnknown_Exec) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B80)
[Address] EAT @explorer.exe (IUnknown_GetSite) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860B0)
[Address] EAT @explorer.exe (IUnknown_GetWindow) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982D20)
[Address] EAT @explorer.exe (IUnknown_QueryService) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983300)
[Address] EAT @explorer.exe (IUnknown_QueryStatus) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59ABBA8)
[Address] EAT @explorer.exe (IUnknown_Set) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981130)
[Address] EAT @explorer.exe (IUnknown_SetSite) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983310)
[Address] EAT @explorer.exe (IntlStrEqWorkerA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E3C)
[Address] EAT @explorer.exe (IntlStrEqWorkerW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E2C)
[Address] EAT @explorer.exe (IsCharSpaceA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A80)
[Address] EAT @explorer.exe (IsCharSpaceW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981140)
[Address] EAT @explorer.exe (IsInternetESCEnabled) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997B0)
[Address] EAT @explorer.exe (IsOS) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B60)
[Address] EAT @explorer.exe (MLFreeLibrary) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9EF4)
[Address] EAT @explorer.exe (MLLoadLibraryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9F48)
[Address] EAT @explorer.exe (MLLoadLibraryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9FA8)
[Address] EAT @explorer.exe (ParseURLA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997A0)
[Address] EAT @explorer.exe (ParseURLW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C250)
[Address] EAT @explorer.exe (PathAddBackslashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B2C)
[Address] EAT @explorer.exe (PathAddBackslashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983C00)
[Address] EAT @explorer.exe (PathAddExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CCC)
[Address] EAT @explorer.exe (PathAddExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CBC)
[Address] EAT @explorer.exe (PathAppendA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CAC)
[Address] EAT @explorer.exe (PathAppendW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A10)
[Address] EAT @explorer.exe (PathBuildRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A05C)
[Address] EAT @explorer.exe (PathBuildRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A06C)
[Address] EAT @explorer.exe (PathCanonicalizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C9C)
[Address] EAT @explorer.exe (PathCanonicalizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CF0)
[Address] EAT @explorer.exe (PathCombineA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B5C)
[Address] EAT @explorer.exe (PathCombineW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983C10)
[Address] EAT @explorer.exe (PathCommonPrefixA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DAC)
[Address] EAT @explorer.exe (PathCommonPrefixW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D9C)
[Address] EAT @explorer.exe (PathCompactPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AF90)
[Address] EAT @explorer.exe (PathCompactPathExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AD80)
[Address] EAT @explorer.exe (PathCompactPathExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986530)
[Address] EAT @explorer.exe (PathCompactPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599EB08)
[Address] EAT @explorer.exe (PathCreateFromUrlA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999790)
[Address] EAT @explorer.exe (PathCreateFromUrlAlloc) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999780)
[Address] EAT @explorer.exe (PathCreateFromUrlW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836E0)
[Address] EAT @explorer.exe (PathFileExistsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C0C)
[Address] EAT @explorer.exe (PathFileExistsAndAttributesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985930)
[Address] EAT @explorer.exe (PathFileExistsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983690)
[Address] EAT @explorer.exe (PathFindExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C3C)
[Address] EAT @explorer.exe (PathFindExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810C0)
[Address] EAT @explorer.exe (PathFindFileNameA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BFC)
[Address] EAT @explorer.exe (PathFindFileNameW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981090)
[Address] EAT @explorer.exe (PathFindNextComponentA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999AE0)
[Address] EAT @explorer.exe (PathFindNextComponentW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A210)
[Address] EAT @explorer.exe (PathFindOnPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B610)
[Address] EAT @explorer.exe (PathFindOnPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989170)
[Address] EAT @explorer.exe (PathFindSuffixArrayA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B534)
[Address] EAT @explorer.exe (PathFindSuffixArrayW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59853D0)
[Address] EAT @explorer.exe (PathGetArgsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599962C)
[Address] EAT @explorer.exe (PathGetArgsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C880)
[Address] EAT @explorer.exe (PathGetCharTypeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999648)
[Address] EAT @explorer.exe (PathGetCharTypeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986480)
[Address] EAT @explorer.exe (PathGetDriveNumberA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D5C)
[Address] EAT @explorer.exe (PathGetDriveNumberW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981050)
[Address] EAT @explorer.exe (PathIsContentTypeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599ABAC)
[Address] EAT @explorer.exe (PathIsContentTypeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A2C0)
[Address] EAT @explorer.exe (PathIsDirectoryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B404)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B334)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599EE78)
[Address] EAT @explorer.exe (PathIsDirectoryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59854D0)
[Address] EAT @explorer.exe (PathIsFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D6C)
[Address] EAT @explorer.exe (PathIsFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986200)
[Address] EAT @explorer.exe (PathIsLFNFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CFC)
[Address] EAT @explorer.exe (PathIsLFNFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CEC)
[Address] EAT @explorer.exe (PathIsNetworkPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A07C)
[Address] EAT @explorer.exe (PathIsNetworkPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829A0)
[Address] EAT @explorer.exe (PathIsPrefixA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D8C)
[Address] EAT @explorer.exe (PathIsPrefixW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D7C)
[Address] EAT @explorer.exe (PathIsRelativeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D4C)
[Address] EAT @explorer.exe (PathIsRelativeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983680)
[Address] EAT @explorer.exe (PathIsRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C8C)
[Address] EAT @explorer.exe (PathIsRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CE0)
[Address] EAT @explorer.exe (PathIsSameRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D1C)
[Address] EAT @explorer.exe (PathIsSameRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D0C)
[Address] EAT @explorer.exe (PathIsSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A834)
[Address] EAT @explorer.exe (PathIsSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E948)
[Address] EAT @explorer.exe (PathIsUNCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B3C)
[Address] EAT @explorer.exe (PathIsUNCServerA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C1C)
[Address] EAT @explorer.exe (PathIsUNCServerShareA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C2C)
[Address] EAT @explorer.exe (PathIsUNCServerShareW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E60)
[Address] EAT @explorer.exe (PathIsUNCServerW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E70)
[Address] EAT @explorer.exe (PathIsUNCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981040)
[Address] EAT @explorer.exe (PathIsURLA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999770)
[Address] EAT @explorer.exe (PathIsURLW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836C0)
[Address] EAT @explorer.exe (PathMakePrettyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599BCB0)
[Address] EAT @explorer.exe (PathMakePrettyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989FC0)
[Address] EAT @explorer.exe (PathMakeSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A8C0)
[Address] EAT @explorer.exe (PathMakeSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981270)
[Address] EAT @explorer.exe (PathMatchSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BAC)
[Address] EAT @explorer.exe (PathMatchSpecExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B8C)
[Address] EAT @explorer.exe (PathMatchSpecExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B7C)
[Address] EAT @explorer.exe (PathMatchSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B9C)
[Address] EAT @explorer.exe (PathParseIconLocationA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BEC)
[Address] EAT @explorer.exe (PathParseIconLocationW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E20)
[Address] EAT @explorer.exe (PathQuoteSpacesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BCC)
[Address] EAT @explorer.exe (PathQuoteSpacesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982D00)
[Address] EAT @explorer.exe (PathRelativePathToA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B14)
[Address] EAT @explorer.exe (PathRelativePathToW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999AF4)
[Address] EAT @explorer.exe (PathRemoveArgsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599BC74)
[Address] EAT @explorer.exe (PathRemoveArgsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986450)
[Address] EAT @explorer.exe (PathRemoveBackslashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CDC)
[Address] EAT @explorer.exe (PathRemoveBackslashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983730)
[Address] EAT @explorer.exe (PathRemoveBlanksA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BBC)
[Address] EAT @explorer.exe (PathRemoveBlanksW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BD0)
[Address] EAT @explorer.exe (PathRemoveExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C7C)
[Address] EAT @explorer.exe (PathRemoveExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E30)
[Address] EAT @explorer.exe (PathRemoveFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B4C)
[Address] EAT @explorer.exe (PathRemoveFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5984040)
[Address] EAT @explorer.exe (PathRenameExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C6C)
[Address] EAT @explorer.exe (PathRenameExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C5C)
[Address] EAT @explorer.exe (PathSearchAndQualifyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599961C)
[Address] EAT @explorer.exe (PathSearchAndQualifyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982E00)
[Address] EAT @explorer.exe (PathSetDlgItemPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AC50)
[Address] EAT @explorer.exe (PathSetDlgItemPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E9D0)
[Address] EAT @explorer.exe (PathSkipRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D2C)
[Address] EAT @explorer.exe (PathSkipRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A20)
[Address] EAT @explorer.exe (PathStripPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D3C)
[Address] EAT @explorer.exe (PathStripPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986220)
[Address] EAT @explorer.exe (PathStripToRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C4C)
[Address] EAT @explorer.exe (PathStripToRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E50)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B6C)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982DF0)
[Address] EAT @explorer.exe (PathUndecorateA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A75C)
[Address] EAT @explorer.exe (PathUndecorateW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59864D0)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A86C)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E984)
[Address] EAT @explorer.exe (PathUnquoteSpacesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BDC)
[Address] EAT @explorer.exe (PathUnquoteSpacesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BE0)
[Address] EAT @explorer.exe (QISearch) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981010)
[Address] EAT @explorer.exe (SHAllocShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829D0)
[Address] EAT @explorer.exe (SHAnsiToAnsi) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A310)
[Address] EAT @explorer.exe (SHAnsiToUnicode) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A320)
[Address] EAT @explorer.exe (SHAutoComplete) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BE10)
[Address] EAT @explorer.exe (SHCopyKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2F0)
[Address] EAT @explorer.exe (SHCopyKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A070)
[Address] EAT @explorer.exe (SHCreateMemStream) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832B0)
[Address] EAT @explorer.exe (SHCreateShellPalette) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982890)
[Address] EAT @explorer.exe (SHCreateStreamOnFileA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0DC)
[Address] EAT @explorer.exe (SHCreateStreamOnFileEx) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986070)
[Address] EAT @explorer.exe (SHCreateStreamOnFileW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59864A0)
[Address] EAT @explorer.exe (SHCreateStreamWrapper) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F792)
[Address] EAT @explorer.exe (SHCreateThread) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E80)
[Address] EAT @explorer.exe (SHCreateThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B30)
[Address] EAT @explorer.exe (SHCreateThreadWithHandle) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986400)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0FC)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0EC)
[Address] EAT @explorer.exe (SHDeleteKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2E0)
[Address] EAT @explorer.exe (SHDeleteKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982C60)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AEFB8)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AEF48)
[Address] EAT @explorer.exe (SHDeleteValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A10C)
[Address] EAT @explorer.exe (SHDeleteValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CA0)
[Address] EAT @explorer.exe (SHEnumKeyExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A290)
[Address] EAT @explorer.exe (SHEnumKeyExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A280)
[Address] EAT @explorer.exe (SHEnumValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A250)
[Address] EAT @explorer.exe (SHEnumValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A1D0)
[Address] EAT @explorer.exe (SHFormatDateTimeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F004)
[Address] EAT @explorer.exe (SHFormatDateTimeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F070)
[Address] EAT @explorer.exe (SHFreeShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829E0)
[Address] EAT @explorer.exe (SHGetInverseCMAP) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A0830)
[Address] EAT @explorer.exe (SHGetThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989140)
[Address] EAT @explorer.exe (SHGetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59843C0)
[Address] EAT @explorer.exe (SHGetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B20)
[Address] EAT @explorer.exe (SHGetViewStatePropertyBag) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986FA0)
[Address] EAT @explorer.exe (SHIsChildOrSelf) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983510)
[Address] EAT @explorer.exe (SHIsLowMemoryMachine) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59ABC3C)
[Address] EAT @explorer.exe (SHLoadIndirectString) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983340)
[Address] EAT @explorer.exe (SHLockShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF838)
[Address] EAT @explorer.exe (SHMessageBoxCheckA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AADD4)
[Address] EAT @explorer.exe (SHMessageBoxCheckW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AAF00)
[Address] EAT @explorer.exe (SHOpenRegStream2A) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0AC)
[Address] EAT @explorer.exe (SHOpenRegStream2W) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59843F0)
[Address] EAT @explorer.exe (SHOpenRegStreamA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0CC)
[Address] EAT @explorer.exe (SHOpenRegStreamW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0BC)
[Address] EAT @explorer.exe (SHPackDispParamsV) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5987DB0)
[Address] EAT @explorer.exe (SHPropertyBag_ReadStrAlloc) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B1598)
[Address] EAT @explorer.exe (SHPropertyBag_WriteBSTR) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B1498)
[Address] EAT @explorer.exe (SHQueryInfoKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A230)
[Address] EAT @explorer.exe (SHQueryInfoKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A210)
[Address] EAT @explorer.exe (SHQueryValueExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A120)
[Address] EAT @explorer.exe (SHQueryValueExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59863A0)
[Address] EAT @explorer.exe (SHRegCloseUSKey) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A70)
[Address] EAT @explorer.exe (SHRegCreateUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A58)
[Address] EAT @explorer.exe (SHRegCreateUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982640)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A44)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A34)
[Address] EAT @explorer.exe (SHRegDeleteUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A24)
[Address] EAT @explorer.exe (SHRegDeleteUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A14)
[Address] EAT @explorer.exe (SHRegDuplicateHKey) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1F0)
[Address] EAT @explorer.exe (SHRegEnumUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59999FC)
[Address] EAT @explorer.exe (SHRegEnumUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59999DC)
[Address] EAT @explorer.exe (SHRegEnumUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999998)
[Address] EAT @explorer.exe (SHRegEnumUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982590)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999984)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C220)
[Address] EAT @explorer.exe (SHRegGetBoolValueFromHKCUHKLM) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986330)
[Address] EAT @explorer.exe (SHRegGetIntW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1E0)
[Address] EAT @explorer.exe (SHRegGetPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1C0)
[Address] EAT @explorer.exe (SHRegGetPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A240)
[Address] EAT @explorer.exe (SHRegGetUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999948)
[Address] EAT @explorer.exe (SHRegGetUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A280)
[Address] EAT @explorer.exe (SHRegGetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2A4)
[Address] EAT @explorer.exe (SHRegGetValueFromHKCUHKLM) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986EBC)
[Address] EAT @explorer.exe (SHRegGetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59821B0)
[Address] EAT @explorer.exe (SHRegOpenUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999928)
[Address] EAT @explorer.exe (SHRegOpenUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999908)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59998E0)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982610)
[Address] EAT @explorer.exe (SHRegQueryUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59998A0)
[Address] EAT @explorer.exe (SHRegQueryUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999860)
[Address] EAT @explorer.exe (SHRegSetPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1A0)
[Address] EAT @explorer.exe (SHRegSetPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A180)
[Address] EAT @explorer.exe (SHRegSetUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999838)
[Address] EAT @explorer.exe (SHRegSetUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999810)
[Address] EAT @explorer.exe (SHRegWriteUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997E4)
[Address] EAT @explorer.exe (SHRegWriteUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59825E0)
[Address] EAT @explorer.exe (SHRegisterValidateTemplate) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B58E0)
[Address] EAT @explorer.exe (SHReleaseThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A08C)
[Address] EAT @explorer.exe (SHRunIndirectRegClientCommand) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599C95C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA27C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CC0)
[Address] EAT @explorer.exe (SHSetThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B10)
[Address] EAT @explorer.exe (SHSetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A14C)
[Address] EAT @explorer.exe (SHSetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59863D0)
[Address] EAT @explorer.exe (SHSkipJunction) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982E20)
[Address] EAT @explorer.exe (SHStrDupA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A260)
[Address] EAT @explorer.exe (SHStrDupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981070)
[Address] EAT @explorer.exe (SHStripMneumonicA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA900)
[Address] EAT @explorer.exe (SHStripMneumonicW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982DB0)
[Address] EAT @explorer.exe (SHUnicodeToAnsi) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832E0)
[Address] EAT @explorer.exe (SHUnicodeToAnsiCP) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F7B9)
[Address] EAT @explorer.exe (SHUnicodeToUnicode) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A300)
[Address] EAT @explorer.exe (SHUnlockShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF818)
[Address] EAT @explorer.exe (ShellMessageBoxA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599C604)
[Address] EAT @explorer.exe (ShellMessageBoxW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F54C)
[Address] EAT @explorer.exe (StrCSpnA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EEC)
[Address] EAT @explorer.exe (StrCSpnIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EDC)
[Address] EAT @explorer.exe (StrCSpnIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999ECC)
[Address] EAT @explorer.exe (StrCSpnW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A30)
[Address] EAT @explorer.exe (StrCatBuffA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FDC)
[Address] EAT @explorer.exe (StrCatBuffW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FEC)
[Address] EAT @explorer.exe (StrCatChainW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DCC)
[Address] EAT @explorer.exe (StrCatW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FCF8)
[Address] EAT @explorer.exe (StrChrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FCC)
[Address] EAT @explorer.exe (StrChrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F9C)
[Address] EAT @explorer.exe (StrChrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810E0)
[Address] EAT @explorer.exe (StrChrNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F8C)
[Address] EAT @explorer.exe (StrChrNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FBC)
[Address] EAT @explorer.exe (StrChrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981080)
[Address] EAT @explorer.exe (StrCmpCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DEC)
[Address] EAT @explorer.exe (StrCmpCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982C90)
[Address] EAT @explorer.exe (StrCmpICA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981100)
[Address] EAT @explorer.exe (StrCmpICW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810F0)
[Address] EAT @explorer.exe (StrCmpIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983650)
[Address] EAT @explorer.exe (StrCmpLogicalW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DDC)
[Address] EAT @explorer.exe (StrCmpNA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EBC)
[Address] EAT @explorer.exe (StrCmpNCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E0C)
[Address] EAT @explorer.exe (StrCmpNCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DFC)
[Address] EAT @explorer.exe (StrCmpNIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EAC)
[Address] EAT @explorer.exe (StrCmpNICA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860A0)
[Address] EAT @explorer.exe (StrCmpNICW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B70)
[Address] EAT @explorer.exe (StrCmpNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983670)
[Address] EAT @explorer.exe (StrCmpNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983770)
[Address] EAT @explorer.exe (StrCmpW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810B0)
[Address] EAT @explorer.exe (StrCpyNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FFC)
[Address] EAT @explorer.exe (StrCpyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FD38)
[Address] EAT @explorer.exe (StrDupA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E4C)
[Address] EAT @explorer.exe (StrDupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B50)
[Address] EAT @explorer.exe (StrFormatByteSize64A) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC00)
[Address] EAT @explorer.exe (StrFormatByteSizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FBF4)
[Address] EAT @explorer.exe (StrFormatByteSizeEx) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832D0)
[Address] EAT @explorer.exe (StrFormatByteSizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC60)
[Address] EAT @explorer.exe (StrFormatKBSizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FB74)
[Address] EAT @explorer.exe (StrFormatKBSizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FBE0)
[Address] EAT @explorer.exe (StrFromTimeIntervalA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A8AC8)
[Address] EAT @explorer.exe (StrFromTimeIntervalW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A8A44)
[Address] EAT @explorer.exe (StrIsIntlEqualA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E3C)
[Address] EAT @explorer.exe (StrIsIntlEqualW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E2C)
[Address] EAT @explorer.exe (StrNCatA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FCB8)
[Address] EAT @explorer.exe (StrNCatW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC74)
[Address] EAT @explorer.exe (StrPBrkA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F5C)
[Address] EAT @explorer.exe (StrPBrkW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59861E0)
[Address] EAT @explorer.exe (StrRChrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FAC)
[Address] EAT @explorer.exe (StrRChrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F7C)
[Address] EAT @explorer.exe (StrRChrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F6C)
[Address] EAT @explorer.exe (StrRChrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986210)
[Address] EAT @explorer.exe (StrRStrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E9C)
[Address] EAT @explorer.exe (StrRStrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E8C)
[Address] EAT @explorer.exe (StrRetToBSTR) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860D0)
[Address] EAT @explorer.exe (StrRetToBufA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F9E8)
[Address] EAT @explorer.exe (StrRetToBufW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981110)
[Address] EAT @explorer.exe (StrRetToStrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FA98)
[Address] EAT @explorer.exe (StrRetToStrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983330)
[Address] EAT @explorer.exe (StrSpnA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F0C)
[Address] EAT @explorer.exe (StrSpnW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EFC)
[Address] EAT @explorer.exe (StrStrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E7C)
[Address] EAT @explorer.exe (StrStrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986490)
[Address] EAT @explorer.exe (StrStrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810D0)
[Address] EAT @explorer.exe (StrStrNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E5C)
[Address] EAT @explorer.exe (StrStrNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E6C)
[Address] EAT @explorer.exe (StrStrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983660)
[Address] EAT @explorer.exe (StrToInt64ExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F2C)
[Address] EAT @explorer.exe (StrToInt64ExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F3C)
[Address] EAT @explorer.exe (StrToIntA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F4C)
[Address] EAT @explorer.exe (StrToIntExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F1C)
[Address] EAT @explorer.exe (StrToIntExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59861F0)
[Address] EAT @explorer.exe (StrToIntW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810A0)
[Address] EAT @explorer.exe (StrTrimA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E1C)
[Address] EAT @explorer.exe (StrTrimW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983320)
[Address] EAT @explorer.exe (UrlApplySchemeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999760)
[Address] EAT @explorer.exe (UrlApplySchemeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999750)
[Address] EAT @explorer.exe (UrlCanonicalizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999740)
[Address] EAT @explorer.exe (UrlCanonicalizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836B0)
[Address] EAT @explorer.exe (UrlCombineA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999728)
[Address] EAT @explorer.exe (UrlCombineW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983750)
[Address] EAT @explorer.exe (UrlCompareA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999714)
[Address] EAT @explorer.exe (UrlCompareW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999704)
[Address] EAT @explorer.exe (UrlCreateFromPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996F4)
[Address] EAT @explorer.exe (UrlCreateFromPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BF0)
[Address] EAT @explorer.exe (UrlEscapeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996E4)
[Address] EAT @explorer.exe (UrlEscapeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983720)
[Address] EAT @explorer.exe (UrlFixupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996D4)
[Address] EAT @explorer.exe (UrlGetLocationA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996C4)
[Address] EAT @explorer.exe (UrlGetLocationW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996B4)
[Address] EAT @explorer.exe (UrlGetPartA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599969C)
[Address] EAT @explorer.exe (UrlGetPartW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983700)
[Address] EAT @explorer.exe (UrlHashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999688)
[Address] EAT @explorer.exe (UrlHashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999678)
[Address] EAT @explorer.exe (UrlIsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999668)
[Address] EAT @explorer.exe (UrlIsNoHistoryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59995EC)
[Address] EAT @explorer.exe (UrlIsNoHistoryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981150)
[Address] EAT @explorer.exe (UrlIsOpaqueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599960C)
[Address] EAT @explorer.exe (UrlIsOpaqueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59995FC)
[Address] EAT @explorer.exe (UrlIsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836A0)
[Address] EAT @explorer.exe (UrlUnescapeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999658)
[Address] EAT @explorer.exe (UrlUnescapeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836D0)
[Address] EAT @explorer.exe (WhichPlatform) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA6D0)
[Address] EAT @explorer.exe (wnsprintfA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A93AC)
[Address] EAT @explorer.exe (wnsprintfW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9318)
[Address] EAT @explorer.exe (wvnsprintfA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A93F8)
[Address] EAT @explorer.exe (wvnsprintfW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9368)
[Address] EAT @explorer.exe (GdipAddPathArc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC868)
[Address] EAT @explorer.exe (GdipAddPathArcI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC7C8)
[Address] EAT @explorer.exe (GdipAddPathBezier) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F400)
[Address] EAT @explorer.exe (GdipAddPathBezierI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F31C)
[Address] EAT @explorer.exe (GdipAddPathBeziers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F258)
[Address] EAT @explorer.exe (GdipAddPathBeziersI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F174)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EAC4)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E90C)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E824)
[Address] EAT @explorer.exe (GdipAddPathClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E9E0)
[Address] EAT @explorer.exe (GdipAddPathCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F094)
[Address] EAT @explorer.exe (GdipAddPathCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EE94)
[Address] EAT @explorer.exe (GdipAddPathCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0ED74)
[Address] EAT @explorer.exe (GdipAddPathCurve3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EC90)
[Address] EAT @explorer.exe (GdipAddPathCurve3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EB90)
[Address] EAT @explorer.exe (GdipAddPathCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EF78)
[Address] EAT @explorer.exe (GdipAddPathEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E3FC)

[CZechBoY]

[Address] EAT @explorer.exe (GdipAddPathEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E378)
[Address] EAT @explorer.exe (GdipAddPathLine) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB964)
[Address] EAT @explorer.exe (GdipAddPathLine2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F61C)
[Address] EAT @explorer.exe (GdipAddPathLine2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F538)
[Address] EAT @explorer.exe (GdipAddPathLineI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB8E0)
[Address] EAT @explorer.exe (GdipAddPathPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DF7C)
[Address] EAT @explorer.exe (GdipAddPathPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E280)
[Address] EAT @explorer.exe (GdipAddPathPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E1E0)
[Address] EAT @explorer.exe (GdipAddPathPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E11C)
[Address] EAT @explorer.exe (GdipAddPathPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E038)
[Address] EAT @explorer.exe (GdipAddPathRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E730)
[Address] EAT @explorer.exe (GdipAddPathRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E6AC)
[Address] EAT @explorer.exe (GdipAddPathRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E5E8)
[Address] EAT @explorer.exe (GdipAddPathRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E4E8)
[Address] EAT @explorer.exe (GdipAddPathString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DDBC)
[Address] EAT @explorer.exe (GdipAddPathStringI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DCD4)
[Address] EAT @explorer.exe (GdipAlloc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C99ADC)
[Address] EAT @explorer.exe (GdipBeginContainer) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB1C4)
[Address] EAT @explorer.exe (GdipBeginContainer2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB100)
[Address] EAT @explorer.exe (GdipBeginContainerI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB000)
[Address] EAT @explorer.exe (GdipBitmapApplyEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02874)
[Address] EAT @explorer.exe (GdipBitmapConvertFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02B20)
[Address] EAT @explorer.exe (GdipBitmapCreateApplyEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0295C)
[Address] EAT @explorer.exe (GdipBitmapGetHistogram) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0278C)
[Address] EAT @explorer.exe (GdipBitmapGetHistogramSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02740)
[Address] EAT @explorer.exe (GdipBitmapGetPixel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02E18)
[Address] EAT @explorer.exe (GdipBitmapLockBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C490)
[Address] EAT @explorer.exe (GdipBitmapSetPixel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB31E0)
[Address] EAT @explorer.exe (GdipBitmapSetResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB4880)
[Address] EAT @explorer.exe (GdipBitmapUnlockBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C5C8)
[Address] EAT @explorer.exe (GdipClearPathMarkers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F848)
[Address] EAT @explorer.exe (GdipCloneBitmapArea) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02F04)
[Address] EAT @explorer.exe (GdipCloneBitmapAreaI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE12D8)
[Address] EAT @explorer.exe (GdipCloneBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A32C)
[Address] EAT @explorer.exe (GdipCloneCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05450)
[Address] EAT @explorer.exe (GdipCloneFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF996C)
[Address] EAT @explorer.exe (GdipCloneFontFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9C18)
[Address] EAT @explorer.exe (GdipCloneImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB70D8)
[Address] EAT @explorer.exe (GdipCloneImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02538)
[Address] EAT @explorer.exe (GdipCloneMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB360)
[Address] EAT @explorer.exe (GdipClonePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10184)
[Address] EAT @explorer.exe (GdipClonePen) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07048)
[Address] EAT @explorer.exe (GdipCloneRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B8FC)
[Address] EAT @explorer.exe (GdipCloneStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8CF0)
[Address] EAT @explorer.exe (GdipClosePathFigure) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FA28)
[Address] EAT @explorer.exe (GdipClosePathFigures) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F988)
[Address] EAT @explorer.exe (GdipCombineRegionPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B538)
[Address] EAT @explorer.exe (GdipCombineRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B6F4)
[Address] EAT @explorer.exe (GdipCombineRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B654)
[Address] EAT @explorer.exe (GdipCombineRegionRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB88A4)
[Address] EAT @explorer.exe (GdipComment) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9878)
[Address] EAT @explorer.exe (GdipConvertToEmfPlus) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF80FC)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF7FFC)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF7EFC)
[Address] EAT @explorer.exe (GdipCreateAdjustableArrowCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04B88)
[Address] EAT @explorer.exe (GdipCreateBitmapFromDirectDrawSurface) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D030A4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB06FC)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFileICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03330)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGdiDib) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAB994)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D031D4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHBITMAP) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C92F28)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHICON) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7B2C)
[Address] EAT @explorer.exe (GdipCreateBitmapFromResource) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0300C)
[Address] EAT @explorer.exe (GdipCreateBitmapFromScan0) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA84A4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDFF40)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStreamICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03480)
[Address] EAT @explorer.exe (GdipCreateCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2F6C)
[Address] EAT @explorer.exe (GdipCreateCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0551C)
[Address] EAT @explorer.exe (GdipCreateEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02DB0)
[Address] EAT @explorer.exe (GdipCreateFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB97BC)
[Address] EAT @explorer.exe (GdipCreateFontFamilyFromName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8DD4)
[Address] EAT @explorer.exe (GdipCreateFontFromDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9520)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9408)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontW) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9380)
[Address] EAT @explorer.exe (GdipCreateFromHDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9D848)
[Address] EAT @explorer.exe (GdipCreateFromHDC2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0196C)
[Address] EAT @explorer.exe (GdipCreateFromHWND) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D018CC)
[Address] EAT @explorer.exe (GdipCreateFromHWNDICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0182C)
[Address] EAT @explorer.exe (GdipCreateHBITMAPFromBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA3830)
[Address] EAT @explorer.exe (GdipCreateHICONFromBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB779C)
[Address] EAT @explorer.exe (GdipCreateHalftonePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9ED8)
[Address] EAT @explorer.exe (GdipCreateHatchBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A198)
[Address] EAT @explorer.exe (GdipCreateImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6D10)
[Address] EAT @explorer.exe (GdipCreateLineBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0984C)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2150)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2044)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0961C)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09514)
[Address] EAT @explorer.exe (GdipCreateLineBrushI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09738)
[Address] EAT @explorer.exe (GdipCreateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA74C8)
[Address] EAT @explorer.exe (GdipCreateMatrix2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB244)
[Address] EAT @explorer.exe (GdipCreateMatrix3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C3C0)
[Address] EAT @explorer.exe (GdipCreateMatrix3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C274)
[Address] EAT @explorer.exe (GdipCreateMetafileFromEmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAB18)
[Address] EAT @explorer.exe (GdipCreateMetafileFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAA30)
[Address] EAT @explorer.exe (GdipCreateMetafileFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA854)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAC0C)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmfFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA93C)
[Address] EAT @explorer.exe (GdipCreatePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF200)
[Address] EAT @explorer.exe (GdipCreatePath2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D103C4)
[Address] EAT @explorer.exe (GdipCreatePath2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D1023C)
[Address] EAT @explorer.exe (GdipCreatePathGradient) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08778)
[Address] EAT @explorer.exe (GdipCreatePathGradientFromPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08598)
[Address] EAT @explorer.exe (GdipCreatePathGradientI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0864C)
[Address] EAT @explorer.exe (GdipCreatePathIter) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CEE0)
[Address] EAT @explorer.exe (GdipCreatePen1) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAA7E8)
[Address] EAT @explorer.exe (GdipCreatePen2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7D40)
[Address] EAT @explorer.exe (GdipCreateRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8040)
[Address] EAT @explorer.exe (GdipCreateRegionHrgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BA00)
[Address] EAT @explorer.exe (GdipCreateRegionPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BB94)
[Address] EAT @explorer.exe (GdipCreateRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD9CC)
[Address] EAT @explorer.exe (GdipCreateRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD918)
[Address] EAT @explorer.exe (GdipCreateRegionRgnData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BAC8)
[Address] EAT @explorer.exe (GdipCreateSolidFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5630)
[Address] EAT @explorer.exe (GdipCreateStreamOnFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CCAB24)
[Address] EAT @explorer.exe (GdipCreateStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8EA0)
[Address] EAT @explorer.exe (GdipCreateTexture) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2A40)
[Address] EAT @explorer.exe (GdipCreateTexture2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09EC4)
[Address] EAT @explorer.exe (GdipCreateTexture2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09C40)
[Address] EAT @explorer.exe (GdipCreateTextureIA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09D10)
[Address] EAT @explorer.exe (GdipCreateTextureIAI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09BF0)
[Address] EAT @explorer.exe (GdipDeleteBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5170)
[Address] EAT @explorer.exe (GdipDeleteCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB3498)
[Address] EAT @explorer.exe (GdipDeleteCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05308)
[Address] EAT @explorer.exe (GdipDeleteEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02D60)
[Address] EAT @explorer.exe (GdipDeleteFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA834C)
[Address] EAT @explorer.exe (GdipDeleteFontFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9CD0)
[Address] EAT @explorer.exe (GdipDeleteGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9D378)
[Address] EAT @explorer.exe (GdipDeleteMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA73FC)
[Address] EAT @explorer.exe (GdipDeletePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF2E0)
[Address] EAT @explorer.exe (GdipDeletePathIter) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CE4C)
[Address] EAT @explorer.exe (GdipDeletePen) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA521C)
[Address] EAT @explorer.exe (GdipDeletePrivateFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF924C)
[Address] EAT @explorer.exe (GdipDeleteRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA76B8)
[Address] EAT @explorer.exe (GdipDeleteStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8C7C)
[Address] EAT @explorer.exe (GdipDisposeImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C91CE0)
[Address] EAT @explorer.exe (GdipDisposeImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6B70)
[Address] EAT @explorer.exe (GdipDrawArc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0040C)
[Address] EAT @explorer.exe (GdipDrawArcI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00360)
[Address] EAT @explorer.exe (GdipDrawBezier) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00208)
[Address] EAT @explorer.exe (GdipDrawBezierI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00114)
[Address] EAT @explorer.exe (GdipDrawBeziers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFFF8)
[Address] EAT @explorer.exe (GdipDrawBeziersI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFEDC)
[Address] EAT @explorer.exe (GdipDrawCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0EF0)
[Address] EAT @explorer.exe (GdipDrawClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF140)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEF38)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEE44)
[Address] EAT @explorer.exe (GdipDrawClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF05C)
[Address] EAT @explorer.exe (GdipDrawCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF7B4)
[Address] EAT @explorer.exe (GdipDrawCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF59C)
[Address] EAT @explorer.exe (GdipDrawCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF4A8)
[Address] EAT @explorer.exe (GdipDrawCurve3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF374)
[Address] EAT @explorer.exe (GdipDrawCurve3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF268)
[Address] EAT @explorer.exe (GdipDrawCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF6D0)
[Address] EAT @explorer.exe (GdipDrawDriverString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD9A8)
[Address] EAT @explorer.exe (GdipDrawEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFB64)
[Address] EAT @explorer.exe (GdipDrawEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFAD4)
[Address] EAT @explorer.exe (GdipDrawImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2DF0)
[Address] EAT @explorer.exe (GdipDrawImageFX) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD004)
[Address] EAT @explorer.exe (GdipDrawImageI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2D6C)
[Address] EAT @explorer.exe (GdipDrawImagePointRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD77C)
[Address] EAT @explorer.exe (GdipDrawImagePointRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD6B8)
[Address] EAT @explorer.exe (GdipDrawImagePoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD658)
[Address] EAT @explorer.exe (GdipDrawImagePointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD53C)
[Address] EAT @explorer.exe (GdipDrawImagePointsRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD2CC)
[Address] EAT @explorer.exe (GdipDrawImagePointsRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD134)
[Address] EAT @explorer.exe (GdipDrawImageRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA2664)
[Address] EAT @explorer.exe (GdipDrawImageRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA25C4)
[Address] EAT @explorer.exe (GdipDrawImageRectRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDEFC4)
[Address] EAT @explorer.exe (GdipDrawImageRectRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDEE90)
[Address] EAT @explorer.exe (GdipDrawLine) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D005D8)
[Address] EAT @explorer.exe (GdipDrawLineI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00548)
[Address] EAT @explorer.exe (GdipDrawLines) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACA40)
[Address] EAT @explorer.exe (GdipDrawLinesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAC958)
[Address] EAT @explorer.exe (GdipDrawPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDAFA0)
[Address] EAT @explorer.exe (GdipDrawPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF998)
[Address] EAT @explorer.exe (GdipDrawPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF8EC)
[Address] EAT @explorer.exe (GdipDrawPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC27D0)
[Address] EAT @explorer.exe (GdipDrawPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC26E0)
[Address] EAT @explorer.exe (GdipDrawRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACD30)
[Address] EAT @explorer.exe (GdipDrawRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACC90)
[Address] EAT @explorer.exe (GdipDrawRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFDC0)
[Address] EAT @explorer.exe (GdipDrawRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFC88)
[Address] EAT @explorer.exe (GdipDrawString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE018)
[Address] EAT @explorer.exe (GdipEmfToWmfBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC6A28)
[Address] EAT @explorer.exe (GdipEndContainer) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAF58)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCE6C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCDD0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC9D4)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC894)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCC38)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCB80)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC6D0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC5E0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC15C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBFD4)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC41C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC328)
[Address] EAT @explorer.exe (GdipFillClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE524)
[Address] EAT @explorer.exe (GdipFillClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE310)
[Address] EAT @explorer.exe (GdipFillClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE210)
[Address] EAT @explorer.exe (GdipFillClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE440)
[Address] EAT @explorer.exe (GdipFillEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF768)
[Address] EAT @explorer.exe (GdipFillEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE990)
[Address] EAT @explorer.exe (GdipFillPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE654)
[Address] EAT @explorer.exe (GdipFillPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE850)
[Address] EAT @explorer.exe (GdipFillPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE79C)
[Address] EAT @explorer.exe (GdipFillPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC29AC)
[Address] EAT @explorer.exe (GdipFillPolygon2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEB04)
[Address] EAT @explorer.exe (GdipFillPolygon2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEA20)
[Address] EAT @explorer.exe (GdipFillPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC28BC)
[Address] EAT @explorer.exe (GdipFillRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5870)
[Address] EAT @explorer.exe (GdipFillRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA57DC)
[Address] EAT @explorer.exe (GdipFillRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFED28)
[Address] EAT @explorer.exe (GdipFillRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEC28)
[Address] EAT @explorer.exe (GdipFillRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD354)
[Address] EAT @explorer.exe (GdipFindFirstImageItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03730)
[Address] EAT @explorer.exe (GdipFindNextImageItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03680)
[Address] EAT @explorer.exe (GdipFlattenPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDAEC4)
[Address] EAT @explorer.exe (GdipFlush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01764)
[Address] EAT @explorer.exe (GdipFree) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C99A74)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapFillState) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D045B0)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04A10)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapMiddleInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04720)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04898)
[Address] EAT @explorer.exe (GdipGetAllPropertyItems) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB11D8)
[Address] EAT @explorer.exe (GdipGetBrushType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A27C)
[Address] EAT @explorer.exe (GdipGetCellAscent) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9708)
[Address] EAT @explorer.exe (GdipGetCellDescent) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9644)
[Address] EAT @explorer.exe (GdipGetClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8424)
[Address] EAT @explorer.exe (GdipGetClipBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB938)
[Address] EAT @explorer.exe (GdipGetClipBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7B04)
[Address] EAT @explorer.exe (GdipGetCompositingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD0E0)
[Address] EAT @explorer.exe (GdipGetCompositingQuality) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01478)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04EF4)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04DBC)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeCaps) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05198)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05058)
[Address] EAT @explorer.exe (GdipGetCustomLineCapType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0539C)
[Address] EAT @explorer.exe (GdipGetCustomLineCapWidthScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04C84)
[Address] EAT @explorer.exe (GdipGetDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC35E8)
[Address] EAT @explorer.exe (GdipGetDpiX) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00A68)
[Address] EAT @explorer.exe (GdipGetDpiY) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8AD8)
[Address] EAT @explorer.exe (GdipGetEffectParameterSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02C8C)
[Address] EAT @explorer.exe (GdipGetEffectParameters) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02C18)
[Address] EAT @explorer.exe (GdipGetEmHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9A70)
[Address] EAT @explorer.exe (GdipGetEncoderParameterList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0419C)
[Address] EAT @explorer.exe (GdipGetEncoderParameterListSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04260)
[Address] EAT @explorer.exe (GdipGetFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8C70)
[Address] EAT @explorer.exe (GdipGetFamilyName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9984)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9178)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF90BC)
[Address] EAT @explorer.exe (GdipGetFontHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9660)
[Address] EAT @explorer.exe (GdipGetFontHeightGivenDPI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9A64)
[Address] EAT @explorer.exe (GdipGetFontSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8CF0)
[Address] EAT @explorer.exe (GdipGetFontStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8B6C)
[Address] EAT @explorer.exe (GdipGetFontUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8BF0)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilyMonospace) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9DC4)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySansSerif) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9EAC)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySerif) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9E38)
[Address] EAT @explorer.exe (GdipGetHatchBackgroundColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A030)
[Address] EAT @explorer.exe (GdipGetHatchForegroundColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D084E4)
[Address] EAT @explorer.exe (GdipGetHatchStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A0E4)
[Address] EAT @explorer.exe (GdipGetHemfFromMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC5A24)
[Address] EAT @explorer.exe (GdipGetImageAttributesAdjustedPalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01A18)
[Address] EAT @explorer.exe (GdipGetImageBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03CEC)
[Address] EAT @explorer.exe (GdipGetImageDecoders) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD9270)
[Address] EAT @explorer.exe (GdipGetImageDecodersSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD9428)
[Address] EAT @explorer.exe (GdipGetImageDimension) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03C28)
[Address] EAT @explorer.exe (GdipGetImageEncoders) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C96798)
[Address] EAT @explorer.exe (GdipGetImageEncodersSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C969D8)
[Address] EAT @explorer.exe (GdipGetImageFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0396C)
[Address] EAT @explorer.exe (GdipGetImageGraphicsContext) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA9214)
[Address] EAT @explorer.exe (GdipGetImageHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9B680)
[Address] EAT @explorer.exe (GdipGetImageHorizontalResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03B3C)
[Address] EAT @explorer.exe (GdipGetImageItemData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D035D0)
[Address] EAT @explorer.exe (GdipGetImagePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE05B4)
[Address] EAT @explorer.exe (GdipGetImagePaletteSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE067C)

[CZechBoY]

[Address] EAT @explorer.exe (GdipGetImagePixelFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9B588)
[Address] EAT @explorer.exe (GdipGetImageRawFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB18F4)
[Address] EAT @explorer.exe (GdipGetImageThumbnail) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D037E0)
[Address] EAT @explorer.exe (GdipGetImageType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6EA0)
[Address] EAT @explorer.exe (GdipGetImageVerticalResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03A50)
[Address] EAT @explorer.exe (GdipGetImageWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C344)
[Address] EAT @explorer.exe (GdipGetInterpolationMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01108)
[Address] EAT @explorer.exe (GdipGetLineBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D090C8)
[Address] EAT @explorer.exe (GdipGetLineBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07A4C)
[Address] EAT @explorer.exe (GdipGetLineColors) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09360)
[Address] EAT @explorer.exe (GdipGetLineGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09198)
[Address] EAT @explorer.exe (GdipGetLinePresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08E88)
[Address] EAT @explorer.exe (GdipGetLinePresetBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09004)
[Address] EAT @explorer.exe (GdipGetLineRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07C48)
[Address] EAT @explorer.exe (GdipGetLineRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09280)
[Address] EAT @explorer.exe (GdipGetLineSpacing) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9B34)
[Address] EAT @explorer.exe (GdipGetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetLineWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08AA0)
[Address] EAT @explorer.exe (GdipGetLogFontA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9B0C)
[Address] EAT @explorer.exe (GdipGetLogFontW) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8EEC)
[Address] EAT @explorer.exe (GdipGetMatrixElements) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA75F0)
[Address] EAT @explorer.exe (GdipGetMetafileDownLevelRasterizationLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9F20)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromEmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAE8C)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAE34)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAD14)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFADC4)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromWmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAEE4)
[Address] EAT @explorer.exe (GdipGetNearestColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D006F8)
[Address] EAT @explorer.exe (GdipGetPageScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00BD0)
[Address] EAT @explorer.exe (GdipGetPageUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00C84)
[Address] EAT @explorer.exe (GdipGetPathData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FB68)
[Address] EAT @explorer.exe (GdipGetPathFillMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FC14)
[Address] EAT @explorer.exe (GdipGetPathGradientBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0797C)
[Address] EAT @explorer.exe (GdipGetPathGradientBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07A4C)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D084E4)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08034)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07F98)
[Address] EAT @explorer.exe (GdipGetPathGradientFocusScales) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D071BC)
[Address] EAT @explorer.exe (GdipGetPathGradientGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07B00)
[Address] EAT @explorer.exe (GdipGetPathGradientPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D080E0)
[Address] EAT @explorer.exe (GdipGetPathGradientPointCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07DB4)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07764)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09004)
[Address] EAT @explorer.exe (GdipGetPathGradientRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07C48)
[Address] EAT @explorer.exe (GdipGetPathGradientRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09280)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07CF8)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorsWithCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D082FC)
[Address] EAT @explorer.exe (GdipGetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetPathGradientWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08AA0)
[Address] EAT @explorer.exe (GdipGetPathLastPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F6E0)
[Address] EAT @explorer.exe (GdipGetPathPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FE14)
[Address] EAT @explorer.exe (GdipGetPathPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FCC8)
[Address] EAT @explorer.exe (GdipGetPathTypes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FF24)
[Address] EAT @explorer.exe (GdipGetPathWorldBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D680)
[Address] EAT @explorer.exe (GdipGetPathWorldBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D4FC)
[Address] EAT @explorer.exe (GdipGetPenBrushFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05D44)
[Address] EAT @explorer.exe (GdipGetPenColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF640)
[Address] EAT @explorer.exe (GdipGetPenCompoundArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D056CC)
[Address] EAT @explorer.exe (GdipGetPenCompoundCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0586C)
[Address] EAT @explorer.exe (GdipGetPenCustomEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0674C)
[Address] EAT @explorer.exe (GdipGetPenCustomStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D068FC)
[Address] EAT @explorer.exe (GdipGetPenDashArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0591C)
[Address] EAT @explorer.exe (GdipGetPenDashCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06B5C)
[Address] EAT @explorer.exe (GdipGetPenDashCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05A94)
[Address] EAT @explorer.exe (GdipGetPenDashOffset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05BE4)
[Address] EAT @explorer.exe (GdipGetPenDashStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05C94)
[Address] EAT @explorer.exe (GdipGetPenEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06C10)
[Address] EAT @explorer.exe (GdipGetPenFillType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFB50)
[Address] EAT @explorer.exe (GdipGetPenLineJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06AAC)
[Address] EAT @explorer.exe (GdipGetPenMiterLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D065F0)
[Address] EAT @explorer.exe (GdipGetPenMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06498)
[Address] EAT @explorer.exe (GdipGetPenStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06CC0)
[Address] EAT @explorer.exe (GdipGetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0624C)
[Address] EAT @explorer.exe (GdipGetPenUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06EE4)
[Address] EAT @explorer.exe (GdipGetPenWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF6E0)
[Address] EAT @explorer.exe (GdipGetPixelOffsetMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D013C4)
[Address] EAT @explorer.exe (GdipGetPointCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10030)
[Address] EAT @explorer.exe (GdipGetPropertyCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03F08)
[Address] EAT @explorer.exe (GdipGetPropertyIdList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03E6C)
[Address] EAT @explorer.exe (GdipGetPropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB57EC)
[Address] EAT @explorer.exe (GdipGetPropertyItemSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB5760)
[Address] EAT @explorer.exe (GdipGetPropertySize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFEF0)
[Address] EAT @explorer.exe (GdipGetRegionBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B260)
[Address] EAT @explorer.exe (GdipGetRegionBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B0C4)
[Address] EAT @explorer.exe (GdipGetRegionData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0ABA8)
[Address] EAT @explorer.exe (GdipGetRegionDataSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AC7C)
[Address] EAT @explorer.exe (GdipGetRegionHRgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB866C)
[Address] EAT @explorer.exe (GdipGetRegionScans) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A4EC)
[Address] EAT @explorer.exe (GdipGetRegionScansCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A60C)
[Address] EAT @explorer.exe (GdipGetRegionScansI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A3EC)
[Address] EAT @explorer.exe (GdipGetRenderingOrigin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D015D4)
[Address] EAT @explorer.exe (GdipGetSmoothingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAA70)
[Address] EAT @explorer.exe (GdipGetSolidFillColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09964)
[Address] EAT @explorer.exe (GdipGetStringFormatAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8A30)
[Address] EAT @explorer.exe (GdipGetStringFormatDigitSubstitution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8390)
[Address] EAT @explorer.exe (GdipGetStringFormatFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8B58)
[Address] EAT @explorer.exe (GdipGetStringFormatHotkeyPrefix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF87E0)
[Address] EAT @explorer.exe (GdipGetStringFormatLineAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8908)
[Address] EAT @explorer.exe (GdipGetStringFormatMeasurableCharacterRangeCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF856C)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStopCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8698)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStops) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF85DC)
[Address] EAT @explorer.exe (GdipGetStringFormatTrimming) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8260)
[Address] EAT @explorer.exe (GdipGetTextContrast) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D011B0)
[Address] EAT @explorer.exe (GdipGetTextRenderingHint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8160)
[Address] EAT @explorer.exe (GdipGetTextureImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDE20)
[Address] EAT @explorer.exe (GdipGetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetTextureWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDCCC)
[Address] EAT @explorer.exe (GdipGetVisibleClipBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB7D0)
[Address] EAT @explorer.exe (GdipGetVisibleClipBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB690)
[Address] EAT @explorer.exe (GdipGetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA780C)
[Address] EAT @explorer.exe (GdipGraphicsClear) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB19E8)
[Address] EAT @explorer.exe (GdipGraphicsSetAbort) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D025EC)
[Address] EAT @explorer.exe (GdipImageForceValidation) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6F4C)
[Address] EAT @explorer.exe (GdipImageGetFrameCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0478)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0204)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE02A4)
[Address] EAT @explorer.exe (GdipImageRotateFlip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE3500)
[Address] EAT @explorer.exe (GdipImageSelectActiveFrame) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03F94)
[Address] EAT @explorer.exe (GdipImageSetAbort) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02690)
[Address] EAT @explorer.exe (GdipInitializePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02A30)
[Address] EAT @explorer.exe (GdipInvertMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C100)
[Address] EAT @explorer.exe (GdipIsClipEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB884)
[Address] EAT @explorer.exe (GdipIsEmptyRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AF40)
[Address] EAT @explorer.exe (GdipIsEqualRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AD48)
[Address] EAT @explorer.exe (GdipIsInfiniteRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8268)
[Address] EAT @explorer.exe (GdipIsMatrixEqual) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BCA0)
[Address] EAT @explorer.exe (GdipIsMatrixIdentity) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7760)
[Address] EAT @explorer.exe (GdipIsMatrixInvertible) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BDC4)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D080)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CFF8)
[Address] EAT @explorer.exe (GdipIsStyleAvailable) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF97B8)
[Address] EAT @explorer.exe (GdipIsVisibleClipEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB5D4)
[Address] EAT @explorer.exe (GdipIsVisiblePathPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D344)
[Address] EAT @explorer.exe (GdipIsVisiblePathPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D2C8)
[Address] EAT @explorer.exe (GdipIsVisiblePoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB4F0)
[Address] EAT @explorer.exe (GdipIsVisiblePointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB480)
[Address] EAT @explorer.exe (GdipIsVisibleRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB37C)
[Address] EAT @explorer.exe (GdipIsVisibleRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB2F0)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AA08)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A98C)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A7A8)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A70C)
[Address] EAT @explorer.exe (GdipLoadImageFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D044D4)
[Address] EAT @explorer.exe (GdipLoadImageFromFileICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04314)
[Address] EAT @explorer.exe (GdipLoadImageFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA9F24)
[Address] EAT @explorer.exe (GdipLoadImageFromStreamICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D043F4)
[Address] EAT @explorer.exe (GdipMeasureCharacterRanges) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFDC28)
[Address] EAT @explorer.exe (GdipMeasureDriverString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD7D0)
[Address] EAT @explorer.exe (GdipMeasureString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFDDF0)
[Address] EAT @explorer.exe (GdipMultiplyLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA8BC)
[Address] EAT @explorer.exe (GdipMultiplyPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06094)
[Address] EAT @explorer.exe (GdipMultiplyTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00F58)
[Address] EAT @explorer.exe (GdipNewInstalledFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF93A0)
[Address] EAT @explorer.exe (GdipNewPrivateFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF92EC)
[Address] EAT @explorer.exe (GdipPathIterCopyData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C4A8)
[Address] EAT @explorer.exe (GdipPathIterEnumerate) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C598)
[Address] EAT @explorer.exe (GdipPathIterGetCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C93C)
[Address] EAT @explorer.exe (GdipPathIterGetSubpathCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C888)
[Address] EAT @explorer.exe (GdipPathIterHasCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C728)
[Address] EAT @explorer.exe (GdipPathIterIsValid) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C7D4)
[Address] EAT @explorer.exe (GdipPathIterNextMarker) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CAB4)
[Address] EAT @explorer.exe (GdipPathIterNextMarkerPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C9F0)
[Address] EAT @explorer.exe (GdipPathIterNextPathType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CB98)
[Address] EAT @explorer.exe (GdipPathIterNextSubpath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CD5C)
[Address] EAT @explorer.exe (GdipPathIterNextSubpathPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CC84)
[Address] EAT @explorer.exe (GdipPathIterRewind) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C680)
[Address] EAT @explorer.exe (GdipPlayMetafileRecord) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBEF4)
[Address] EAT @explorer.exe (GdipPlayTSClientRecord) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF79F8)
[Address] EAT @explorer.exe (GdipPrivateAddFontFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9020)
[Address] EAT @explorer.exe (GdipPrivateAddMemoryFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8F74)
[Address] EAT @explorer.exe (GdipRecordMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD2A54)
[Address] EAT @explorer.exe (GdipRecordMetafileFileName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA510)
[Address] EAT @explorer.exe (GdipRecordMetafileFileNameI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA40C)
[Address] EAT @explorer.exe (GdipRecordMetafileI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA66C)
[Address] EAT @explorer.exe (GdipRecordMetafileStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA2B0)
[Address] EAT @explorer.exe (GdipRecordMetafileStreamI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA1AC)
[Address] EAT @explorer.exe (GdipReleaseDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC3508)
[Address] EAT @explorer.exe (GdipRemovePropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03DE0)
[Address] EAT @explorer.exe (GdipResetClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC2D60)
[Address] EAT @explorer.exe (GdipResetImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02358)
[Address] EAT @explorer.exe (GdipResetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetPageTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00D38)
[Address] EAT @explorer.exe (GdipResetPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D100E0)
[Address] EAT @explorer.exe (GdipResetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06198)
[Address] EAT @explorer.exe (GdipResetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0106C)
[Address] EAT @explorer.exe (GdipRestoreGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB81E8)
[Address] EAT @explorer.exe (GdipReversePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F7A8)
[Address] EAT @explorer.exe (GdipRotateLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB700)
[Address] EAT @explorer.exe (GdipRotatePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotatePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05E0C)
[Address] EAT @explorer.exe (GdipRotateTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotateWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00DE0)
[Address] EAT @explorer.exe (GdipSaveAdd) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D040F8)
[Address] EAT @explorer.exe (GdipSaveAddImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04040)
[Address] EAT @explorer.exe (GdipSaveGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7F9C)
[Address] EAT @explorer.exe (GdipSaveImageToFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C95FD0)
[Address] EAT @explorer.exe (GdipSaveImageToStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFC80)
[Address] EAT @explorer.exe (GdipScaleLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScaleMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA738)
[Address] EAT @explorer.exe (GdipScalePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScalePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05EDC)
[Address] EAT @explorer.exe (GdipScaleTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScaleWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00E94)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapFillState) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04660)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04AC0)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapMiddleInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D047D0)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04948)
[Address] EAT @explorer.exe (GdipSetClipGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBDEC)
[Address] EAT @explorer.exe (GdipSetClipHrgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBB08)
[Address] EAT @explorer.exe (GdipSetClipPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBCDC)
[Address] EAT @explorer.exe (GdipSetClipRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA69B0)
[Address] EAT @explorer.exe (GdipSetClipRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6910)
[Address] EAT @explorer.exe (GdipSetClipRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBBD4)
[Address] EAT @explorer.exe (GdipSetCompositingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB3358)
[Address] EAT @explorer.exe (GdipSetCompositingQuality) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0152C)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04FA0)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04E5C)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeCaps) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05250)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05104)
[Address] EAT @explorer.exe (GdipSetCustomLineCapWidthScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04D24)
[Address] EAT @explorer.exe (GdipSetEffectParameters) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02CEC)
[Address] EAT @explorer.exe (GdipSetEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B7C4)
[Address] EAT @explorer.exe (GdipSetImageAttributesCachedBackground) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01BC8)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorKeys) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7460)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02284)
[Address] EAT @explorer.exe (GdipSetImageAttributesGamma) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0205C)
[Address] EAT @explorer.exe (GdipSetImageAttributesNoOp) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01F54)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01E38)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannelColorProfile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01D74)
[Address] EAT @explorer.exe (GdipSetImageAttributesRemapTable) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01C70)
[Address] EAT @explorer.exe (GdipSetImageAttributesThreshold) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02164)
[Address] EAT @explorer.exe (GdipSetImageAttributesToIdentity) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02448)
[Address] EAT @explorer.exe (GdipSetImageAttributesWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01B10)
[Address] EAT @explorer.exe (GdipSetImagePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D038AC)
[Address] EAT @explorer.exe (GdipSetInfinite) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B860)

[CZechBoY]

[Address] EAT @explorer.exe (GdipSetInterpolationMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE1170)
[Address] EAT @explorer.exe (GdipSetLineBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE273C)
[Address] EAT @explorer.exe (GdipSetLineColors) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09454)
[Address] EAT @explorer.exe (GdipSetLineGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09214)
[Address] EAT @explorer.exe (GdipSetLineLinearBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08C10)
[Address] EAT @explorer.exe (GdipSetLinePresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08CD0)
[Address] EAT @explorer.exe (GdipSetLineSigmaBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2A58)
[Address] EAT @explorer.exe (GdipSetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetLineWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08B50)
[Address] EAT @explorer.exe (GdipSetMatrixElements) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA7E0)
[Address] EAT @explorer.exe (GdipSetMetafileDownLevelRasterizationLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA068)
[Address] EAT @explorer.exe (GdipSetPageScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00B1C)
[Address] EAT @explorer.exe (GdipSetPageUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9E40)
[Address] EAT @explorer.exe (GdipSetPathFillMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF4BC)
[Address] EAT @explorer.exe (GdipSetPathGradientBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D078A8)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08444)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07EDC)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07E68)
[Address] EAT @explorer.exe (GdipSetPathGradientFocusScales) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07104)
[Address] EAT @explorer.exe (GdipSetPathGradientGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07BB0)
[Address] EAT @explorer.exe (GdipSetPathGradientLinearBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08C10)
[Address] EAT @explorer.exe (GdipSetPathGradientPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D080E0)
[Address] EAT @explorer.exe (GdipSetPathGradientPresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D075C4)
[Address] EAT @explorer.exe (GdipSetPathGradientSigmaBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07504)
[Address] EAT @explorer.exe (GdipSetPathGradientSurroundColorsWithCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08110)
[Address] EAT @explorer.exe (GdipSetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetPathGradientWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07458)
[Address] EAT @explorer.exe (GdipSetPathMarker) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F8E8)
[Address] EAT @explorer.exe (GdipSetPenBrushFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7974)
[Address] EAT @explorer.exe (GdipSetPenColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC08F8)
[Address] EAT @explorer.exe (GdipSetPenCompoundArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D057B0)
[Address] EAT @explorer.exe (GdipSetPenCustomEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06814)
[Address] EAT @explorer.exe (GdipSetPenCustomStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D069C4)
[Address] EAT @explorer.exe (GdipSetPenDashArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D059D8)
[Address] EAT @explorer.exe (GdipSetPenDashCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06D70)
[Address] EAT @explorer.exe (GdipSetPenDashOffset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05B44)
[Address] EAT @explorer.exe (GdipSetPenDashStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC0860)
[Address] EAT @explorer.exe (GdipSetPenEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAABC0)
[Address] EAT @explorer.exe (GdipSetPenLineCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06E18)
[Address] EAT @explorer.exe (GdipSetPenLineJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAC50)
[Address] EAT @explorer.exe (GdipSetPenMiterLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D066A0)
[Address] EAT @explorer.exe (GdipSetPenMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06548)
[Address] EAT @explorer.exe (GdipSetPenStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAB30)
[Address] EAT @explorer.exe (GdipSetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06368)
[Address] EAT @explorer.exe (GdipSetPenUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06F94)
[Address] EAT @explorer.exe (GdipSetPenWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6B50)
[Address] EAT @explorer.exe (GdipSetPixelOffsetMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE346C)
[Address] EAT @explorer.exe (GdipSetPropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB4558)
[Address] EAT @explorer.exe (GdipSetRenderingOrigin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D016AC)
[Address] EAT @explorer.exe (GdipSetSmoothingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA1DB8)
[Address] EAT @explorer.exe (GdipSetSolidFillColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6C1C)
[Address] EAT @explorer.exe (GdipSetStringFormatAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8AC0)
[Address] EAT @explorer.exe (GdipSetStringFormatDigitSubstitution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF843C)
[Address] EAT @explorer.exe (GdipSetStringFormatFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8BE8)
[Address] EAT @explorer.exe (GdipSetStringFormatHotkeyPrefix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8870)
[Address] EAT @explorer.exe (GdipSetStringFormatLineAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8998)
[Address] EAT @explorer.exe (GdipSetStringFormatMeasurableCharacterRanges) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF84E8)
[Address] EAT @explorer.exe (GdipSetStringFormatTabStops) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8728)
[Address] EAT @explorer.exe (GdipSetStringFormatTrimming) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF82F8)
[Address] EAT @explorer.exe (GdipSetTextContrast) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01264)
[Address] EAT @explorer.exe (GdipSetTextRenderingHint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0130C)
[Address] EAT @explorer.exe (GdipSetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetTextureWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDF10)
[Address] EAT @explorer.exe (GdipSetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD014)
[Address] EAT @explorer.exe (GdipShearMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C19C)
[Address] EAT @explorer.exe (GdipStartPathFigure) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FAC8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericDefault) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8DF8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericTypographic) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8D90)
[Address] EAT @explorer.exe (GdipTestControl) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF81EC)
[Address] EAT @explorer.exe (GdipTransformMatrixPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC110)
[Address] EAT @explorer.exe (GdipTransformMatrixPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDBFE4)
[Address] EAT @explorer.exe (GdipTransformPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D804)
[Address] EAT @explorer.exe (GdipTransformPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0098C)
[Address] EAT @explorer.exe (GdipTransformPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D007AC)
[Address] EAT @explorer.exe (GdipTransformRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B374)
[Address] EAT @explorer.exe (GdipTranslateClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBA4C)
[Address] EAT @explorer.exe (GdipTranslateClipI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB9EC)
[Address] EAT @explorer.exe (GdipTranslateLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA68C)
[Address] EAT @explorer.exe (GdipTranslatePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslatePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05FB8)
[Address] EAT @explorer.exe (GdipTranslateRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B4BC)
[Address] EAT @explorer.exe (GdipTranslateRegionI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B45C)
[Address] EAT @explorer.exe (GdipTranslateTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslateWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7EEC)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C038)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BE78)
[Address] EAT @explorer.exe (GdipWarpPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D914)
[Address] EAT @explorer.exe (GdipWidenPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DA68)
[Address] EAT @explorer.exe (GdipWindingModeOutline) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DBD0)
[Address] EAT @explorer.exe (GdiplusNotificationHook) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10510)
[Address] EAT @explorer.exe (GdiplusNotificationUnhook) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D104AC)
[Address] EAT @explorer.exe (GdiplusShutdown) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C988CC)
[Address] EAT @explorer.exe (GdiplusStartup) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C932B0)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 ac3.msn.com


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST1000LM024 HN-M101MBB +++++
--- User ---
[MBR] af2d5d26254f379ef01a9d18b0ba1e96
[BSP] e5564d3a591cf8403f708aa9e7a52e9a : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 718848 | Size: 150775 MB
2 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 309506048 | Size: 1500 MB
3 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 312578048 | Size: 801242 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_04302014_114431.txt >>
RKreport[0]_D_04292014_234802.txt;RKreport[0]_S_04282014_195855.txt;RKreport[0]_S_04292014_234758.txt
RKreport[0]_S_04302014_114426.txt








11:47:54.0106 0x163c TDSS rootkit removing tool 3.0.0.34 Apr 29 2014 18:20:10
11:47:57.0269 0x163c ============================================================
11:47:57.0269 0x163c Current date / time: 2014/04/30 11:47:57.0269
11:47:57.0269 0x163c SystemInfo:
11:47:57.0269 0x163c
11:47:57.0269 0x163c OS Version: 6.2.9200 ServicePack: 0.0
11:47:57.0269 0x163c Product type: Workstation
11:47:57.0269 0x163c ComputerName: NTB
11:47:57.0269 0x163c UserName: czech_000
11:47:57.0269 0x163c Windows directory: C:\Windows
11:47:57.0269 0x163c System windows directory: C:\Windows
11:47:57.0269 0x163c Running under WOW64
11:47:57.0269 0x163c Processor architecture: Intel x64
11:47:57.0269 0x163c Number of processors: 4
11:47:57.0269 0x163c Page size: 0x1000
11:47:57.0269 0x163c Boot type: Normal boot
11:47:57.0269 0x163c ============================================================
11:47:57.0710 0x163c KLMD registered as C:\Windows\system32\drivers\15943843.sys
11:47:57.0923 0x163c System UUID: {635A51AE-BD20-E49F-5182-1C9E29972106}
11:47:58.0497 0x163c Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
11:47:58.0502 0x163c ============================================================
11:47:58.0502 0x163c \Device\Harddisk0\DR0:
11:47:58.0503 0x163c MBR partitions:
11:47:58.0503 0x163c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xAF000
11:47:58.0503 0x163c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xAF800, BlocksNum 0x1267B800
11:47:58.0503 0x163c \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x12A19000, BlocksNum 0x61CED000
11:47:58.0503 0x163c ============================================================
11:47:58.0558 0x163c C: <-> \Device\Harddisk0\DR0\Partition2
11:47:58.0591 0x163c D: <-> \Device\Harddisk0\DR0\Partition3
11:47:58.0609 0x163c ============================================================
11:47:58.0610 0x163c Initialize success
11:47:58.0610 0x163c ============================================================
11:48:05.0224 0x0ed0 ============================================================
11:48:05.0225 0x0ed0 Scan started
11:48:05.0225 0x0ed0 Mode: Manual;
11:48:05.0225 0x0ed0 ============================================================
11:48:05.0225 0x0ed0 KSN ping started
11:48:07.0655 0x0ed0 KSN ping finished: true
11:48:07.0978 0x0ed0 ================ Scan system memory ========================
11:48:07.0978 0x0ed0 System memory - ok
11:48:07.0978 0x0ed0 ================ Scan services =============================
11:48:08.0133 0x0ed0 [ E890C46E4754F0DF51BAFCC8D2E07498, E620D03030F3B65442E0A5CB8B59016A6E8DB3BCA52741977B8897B34438E902 ] 1394ohci C:\Windows\System32\drivers\1394ohci.sys
11:48:08.0138 0x0ed0 1394ohci - ok
11:48:08.0193 0x0ed0 [ 4F18D4C7EA14F11A7211F60D553C03DB, 09AB6D2D8E9B7B6D6A97708551C0E4B34538947A15EA2A69C11764D7BC0BB7F6 ] 3ware C:\Windows\system32\drivers\3ware.sys
11:48:08.0195 0x0ed0 3ware - ok
11:48:08.0238 0x0ed0 [ 975AABEB243B800C23626D6B652C5A9C, FB02336F26AF10BA2A0D1B97C33CB1D78BB90CA51EF008A613A0274779798FAD ] ACPI C:\Windows\system32\drivers\ACPI.sys
11:48:08.0247 0x0ed0 ACPI - ok
11:48:08.0267 0x0ed0 [ DC968C37822117E576B933F34A2D130C, 4C94E00ADC242296D7CBBFC7346D5F9AE5FE1B0C616ECA3BDE10A7B34FD2040B ] acpiex C:\Windows\system32\Drivers\acpiex.sys
11:48:08.0269 0x0ed0 acpiex - ok
11:48:08.0290 0x0ed0 [ 0CA9F7C3A78227C21A0A7854E245CFB2, D54147C9C1EE2F0098B863B0852E027DB89D6FA67F6B7FD54F609D9715A11442 ] acpipagr C:\Windows\System32\drivers\acpipagr.sys
11:48:08.0291 0x0ed0 acpipagr - ok
11:48:08.0313 0x0ed0 [ 8EB8DA03B142D3DD1EB9ED8107A76C43, 24B9B24F9A5BDF3AAD13C4EE0638497D9CA4A100096C6EAE403E0215EA89C439 ] AcpiPmi C:\Windows\System32\drivers\acpipmi.sys
11:48:08.0314 0x0ed0 AcpiPmi - ok
11:48:08.0333 0x0ed0 [ CBCE725C5D86ABA7D2604E22951AA9B8, DE0440F0E943F057EBCD01DB4B1E12DBC241FBF03C42021306D322AB88FF8F21 ] acpitime C:\Windows\System32\drivers\acpitime.sys
11:48:08.0334 0x0ed0 acpitime - ok
11:48:08.0368 0x0ed0 [ 3B42D95D20CD2AACDB0564471AE43ED7, BF49568D7060159F61D5F6DE7ECDECCCD1F920A2881544BA83CF420C822F6653 ] ACPIVPC C:\Windows\System32\drivers\AcpiVpc.sys
11:48:08.0369 0x0ed0 ACPIVPC - ok
11:48:08.0474 0x0ed0 [ 00268E392FDAB9D494CA6D4B979E94BB, 9BA081688626FBACDBAC81E576A892544E688E17DD48D9F9ADA70AC90F5671D3 ] AcuWVSSchedulerv8 D:\Program Files (x86)\Acunetix\Web Vulnerability Scanner 8\WVSScheduler.exe
11:48:08.0494 0x0ed0 AcuWVSSchedulerv8 - ok
11:48:08.0586 0x0ed0 [ 7C7E868E1D8096ED08D80FF7712BB9D8, EB4438F3CC377728173E018A763F0D0A8D5BBA4A289F554036D06B24030D2D62 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
11:48:08.0591 0x0ed0 AdobeFlashPlayerUpdateSvc - ok
11:48:08.0642 0x0ed0 [ 93C6388592B99925C1D1576E465BC80F, 4C48BE5471DA4788357D71E90DFEA20FE320C7AAE1F4C55AFBE2E46FEA5CF8FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
11:48:08.0652 0x0ed0 adp94xx - ok
11:48:08.0682 0x0ed0 [ D27763E0247292654E7F7D16444C7C72, 0314C713D31E2B34F215B52F804F014D876E6ED92DC656CC3E27920CCD36CF0E ] adpahci C:\Windows\system32\drivers\adpahci.sys
11:48:08.0690 0x0ed0 adpahci - ok
11:48:08.0725 0x0ed0 [ 67B90070FF48F794AF19F9FCF0080D75, 5D0D352606D58D2CA0814F38EF7B1774C030BE44353DF5910CBFAAF4FDE64ED6 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
11:48:08.0729 0x0ed0 adpu320 - ok
11:48:08.0770 0x0ed0 [ 974AE60BF5B90E31412D93596C968E5B, 092B59C2B67C4618E7B1800615D1DF7199482F60D0D27BD91763F7F8D7FC883F ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
11:48:08.0775 0x0ed0 AeLookupSvc - ok
11:48:08.0814 0x0ed0 [ 7C0E0EDF18D6CC565D7BFBB451709FA5, 47C21CD9D87B5C1B5EB14F6166B5E3349B1A6F10501E63CCED8D52A9FE22765D ] AFD C:\Windows\system32\drivers\afd.sys
11:48:08.0826 0x0ed0 AFD - ok
11:48:08.0844 0x0ed0 [ 01590377A5AB19E792528C628A2A68F9, F3A4B6CA4E8D4436E44E36D7F7EEF3DC861D1EE50D41F4273226C4ED95674B84 ] agp440 C:\Windows\system32\drivers\agp440.sys
11:48:08.0846 0x0ed0 agp440 - ok
11:48:08.0875 0x0ed0 [ D1BE8E6E5B3AF23A4393AF1BF867977A, B3AE97D35A9304198715D76F6C3F0545AA176FDEBA6C2055782558B11DFA14EB ] ALG C:\Windows\System32\alg.exe
11:48:08.0877 0x0ed0 ALG - ok
11:48:08.0908 0x0ed0 [ 025E8C755BE293E50854D26D1BBE5133, 4373639689306A3D8FE0F862072711BAD5DBAA45E105CD3129586439A90EE070 ] AllUserInstallAgent C:\Windows\system32\AUInstallAgent.dll
11:48:08.0913 0x0ed0 AllUserInstallAgent - ok
11:48:08.0952 0x0ed0 [ 5A81054B824004B1ECC04F0034A1CDF9, 73A1986A4B346C425157216EBF16CC90EFFC642EDF6109E6364CF0552E3388FD ] AmdK8 C:\Windows\System32\drivers\amdk8.sys
11:48:08.0954 0x0ed0 AmdK8 - ok
11:48:08.0970 0x0ed0 [ B849D453E644FAB9BC8EF6DC8CA9C4C6, B803CDA478D3385937C44CBB05A0E65ABACEFEBA682975787C44E2904FB89D2D ] AmdPPM C:\Windows\System32\drivers\amdppm.sys
11:48:08.0972 0x0ed0 AmdPPM - ok
11:48:08.0990 0x0ed0 [ 35A0EB5AECB0FA3C41A2FB514A562304, 737783ABF348288471AC7051D4DC6CB336D686C94EC7B8938DCA74AFE9BECB1C ] amdsata C:\Windows\system32\drivers\amdsata.sys
11:48:08.0991 0x0ed0 amdsata - ok
11:48:09.0018 0x0ed0 [ 00452671904F5EE94B50BF0219C97164, 99F9B86D3DB3E10B014120A63CD43CBAAB22C8E38851090ABE37D89ABD61F7B6 ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
11:48:09.0024 0x0ed0 amdsbs - ok
11:48:09.0050 0x0ed0 [ EA3FFE53E92E59C87E3ECA9BEB20D9B7, DC0B8B798720F5F75F8AFD3383CF69194282AEEE84DCACB97382F4C86E1D3E49 ] amdxata C:\Windows\system32\drivers\amdxata.sys
11:48:09.0051 0x0ed0 amdxata - ok
11:48:09.0078 0x0ed0 [ E71711D37C48AC40FD3E2866A5ABBA51, C85DB75741B17A0A84B045DC461B5A6C5EA2A34BCD661107D355CE8DF4A29E03 ] anvsnddrv C:\Windows\system32\drivers\anvsnddrv.sys
11:48:09.0079 0x0ed0 anvsnddrv - ok
11:48:09.0104 0x0ed0 [ 83B3682CE922FB0F415734B26D9D6233, 9102E8B410BB1AE426770896B6AB584D1F02830337FBB2DEC182F3F19832F35F ] AppID C:\Windows\system32\drivers\appid.sys
11:48:09.0106 0x0ed0 AppID - ok
11:48:09.0131 0x0ed0 [ CE2BEAD7F31816FF0AC490D048C969F9, 7D24C5A9E8F7C21CC6D8BF2CA29A8B79DDE7EEDE2F37D36B9071ECE1CF61371F ] AppIDSvc C:\Windows\System32\appidsvc.dll
11:48:09.0132 0x0ed0 AppIDSvc - ok
11:48:09.0166 0x0ed0 [ 4F750B7EFCB6520AE01E01D082D7D476, AD2A67D727A1D4DD0BBACC6B4BB432FA9A14D50D8BA292B95A4747CEC9F85728 ] Appinfo C:\Windows\System32\appinfo.dll
11:48:09.0168 0x0ed0 Appinfo - ok
11:48:09.0273 0x0ed0 [ 221564CC7BE37611FE15EACF443E1BF6, 381BDF17418C779D72332431BA174C2AD76CD9C7C1711FF5142EA9B05D5555E4 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
11:48:09.0275 0x0ed0 Apple Mobile Device - ok
11:48:09.0285 0x0ed0 [ 2D14788C5D0836292BEB27BBE109BE56, D032FDBD9E1708F77348655DE00DB395E38EB27A7EC3FB2EF3BA07D22CBC1402 ] AppMgmt C:\Windows\System32\appmgmts.dll
11:48:09.0291 0x0ed0 AppMgmt - ok
11:48:09.0321 0x0ed0 [ E933401B392387F4BE34DE8BAF1722A7, 57CC6DE31E2C82D2B12509F0A5EC9EC70DD2EF6A1F31A66ADF62DC6AE0A67323 ] arc C:\Windows\system32\drivers\arc.sys
11:48:09.0324 0x0ed0 arc - ok
11:48:09.0345 0x0ed0 [ 07CA323EF2E8247A568AB0F3662AD644, 1224B41193F0E9B164732BA5BF707A13427C82C1D8C3EDC2AAE5C5C75454B9F6 ] arcsas C:\Windows\system32\drivers\arcsas.sys
11:48:09.0348 0x0ed0 arcsas - ok
11:48:09.0427 0x0ed0 [ 9A262EDD17F8473B91B333D6B031A901, 05DFBD3A7D83FDE1D062EA719ACA9EC48CB7FD42D17DDD88B82E5D25469ADD23 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
11:48:09.0444 0x0ed0 aspnet_state - ok
11:48:09.0479 0x0ed0 [ 74DBAEC35366C4EE7670428808715A6A, 3B3A7A81CD8038C4750560B94A9247C4409410780B312BA71EDF2E393DCA7474 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
11:48:09.0480 0x0ed0 AsyncMac - ok
11:48:09.0500 0x0ed0 [ A721FF570C2387E383BDDEA9632863C9, 45DD7787F44A2C742560FEB03AB66910C2F0002D95BB02C55EEDE973AA92AD24 ] atapi C:\Windows\system32\drivers\atapi.sys
11:48:09.0501 0x0ed0 atapi - ok
11:48:09.0532 0x0ed0 [ BCD7A47EF587DC00DD61D12D9C2D1E44, 95BC9AC8BA8A86DB5C7A6317002BD9872F193B401A0C58DF252DCF3D4A7541E2 ] AudioEndpointBuilder C:\Windows\System32\AudioEndpointBuilder.dll
11:48:09.0538 0x0ed0 AudioEndpointBuilder - ok
11:48:09.0587 0x0ed0 [ 599B3F685A263A114FFAF3BE29C49C75, 579E9561BA8537888E061E303F3F89E2E6F8B8DED74369C3767DB10B35CD45E8 ] Audiosrv C:\Windows\System32\Audiosrv.dll
11:48:09.0603 0x0ed0 Audiosrv - ok
11:48:09.0646 0x0ed0 [ 89491EF71D5EA011127832C588002853, 05620E4235956D8446FB9604F930738C8AA97E3A74C907E37F7CC08B8EDA0461 ] AxInstSV C:\Windows\System32\AxInstSV.dll
11:48:09.0649 0x0ed0 AxInstSV - ok
11:48:09.0687 0x0ed0 [ 87AB5BB072A3F128541D5B815F82FFDD, 186AF33D3DE90638C3E165CAC3DA17295E8A80CDB523F9BE4AF7D38CA6954905 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
11:48:09.0698 0x0ed0 b06bdrv - ok
11:48:09.0721 0x0ed0 [ 81703BC5D68DEDBB086C2368FBE7B334, CFD4A55C8045C482F8D410514F3211AEFA00097AB395F5A04BFE983ED6254F6B ] BasicDisplay C:\Windows\System32\drivers\BasicDisplay.sys
11:48:09.0722 0x0ed0 BasicDisplay - ok
11:48:09.0743 0x0ed0 [ 5EC68164E14D25675C98BBB5F09E8606, 1D7EDB21C87039FC5F39F46460AD852BC4EC6B179B1C205D189DD3C397343435 ] BasicRender C:\Windows\System32\drivers\BasicRender.sys
11:48:09.0744 0x0ed0 BasicRender - ok
11:48:09.0782 0x0ed0 [ 89143A7BA7850F5C7E61B43BB44B6418, 00BB781DF87D4FF1BAFD318AFE237296B4F5925023BA4486405EC0A384C88D8F ] BDESVC C:\Windows\System32\bdesvc.dll
11:48:09.0788 0x0ed0 BDESVC - ok
11:48:09.0807 0x0ed0 [ 9E7AEA59776D904607985AFFE7E5E183, C3DB745A9F4DA7CB9628A7913DD52B2444B14FEB9D588FF6558CF52CEB8955EB ] Beep C:\Windows\system32\drivers\Beep.sys
11:48:09.0807 0x0ed0 Beep - ok
11:48:09.0856 0x0ed0 [ 53AA55632B94622F2DC3695E86EF9363, 9B5BB8EDA48A37AE97BCD42D83B25A6D10AA6231EABE745DCCE6D60E19094A6F ] BFE C:\Windows\System32\bfe.dll
11:48:09.0878 0x0ed0 BFE - ok
11:48:09.0929 0x0ed0 [ D598C44A7072D3108D8D8102EC5E07F7, D7472E9BAAB7B6E1D30F4E153412E2A16EE5C08DE2BF8BFF4D65089825226FE0 ] BITS C:\Windows\System32\qmgr.dll
11:48:09.0953 0x0ed0 BITS - ok
11:48:10.0053 0x0ed0 [ 4D87518BA68C308299441337C55F5427, AE46F847EE605213A3AE9BEFE5EB0B7B8D877340EA1A6CF9EF5683A02ECFE399 ] Bluetooth Device Monitor C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
11:48:10.0076 0x0ed0 Bluetooth Device Monitor - ok
11:48:10.0141 0x0ed0 [ 19786E2114E2FCB4EAA30808E9D4FB9A, FCBD15EA7CB0B22DA9ABFACF95DE877042201C85EBC219F5204E12F76E8DBC09 ] Bluetooth OBEX Service C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
11:48:10.0165 0x0ed0 Bluetooth OBEX Service - ok
11:48:10.0235 0x0ed0 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service D:\Program Files\Bonjour\mDNSResponder.exe
11:48:10.0245 0x0ed0 Bonjour Service - ok
11:48:10.0278 0x0ed0 [ B17AC10B47C7FCB44D22A1F06415840E, 990D6F629D93F4F913D218ACE5187A26DCB762BAFB2BB279CCE8CAF2755D85A5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
11:48:10.0280 0x0ed0 bowser - ok
11:48:10.0320 0x0ed0 [ 038FA1B55531E7020DB705B42FCCE373, 023E87E3204D64890D6FEA78E762E5BC5BD0A59325EBC264834727779EEEDBC5 ] BrokerInfrastructure C:\Windows\System32\bisrv.dll
11:48:10.0326 0x0ed0 BrokerInfrastructure - ok
11:48:10.0363 0x0ed0 [ 310068BDA80B1D55C36580FD8A873FAF, A75412FF1F483461F526E9A359DCEECA5E683441514464D5ED82D1A9740D583E ] Browser C:\Windows\System32\browser.dll
11:48:10.0368 0x0ed0 Browser - ok
11:48:10.0389 0x0ed0 [ 6695200F455E251F0BCC9CE4D0978D59, 4DB2F967E449581A9330EF43E794B45B93581564B20C5B991FC1EC665A640D69 ] BthAvrcpTg C:\Windows\System32\drivers\BthAvrcpTg.sys
11:48:10.0390 0x0ed0 BthAvrcpTg - ok
11:48:10.0413 0x0ed0 [ A8B20D852B07AE19A13B5D47EC4E4C3B, 86571C9E2BA15BB169CAB2D24C4D0598154C02FD173638CAFC685A7F6B09472D ] BthEnum C:\Windows\System32\drivers\BthEnum.sys
11:48:10.0415 0x0ed0 BthEnum - ok
11:48:10.0430 0x0ed0 [ 616EB8748C988AEE98D93DA141C3D3B4, 15A055B0496BDB29CBCF6EEBF112D4BA1C7A2FF39124728830D0FD1FD7A404CB ] BthHFEnum C:\Windows\System32\drivers\bthhfenum.sys
11:48:10.0432 0x0ed0 BthHFEnum - ok
11:48:10.0446 0x0ed0 [ DCB4EBD928A6FB368BE6CAE522412DE1, 9E1345F29467054689B9F48B5CCB567760D36610A4EA9AF41B829EAD60347269 ] bthhfhid C:\Windows\System32\drivers\BthHFHid.sys
11:48:10.0447 0x0ed0 bthhfhid - ok
11:48:10.0481 0x0ed0 [ 42201C346F0B8C458E1E9CDE04D68A2C, 6168FD0D10CD06B00B5C79D5D2B5C353AAC22FD99CE8D417DDBA33ED63CFB8BF ] BthLEEnum C:\Windows\system32\DRIVERS\BthLEEnum.sys
11:48:10.0486 0x0ed0 BthLEEnum - ok
11:48:10.0507 0x0ed0 [ 033916CE8784A848B9A3D686B7F66D97, B4D0514D59646CF6B70D4FA488CF95C38EA38CC5C509329CC8753E897C640AFA ] BTHMODEM C:\Windows\System32\drivers\bthmodem.sys
11:48:10.0509 0x0ed0 BTHMODEM - ok
11:48:10.0541 0x0ed0 [ 091BB978E9504D0AD14586929431A957, ACED02B879026A228E35F40847C210BC30A5AFC948FFE922DB21663E4A8DFF1D ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
11:48:10.0544 0x0ed0 BthPan - ok
11:48:10.0592 0x0ed0 [ 13795CAA34239D97A7211E7F9D96E012, C4F3402B063A7CFCE386D1AE9255975A199164BA9E7DCDB6129725213A0642B1 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
11:48:10.0616 0x0ed0 BTHPORT - ok
11:48:10.0624 0x0ed0 [ A4387C3D271959313E2577DB7BE8BA7A, C71474802102102EBE04DF036EEB2F5FB3380BE288E3842F19F234EFAE977D70 ] bthserv C:\Windows\system32\bthserv.dll
11:48:10.0627 0x0ed0 bthserv - ok
11:48:10.0633 0x0ed0 [ 1F715957F5236D30B6020A19A4271F6A, C06B637C2C6919E2DE1055AE249AE3EAF7B4890799F22BF5757CC10CEF145043 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
11:48:10.0635 0x0ed0 BTHUSB - ok
11:48:10.0665 0x0ed0 [ 4428C299BE7B9841ECFA82044B69FA6A, F8AB607D6CACBF2DDE3C392F9756B9F32CB99664A75F3140365CB916450660EC ] btmaux C:\Windows\system32\DRIVERS\btmaux.sys
11:48:10.0668 0x0ed0 btmaux - ok
11:48:10.0735 0x0ed0 [ 7B31A8A9DC95B3634D896FD0F2814F19, 8FD5FBC61968F4BB8C2BAD0D432D5B86DCFED38CCF6F559F9EFB71AADD25474F ] btmhsf C:\Windows\system32\DRIVERS\btmhsf.sys
11:48:10.0764 0x0ed0 btmhsf - ok
11:48:10.0789 0x0ed0 [ 990B1BABE6E81FB18E65A87EBEFB1772, 1820D4AC57E1D4B7FB5AA89C277B16910ED73712878D2B43FE542CE16DFE16C3 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
11:48:10.0792 0x0ed0 cdfs - ok
11:48:10.0813 0x0ed0 [ 339BFF85D788268752DA8C9644B188EE, C2279F1A39AED39865A5027D2FD087F8E82F3ED8C94BA4D922855B98E792AFC5 ] cdrom C:\Windows\System32\drivers\cdrom.sys
11:48:10.0818 0x0ed0 cdrom - ok
11:48:10.0841 0x0ed0 [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] CertPropSvc C:\Windows\System32\certprop.dll
11:48:10.0845 0x0ed0 CertPropSvc - ok
11:48:10.0867 0x0ed0 [ F64B7D1A37CC1D5F421D5359EEC81E2E, 2B4879DD32B2C20B94847755E22B1BCBE2B567B3989C57A9BA2DD783307EFFDB ] circlass C:\Windows\System32\drivers\circlass.sys
11:48:10.0868 0x0ed0 circlass - ok
11:48:10.0898 0x0ed0 [ 9905168708DB68849B879B5548F68AB3, B7A495E57B9398704988DC472126CBC5B8D76761A34F51732FBF6CC88E3AB79A ] CLFS C:\Windows\system32\drivers\CLFS.sys
11:48:10.0906 0x0ed0 CLFS - ok
11:48:10.0919 0x0ed0 [ 2DC8538A2260647484A6C921CA837313, 094059DD66B0C50A1CAE288F920107B0B6AD1AA5758284E35B92C131EDEA30EA ] CmBatt C:\Windows\System32\drivers\CmBatt.sys
11:48:10.0920 0x0ed0 CmBatt - ok
11:48:10.0955 0x0ed0 [ E708BFF0473EC6B271EA46B65B16CA56, 2B4C661F7C5A4395CA4204122A1C3C8AA766B56C3D01CD8BAAFA18F71FC7B591 ] CNG C:\Windows\system32\Drivers\cng.sys
11:48:10.0968 0x0ed0 CNG - ok
11:48:10.0976 0x0ed0 [ 0E5B1E9E7122EDAAF1F6CE047965CA92, 803E585B92D1E2E5B6BF67BE511E88DC2629A12407C3E30F7AEFB544D390A9B8 ] CompositeBus C:\Windows\System32\drivers\CompositeBus.sys
11:48:10.0977 0x0ed0 CompositeBus - ok
11:48:10.0982 0x0ed0 COMSysApp - ok
11:48:10.0988 0x0ed0 [ D9CB0782AF819548072AA45B70F8B22D, 04796F39ABB88759A534DE3D0C51F684BF2A8DE1F4028B657CCFDBDD39A6618C ] condrv C:\Windows\system32\drivers\condrv.sys
11:48:10.0989 0x0ed0 condrv - ok
11:48:11.0073 0x0ed0 [ 06B278D3D74D3AD7FA8E8D8D6300F574, A5CF516AB8BC378B1EABFF8D6741189CB16C2E9868B29F0389727DCC776FC2A3 ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
11:48:11.0079 0x0ed0 cphs - ok
11:48:11.0119 0x0ed0 cpuz136 - ok
11:48:11.0142 0x0ed0 [ 5CE2742F063731EC10C1B2EE386A2C08, 309919BDDD4649AFB95A99DCF8AFC3BAE10F9BC1E2819C0794CFD0F80682C223 ] CryptSvc C:\Windows\system32\cryptsvc.dll
11:48:11.0145 0x0ed0 CryptSvc - ok
11:48:11.0179 0x0ed0 [ F2C69C3D98249DE14D4B2832516D4FD5, 5F622A61A99202802B35532036CFCFDFB1FDEC32465BA8CCAB4C4FAFA336FC2A ] CSC C:\Windows\system32\drivers\csc.sys
11:48:11.0191 0x0ed0 CSC - ok
11:48:11.0236 0x0ed0 [ 22CCB6AFF617AAC6121DF6CDA5ABF3F4, 7F6F888CF4D7EF93144A791891E41858F7C0CDDC0B65ED09B9CD55EE3734FCCF ] CscService C:\Windows\System32\cscsvc.dll
11:48:11.0253 0x0ed0 CscService - ok
11:48:11.0289 0x0ed0 [ FAEF4C245BE832DB41B15DAAC336AFB7, 1F8C98AB0DF4327FCB01FE0356025488E19B48A45FFFA50576B49A8587FAC42B ] dam C:\Windows\system32\drivers\dam.sys
11:48:11.0291 0x0ed0 dam - ok
11:48:11.0345 0x0ed0 [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] DcomLaunch C:\Windows\system32\rpcss.dll
11:48:11.0363 0x0ed0 DcomLaunch - ok
11:48:11.0392 0x0ed0 [ C8650D1F61149AA546BDBC99172EBBC1, D9592ED1B6F23B6EC76A0B93635B6E38702311B0A6982F0F9DEC37FCDAF1288B ] defragsvc C:\Windows\System32\defragsvc.dll
11:48:11.0401 0x0ed0 defragsvc - ok
11:48:11.0422 0x0ed0 [ 5EAEF67AE2AF4D2DC664B649DB7B2E16, ADAC7FD6AC12B50F4998C5EB0BD770DD4B80A94C4CC1B9376AD77648E48D012D ] DeviceAssociationService C:\Windows\system32\das.dll
11:48:11.0431 0x0ed0 DeviceAssociationService - ok
11:48:11.0461 0x0ed0 [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] DeviceInstall C:\Windows\system32\umpnpmgr.dll
11:48:11.0466 0x0ed0 DeviceInstall - ok
11:48:11.0497 0x0ed0 [ 431141C6859990824D17F71C30A78728, 448B3DC20C8FDD5B66217E0E01DBCC4904F94BDA0826F109D139DDD2C2D7FBF2 ] Dfsc C:\Windows\system32\Drivers\dfsc.sys
11:48:11.0500 0x0ed0 Dfsc - ok
11:48:11.0546 0x0ed0 [ 9E0E72222264745ADEB0E5AC680B0ED6, 576AFC8741695396A3B8E9DBDD3703E9D70370437D09D162262E47A140D101B4 ] Dhcp C:\Windows\system32\dhcpcore.dll
11:48:11.0555 0x0ed0 Dhcp - ok
11:48:11.0589 0x0ed0 [ 3C736FAE17BA6F91BA37594AAB139CD0, 34304A194105B19E7ADD80108DC85C3B7AA9E942C84A7EF93C475CE1D9AE4615 ] discache C:\Windows\system32\drivers\discache.sys
11:48:11.0590 0x0ed0 discache - ok
11:48:11.0612 0x0ed0 [ AE3786294CC246A5403783E1B86A0168, 29A7B4B490CBB16DAEF5D67D0A58A2577CF3FEE8F889484DB867F6913D9D2A28 ] disk C:\Windows\system32\drivers\disk.sys
11:48:11.0614 0x0ed0 disk - ok
11:48:11.0620 0x0ed0 [ 82A7C72593793FE1EADA7A305BD1567A, 75F432E4C75AE9EFF553BD860B3B250853BDDA85C17DBD9B7242D74593506A86 ] dmvsc C:\Windows\System32\drivers\dmvsc.sys
11:48:11.0621 0x0ed0 dmvsc - ok
11:48:11.0650 0x0ed0 [ 066B9710B36AB550E01EEFCA52155968, DCA9F3F4856A6866D3F5A2EEE34E96A83F40198DB0B5AC6381A7568DE1F56FAB ] Dnscache C:\Windows\System32\dnsrslvr.dll
11:48:11.0656 0x0ed0 Dnscache - ok
11:48:11.0687 0x0ed0 [ 9949AD2ABA168A618D46C799D6CC898C, DFAC86A0AEE83C9EFE1BEE9EC15C8CAF1D619D55AF3ACC3986057A5AC985D06A ] dot3svc C:\Windows\System32\dot3svc.dll
11:48:11.0695 0x0ed0 dot3svc - ok
11:48:11.0706 0x0ed0 [ 109FC3F80BF4F4DC5A071058074F13C1, F30736F45BA1811D59E9CB1C172D8D1EA9F5A7D36DCFFBFC9E7E02448C1CF851 ] DPS C:\Windows\system32\dps.dll
11:48:11.0712 0x0ed0 DPS - ok
11:48:11.0740 0x0ed0 [ 9C7C183F937951AE17C5B8B3259CF3FF, 8ED607139F15D08B4835ACF864421BA4C08C88FE90B9AAF707F5D8514D7731B1 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
11:48:11.0740 0x0ed0 drmkaud - ok
11:48:11.0770 0x0ed0 [ F87F4AAAF6664906248D11D5E579A53B, F283932F68ED93891EEF00C18724359AB7057E922A3CDC8BC6F33F84D2B0BEE5 ] DsmSvc C:\Windows\System32\DeviceSetupManager.dll
11:48:11.0776 0x0ed0 DsmSvc - ok
11:48:11.0846 0x0ed0 [ E6AF4DF1817953D73C519B17CF849756, 26A90EB368A3F572086F223ABED87B8FC6F998AE401C9E52BEB5EE76AB052702 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
11:48:11.0876 0x0ed0 DXGKrnl - ok
11:48:11.0893 0x0ed0 [ 58BA473DD88F5FC1932282BA683AA03E, B8A4407D3006D91BE88F9C5389AC1CACC73BEBF6F66433A1E5EB8E58E8836C12 ] Eaphost C:\Windows\System32\eapsvc.dll
11:48:11.0897 0x0ed0 Eaphost - ok
11:48:12.0018 0x0ed0 [ 5AB97B3282D7D6114949D1EB5C8598E4, FB9449CC1CDC12C12AA0469BB6ACC770CB011250EDFD86E9600E754610608EFD ] ebdrv C:\Windows\system32\drivers\evbda.sys
11:48:12.0086 0x0ed0 ebdrv - ok
11:48:12.0131 0x0ed0 [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] EFS C:\Windows\System32\lsass.exe
11:48:12.0133 0x0ed0 EFS - ok
11:48:12.0168 0x0ed0 [ 66D60BD9A4C05616ABECA2A901475098, 8111550DB03FFD72F1822F47B16F075DA92874B64F19342D7CF60B0EE648AFEF ] EhStorClass C:\Windows\system32\drivers\EhStorClass.sys
11:48:12.0170 0x0ed0 EhStorClass - ok
11:48:12.0198 0x0ed0 [ A61D0F543024E458C0FE32352E1978E2, BDE6BC140300EAF790F16466C28897CE0BD7D94DCED13FDE20AA4AACA0F6A4FD ] EhStorTcgDrv C:\Windows\system32\drivers\EhStorTcgDrv.sys
11:48:12.0200 0x0ed0 EhStorTcgDrv - ok
11:48:12.0234 0x0ed0 [ D790D058D67582DB9C84C2D33695FE6B, A5763D7F6D191EA4B290B3E92D842AC36FD46DF598472E70B46E45D8CCD2F912 ] ErrDev C:\Windows\System32\drivers\errdev.sys
11:48:12.0234 0x0ed0 ErrDev - ok
11:48:12.0310 0x0ed0 [ F9E01C2D9F8BC049E04CF5DC24A5F638, CB6CCB59C77D4A59DDA846608AABEF1DFEC24C8422712AB8D59E27C13D731D2E ] EventSystem C:\Windows\system32\es.dll
11:48:12.0321 0x0ed0 EventSystem - ok
11:48:12.0446 0x0ed0 [ 21FFB87A70019E9B39C5A8469695ACBA, B41BEDB737CFD33707181DA0B69FC47C01C897AF8B42211A46B54A9FDB2B9004 ] EvtEng D:\Program Files\Intel\WiFi\bin\EvtEng.exe
11:48:12.0460 0x0ed0 EvtEng - ok
11:48:12.0503 0x0ed0 [ 7A4D6FEB8C52B3FE855E4DCDF9107E03, 6B0146A4C9AD32DCDC2DEE8E8C5A29F687665458486449E0D37B151ED63B8ADC ] exfat C:\Windows\system32\drivers\exfat.sys
11:48:12.0508 0x0ed0 exfat - ok
11:48:12.0545 0x0ed0 [ 60996602A7111FD2D086E803F33E4282, E62A91C90F8542990BEA4E6A5D9DD3D070F4EB23B4C13414C5DA2B0219509749 ] fastfat C:\Windows\system32\drivers\fastfat.sys
11:48:12.0550 0x0ed0 fastfat - ok
11:48:12.0611 0x0ed0 [ F0E7F8382ED5E138B0DFA4CB5058BCFE, 6247C7B75F975F5AB080FFB9881EF58A6F360219F7AF2DE871F38E80CAF3B62C ] Fax C:\Windows\system32\fxssvc.exe
11:48:12.0625 0x0ed0 Fax - ok
11:48:12.0644 0x0ed0 [ 73B2D11DF0B6E03A0CB0323218ACB3E4, BA9256919BAA2E0760F6A658B557FDC389ACE8F9820D1A41FD995FC5613F5AA6 ] fdc C:\Windows\System32\drivers\fdc.sys
11:48:12.0645 0x0ed0 fdc - ok
11:48:12.0675 0x0ed0 [ 0828E3E7BD77C89149EAD3232BFD38DB, A6A296647A4EDBFF59124E3A9C0AB48759AA1738615ACFA5A454FF6BD3C31BA2 ] fdPHost C:\Windows\system32\fdPHost.dll
11:48:12.0677 0x0ed0 fdPHost - ok
11:48:12.0683 0x0ed0 [ 872506AAB591E8908DF4461475AF92DF, 772F2D08CB95775E438822B9EA005CBA92ED4071ADAB2C0101156A7D037D4704 ] FDResPub C:\Windows\system32\fdrespub.dll
11:48:12.0685 0x0ed0 FDResPub - ok
11:48:12.0707 0x0ed0 [ 0588950D93A426F97C7AAADB1A9B0458, ABCB3619BD58CAC438FC032495AE45A7B6FFDD4BD33C1B3D1BC7F9F13FCB727A ] fhsvc C:\Windows\system32\fhsvc.dll
11:48:12.0712 0x0ed0 fhsvc - ok
11:48:12.0745 0x0ed0 [ 88A9EBACD1058ABB237A6B4E96E7F397, 263D25D33B679EB01D97763701347C31B2F72E28CE2C7EC8013EA77756D98BE1 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
11:48:12.0747 0x0ed0 FileInfo - ok
11:48:12.0753 0x0ed0 [ 9E4EE3A0B00FF7D5F42A4AF9744CBA02, 1D7BFB00D74A28AC13ECBA1E0036D50EE79266AC02CEDB2632466BF9DD46F211 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
11:48:12.0754 0x0ed0 Filetrace - ok
11:48:12.0881 0x0ed0 [ A4297244D4F817278A6AE45B1899CA9C, F70146A3D78061F00549906355503EDB4402F0599D34CE3208B51562C44AB80A ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
11:48:12.0912 0x0ed0 FLEXnet Licensing Service 64 - ok
11:48:12.0942 0x0ed0 [ B1D4C168FF7B8579E3745888658FFB1D, 1A5C13E902A0C788A8B995ADD2FBC3303005911C0AA3F3F4497D3016AA0EF583 ] flpydisk C:\Windows\System32\drivers\flpydisk.sys
11:48:12.0943 0x0ed0 flpydisk - ok
11:48:12.0977 0x0ed0 [ B33EC133AE4E6C1881D2302D93D2467D, 77E3A16257EA3698B3FCD947D004144E8D1EEE48EF5C82DF49B1B9B2B3C61DB2 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
11:48:12.0985 0x0ed0 FltMgr - ok
11:48:13.0019 0x0ed0 [ B8AFE7A30D34C0E9FDBA81632294547C, B972AE00CA877A5BB439F797016530FB06C7F1BADD24383863F48E6744CFB700 ] fltsrv C:\Windows\system32\DRIVERS\fltsrv.sys
11:48:13.0022 0x0ed0 fltsrv - ok
11:48:13.0098 0x0ed0 [ 0BCDC0FF11B984162B0CF0FF6E9E0146, D44A3CECBA36B7A64854E244FA6B5E65047896BF9983D20B431410FBBA36697A ] FontCache C:\Windows\system32\FntCache.dll
11:48:13.0130 0x0ed0 FontCache - ok
11:48:13.0221 0x0ed0 [ 0B56259F5611787222A04A8F254E51D4, F77AEC0ACBFAF9154E32223B84B613229DACCD953AEBC3E96C27570F9AB10FD0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
11:48:13.0223 0x0ed0 FontCache3.0.0.0 - ok
11:48:13.0267 0x0ed0 [ A5F7873A39E4E9FAAAE59B7E9E36B705, 32036109F5A50E9F3BEF97C5B28AE8179B3A5E22517868A83CADE4671FF90DEC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
11:48:13.0269 0x0ed0 FsDepends - ok
11:48:13.0274 0x0ed0 [ A6DD7D491F587F4BC13FB972977DC8E8, B86F97F17F6F443EC16DEF67CCA4EF78AFE56078D2877838A982FECB19557C87 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
11:48:13.0275 0x0ed0 Fs_Rec - ok
11:48:13.0302 0x0ed0 [ 340BA7CABB1F314E3650A7EF59F0A371, B3B11FCC0C8AFD668CA6ED180B632C3983BD66026DAAEC150A23C83C9A0A6DCE ] FTDIBUS C:\Windows\system32\drivers\ftdibus.sys
11:48:13.0304 0x0ed0 FTDIBUS - ok
11:48:13.0349 0x0ed0 [ A19D6F0356DBABB94293894B84C27D27, 93B4E3314302F6F1524E776EF0FBF29221D10B642E3BA649D6E68FFAB2B7B16B ] FTSER2K C:\Windows\system32\drivers\ftser2k.sys
11:48:13.0352 0x0ed0 FTSER2K - ok
11:48:13.0462 0x0ed0 [ 014195B03B378CFEAA029958CBC53695, 0F069F37CF83234929D618A78A58F369D0D033A4ABBC4AD02D37825E9857B731 ] fussvc C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe
11:48:13.0466 0x0ed0 fussvc - ok
11:48:13.0507 0x0ed0 [ B99C240DEA85007044E178C1C9C75659, 3EBF269FDCBAC46F47CC0670D6932D62A134EC489CDE4E87A8ED5F392A98EC76 ] Futuremark SystemInfo Service C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
11:48:13.0511 0x0ed0 Futuremark SystemInfo Service - ok
11:48:13.0565 0x0ed0 [ C1646A95EAC515F60CDB2A7A8A013C1E, F559B83C02B17265EDE95DD497C1A94E402F07EC251FC47449F789907AFFED14 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
11:48:13.0574 0x0ed0 fvevol - ok
11:48:13.0605 0x0ed0 [ A969D92973DFA895E7776B4BFE36DBB2, 7528E6983ECC59291A7A386E4E459B19D1593ABDDFFD276E2F01B0EA21693E20 ] FxPPM C:\Windows\System32\drivers\fxppm.sys
11:48:13.0606 0x0ed0 FxPPM - ok
11:48:13.0619 0x0ed0 [ 52BC441E07A827EBAB70CDC7EAEDB28D, 8DECBD8E12EA52039742599CFBBF0D3B6610B57EF8D9DAEEEA33D202A478D286 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
11:48:13.0621 0x0ed0 gagp30kx - ok
11:48:13.0646 0x0ed0 [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
11:48:13.0647 0x0ed0 GEARAspiWDM - ok
11:48:13.0672 0x0ed0 [ 721F8EEF5E9747F32670DEFF7FB92541, E0A8EF70753E260C2C7D93D316B5EF9589DB086FDF829BDA2958C6A09CE471A6 ] gencounter C:\Windows\System32\drivers\vmgencounter.sys
11:48:13.0673 0x0ed0 gencounter - ok
11:48:13.0703 0x0ed0 [ 77EBF3E9386DAA51551AF429052D88D0, 94C3294BB9E14B07448734AE65B37801D3FF15BEC987D182A929A017FEF7B276 ] giveio C:\Windows\giveio.sys
11:48:13.0704 0x0ed0 giveio - ok
11:48:13.0740 0x0ed0 [ FC2B8B06BDBD3B6457F5A3DA9AD2410E, 4BF196E1CAC94E9265EBEB68F41C3E29F0C709ECFF9420B5B1C9C82680D5D6A8 ] GPIOClx0101 C:\Windows\system32\Drivers\msgpioclx.sys
11:48:13.0743 0x0ed0 GPIOClx0101 - ok
11:48:13.0809 0x0ed0 [ 5358678C6370F2ADC5291849F6503262, 841633D7A936C3889690C67E189BAD4C6B294C196FFFE5B564FCECDFE46A9E52 ] gpsvc C:\Windows\System32\gpsvc.dll
11:48:13.0844 0x0ed0 gpsvc - ok
11:48:13.0926 0x0ed0 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:48:13.0928 0x0ed0 gupdate - ok
11:48:13.0935 0x0ed0 [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
11:48:13.0938 0x0ed0 gupdatem - ok
11:48:13.0966 0x0ed0 [ C41EB965A9DC4844F156E628F75AE876, 3E250704E6C30FAFE0FDE2BB259452761AFB7AAC3A7026ADB960079D06870C84 ] Hamachi C:\Windows\system32\DRIVERS\Hamdrv.sys
11:48:13.0967 0x0ed0 Hamachi - ok
11:48:14.0094 0x0ed0 [ C57174C191F04B07A9F24320C57888E1, 6FD5CBD10923E13F57D9CC8FD2DF2B009DC82431C3939E37223BEBBA2D1A70DA ] Hamachi2Svc D:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
11:48:14.0141 0x0ed0 Hamachi2Svc - ok
11:48:14.0181 0x0ed0 [ 630555943E5A3FE21010CE91EC7FC84F, 20D7247A4363EE9E851501D89A466564ADCAEC304DE42280E4E09AD8499436A9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
11:48:14.0188 0x0ed0 HdAudAddService - ok
11:48:14.0212 0x0ed0 [ 7D87B5B6C7188D553E11B59DC7F0B111, FC633DB71E1D72E8AD8F89BBB54324CC6ED17F5594EF55DD0BDB58EE1F601FF5 ] HDAudBus C:\Windows\System32\drivers\HDAudBus.sys
11:48:14.0214 0x0ed0 HDAudBus - ok
11:48:14.0243 0x0ed0 [ 3F76BBA53D65E85A7F53E7A71082082C, D1E18815BB19CD11007C4A66162C76F55D4FE6B09B34ED45969C7ECC29D394AD ] HidBatt C:\Windows\System32\drivers\HidBatt.sys
11:48:14.0244 0x0ed0 HidBatt - ok
11:48:14.0282 0x0ed0 [ 085F150D002B7F0153D3C06DDF33A143, 41847FD02608ECFE3A6B4B38CBDE8416B0EF17491868511FD704B0BCC280338E ] HidBth C:\Windows\System32\drivers\hidbth.sys
11:48:14.0284 0x0ed0 HidBth - ok
11:48:14.0302 0x0ed0 [ CC4A07E51D89575CAB6F4EB590D87CD4, DFB4EAF0923EF9FF6C42EDD1EA5E4025F243C9BE2D03D5423FE8A897DC01D657 ] hidi2c C:\Windows\System32\drivers\hidi2c.sys
11:48:14.0303 0x0ed0 hidi2c - ok
11:48:14.0323 0x0ed0 [ DC96F7DACB777CDEAEF9958A50BFDA06, 7CE79F32D5EE65C0178CFF56523825D3EE01095B2CE8C67634A6604A821A9086 ] HidIr C:\Windows\System32\drivers\hidir.sys
11:48:14.0324 0x0ed0 HidIr - ok
11:48:14.0352 0x0ed0 [ FAC37D7B3D6354A5A5E19A45B50B4008, 2962B552A1DA545DFDEF0886582E82596FE8A3A19AAF989B025AFDA84D16D4EC ] hidserv C:\Windows\System32\hidserv.dll
11:48:14.0354 0x0ed0 hidserv - ok
11:48:14.0384 0x0ed0 [ 012C354B4AB48E9A7A657DF39E3A2073, B15D0089CE509FF1CF73DFE095425C1C99FC3971622DCAAD9CAEB989A12A4FDB ] HidUsb C:\Windows\System32\drivers\hidusb.sys
11:48:14.0385 0x0ed0 HidUsb - ok
11:48:14.0405 0x0ed0 [ 43F884B61A24377567CD0FEB35236334, B3BA36B527C8D6D83DE2FBCD8D503B87FD2611BF15B07A7BC138DC8BAE6A50C1 ] hkmsvc C:\Windows\system32\kmsvc.dll
11:48:14.0409 0x0ed0 hkmsvc - ok
11:48:14.0441 0x0ed0 [ 33DFC14DFDCCFA7AA10E392F6A8EC1CF, E6967F3F465C6E903221BC0FCBAE7D05FD18C0BF110D929335F5935364B3C1BC ] HomeGroupListener C:\Windows\system32\ListSvc.dll
11:48:14.0449 0x0ed0 HomeGroupListener - ok
11:48:14.0476 0x0ed0 [ E0D9F6FE18FA7F53ADD29AF719CE2B7E, B965DCC72625188F3B896CB447B7696F22687266EAFC5AA270E2AD53DD9F324D ] HomeGroupProvider C:\Windows\system32\provsvc.dll
11:48:14.0485 0x0ed0 HomeGroupProvider - ok
11:48:14.0504 0x0ed0 [ 64DB7A8D97CA53DCCF93D0A1E08342CF, 02CAB7F28D3830C482683425C60044239C6F1562556688A274CA2C237C846E76 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
11:48:14.0505 0x0ed0 HpSAMD - ok
11:48:14.0561 0x0ed0 [ F4A91D985EB9D1D2717D538F3424603C, 454AD2FF3A7963B9835AEF300F6672F92D0CCF59593BA2CCC83F0EC1446BB659 ] HTTP C:\Windows\system32\drivers\HTTP.sys
11:48:14.0579 0x0ed0 HTTP - ok
11:48:14.0590 0x0ed0 [ 2A98301068801700906C06649860FE94, 664394A52326289DCA0828B0041A105653F4FEF3E3DCCC3787AAE0F6FDC73A14 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
11:48:14.0590 0x0ed0 hwpolicy - ok
11:48:14.0605 0x0ed0 [ DC76901D82097C9E297F20C287CB9A27, 01A412D0D8A65050BE4250A7C4B9F98A4C43FD891827761E0C830369A5F9F09C ] hyperkbd C:\Windows\System32\drivers\hyperkbd.sys
11:48:14.0606 0x0ed0 hyperkbd - ok
11:48:14.0615 0x0ed0 [ 716413AB3CA12DE0A7222D28C1C9352C, B82B586BD9DBD70DDA19A02504E8CB00DA53677703AB848B53387601C5BAD3D3 ] HyperVideo C:\Windows\system32\DRIVERS\HyperVideo.sys
11:48:14.0616 0x0ed0 HyperVideo - ok
11:48:14.0623 0x0ed0 [ C9E9CBF73AFFBFE3E801EFB516787BA3, 1A850D614BDA6AA4195CC657702BC6242BA51B90131717743182AA160F65E72C ] i8042prt C:\Windows\System32\drivers\i8042prt.sys
11:48:14.0625 0x0ed0 i8042prt - ok
11:48:14.0666 0x0ed0 [ 0FE66A51D81A25AACEAAE4C26308121D, C5553F7ABA74A8EB71A4ED0E8F2A6AA2892F871D164F2D4FADB035BE7D1A8C44 ] iaStorA C:\Windows\system32\drivers\iaStorA.sys
11:48:14.0680 0x0ed0 iaStorA - ok

[CZechBoY]

11:48:14.0736 0x0ed0 [ 584068E03829BC5C63F54B05E6244E97, C075E8A4853C0DE09A9BF846338F9C8997FE7ACD604B4EC02AA89F0DAA1D985B ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
11:48:14.0737 0x0ed0 IAStorDataMgrSvc - ok
11:48:14.0770 0x0ed0 [ 5E394EBD26FD68AA9300332C46BEDD62, 56A5DA7CE08C07B519E55D0A46AA9D10B640349808EFE02B3278267B75B5F603 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
11:48:14.0779 0x0ed0 iaStorV - ok
11:48:14.0804 0x0ed0 [ 23E22B130EFE5A225E279467BE146317, 2302C119FE9C57F3A71DFE504489423B6F7140E2DFF5D501883AD971CB671CB4 ] ibtfltcoex C:\Windows\system32\DRIVERS\iBtFltCoex.sys
11:48:14.0806 0x0ed0 ibtfltcoex - ok
11:48:14.0836 0x0ed0 [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
11:48:14.0840 0x0ed0 ICCS - ok
11:48:15.0017 0x0ed0 [ 348214F96642FD4FEF630DE021BA3540, B6A7D2EA41F6866F5AFF5022BB459E5AFF683FF2FF470B84F3E911C8AEC47C30 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
11:48:15.0127 0x0ed0 igfx - ok
11:48:15.0162 0x0ed0 [ 24847A06B84339FEEDE5CABF3D27D320, 7727B1DAD0D4A1D474FBBEFCEBDF36A1F07D1AA300869AE57A24ED91BF84B6B4 ] iirsp C:\Windows\system32\drivers\iirsp.sys
11:48:15.0163 0x0ed0 iirsp - ok
11:48:15.0222 0x0ed0 [ E455C83E029121270BED73CDAC381F37, 433D525C19DBF26FAC28853C606C872D973104842B0EF1B2BF2EAC85457E2953 ] IKEEXT C:\Windows\System32\ikeext.dll
11:48:15.0251 0x0ed0 IKEEXT - ok
11:48:15.0273 0x0ed0 [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
11:48:15.0281 0x0ed0 IntcDAud - ok
11:48:15.0334 0x0ed0 [ 441D5FAF24CC2EC115B654A55C52F0AF, 5BF5299DAD9A7076C43D68C70E02AEC8DBFD89C1AFDF7CD6AB95550EE25EEB36 ] Intel(R) Wireless Bluetooth(R) 4.0 Radio Management C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
11:48:15.0337 0x0ed0 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - ok
11:48:15.0364 0x0ed0 [ 4F37726CF764CA18A8A84F85EF3A7F24, 6212B23917526E127CE641A11A58DA93651FFE70829C4079FE465DBDC81CF470 ] intelide C:\Windows\system32\drivers\intelide.sys
11:48:15.0364 0x0ed0 intelide - ok
11:48:15.0394 0x0ed0 [ E15CDF68DD73423F15D4AC404793AF0D, E2D0136AF68D1A73EB3A63C83284B4661222CB0A4AFACCF276CB57CBD4850287 ] intelppm C:\Windows\System32\drivers\intelppm.sys
11:48:15.0396 0x0ed0 intelppm - ok
11:48:15.0412 0x0ed0 [ 8FCA66234A0933D796BB780B7953BAB9, 7DD677F5EE09A8D7A75C9E475B5E6B3DCA49D1E846C7D160B839D7029B1C5B6D ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
11:48:15.0414 0x0ed0 IpFilterDriver - ok
11:48:15.0469 0x0ed0 [ C217B8D2E58C57A319B16125C3D4B69C, 905BB858E1782BD08FF080A4A604CE662440A15601B178FBD30269C306C04CCF ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
11:48:15.0493 0x0ed0 iphlpsvc - ok
11:48:15.0514 0x0ed0 [ 6E98A046A12AA113F8898AA5D612BD6E, 28816CC1F03F2BFBF099C087C0BB6949E959F44C888DD2D0528FF7ED5D665ECF ] IPMIDRV C:\Windows\System32\drivers\IPMIDrv.sys
11:48:15.0516 0x0ed0 IPMIDRV - ok
11:48:15.0547 0x0ed0 [ 3969B9C218DD3FAA9F4ED2FFC3651C02, 93447F124CC55FB17055126432194153E1BB8F0FD95A47608494B6834A5F7089 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
11:48:15.0551 0x0ed0 IPNAT - ok
11:48:15.0610 0x0ed0 [ 842D1EDD0F2A6E0E6631BB96BAAA01DE, 9CDD0B99F2C5DAD573A9EA8D5AB2DBFD7A941454CBBA5BFE34E49F2D4EE96A90 ] iPod Service D:\Program Files\iPod\bin\iPodService.exe
11:48:15.0624 0x0ed0 iPod Service - ok
11:48:15.0644 0x0ed0 [ 25CD7C4BB2863FFC2B0B311F0AEBF77C, 4099BAA2DB4ADB93B878D71E241B7D9EB7E0EE7ED0FE2450CCB9E4718B3726EB ] IRENUM C:\Windows\system32\drivers\irenum.sys
11:48:15.0645 0x0ed0 IRENUM - ok
11:48:15.0657 0x0ed0 [ D940C5BB9DC92E588533C19ABCC3D2C2, D1442854CEDE86F2C187A35851E74C873D34B772C60BC118FA1577F79C03364D ] isapnp C:\Windows\system32\drivers\isapnp.sys
11:48:15.0658 0x0ed0 isapnp - ok
11:48:15.0698 0x0ed0 [ E6530FD4F61B40F338BF4355A21B9A09, FE9BF039B9901BEC260A69F7C49ACFA9881AD470DCCBA70C7EC36F518DA71702 ] iScsiPrt C:\Windows\System32\drivers\msiscsi.sys
11:48:15.0704 0x0ed0 iScsiPrt - ok
11:48:15.0710 0x0ed0 [ 8FBD94B69D6423E20ABCD59D86368B21, 218EF992095E365EC917413749856A64D55D8129D77098E24D670843233377F4 ] kbdclass C:\Windows\System32\drivers\kbdclass.sys
11:48:15.0711 0x0ed0 kbdclass - ok
11:48:15.0740 0x0ed0 [ E88C932ABDF8185A62C8F2FC7B051FB6, 67F9AF58237A11F0BF3D15AA5B32E5CE66B7AA039B999D938F7F6E63DCEA7A6E ] kbdhid C:\Windows\System32\drivers\kbdhid.sys
11:48:15.0741 0x0ed0 kbdhid - ok
11:48:15.0745 0x0ed0 [ FB6C185092E18011EF49989425C2AA87, 043524409E0A764201DD221C48B7DEEA0D161945EB37D4B88313BAB2299949DF ] kdnic C:\Windows\system32\DRIVERS\kdnic.sys
11:48:15.0746 0x0ed0 kdnic - ok
11:48:15.0759 0x0ed0 [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] KeyIso C:\Windows\system32\lsass.exe
11:48:15.0761 0x0ed0 KeyIso - ok
11:48:15.0790 0x0ed0 [ DFA480F6DED551464F3A5B959F437800, C07AB6F28A09FCBE11EECAD03B06CEAE1016EC24031FCA0C092639E90FBA84CF ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
11:48:15.0793 0x0ed0 KSecDD - ok
11:48:15.0826 0x0ed0 [ 127FB0AAD232BAAD2C9BBACD374F4FC5, 3BC56F6B4374062C96149D69ACE053DF81A278F0361599F5A2F3DB1F76F0AD68 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
11:48:15.0830 0x0ed0 KSecPkg - ok
11:48:15.0834 0x0ed0 [ 81492FEEBF2F26455B00EE8DBAE8A1B0, E33AA2DFB2D3BB30B02CDADA2EC290F86329DA3198327A653F39A843D86390B9 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
11:48:15.0835 0x0ed0 ksthunk - ok
11:48:15.0873 0x0ed0 [ 5825DBACEDC3812B5CF8D40B997BF210, 1C2997BCC707C1029B21876E093038CE3BBF6E6694B4CCF7EEDD47172ED9A541 ] KtmRm C:\Windows\system32\msdtckrm.dll
11:48:15.0884 0x0ed0 KtmRm - ok
11:48:15.0917 0x0ed0 [ 256EE31588257E8A555DBFAA13F1908E, B6817F632EDEA483E35BF26846DCDD4E95E860620959179B2A5D8AD7EEDDB126 ] LanmanServer C:\Windows\System32\srvsvc.dll
11:48:15.0926 0x0ed0 LanmanServer - ok
11:48:15.0962 0x0ed0 [ 16650912BE5A94B40E0B3B4C39652B56, 908C2C9367AE0AC9AECB5D91514BB33ACD746D99F19C1A8DD6A9550E9CAD9E00 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
11:48:15.0968 0x0ed0 LanmanWorkstation - ok
11:48:16.0004 0x0ed0 [ BE166935083F9C38EDFDC21B9A7A679B, 89C64DBE58E1B974208AAAA5CC757C599B1439C205C3C48BF16BA054A06DBC94 ] LHDmgr C:\Windows\system32\DRIVERS\LhdX64.sys
11:48:16.0006 0x0ed0 LHDmgr - ok
11:48:16.0011 0x0ed0 [ CEEFD29FC551F289810B0B9381B321DC, 900F206B487B2190D9363F28AA4BA0CD7DCFE1D005BE05A48AF74B1B81194691 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
11:48:16.0013 0x0ed0 lltdio - ok
11:48:16.0040 0x0ed0 [ BCF53485E0A94722CDE3C4A93CD8EB8C, D24E1066EB102245A89A5D17D608DB9DF6B71C99F1C77E070B95EFD17D268141 ] lltdsvc C:\Windows\System32\lltdsvc.dll
11:48:16.0048 0x0ed0 lltdsvc - ok
11:48:16.0059 0x0ed0 [ 5A2F7F1CBC2E631A497DAD16164E06D2, 35274FC6C386380B01B5E8F467E71A2C4E2FB2AD701554F9B1A9B036B0340142 ] lmhosts C:\Windows\System32\lmhsvc.dll
11:48:16.0061 0x0ed0 lmhosts - ok
11:48:16.0064 0x0ed0 lmimirr - ok
11:48:16.0089 0x0ed0 [ 022CDD12161B063D7852B1075BF3FFF2, E21267243AF2FC208D27E67827B1264A762C99AECEDB7AD2C48A04F421A6B2F0 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
11:48:16.0092 0x0ed0 LSI_SAS - ok
11:48:16.0111 0x0ed0 [ 07AD59D669B996F29F91817F0ECFA34F, 026F332F862D142BFFC9D169CCD17A35BFB6B301EEC72AA13E16369B3520919C ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
11:48:16.0113 0x0ed0 LSI_SAS2 - ok
11:48:16.0119 0x0ed0 [ 216FB796AA4E252ACCE93B1BCB80B5EC, 5B1E49B5F7B9C7A778198D27F8EE500FE35DC32D40B22A3D6ED67560BEB04212 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
11:48:16.0122 0x0ed0 LSI_SCSI - ok
11:48:16.0140 0x0ed0 [ 5E80530AF37102488EE980B4A92AF99F, 364E18EAD9AC22F8A306B24C6C43E58224F6BE2744EFEAA2484696B8D9880851 ] LSI_SSS C:\Windows\system32\drivers\lsi_sss.sys
11:48:16.0142 0x0ed0 LSI_SSS - ok
11:48:16.0180 0x0ed0 [ A57BA284F5996FFD32DCDBC41A4657DB, 2106B83873A824BC83EF42FAC9DD9A0F741209535A84AE65EA8E786519920043 ] LSM C:\Windows\System32\lsm.dll
11:48:16.0192 0x0ed0 LSM - ok
11:48:16.0205 0x0ed0 [ 2BDC5D711FA61307CE6190D47C956368, 6BCDC6CBB9783F1ABE8957BDA94AF977DFB2A310BB6D19085EFC8609C97FD180 ] luafv C:\Windows\system32\drivers\luafv.sys
11:48:16.0208 0x0ed0 luafv - ok
11:48:16.0233 0x0ed0 [ FD5465B876D55534117963FAAA4B9DFC, 63A822A1EEEC42C30CCC9477431E310E3D360489A68BBCD805124681F21C0B6B ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
11:48:16.0234 0x0ed0 MBAMProtector - ok
11:48:16.0335 0x0ed0 [ 0E08BDD7326E657D59DB40BAD23D8169, 428C6CCCC0BB540DFD35847776140D60C186B9D2D14F0ACCD1A4D42A8877BD98 ] MBAMScheduler D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
11:48:16.0373 0x0ed0 MBAMScheduler - ok
11:48:16.0416 0x0ed0 [ A8E7F3DB083EB0839DFC1C763CDD2594, BDF416E360A52130B23B029C89E6406A97FB0516C52C7E63B94CAECEEB431A2E ] MBAMService D:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
11:48:16.0434 0x0ed0 MBAMService - ok
11:48:16.0465 0x0ed0 [ 3FFFB7F54CD7A792099C10402FCF8F56, D92C6D3C8069CAAFB19605C83731C8A0397B89AB3F4120DD1568DA9772A54408 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
11:48:16.0467 0x0ed0 MBAMWebAccessControl - ok
11:48:16.0483 0x0ed0 [ 9B0D829C3BE4E7472DB9DD2B79908E3C, ACED5806FFF39E84007B5A3DCB16315329DC53007F46B1BEEDC391CC659F7DD3 ] megasas C:\Windows\system32\drivers\megasas.sys
11:48:16.0484 0x0ed0 megasas - ok
11:48:16.0507 0x0ed0 [ ECC3F54C7AFC318271C4F0B4606D8DB0, FD1ACB18B8C912C7A57DABCD5460800DD0721A82E09C8D79C47B3392D61CBEA6 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
11:48:16.0515 0x0ed0 MegaSR - ok
11:48:16.0541 0x0ed0 [ 2BB3EAE2EA641515D4B205CAB29E1624, D3F18EE393EB1B0F919484281269A3C55A092D023E62C59D74CB63A55612024B ] MEIx64 C:\Windows\System32\drivers\HECIx64.sys
11:48:16.0542 0x0ed0 MEIx64 - ok
11:48:16.0565 0x0ed0 [ EEE908BE7143FCA48CF0CB87214E2AB8, 4F9BD299F559DD36DBD93489CFAA753F236FBB70946E034D2E2260059AE20962 ] MMCSS C:\Windows\system32\mmcss.dll
11:48:16.0568 0x0ed0 MMCSS - ok
11:48:16.0598 0x0ed0 [ 780098AD5DA8A4822E2563984C85EF7B, 29312970774E944B5ED388316CF3D350DCABF721F9695737B0AC56BE878B0446 ] Modem C:\Windows\system32\drivers\modem.sys
11:48:16.0599 0x0ed0 Modem - ok
11:48:16.0624 0x0ed0 [ EA8EAD3F5B762F889CC7F3966625B48B, B701A42E5E08B7BC6601560446146803182E5DC631AB73E9408F19CB6432F121 ] monitor C:\Windows\System32\drivers\monitor.sys
11:48:16.0625 0x0ed0 monitor - ok
11:48:16.0645 0x0ed0 [ 618446B98C79776654340CE27C73485E, EFE7169FDD545933B5949DA2D09266971C0C3E6894E7BD8AFE29E41567C72B16 ] mouclass C:\Windows\System32\drivers\mouclass.sys
11:48:16.0646 0x0ed0 mouclass - ok
11:48:16.0661 0x0ed0 [ C0ADEBED913295803B579ED288936CBB, 58F71541166D1DA07C18FBD27458D55E3F8AD7291CB7496B3A2F01372A5B0CAE ] mouhid C:\Windows\System32\drivers\mouhid.sys
11:48:16.0662 0x0ed0 mouhid - ok
11:48:16.0668 0x0ed0 [ 89D263DBF08119CE16273991C120D6DD, 9771EDAD266F0E234E71DFB6792F396710E051F2ADCA5CDADEBBD2790D0E6054 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
11:48:16.0670 0x0ed0 mountmgr - ok
11:48:16.0708 0x0ed0 [ 528A5C2570F468155A1B3CF0A2FF5EBD, 473EEE97A4690A919DE05C525F0858DA9A5BD30072383D81F096F82DDFC93BAB ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
11:48:16.0711 0x0ed0 MozillaMaintenance - ok
11:48:16.0731 0x0ed0 [ 4CCBBD4944777CA100B9A6C2F149A46F, 7FC172FAF8266BFBBBBAD94FD67EA3C1872F5927DC3900A9A54DB2DFE34E7415 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
11:48:16.0733 0x0ed0 mpsdrv - ok
11:48:16.0781 0x0ed0 [ 9DE3341BD4E14BC5FADFCAD3019F2D0D, 37E0531EADABC6D4BCC496826651D4D14CF0D10156FF13C11BDE466084B44FF4 ] MpsSvc C:\Windows\system32\mpssvc.dll
11:48:16.0805 0x0ed0 MpsSvc - ok
11:48:16.0843 0x0ed0 [ 3D70147F55F1EC84EB9139ED7FFE48BC, 12429C2FDDDA13815F0E18F9009011AA5360955759A23A38175543F480CB92EF ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
11:48:16.0847 0x0ed0 MRxDAV - ok
11:48:16.0890 0x0ed0 [ 93179D48066918323628CB016D8C94DC, FE110BF7A10EDD1DF7F6B933D373FCA51F37413282EBC4187E7C9B1965186BCC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
11:48:16.0898 0x0ed0 mrxsmb - ok
11:48:16.0944 0x0ed0 [ 06D5F2FA3C61E8EA91648EA8E9F99FD3, C665B7896501D42C73955F4EAF4FA3C6B2C9286957D6023C235AFBF9BFB761C6 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
11:48:16.0950 0x0ed0 mrxsmb10 - ok
11:48:16.0969 0x0ed0 [ 5C7DD2E5759FFCCD2C7341C1B90F2B26, 9822FA53E6067C0E39B7A3A3F1E88719D5D8B055D86FF894F0475B158289EA45 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
11:48:16.0974 0x0ed0 mrxsmb20 - ok
11:48:17.0017 0x0ed0 [ 98487487D6B3797CA927E9D7B030AE13, 05840AF0DD2E3CB596DA768DBD0728B52210EC05B55AB5921E697AD8956938DD ] MsBridge C:\Windows\system32\DRIVERS\bridge.sys
11:48:17.0020 0x0ed0 MsBridge - ok
11:48:17.0064 0x0ed0 [ 4A07458EB4F17573BD39F22029A991C1, 74D7A1882EA4D19B8F090C2813489E5D3F759BF4AF2D88AE852EC6510C405B5E ] MSDTC C:\Windows\System32\msdtc.exe
11:48:17.0068 0x0ed0 MSDTC - ok
11:48:17.0091 0x0ed0 [ 3886F1F2A4D2900ABAA7E4486BEEE6A2, ECCA22985838A914EDC866C491DEB64B9FF5110EFA9BEE541F634AC5EC3081F9 ] Msfs C:\Windows\system32\drivers\Msfs.sys
11:48:17.0092 0x0ed0 Msfs - ok
11:48:17.0117 0x0ed0 [ C32A7A39B960A42BA9D4FBE47213CA03, 4DA48587138972DA5E95AEDBBBE73BA8CCADC8172C6654427ABEAC8047B27E95 ] msgpiowin32 C:\Windows\System32\drivers\msgpiowin32.sys
11:48:17.0118 0x0ed0 msgpiowin32 - ok
11:48:17.0139 0x0ed0 [ D3857A767B91A061B408CCAB02DA4F40, A4D780772086AD8717EE6DC2B6189F796939FB5E5AA08FD9D1984101998FBECF ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
11:48:17.0140 0x0ed0 mshidkmdf - ok
11:48:17.0149 0x0ed0 [ 839B48910FB1E887635C48F3EC11A05E, F8CFD99911500CC1B6A90C8E2A1697BD5A6E5776A62A62FE5B342FE204C936B1 ] mshidumdf C:\Windows\System32\drivers\mshidumdf.sys
11:48:17.0150 0x0ed0 mshidumdf - ok
11:48:17.0154 0x0ed0 [ 55C0DB741E3AB7463242B185B1C2997C, D2E2A5B48A64EA0EC2A6566C08E65A38D11CEA64BCA7B57793BA0D009E4D974A ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
11:48:17.0155 0x0ed0 msisadrv - ok
11:48:17.0186 0x0ed0 [ 216C6B035A4BA5560E1255BD8E5BB89F, A14E038604B9A5506DB145A4D9F51E2751AC825240D2744924F39C332B5DE00B ] MSiSCSI C:\Windows\system32\iscsiexe.dll
11:48:17.0190 0x0ed0 MSiSCSI - ok
11:48:17.0195 0x0ed0 msiserver - ok
11:48:17.0212 0x0ed0 [ 509809566E49F4411055864EA8D437CD, 70F37BF9C759E8BCA1C6AC8FB9805950925E1C648ED37E8561A0F7A407DFDC28 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
11:48:17.0213 0x0ed0 MSKSSRV - ok
11:48:17.0218 0x0ed0 [ 63145201D6458E4958E572E7D6FC2604, EDD4A8A3BBE94B983554B1117734E66A2647B867269C5F0567C47EDE6F3FACCB ] MsLldp C:\Windows\system32\DRIVERS\mslldp.sys
11:48:17.0220 0x0ed0 MsLldp - ok
11:48:17.0232 0x0ed0 [ 99D526E803DB6D7FF290FD98B6204641, 4AFAA3B1186621AEAD19E12D3DBE104DD8FCD5C106F9EC3ADA4AD1BC7093E61F ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
11:48:17.0233 0x0ed0 MSPCLOCK - ok
11:48:17.0244 0x0ed0 [ 06FA77C3E2A491ADCD704C5E73006269, 465A7EE5387E6C11398A554F73437278F5BF110356E7F49F315905C1F2459278 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
11:48:17.0244 0x0ed0 MSPQM - ok
11:48:17.0268 0x0ed0 [ E134EC4DE11CF78CB01432D180710D84, BB111F97AEEFDCA5866B157E9957599CD7A4952B5BCCA0B0BCA9EDFCD17E61FE ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
11:48:17.0277 0x0ed0 MsRPC - ok
11:48:17.0284 0x0ed0 [ B5AECF12F09DEE97C9FCAA5BA016CE1E, F5305C4CE6C93A3A3481BD13BE0C23FE26571E11029ACFFE75FB78913681FCFC ] mssmbios C:\Windows\System32\drivers\mssmbios.sys
11:48:17.0285 0x0ed0 mssmbios - ok
11:48:17.0296 0x0ed0 [ 72D66A05E0F99F2528F6C6204FD22AA1, B14D433BC5795F1DC4C672302285E665DC012693E75574F60664AAD8874DE562 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
11:48:17.0297 0x0ed0 MSTEE - ok
11:48:17.0308 0x0ed0 [ 8AAAE399FC255FA105D4158CBA289001, 2F55C02605B4A3406B289FF9D46C76260B9138E3DE96AFAEA0E0522E5A2A746C ] MTConfig C:\Windows\System32\drivers\MTConfig.sys
11:48:17.0309 0x0ed0 MTConfig - ok
11:48:17.0315 0x0ed0 [ 3BCB702F3E6CC622DCAFCAA45D7CDE0A, 00D33A4AB3E7C5F65F59C63F8E2FD27EF38D5484595F785D5632E9414E29352C ] Mup C:\Windows\system32\Drivers\mup.sys
11:48:17.0317 0x0ed0 Mup - ok
11:48:17.0347 0x0ed0 [ 3A1E095277BBD406CEA8EA6B76950664, 47838F307A6354E77C19A7B1F3F3E22726EF60403B611F358AD6FFE81D7214E7 ] mvumis C:\Windows\system32\drivers\mvumis.sys
11:48:17.0348 0x0ed0 mvumis - ok
11:48:17.0394 0x0ed0 [ 53EE034F83E9A7A8E421572E385F67CD, 29F718B95B9D6CBDA49D5DE14FEC46DA64D7977131D585C975B3D703559D0988 ] MyWiFiDHCPDNS D:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
11:48:17.0400 0x0ed0 MyWiFiDHCPDNS - ok
11:48:17.0447 0x0ed0 [ 4B18840511D720BA118D3017E8165875, 724458A69269A5AE57E8DAB74FF3C198A79B6F7A9602BF38A70B4A40543ED167 ] napagent C:\Windows\system32\qagentRT.dll
11:48:17.0459 0x0ed0 napagent - ok
11:48:17.0502 0x0ed0 [ 43D7388A90A4C6EA346A4D6FF0377479, DFDCFA448B49C8A577056070AF516F08CD2E452706A3CF9173195ABA4256F35D ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
11:48:17.0511 0x0ed0 NativeWifiP - ok
11:48:17.0543 0x0ed0 [ 6A0C3996DA7DAE6D6939676D786EEEC4, 6E8A4C6234FD3040BC889E92016A4D5AC7BCAF5059521E50C733966163A546A0 ] NcaSvc C:\Windows\System32\ncasvc.dll
11:48:17.0548 0x0ed0 NcaSvc - ok
11:48:17.0554 0x0ed0 [ C982FE4CC91DECE2259F494FCEB4030F, 4C285407E6F9FBBA92180F4063AEFB736ED142D802F0151002F0CC20AB7BB4E5 ] NcdAutoSetup C:\Windows\System32\NcdAutoSetup.dll
11:48:17.0557 0x0ed0 NcdAutoSetup - ok
11:48:17.0612 0x0ed0 [ A10E176F3B2BF83EDE7B5C4658C93B66, 42F2FAEB4A29BBC6727D7E159D3E7E2E66D33785E5C98496EEB44D281601A23E ] NDIS C:\Windows\system32\drivers\ndis.sys
11:48:17.0633 0x0ed0 NDIS - ok
11:48:17.0652 0x0ed0 [ 39C8A1D9D46F5E83A016BCAB72455284, 80DBED610E0818C2C7122FBC5BC8C15BCE981538AE48DC48F464A86389AF3F68 ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
11:48:17.0653 0x0ed0 NdisCap - ok
11:48:17.0661 0x0ed0 [ 762941932B7E4C588E48A577BA9D6440, 71FA1870E398CB848D8294FEF6C60E0499CAB9A16EC3F487564C41072590E4F3 ] NdisImPlatform C:\Windows\system32\DRIVERS\NdisImPlatform.sys
11:48:17.0664 0x0ed0 NdisImPlatform - ok
11:48:17.0698 0x0ed0 [ 7A6F8A6D0E01432EBA294EF29CDD0FA7, D902AE15194A9F8A2198914FC76184FE7E2B589747275952A04A52853128FDB8 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
11:48:17.0699 0x0ed0 NdisTapi - ok
11:48:17.0704 0x0ed0 [ 79AB68BB3FFF974AD4F41FA559F4EC67, 1745EC6520B48E325C56D98A1F4DB9CE135FE3E097B3D66E6598791132CAD7BD ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
11:48:17.0706 0x0ed0 Ndisuio - ok
11:48:17.0737 0x0ed0 [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
11:48:17.0741 0x0ed0 NdisWan - ok
11:48:17.0748 0x0ed0 [ 62C7DBF4F9301F76CF87D4B9D8F57BF8, D51FEF198F74FDF583826E259E4736F51CD49908194104677889FD135EEC2EBC ] NDISWANLEGACY C:\Windows\system32\DRIVERS\ndiswan.sys
11:48:17.0752 0x0ed0 NDISWANLEGACY - ok
11:48:17.0777 0x0ed0 [ 3730942D7DB2F8BB5F84542B7FF6F650, 89C9D7D7305205BDB304CE6DA7D1A57EDE86A9D77429698802A39D75EB78CAAB ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
11:48:17.0778 0x0ed0 NDProxy - ok
11:48:17.0786 0x0ed0 [ D3F60A4345FCA9C1BE68AD7D0D6DE770, 214AF09F4B021C2F8655FBC8AC8C801E89CD9115CDE690FAEBDA69D63D660EDD ] Ndu C:\Windows\system32\drivers\Ndu.sys
11:48:17.0788 0x0ed0 Ndu - ok
11:48:17.0793 0x0ed0 [ 7C203A76394F9AE68F69EEE5F9612C4A, 2222654915913BDC9367A2075714906A10CF22C047A7494CD59CB71834ED1B62 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
11:48:17.0795 0x0ed0 NetBIOS - ok
11:48:17.0836 0x0ed0 [ 7CEC25C682D319D484630B3952C31A11, 025C46B367E0570E9E3F9DF1564C3E47B1524E9E9A180BBDF0E9C684838F5E42 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
11:48:17.0843 0x0ed0 NetBT - ok
11:48:17.0856 0x0ed0 [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] Netlogon C:\Windows\system32\lsass.exe
11:48:17.0858 0x0ed0 Netlogon - ok
11:48:17.0892 0x0ed0 [ 89519D29CBEC2121CA65CC29C4D345E0, F3BA7BCAFEC8DD8B29837458D1B2B1DEE748AEAAAE0575FD3AAE65CFC72A04CD ] Netman C:\Windows\System32\netman.dll
11:48:17.0900 0x0ed0 Netman - ok
11:48:17.0942 0x0ed0 [ 79FA9393C67EBBF92A56923592CF7A7C, A8AB8A6346B97B68810CC632F425085BE9E63ACAED0F119A7BFD03F2DA4AA5F6 ] netprofm C:\Windows\System32\netprofmsvc.dll
11:48:17.0960 0x0ed0 netprofm - ok
11:48:18.0020 0x0ed0 [ 5243CFC2E7161C91C2B355240035B9E4, CFD77485A9D7BC47F3A9C53D73B2AE2D5D04B90ED38628F3124EA569F4DE969E ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
11:48:18.0043 0x0ed0 NetTcpPortSharing - ok
11:48:18.0161 0x0ed0 [ 75B9B86878CC159FBC40C4F9202ADBE3, 80D9176112BAFB42E6568E723781E5C03BD5472AB382496C1BD784DB9B2FB6E6 ] NETwNe64 C:\Windows\system32\DRIVERS\NETwew00.sys
11:48:18.0230 0x0ed0 NETwNe64 - ok
11:48:18.0274 0x0ed0 [ 12DD2800E4EEA37DC9AE256AD62423B4, 34740469EEA8740CBACD881CB232C9ABB9AB180DE5F45336BC6DBE154259F29B ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
11:48:18.0275 0x0ed0 nfrd960 - ok
11:48:18.0327 0x0ed0 [ 80ABCD4C2DE9FD832477303AE0CA3BE5, 98F3958E650CEB1006D92980503E1B176D2CA55D2A6742C1C27CDE829D137DA9 ] NlaSvc C:\Windows\System32\nlasvc.dll
11:48:18.0337 0x0ed0 NlaSvc - ok
11:48:18.0369 0x0ed0 [ DE7FCC77F4A503AF4CA6A47D49B3713D, 4BFAA99393F635CD05D91A64DE73EDB5639412C129E049F0FE34F88517A10FC6 ] NPF C:\Windows\system32\drivers\npf.sys
11:48:18.0370 0x0ed0 NPF - ok
11:48:18.0398 0x0ed0 [ 17E19A742FB30C002F8B43575451DBE1, 59D226A4A5B5281C399BE96C694915E38EEAF335D31F346B0C65D8F469D7C9C3 ] Npfs C:\Windows\system32\drivers\Npfs.sys
11:48:18.0400 0x0ed0 Npfs - ok
11:48:18.0419 0x0ed0 [ 8ED299C30792544264E558BEA79F0947, 8A03FDA9AADB79ECBCBCDC988B7D8CF0672689C9DF673A2ECFE0D2D88A9C6A6B ] npsvctrig C:\Windows\System32\drivers\npsvctrig.sys
11:48:18.0420 0x0ed0 npsvctrig - ok
11:48:18.0445 0x0ed0 [ 832B5FDF0B5577713FD7F2465FCD0ACE, 4A551CDBACED47DD781EC59F8B59A13D66EFD85DCF636BCFCBACFE5972A78E93 ] nsi C:\Windows\system32\nsisvc.dll
11:48:18.0448 0x0ed0 nsi - ok
11:48:18.0453 0x0ed0 [ 689B3B1E95C70ABF7AFF29F9406EF1E0, 8B62D8AE53E1B3218158FADC0075682AB06D18998CF5DE82C920A9CD91C0652F ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
11:48:18.0454 0x0ed0 nsiproxy - ok
11:48:18.0538 0x0ed0 [ 7BE3EDFFA3216F989A6BDCB14795DD08, 19A2D0120C46CA9BCFBC16DC3E65687ACDDCBA33B79128188652BA2AFAA2EE2F ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
11:48:18.0578 0x0ed0 Ntfs - ok
11:48:18.0590 0x0ed0 [ 4163ADE07DB51843AE31F65B94F5398D, 4349E7EF1EE1E71E1F436BA42F5B58871D82B987D513BA2D6E1CEB8A21BD1B20 ] Null C:\Windows\system32\drivers\Null.sys
11:48:18.0591 0x0ed0 Null - ok
11:48:18.0974 0x0ed0 [ 52B33E12FF8C9E219CAEC1BB4A5F5E4C, 5272178B39FEDB3F001249FE7C852787EFD715FC49BBAAE58158A189AFB8A337 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
11:48:19.0227 0x0ed0 nvlddmkm - ok
11:48:19.0338 0x0ed0 [ 6822CA012769844EB14FD6634F22C4F6, 967D4CAB760CF19BDF2199AFF9FF9E075A244BB0CB060EF06F7C43A9639433FF ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
11:48:19.0371 0x0ed0 NvNetworkService - ok
11:48:19.0393 0x0ed0 [ FACB0871B4480935F47234362F2FAE26, 1C5D520540E8B809C60AC0DA593918471D22E84C54D901C8FF2210FE33073940 ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys
11:48:19.0394 0x0ed0 nvpciflt - ok
11:48:19.0411 0x0ed0 [ D6D34118263412D3AAA8348A9572B7F2, 66106A25BC5A4CA7697A23ED67CEDB5C0BF678EA70FD967A405D2DF76F4CA3A4 ] nvraid C:\Windows\system32\drivers\nvraid.sys
11:48:19.0414 0x0ed0 nvraid - ok
11:48:19.0448 0x0ed0 [ 27AFC428D1D32ABD04A86763A4EDDEA9, 0920866013A8C8CFEE00E6AECDD41736F5501C49837E2D785998734F087F6B98 ] nvstor C:\Windows\system32\drivers\nvstor.sys
11:48:19.0452 0x0ed0 nvstor - ok
11:48:20.0169 0x0ed0 [ E13F48379AF383046E55C0C87C11CF63, 47C947FEE2532BFF9A0007A786EFE87C6FCEB61C875821FB17AFDCF8F59507E5 ] NvStreamSvc D:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
11:48:20.0590 0x0ed0 NvStreamSvc - ok
11:48:20.0677 0x0ed0 [ 2B47EDD27365F9F5D8E87648BECF52C4, CADA4B19791441373580919FFF89623489C7A1737857760B96CC3F0A08DB8D59 ] nvsvc C:\Windows\system32\nvvsvc.exe
11:48:20.0697 0x0ed0 nvsvc - ok
11:48:20.0726 0x0ed0 [ 50A7C3FEA78D11B546EA9B0C25FBC6AB, E91313580D631473801E0995AF8A1FD43EC47FF7709ADEF3DCD80D7BC25878D7 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad64v.sys
11:48:20.0727 0x0ed0 nvvad_WaveExtensible - ok
11:48:20.0756 0x0ed0 [ 051CFB5107BAAE510419BDC41F8C4036, 9990906F17A3886EF301D2AA6556263B52A1C0554C6BD18331AF44ECECAEE4B5 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
11:48:20.0759 0x0ed0 nv_agp - ok
11:48:20.0815 0x0ed0 [ 51863FE4C259460128DD176739583D50, 168A37FF1EA6CDE0C951C2520C2718488984C92417F1D3E04DA3DCE3CCA1BC8F ] OpenVPNService D:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
11:48:20.0816 0x0ed0 OpenVPNService - ok
11:48:20.0883 0x0ed0 [ 2B8E4C792BED0E5882702720BC528AE5, 6D7CB027BC6014CB268C49B46049CDFF3BA94D07102A65BD053335A28E83D125 ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
11:48:20.0886 0x0ed0 ose - ok
11:48:20.0933 0x0ed0 [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
11:48:20.0941 0x0ed0 p2pimsvc - ok
11:48:20.0961 0x0ed0 [ 4319FD931DCD796435ECB5DB4A04FBA5, 20185B2F359EEC202B37019A4E4F5B914ADCF78B97AF0CBD91EECED2259FC6DE ] p2psvc C:\Windows\system32\p2psvc.dll
11:48:20.0974 0x0ed0 p2psvc - ok
11:48:20.0993 0x0ed0 [ 4563DAF8C6A740AD7F501E219BD10766, 7A1212DDAE2D66A9C2041262796904E36036CDC4C5B75C2F66B8DF9D89F7C25D ] Parport C:\Windows\System32\drivers\parport.sys
11:48:20.0996 0x0ed0 Parport - ok
11:48:21.0023 0x0ed0 [ D6ACCF9F2EEEEA711C14EFD976E573F3, 60D2A81832A8D24F91C3EF134440D5026354917F59462BACBCE7A01D84767D91 ] partmgr C:\Windows\system32\drivers\partmgr.sys
11:48:21.0025 0x0ed0 partmgr - ok
11:48:21.0069 0x0ed0 [ 4811D9EC53649105A5A8BEA661B0F936, C77907E03D0561500FCFEAFAC323E9679E66297329901A0CA2BD7E919419A8E8 ] PcaSvc C:\Windows\System32\pcasvc.dll
11:48:21.0080 0x0ed0 PcaSvc - ok
11:48:21.0099 0x0ed0 [ 4A003E8F718C1E6A2050CA98CD53E3E2, BCC3BE1EC3FA4967353371D85094D096940A7B5944A6FFCA31E8FBE83D92CC6C ] pci C:\Windows\system32\drivers\pci.sys
11:48:21.0104 0x0ed0 pci - ok
11:48:21.0121 0x0ed0 [ F9908D274D458220F91E89B54D78D837, 1E89ABFA6B375383E0297CEE5AF66E37F90E16DD21ABA5C91777A86CDF013B4D ] pciide C:\Windows\system32\drivers\pciide.sys
11:48:21.0122 0x0ed0 pciide - ok
11:48:21.0142 0x0ed0 [ 84D19CB6102627932DCB5DFDF89FE269, 2F9C47E076645B35877D9ACA77968EFFCDA8794D76265CD9A4AAA239C4B33C5F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
11:48:21.0147 0x0ed0 pcmcia - ok
11:48:21.0170 0x0ed0 [ CEBBAD5391C2644560C55628A40BFD27, 8AAA6EBD8D89FC91AECCCF1452F53C5650A1A17027FF4E64D224371404CE4C8B ] pcw C:\Windows\system32\drivers\pcw.sys
11:48:21.0172 0x0ed0 pcw - ok
11:48:21.0200 0x0ed0 [ 0698DEDEAD6A00AD0D468C687D830FBF, B9DCA1A61F2EF80DB26380F390F2E9A17114D33129D61CF465B949B6A7916CAA ] pdc C:\Windows\system32\drivers\pdc.sys
11:48:21.0202 0x0ed0 pdc - ok
11:48:21.0259 0x0ed0 [ 61FE70659CD43E07F94DA4DC31DEC493, 3739B6670B440173FD81DE3D47B0B90FAF296802AD4F57C05BF5CF191BF16022 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
11:48:21.0276 0x0ed0 PEAUTH - ok
11:48:21.0358 0x0ed0 [ DF0D9BDCB600913F40FF125BF8CE1979, 63544C3CEAF47FEEB761FD25BCAE53610C7AD65B7B2295C49D72A7C3C78A376D ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
11:48:21.0409 0x0ed0 PeerDistSvc - ok
11:48:21.0482 0x0ed0 [ EB88FA19F0EA05DD04BE9C5FFEEFFE1A, 459CF99D5243C4ACAA38C7B426ADC52F1044C759D06A925D475DF6213AEB85CD ] PerfHost C:\Windows\SysWow64\perfhost.exe
11:48:21.0484 0x0ed0 PerfHost - ok
11:48:21.0550 0x0ed0 [ 6E84BFF58F7643499277F29DFA2F8C8D, 401CCF137F35D9690C7B56B2BFEDB2DB72709EBE38626D787904B67640EF6F14 ] pla C:\Windows\system32\pla.dll
11:48:21.0585 0x0ed0 pla - ok
11:48:21.0613 0x0ed0 [ 799BE46D45D486704CE0F37CA5385262, BB78DEE83B9DB613B1C083D55FAA458BE3E394AED80EB91B599185A7272F33B3 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
11:48:21.0616 0x0ed0 PlugPlay - ok
11:48:21.0645 0x0ed0 [ 8E2414E818C26C4A9C70CB2B8567F04F, A16B22AE143BA070C562FBE5DEF32F7E228F50B302B66E46B46C44C0F50A4461 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
11:48:21.0670 0x0ed0 PNRPAutoReg - ok
11:48:21.0699 0x0ed0 [ AB76700D764A342D7475FB8F47CAB18C, ECDF705D3E69EF6E7044C98A462A7281D0E7D0D85769C0815555D934B0B69C8D ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
11:48:21.0707 0x0ed0 PNRPsvc - ok
11:48:21.0750 0x0ed0 [ 0108C8E5176D590F242701EF5A62CC26, 3A72F5D4402663B7445F6B3C55F01E83A619B6192F7D3CC2DE3C57F9F50D5A2D ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
11:48:21.0763 0x0ed0 PolicyAgent - ok
11:48:21.0799 0x0ed0 [ F1E067F56373F11EA4B785CAE823740A, 69BD30E64DA17595FF29C9C9FF9AD4F2F4BE29B688FBAC9DABB2FA9D13A47FF0 ] Power C:\Windows\system32\umpo.dll
11:48:21.0803 0x0ed0 Power - ok
11:48:21.0837 0x0ed0 [ 362D47E5B4D67270DE4B8606036F4ADD, 716E229C68D91AEA5B5629F60133D5CBDC0C95ABA54D9DC6264E923CAF4DC6C0 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
11:48:21.0840 0x0ed0 PptpMiniport - ok
11:48:21.0978 0x0ed0 [ 9D59831262CAD44E709D695FC9D5E7AB, F95C5475F91DA667C8D5C96253944CE8A0F2C9B1ED4DF8703E5D1D47A0C730B5 ] PrintNotify C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
11:48:22.0046 0x0ed0 PrintNotify - ok
11:48:22.0082 0x0ed0 [ DD979EB6A7212F60E4AFBE96EDC7AE6D, BC681D64C5B8F08FD4613D71111853FCD5B05E4BD127D2C6258BAED7627105BE ] Processor C:\Windows\System32\drivers\processr.sys
11:48:22.0084 0x0ed0 Processor - ok
11:48:22.0117 0x0ed0 [ 429E8502AD2227CF88F8840FC5BD590D, A186DA46C083580ACEDE9C7E3156865034302CD803140EEEC8E1DE16DA4BC99B ] ProfSvc C:\Windows\system32\profsvc.dll
11:48:22.0124 0x0ed0 ProfSvc - ok
11:48:22.0138 0x0ed0 [ EB8034147D4820CD31BFCB11A2A652DF, B10B5E16B7A05D2DB2D5D1945B6146DE15EEDE2C778772A59F104706B5145E46 ] Psched C:\Windows\system32\DRIVERS\pacer.sys
11:48:22.0142 0x0ed0 Psched - ok
11:48:22.0164 0x0ed0 [ 0AFBF333B6F87A2F598EAB379AF100B8, D11F3A4D7E4463B62E2DBDE5FC61425B1FDFB07DD1A19BC001D479CA1F554510 ] QWAVE C:\Windows\system32\qwave.dll
11:48:22.0172 0x0ed0 QWAVE - ok
11:48:22.0177 0x0ed0 [ 13D47BB0CCA2FC51BD15F8E85C6A078E, EA832A9511007C9E8599C3066E1FA66BE869E8A27886D9A9AC590BD4DFBD1A15 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
11:48:22.0179 0x0ed0 QWAVEdrv - ok
11:48:22.0195 0x0ed0 [ 873C60F8178100557740A832FCE10B5F, 400EF60CB2C98E2AFE122AF3D01CCE56A1548AF865345EE2194AB74DBCBF4C48 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
11:48:22.0196 0x0ed0 RasAcd - ok
11:48:22.0223 0x0ed0 [ 69B93F623B130976243ECA3D84CC99CA, F27617E651EADFAEE479619AAB01CDAA98111BA63E204D5C44A1256732CB0100 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
11:48:22.0225 0x0ed0 RasAgileVpn - ok
11:48:22.0245 0x0ed0 [ 005F6E54C4A2DA4EBF68FB0392CE8BB0, 2F3C90A04964D4D906238BD557D90F7AC05DF86FE9729C4378B39431F54DDAE3 ] RasAuto C:\Windows\System32\rasauto.dll
11:48:22.0261 0x0ed0 RasAuto - ok
11:48:22.0293 0x0ed0 [ A14D625C5AEE5FFE0F47D1A1D419FAAE, 1229B81C23340AD5B436B1FD227876EB41715CE6BD270BA367F18879D26B8F04 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
11:48:22.0296 0x0ed0 Rasl2tp - ok
11:48:22.0332 0x0ed0 [ C923C785A2DE0B396AD6D13ACAFF2DE9, 4F950DA776FBABEC7D546983D6F3018733F61268A4BF95C01D4836AD000BD073 ] RasMan C:\Windows\System32\rasmans.dll
11:48:22.0342 0x0ed0 RasMan - ok
11:48:22.0366 0x0ed0 [ 00695B9C2DB6111064499C529E90C042, 3CD4DF4D8001C2BBF52EEEB1F0D587209878BEAC339D268892477AD840D490F1 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
11:48:22.0368 0x0ed0 RasPppoe - ok
11:48:22.0374 0x0ed0 [ A7F24D8CD1956B0A1FDCB86CC5114DE4, 30489D235362DF62B105378597168B13F4BAC74A8EDDBDA25237E3C017B69FEE ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
11:48:22.0377 0x0ed0 RasSstp - ok
11:48:22.0410 0x0ed0 [ CA03D642ACE58E1BA54E4B383F91CD69, 39BB942603801CF11FBEA28E24F8C8D1EF2AF615D1FABF951683A015D6A6EF37 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
11:48:22.0419 0x0ed0 rdbss - ok
11:48:22.0439 0x0ed0 [ CA7DF5EC95D8DE0DD24BE7FF97369F68, 153E6F716CA935DBCACB8FF1BB8DE5F5551CE3D18878225470E45893CA69BDB8 ] rdpbus C:\Windows\System32\drivers\rdpbus.sys
11:48:22.0440 0x0ed0 rdpbus - ok
11:48:22.0462 0x0ed0 [ B2A3AD74FF2E2FFA73AF2567108231B3, DF8CEA6215F75C634D56F6B8AE11ECCEEB5F8CBC091AC3D6D9F7DE214B00A439 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
11:48:22.0466 0x0ed0 RDPDR - ok
11:48:22.0486 0x0ed0 [ 57F4787E4602A3FCA719C0A33137C6DA, D03AE59A184EB5D126F8EAB9D36EE406ABB8B9ED834F2D2496DDB1349FF56F89 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
11:48:22.0487 0x0ed0 RdpVideoMiniport - ok
11:48:22.0505 0x0ed0 [ B3CB0721E81E30419CE7D837EF4EA151, EC9410818661BF77E4A19694E3A3030E1D983B36F49C72E27F92A1424E0729C2 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
11:48:22.0511 0x0ed0 RDPWD - ok
11:48:22.0524 0x0ed0 [ 62C1F8A0685FE07E998AA296C4F697C4, C636AB2D0F139003A6AD7A12E9DC13EE4485A62F30DA59AF842FF02FE07442EE ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
11:48:22.0529 0x0ed0 rdyboost - ok
11:48:22.0599 0x0ed0 [ 1791B1C8C72E13D193ADE659E7DB87C1, F0C1EA05283BB89ACBE721D0CDBB30FD8F1E75D5545158D29D6EC11E41B145BA ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
11:48:22.0603 0x0ed0 RegSrvc - ok
11:48:22.0630 0x0ed0 [ 3663CCF243EE0C04E9F6F91ED1737273, 31D06445996F99A7F6B32004D1BA63A21C61DE125373F860BA9A9DE5278E8293 ] RemoteAccess C:\Windows\System32\mprdim.dll
11:48:22.0635 0x0ed0 RemoteAccess - ok
11:48:22.0662 0x0ed0 [ E80DD61E52EDFFF9DA1ED7260A68855B, 97909F42AE35E28B8F98C01A1D8BAD80A949CDCA0C88FB4ACF0A655DC7C10E45 ] RemoteRegistry C:\Windows\system32\regsvc.dll
11:48:22.0668 0x0ed0 RemoteRegistry - ok
11:48:22.0696 0x0ed0 [ CCBFCABDFE2BC22F0645CEAADDB36004, 279EA9075079F91165027CEFD4FBC61A213CA602EE7DE106F7D2D243468706AA ] RFCOMM C:\Windows\System32\drivers\rfcomm.sys
11:48:22.0700 0x0ed0 RFCOMM - ok
11:48:22.0726 0x0ed0 [ 73F2E030B5C24E4E41401B5F0D59E6FD, FAA8B5E3159684E0836900C6EAF63857B445F7F180169B56D5790F097EDAA38B ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
11:48:22.0730 0x0ed0 RpcEptMapper - ok
11:48:22.0747 0x0ed0 [ 10B21284B3D964AB3DC45490E57D422E, 12D5E3A7785F21C99C5EAD14A88EB7A86A058E26C091991339356D99D196CC13 ] RpcLocator C:\Windows\system32\locator.exe
11:48:22.0748 0x0ed0 RpcLocator - ok
11:48:22.0794 0x0ed0 [ 1EC6E533C954BDDF2A37E7851A7E58FD, C25936A7465B6A2B3D05D2FCB09D91ACC07CFE038A5E968C99CFA9D9F2967DD4 ] RpcSs C:\Windows\system32\rpcss.dll
11:48:22.0813 0x0ed0 RpcSs - ok
11:48:22.0820 0x0ed0 [ E04E770DD198B9399640717145E79EBF, 2F9BECB7E4B0A522C6370FD39CFD7DFD3FB5D0A779AECCED2EE855629FA3C952 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
11:48:22.0822 0x0ed0 rspndr - ok
11:48:22.0854 0x0ed0 [ 55E66BAE5B30E09FDE217FBF0CDAA579, 4B2C28FD809ADE784567A238F2A7AC57C2C9131728BF3E8FE88F6E8EC0A31C8B ] RSUSBVSTOR C:\Windows\System32\Drivers\RtsUVStor.sys
11:48:22.0860 0x0ed0 RSUSBVSTOR - ok
11:48:22.0913 0x0ed0 [ 15923AA360F7675D3D43C9669316A0BA, AD1852732082140C62CC44A01914162E44BF412B4A852DF27DC0E0765E64288F ] RTL8168 C:\Windows\system32\DRIVERS\Rt630x64.sys
11:48:22.0925 0x0ed0 RTL8168 - ok
11:48:23.0200 0x0ed0 [ 02FE42ED9CBB4CBE806ED1E906D7AC8F, 2559782BFB18542FA31673B292AEE649F3039E03CC61020EC2D6E0F280B340CA ] rtsuvc C:\Windows\system32\DRIVERS\rtsuvc.sys
11:48:23.0370 0x0ed0 rtsuvc - ok
11:48:23.0405 0x0ed0 [ 752EC7DCD2F96871A3857EEE6AFE965A, 1D0640966B9147A06ED0E733711773E6B4AB8AC6D962D5B369ECB04170D18AD8 ] s3cap C:\Windows\System32\drivers\vms3cap.sys
11:48:23.0405 0x0ed0 s3cap - ok
11:48:23.0436 0x0ed0 [ F702AB6181513303AB0FC8D59E52708B, D46939B9F672269E65C98606A573C849C4AF5A26E4E75D3A8FE56A65B3A6EA08 ] SamSs C:\Windows\system32\lsass.exe
11:48:23.0438 0x0ed0 SamSs - ok
11:48:23.0459 0x0ed0 [ 9C7B28CE0D136DB226E24DB3BC817F92, E9DE55D6432ADD08EC75F99F2B5D2BD1F553F4EE55991B1767B1578351EE0BF2 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
11:48:23.0462 0x0ed0 sbp2port - ok
11:48:23.0493 0x0ed0 [ 14316954FCE79C9DE5A0AFF9D42C83AA, B60FB1FAC0299F9560761411711E86EDFA2F8D27B58230E2E4BB37736FAB2287 ] SCardSvr C:\Windows\System32\SCardSvr.dll
11:48:23.0500 0x0ed0 SCardSvr - ok
11:48:23.0514 0x0ed0 [ 5D7733A12756B267FCA021672B26BC9E, 01CE5B5F49914B9E099BD909A66296F3A40644AE47BA1D5EBFFB30CD33C70A4A ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
11:48:23.0516 0x0ed0 scfilter - ok
11:48:23.0574 0x0ed0 [ ED40ED9A65F3E79A8C43DD50C5FDADBF, 2323BFAB1BC3D661A376650B7AC14C7780C92BA575DA048F3C7611CDB3F7F04A ] Schedule C:\Windows\system32\schedsvc.dll
11:48:23.0607 0x0ed0 Schedule - ok
11:48:23.0665 0x0ed0 [ BAF8F0F55BC300E5F882E521F054E345, FB228DB18F2FA55D8BA35A7E6778EE5D2EB0C29D384F1A0A868F90AE706188D7 ] SCPolicySvc C:\Windows\System32\certprop.dll
11:48:23.0668 0x0ed0 SCPolicySvc - ok
11:48:23.0707 0x0ed0 [ F58B030A0664385C707B8C1C63682041, E46AADAA2CD687B9A4B564DC5B002493C8480542588E660BC3DF89EAF9DB0427 ] sdbus C:\Windows\System32\drivers\sdbus.sys
11:48:23.0712 0x0ed0 sdbus - ok
11:48:23.0744 0x0ed0 [ 92968277ED491E4B3DDA361E3952361E, 71C50853BB2126A34C7CD014EE44D4B8B39F589E2E8E8E8F4C982E07498E3899 ] SDRSVC C:\Windows\System32\SDRSVC.dll
11:48:23.0752 0x0ed0 SDRSVC - ok
11:48:23.0780 0x0ed0 [ BB107AA9980B0DA4E19A3A90C3BD4460, BCB4CF0FFF1FD57302557B68044A88C8EEAAE57C2FEAE8EAD1F410F960298B6D ] sdstor C:\Windows\System32\drivers\sdstor.sys
11:48:23.0781 0x0ed0 sdstor - ok
11:48:23.0786 0x0ed0 [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv C:\Windows\system32\drivers\secdrv.sys
11:48:23.0787 0x0ed0 secdrv - ok
11:48:23.0794 0x0ed0 [ CD282626738B6BC92B6E7CD0AAE95B63, 1A56567C781786C85C63E24E79186EE5C82D3EB2679061B21BA0571A3A6CB7F5 ] seclogon C:\Windows\system32\seclogon.dll
11:48:23.0797 0x0ed0 seclogon - ok
11:48:23.0802 0x0ed0 [ 9C51620998F0763039DFA6BF68E475ED, 9E496ADE7CE9A446BE8A2C2FC61B462D966778A94A4C147AABBD25C4821C2BCE ] SENS C:\Windows\system32\sens.dll
11:48:23.0805 0x0ed0 SENS - ok
11:48:23.0841 0x0ed0 [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] SensorsSimulatorDriver C:\Windows\system32\DRIVERS\WUDFRd.sys
11:48:23.0845 0x0ed0 SensorsSimulatorDriver - ok
11:48:23.0871 0x0ed0 [ 0D50B4B860DAB65241628D04CD33ACAE, 2AA897C3F9ED076AB9244A32745D18489B076F3ED28A35B868C472131C5B5B46 ] SensrSvc C:\Windows\system32\sensrsvc.dll
11:48:23.0878 0x0ed0 SensrSvc - ok
11:48:23.0917 0x0ed0 [ 87C46B239A7EEF30FDFDD5E9BD46130C, F36FB5B20AC58FBD31F7E636059D2D865B751E178E51A03B94ABE0BBD1AB1EC9 ] SerCx C:\Windows\system32\drivers\SerCx.sys
11:48:23.0918 0x0ed0 SerCx - ok
11:48:23.0944 0x0ed0 [ 7A1F9347C85FD55E39B8A76B3A25C5AD, 03AF3B23285278A38F4CBEAB7FD326A48FA1EC7F8D044C059CE5403C6D225639 ] Serenum C:\Windows\System32\drivers\serenum.sys
11:48:23.0945 0x0ed0 Serenum - ok
11:48:23.0980 0x0ed0 [ F640A0A218BBF857F1D04A15D7D939F6, 948C13886281FE7947E10FB7B34D5CCFE512FB632F1132B6062AC85149F79950 ] Serial C:\Windows\System32\drivers\serial.sys
11:48:23.0982 0x0ed0 Serial - ok
11:48:23.0998 0x0ed0 [ F1A5F56B2620B862CC28FF96A0A6DAAB, E5367212B2CADF3820D657CFC27CD961547E28DAB950C68E1380CF97FB68F3F4 ] sermouse C:\Windows\System32\drivers\sermouse.sys
11:48:23.0999 0x0ed0 sermouse - ok
11:48:24.0017 0x0ed0 [ CB60A60340788C8D6DE2A269D28086AB, 2D8948E59BB9B00E16D20E425F80E7B862957DBAC9A4D1484E5191FAF333B60D ] SessionEnv C:\Windows\system32\sessenv.dll
11:48:24.0028 0x0ed0 SessionEnv - ok
11:48:24.0068 0x0ed0 [ DDA1B38A59DE5096E2619D4CFDE01F4A, 95E2244EC8FD87741169B75A25458C788A9355EBC7D12C5CD6509DBBB89D4EE6 ] sfdrv01a C:\Windows\system32\drivers\sfdrv01a.sys
11:48:24.0070 0x0ed0 sfdrv01a - ok
11:48:24.0083 0x0ed0 [ 17F6BD95BF04B924F4C05CE78BEF8AE6, 68D38DC04349DA476B62F853B165EE6B6F42054BCAF2B8F615A6E6BAACD35EB4 ] sfhlp02 C:\Windows\system32\drivers\sfhlp02.sys
11:48:24.0083 0x0ed0 sfhlp02 - ok
11:48:24.0104 0x0ed0 [ 7EE65419B29302C795714FF8073969A1, E28D89A5423E3A5062030EB2418E9435DD5D8B9D16570046E782D3FCFDA2E79A ] sfloppy C:\Windows\System32\drivers\sfloppy.sys
11:48:24.0105 0x0ed0 sfloppy - ok
11:48:24.0108 0x0ed0 sfrem01 - ok
11:48:24.0140 0x0ed0 [ C2FC1E7B64D844251A1AF6BCADFE4C14, F1944F303981A64EE109B244BFD333A661C0940EB3A7F28726A61A9422022831 ] sfsync04 C:\Windows\system32\drivers\sfsync04.sys
11:48:24.0142 0x0ed0 sfsync04 - ok
11:48:24.0183 0x0ed0 [ 090AE16F79C8EAD04E6031F863DA85F3, 3F27BE46DF602B53940414A6E9FEB23B36CFFB8E9A7F41440C3315B8E27D0029 ] SharedAccess C:\Windows\System32\ipnathlp.dll
11:48:24.0195 0x0ed0 SharedAccess - ok
11:48:24.0271 0x0ed0 [ A77F3ABE13FCC698511E5DEC7ACEBD5F, 78A43FDA9F770FD8BA107605DB44BC71D8B89D7E75560DA783AA6356C1873C15 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
11:48:24.0287 0x0ed0 ShellHWDetection - ok
11:48:24.0306 0x0ed0 [ 2560721D6F16D5B611C36A3A9D28C1B2, 15C30404902654ABA5DB5367FC5BD31343B12A3FC22B4BC5A26B09016447B5ED ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
11:48:24.0307 0x0ed0 SiSRaid2 - ok
11:48:24.0325 0x0ed0 [ 3AA8FDE1DBF65BB8B88B053529554A0D, 8060D946344D043D336F4735363C23C37C91A6DB3F81E575C267B2EC2BECB0EC ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
11:48:24.0327 0x0ed0 SiSRaid4 - ok
11:48:24.0390 0x0ed0 [ 50D9949020E02B847CD48F1243FCB895, 5BDAD5E44DE5B412645142810C5FCE4B2D9685F928FF4A6B836A9DCE7725BD78 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
11:48:24.0394 0x0ed0 SkypeUpdate - ok
11:48:24.0421 0x0ed0 [ 165AB7677D53868AA61FB26B739C66DB, 8991AF9673B2F9664C90607FD40BA3813B798340E565E87FC07F78C6C6756740 ] SmbDrvI C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys
11:48:24.0422 0x0ed0 SmbDrvI - ok
11:48:24.0467 0x0ed0 [ BBFB94699C8C265A6AF5FD51BDE26DFC, 9901A4E95F535963D4ED1ADFCE734D3AA51271793979A4436D30E12AD7DCE233 ] snapman C:\Windows\system32\DRIVERS\snapman.sys
11:48:24.0474 0x0ed0 snapman - ok
11:48:24.0491 0x0ed0 [ E660156A4588A84305CB772FD2C0DB21, 9492EB6578D4A689945E1FC2440EFA77D461049CDB2D00A645969A71B7DA68E1 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
11:48:24.0493 0x0ed0 SNMPTRAP - ok
11:48:24.0520 0x0ed0 [ F9369327409492097B0BB7CE86BD29DE, 7E9B7A9659A6971029E491C702C306E2078B8F5547FCF874FDA8BAD5898D5E25 ] Soluto C:\Windows\system32\DRIVERS\Soluto.sys
11:48:24.0521 0x0ed0 Soluto - ok
11:48:24.0589 0x0ed0 [ A58E8599AA15628CCCD991BFB0AC0EBC, E1293A644351F888097C7F7F87BD855081849E208049A69F67604A033B535F96 ] SolutoLauncherService D:\Program Files\Soluto\SolutoLauncherService.exe
11:48:24.0594 0x0ed0 SolutoLauncherService - ok
11:48:24.0682 0x0ed0 [ 0FA2D9E29AE6D321EC68DD8F1B9E1181, F9DA2E7DC3BEFB400A9B867C029A73998F731045C9AA11BE35749FB157EBD00D ] SolutoRemoteService D:\Program Files\Soluto\SolutoRemoteService.exe
11:48:24.0722 0x0ed0 SolutoRemoteService - ok
11:48:24.0754 0x0ed0 [ 151DBFF45C9190D3C85E3BD38423BA72, 73B61A807F2A50B50EA558885542A06B1F91E0F9EB152D7638BDB216FF46B3B1 ] SolutoService D:\Program Files\Soluto\SolutoService.exe
11:48:24.0768 0x0ed0 SolutoService - ok
11:48:24.0798 0x0ed0 [ 9110193D93960E38B8692E4519C75D72, 789381B4CCC056EE431E78E2339AC9802264A1CE4B378DDA9769649664C9A7A0 ] spaceport C:\Windows\system32\drivers\spaceport.sys
11:48:24.0804 0x0ed0 spaceport - ok
11:48:24.0835 0x0ed0 [ 3D8679C8DF52EB26EB7583A4E0A29202, DCD9B69299275857712AB200C014AE820C8A9F7E53C4A335A84518FBE4BB56BB ] SpbCx C:\Windows\system32\drivers\SpbCx.sys
11:48:24.0837 0x0ed0 SpbCx - ok
11:48:24.0887 0x0ed0 [ 52B9158CBF1E0B627634EF50B27FF14B, B6D84A2959C875BAD1FD050785403649E859FE75D13B110588BF40F2FE61F03D ] Speechsrv D:\Program Files (x86)\LAN Voice Chat\Speechs.exe
11:48:24.0897 0x0ed0 Speechsrv - ok
11:48:24.0946 0x0ed0 [ 3F215BF2D4D8D6756298B25B579772C2, 744192D1635E5D296BFD399E870B70592202CEAF95C31C2D2B226A868D33A3FD ] Spooler C:\Windows\System32\spoolsv.exe
11:48:24.0963 0x0ed0 Spooler - ok
11:48:25.0149 0x0ed0 [ 061A977C920FBE4BF71FF47C966DDDCA, 746516396B72E4ADB05D978C819CD45FE44EE194756F6DA50121D755439CA590 ] sppsvc C:\Windows\system32\sppsvc.exe
11:48:25.0251 0x0ed0 sppsvc - ok
11:48:25.0259 0x0ed0 ================ Scan global ===============================
11:48:25.0289 0x0ed0 [ DDC1AFBF9DDF880CE9BD3896114D8DED, E2406231EA4D2689A5EDFA9BD1A1BC064359D8D23B37F113A18B5EAE3E2D4050 ] C:\Windows\system32\basesrv.dll
11:48:25.0322 0x0ed0 [ E9343076AE704D20BB0D01F3AF3EFFEF, FF2CE4146945976F9480690505CECD3C7C719BAF0F633E6192C8272C75EF295D ] C:\Windows\system32\winsrv.dll
11:48:25.0339 0x0ed0 [ BD7C6949984D19AAA609896B675E7357, 5B46538B27BC70F5A3805AA63F6AACDC780C7168468FB535F2D35CF26B9DEE06 ] C:\Windows\system32\sxssrv.dll
11:48:25.0380 0x0ed0 [ 8F226143046435C75C033B0C52E90FFE, 54FA316485B57D7B8104FE621F5F40DEC35E3D57C3DF46B5F7EACF57445FE7CA ] C:\Windows\system32\services.exe
11:48:25.0389 0x0ed0 [ Global ] - ok
11:48:25.0390 0x0ed0 ================ Scan MBR ==================================
11:48:25.0434 0x0ed0 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
11:48:25.0669 0x0ed0 \Device\Harddisk0\DR0 - ok
11:48:25.0669 0x0ed0 ================ Scan VBR ==================================
11:48:25.0672 0x0ed0 [ B00CB9DAC7D51A91064A82A5EFAD1DCF ] \Device\Harddisk0\DR0\Partition1
11:48:25.0730 0x0ed0 \Device\Harddisk0\DR0\Partition1 - ok
11:48:25.0733 0x0ed0 [ EC6C97A09A297816EDA0298FB02B8054 ] \Device\Harddisk0\DR0\Partition2
11:48:25.0801 0x0ed0 \Device\Harddisk0\DR0\Partition2 - ok
11:48:25.0803 0x0ed0 [ 70B59553A40A55F060B358862E35CB09 ] \Device\Harddisk0\DR0\Partition3
11:48:25.0821 0x0ed0 \Device\Harddisk0\DR0\Partition3 - ok
11:48:25.0822 0x0ed0 Waiting for KSN requests completion. In queue: 275
11:48:26.0824 0x0ed0 Waiting for KSN requests completion. In queue: 275
11:48:27.0824 0x0ed0 Waiting for KSN requests completion. In queue: 275
11:48:28.0882 0x0ed0 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.2.223.0 ), 0x60100 ( disabled : updated )
11:48:28.0943 0x0ed0 Win FW state via NFP2: enabled
11:48:31.0313 0x0ed0 ============================================================
11:48:31.0313 0x0ed0 Scan finished
11:48:31.0313 0x0ed0 ============================================================
11:48:31.0319 0x04e4 Detected object count: 0
11:48:31.0319 0x04e4 Actual detected object count: 0
11:50:21.0004 0x17ac Deinitialize success

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

@echo off
del /q /a /f %systemroot%\system32\drivers\etc\hosts 2>nul
echo 127.0.0.1 localhost>>%systemroot%\system32\drivers\etc\hosts
exit


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:název souboru, zde napiš: FixHosts.bat
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Poklepáním na soubor ho spusť.

Pak znovu RK.

+
Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

[CZechBoY]

RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 8 (6.2.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : czech_000 [Práva správce]
Mód : Odebrat -- Datum : 04/30/2014 21:00:14
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 2 ¤¤¤
[SUSP PATH] GameRanger.exe -- C:\Users\czech_000\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe [7] -> ERROR [5]
[SUSP PATH] GameRanger.exe -- C:\Users\czech_000\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe [7] -> ERROR [5]

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤
[Address] EAT @explorer.exe (AssocCreate) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983B20)
[Address] EAT @explorer.exe (AssocGetPerceivedType) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5984940)
[Address] EAT @explorer.exe (AssocIsDangerous) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599CFBC)
[Address] EAT @explorer.exe (AssocQueryKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A870)
[Address] EAT @explorer.exe (AssocQueryKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983A20)
[Address] EAT @explorer.exe (AssocQueryStringA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E60C)
[Address] EAT @explorer.exe (AssocQueryStringByKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E440)
[Address] EAT @explorer.exe (AssocQueryStringByKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59841A0)
[Address] EAT @explorer.exe (AssocQueryStringW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989CC0)
[Address] EAT @explorer.exe (ChrCmpIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A03C)
[Address] EAT @explorer.exe (ChrCmpIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A02C)
[Address] EAT @explorer.exe (ColorAdjustLuma) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F7A8)
[Address] EAT @explorer.exe (ColorHLSToRGB) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BFF0)
[Address] EAT @explorer.exe (ColorRGBToHLS) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BF30)
[Address] EAT @explorer.exe (ConnectToConnectionPoint) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59842B0)
[Address] EAT @explorer.exe (DelayLoadFailureHook) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F8F0)
[Address] EAT @explorer.exe (DllGetClassObject) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AD448)
[Address] EAT @explorer.exe (DllGetVersion) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5995AE0)
[Address] EAT @explorer.exe (GUIDFromStringW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F786)
[Address] EAT @explorer.exe (GetAcceptLanguagesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997D0)
[Address] EAT @explorer.exe (GetAcceptLanguagesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A40)
[Address] EAT @explorer.exe (GetMenuPosFromID) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A60)
[Address] EAT @explorer.exe (HashData) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997C0)
[Address] EAT @explorer.exe (IStream_Copy) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A1A0)
[Address] EAT @explorer.exe (IStream_Read) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B80)
[Address] EAT @explorer.exe (IStream_ReadPidl) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989980)
[Address] EAT @explorer.exe (IStream_ReadStr) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981120)
[Address] EAT @explorer.exe (IStream_Reset) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986340)
[Address] EAT @explorer.exe (IStream_Size) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A180)
[Address] EAT @explorer.exe (IStream_Write) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986320)
[Address] EAT @explorer.exe (IStream_WritePidl) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF194)
[Address] EAT @explorer.exe (IStream_WriteStr) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986350)
[Address] EAT @explorer.exe (IUnknown_AtomicRelease) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A09C)
[Address] EAT @explorer.exe (IUnknown_Exec) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B80)
[Address] EAT @explorer.exe (IUnknown_GetSite) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860B0)
[Address] EAT @explorer.exe (IUnknown_GetWindow) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982D20)
[Address] EAT @explorer.exe (IUnknown_QueryService) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983300)
[Address] EAT @explorer.exe (IUnknown_QueryStatus) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59ABBA8)
[Address] EAT @explorer.exe (IUnknown_Set) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981130)
[Address] EAT @explorer.exe (IUnknown_SetSite) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983310)
[Address] EAT @explorer.exe (IntlStrEqWorkerA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E3C)
[Address] EAT @explorer.exe (IntlStrEqWorkerW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E2C)
[Address] EAT @explorer.exe (IsCharSpaceA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A80)
[Address] EAT @explorer.exe (IsCharSpaceW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981140)
[Address] EAT @explorer.exe (IsInternetESCEnabled) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997B0)
[Address] EAT @explorer.exe (IsOS) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B60)
[Address] EAT @explorer.exe (MLFreeLibrary) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9EF4)
[Address] EAT @explorer.exe (MLLoadLibraryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9F48)
[Address] EAT @explorer.exe (MLLoadLibraryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9FA8)
[Address] EAT @explorer.exe (ParseURLA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997A0)
[Address] EAT @explorer.exe (ParseURLW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C250)
[Address] EAT @explorer.exe (PathAddBackslashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B2C)
[Address] EAT @explorer.exe (PathAddBackslashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983C00)
[Address] EAT @explorer.exe (PathAddExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CCC)
[Address] EAT @explorer.exe (PathAddExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CBC)
[Address] EAT @explorer.exe (PathAppendA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CAC)
[Address] EAT @explorer.exe (PathAppendW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A10)
[Address] EAT @explorer.exe (PathBuildRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A05C)
[Address] EAT @explorer.exe (PathBuildRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A06C)
[Address] EAT @explorer.exe (PathCanonicalizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C9C)
[Address] EAT @explorer.exe (PathCanonicalizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CF0)
[Address] EAT @explorer.exe (PathCombineA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B5C)
[Address] EAT @explorer.exe (PathCombineW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983C10)
[Address] EAT @explorer.exe (PathCommonPrefixA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DAC)
[Address] EAT @explorer.exe (PathCommonPrefixW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D9C)
[Address] EAT @explorer.exe (PathCompactPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AF90)
[Address] EAT @explorer.exe (PathCompactPathExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AD80)
[Address] EAT @explorer.exe (PathCompactPathExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986530)
[Address] EAT @explorer.exe (PathCompactPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599EB08)
[Address] EAT @explorer.exe (PathCreateFromUrlA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999790)
[Address] EAT @explorer.exe (PathCreateFromUrlAlloc) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999780)
[Address] EAT @explorer.exe (PathCreateFromUrlW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836E0)
[Address] EAT @explorer.exe (PathFileExistsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C0C)
[Address] EAT @explorer.exe (PathFileExistsAndAttributesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985930)
[Address] EAT @explorer.exe (PathFileExistsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983690)
[Address] EAT @explorer.exe (PathFindExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C3C)
[Address] EAT @explorer.exe (PathFindExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810C0)
[Address] EAT @explorer.exe (PathFindFileNameA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BFC)
[Address] EAT @explorer.exe (PathFindFileNameW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981090)
[Address] EAT @explorer.exe (PathFindNextComponentA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999AE0)
[Address] EAT @explorer.exe (PathFindNextComponentW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A210)
[Address] EAT @explorer.exe (PathFindOnPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B610)
[Address] EAT @explorer.exe (PathFindOnPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989170)
[Address] EAT @explorer.exe (PathFindSuffixArrayA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B534)
[Address] EAT @explorer.exe (PathFindSuffixArrayW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59853D0)
[Address] EAT @explorer.exe (PathGetArgsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599962C)
[Address] EAT @explorer.exe (PathGetArgsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C880)
[Address] EAT @explorer.exe (PathGetCharTypeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999648)
[Address] EAT @explorer.exe (PathGetCharTypeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986480)
[Address] EAT @explorer.exe (PathGetDriveNumberA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D5C)
[Address] EAT @explorer.exe (PathGetDriveNumberW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981050)
[Address] EAT @explorer.exe (PathIsContentTypeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599ABAC)
[Address] EAT @explorer.exe (PathIsContentTypeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A2C0)
[Address] EAT @explorer.exe (PathIsDirectoryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B404)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599B334)
[Address] EAT @explorer.exe (PathIsDirectoryEmptyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599EE78)
[Address] EAT @explorer.exe (PathIsDirectoryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59854D0)
[Address] EAT @explorer.exe (PathIsFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D6C)
[Address] EAT @explorer.exe (PathIsFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986200)
[Address] EAT @explorer.exe (PathIsLFNFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CFC)
[Address] EAT @explorer.exe (PathIsLFNFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CEC)
[Address] EAT @explorer.exe (PathIsNetworkPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A07C)
[Address] EAT @explorer.exe (PathIsNetworkPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829A0)
[Address] EAT @explorer.exe (PathIsPrefixA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D8C)
[Address] EAT @explorer.exe (PathIsPrefixW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D7C)
[Address] EAT @explorer.exe (PathIsRelativeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D4C)
[Address] EAT @explorer.exe (PathIsRelativeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983680)
[Address] EAT @explorer.exe (PathIsRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C8C)
[Address] EAT @explorer.exe (PathIsRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CE0)
[Address] EAT @explorer.exe (PathIsSameRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D1C)
[Address] EAT @explorer.exe (PathIsSameRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D0C)
[Address] EAT @explorer.exe (PathIsSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A834)
[Address] EAT @explorer.exe (PathIsSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E948)
[Address] EAT @explorer.exe (PathIsUNCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B3C)
[Address] EAT @explorer.exe (PathIsUNCServerA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C1C)
[Address] EAT @explorer.exe (PathIsUNCServerShareA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C2C)
[Address] EAT @explorer.exe (PathIsUNCServerShareW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E60)
[Address] EAT @explorer.exe (PathIsUNCServerW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E70)
[Address] EAT @explorer.exe (PathIsUNCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981040)
[Address] EAT @explorer.exe (PathIsURLA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999770)
[Address] EAT @explorer.exe (PathIsURLW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836C0)
[Address] EAT @explorer.exe (PathMakePrettyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599BCB0)
[Address] EAT @explorer.exe (PathMakePrettyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989FC0)
[Address] EAT @explorer.exe (PathMakeSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A8C0)
[Address] EAT @explorer.exe (PathMakeSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981270)
[Address] EAT @explorer.exe (PathMatchSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BAC)
[Address] EAT @explorer.exe (PathMatchSpecExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B8C)
[Address] EAT @explorer.exe (PathMatchSpecExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B7C)
[Address] EAT @explorer.exe (PathMatchSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B9C)
[Address] EAT @explorer.exe (PathParseIconLocationA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BEC)
[Address] EAT @explorer.exe (PathParseIconLocationW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E20)
[Address] EAT @explorer.exe (PathQuoteSpacesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BCC)
[Address] EAT @explorer.exe (PathQuoteSpacesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982D00)
[Address] EAT @explorer.exe (PathRelativePathToA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B14)
[Address] EAT @explorer.exe (PathRelativePathToW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999AF4)
[Address] EAT @explorer.exe (PathRemoveArgsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599BC74)
[Address] EAT @explorer.exe (PathRemoveArgsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986450)
[Address] EAT @explorer.exe (PathRemoveBackslashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999CDC)
[Address] EAT @explorer.exe (PathRemoveBackslashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983730)
[Address] EAT @explorer.exe (PathRemoveBlanksA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BBC)
[Address] EAT @explorer.exe (PathRemoveBlanksW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BD0)
[Address] EAT @explorer.exe (PathRemoveExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C7C)
[Address] EAT @explorer.exe (PathRemoveExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E30)
[Address] EAT @explorer.exe (PathRemoveFileSpecA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B4C)
[Address] EAT @explorer.exe (PathRemoveFileSpecW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5984040)
[Address] EAT @explorer.exe (PathRenameExtensionA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C6C)
[Address] EAT @explorer.exe (PathRenameExtensionW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C5C)
[Address] EAT @explorer.exe (PathSearchAndQualifyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599961C)
[Address] EAT @explorer.exe (PathSearchAndQualifyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982E00)
[Address] EAT @explorer.exe (PathSetDlgItemPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599AC50)
[Address] EAT @explorer.exe (PathSetDlgItemPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E9D0)
[Address] EAT @explorer.exe (PathSkipRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D2C)
[Address] EAT @explorer.exe (PathSkipRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A20)
[Address] EAT @explorer.exe (PathStripPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999D3C)
[Address] EAT @explorer.exe (PathStripPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986220)
[Address] EAT @explorer.exe (PathStripToRootA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999C4C)
[Address] EAT @explorer.exe (PathStripToRootW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E50)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999B6C)
[Address] EAT @explorer.exe (PathUnExpandEnvStringsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982DF0)
[Address] EAT @explorer.exe (PathUndecorateA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A75C)
[Address] EAT @explorer.exe (PathUndecorateW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59864D0)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A86C)
[Address] EAT @explorer.exe (PathUnmakeSystemFolderW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599E984)
[Address] EAT @explorer.exe (PathUnquoteSpacesA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999BDC)
[Address] EAT @explorer.exe (PathUnquoteSpacesW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BE0)
[Address] EAT @explorer.exe (QISearch) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981010)
[Address] EAT @explorer.exe (SHAllocShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829D0)
[Address] EAT @explorer.exe (SHAnsiToAnsi) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A310)
[Address] EAT @explorer.exe (SHAnsiToUnicode) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A320)
[Address] EAT @explorer.exe (SHAutoComplete) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598BE10)
[Address] EAT @explorer.exe (SHCopyKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2F0)
[Address] EAT @explorer.exe (SHCopyKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A070)
[Address] EAT @explorer.exe (SHCreateMemStream) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832B0)
[Address] EAT @explorer.exe (SHCreateShellPalette) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982890)
[Address] EAT @explorer.exe (SHCreateStreamOnFileA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0DC)
[Address] EAT @explorer.exe (SHCreateStreamOnFileEx) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986070)
[Address] EAT @explorer.exe (SHCreateStreamOnFileW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59864A0)
[Address] EAT @explorer.exe (SHCreateStreamWrapper) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F792)
[Address] EAT @explorer.exe (SHCreateThread) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985E80)
[Address] EAT @explorer.exe (SHCreateThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B30)
[Address] EAT @explorer.exe (SHCreateThreadWithHandle) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986400)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0FC)
[Address] EAT @explorer.exe (SHDeleteEmptyKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0EC)
[Address] EAT @explorer.exe (SHDeleteKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2E0)
[Address] EAT @explorer.exe (SHDeleteKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982C60)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AEFB8)
[Address] EAT @explorer.exe (SHDeleteOrphanKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AEF48)
[Address] EAT @explorer.exe (SHDeleteValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A10C)
[Address] EAT @explorer.exe (SHDeleteValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CA0)
[Address] EAT @explorer.exe (SHEnumKeyExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A290)
[Address] EAT @explorer.exe (SHEnumKeyExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A280)
[Address] EAT @explorer.exe (SHEnumValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A250)
[Address] EAT @explorer.exe (SHEnumValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A1D0)
[Address] EAT @explorer.exe (SHFormatDateTimeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F004)
[Address] EAT @explorer.exe (SHFormatDateTimeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F070)
[Address] EAT @explorer.exe (SHFreeShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59829E0)
[Address] EAT @explorer.exe (SHGetInverseCMAP) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A0830)
[Address] EAT @explorer.exe (SHGetThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5989140)
[Address] EAT @explorer.exe (SHGetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59843C0)
[Address] EAT @explorer.exe (SHGetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B20)
[Address] EAT @explorer.exe (SHGetViewStatePropertyBag) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986FA0)
[Address] EAT @explorer.exe (SHIsChildOrSelf) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983510)
[Address] EAT @explorer.exe (SHIsLowMemoryMachine) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59ABC3C)
[Address] EAT @explorer.exe (SHLoadIndirectString) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983340)
[Address] EAT @explorer.exe (SHLockShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF838)
[Address] EAT @explorer.exe (SHMessageBoxCheckA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AADD4)
[Address] EAT @explorer.exe (SHMessageBoxCheckW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AAF00)
[Address] EAT @explorer.exe (SHOpenRegStream2A) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0AC)
[Address] EAT @explorer.exe (SHOpenRegStream2W) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59843F0)
[Address] EAT @explorer.exe (SHOpenRegStreamA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0CC)
[Address] EAT @explorer.exe (SHOpenRegStreamW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A0BC)
[Address] EAT @explorer.exe (SHPackDispParamsV) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5987DB0)
[Address] EAT @explorer.exe (SHPropertyBag_ReadStrAlloc) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B1598)
[Address] EAT @explorer.exe (SHPropertyBag_WriteBSTR) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B1498)
[Address] EAT @explorer.exe (SHQueryInfoKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A230)
[Address] EAT @explorer.exe (SHQueryInfoKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A210)
[Address] EAT @explorer.exe (SHQueryValueExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A120)
[Address] EAT @explorer.exe (SHQueryValueExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59863A0)
[Address] EAT @explorer.exe (SHRegCloseUSKey) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A70)
[Address] EAT @explorer.exe (SHRegCreateUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A58)
[Address] EAT @explorer.exe (SHRegCreateUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982640)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A44)
[Address] EAT @explorer.exe (SHRegDeleteEmptyUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A34)
[Address] EAT @explorer.exe (SHRegDeleteUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A24)
[Address] EAT @explorer.exe (SHRegDeleteUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999A14)
[Address] EAT @explorer.exe (SHRegDuplicateHKey) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1F0)
[Address] EAT @explorer.exe (SHRegEnumUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59999FC)
[Address] EAT @explorer.exe (SHRegEnumUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59999DC)
[Address] EAT @explorer.exe (SHRegEnumUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999998)
[Address] EAT @explorer.exe (SHRegEnumUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982590)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999984)
[Address] EAT @explorer.exe (SHRegGetBoolUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598C220)
[Address] EAT @explorer.exe (SHRegGetBoolValueFromHKCUHKLM) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986330)
[Address] EAT @explorer.exe (SHRegGetIntW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1E0)
[Address] EAT @explorer.exe (SHRegGetPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1C0)
[Address] EAT @explorer.exe (SHRegGetPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A240)
[Address] EAT @explorer.exe (SHRegGetUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999948)
[Address] EAT @explorer.exe (SHRegGetUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A280)
[Address] EAT @explorer.exe (SHRegGetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A2A4)
[Address] EAT @explorer.exe (SHRegGetValueFromHKCUHKLM) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986EBC)
[Address] EAT @explorer.exe (SHRegGetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59821B0)
[Address] EAT @explorer.exe (SHRegOpenUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999928)
[Address] EAT @explorer.exe (SHRegOpenUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999908)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59998E0)
[Address] EAT @explorer.exe (SHRegQueryInfoUSKeyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982610)
[Address] EAT @explorer.exe (SHRegQueryUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59998A0)
[Address] EAT @explorer.exe (SHRegQueryUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999860)
[Address] EAT @explorer.exe (SHRegSetPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A1A0)
[Address] EAT @explorer.exe (SHRegSetPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A180)
[Address] EAT @explorer.exe (SHRegSetUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999838)
[Address] EAT @explorer.exe (SHRegSetUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999810)
[Address] EAT @explorer.exe (SHRegWriteUSValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59997E4)
[Address] EAT @explorer.exe (SHRegWriteUSValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59825E0)
[Address] EAT @explorer.exe (SHRegisterValidateTemplate) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59B58E0)
[Address] EAT @explorer.exe (SHReleaseThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A08C)
[Address] EAT @explorer.exe (SHRunIndirectRegClientCommand) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599C95C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA27C)
[Address] EAT @explorer.exe (SHSendMessageBroadcastW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982CC0)
[Address] EAT @explorer.exe (SHSetThreadRef) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985B10)
[Address] EAT @explorer.exe (SHSetValueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A14C)
[Address] EAT @explorer.exe (SHSetValueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59863D0)
[Address] EAT @explorer.exe (SHSkipJunction) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982E20)
[Address] EAT @explorer.exe (SHStrDupA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598A260)
[Address] EAT @explorer.exe (SHStrDupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981070)
[Address] EAT @explorer.exe (SHStripMneumonicA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA900)
[Address] EAT @explorer.exe (SHStripMneumonicW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982DB0)
[Address] EAT @explorer.exe (SHUnicodeToAnsi) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832E0)
[Address] EAT @explorer.exe (SHUnicodeToAnsiCP) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE598F7B9)
[Address] EAT @explorer.exe (SHUnicodeToUnicode) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599A300)
[Address] EAT @explorer.exe (SHUnlockShared) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AF818)
[Address] EAT @explorer.exe (ShellMessageBoxA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599C604)
[Address] EAT @explorer.exe (ShellMessageBoxW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F54C)
[Address] EAT @explorer.exe (StrCSpnA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EEC)
[Address] EAT @explorer.exe (StrCSpnIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EDC)
[Address] EAT @explorer.exe (StrCSpnIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999ECC)
[Address] EAT @explorer.exe (StrCSpnW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5985A30)
[Address] EAT @explorer.exe (StrCatBuffA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FDC)
[Address] EAT @explorer.exe (StrCatBuffW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FEC)
[Address] EAT @explorer.exe (StrCatChainW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DCC)
[Address] EAT @explorer.exe (StrCatW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FCF8)
[Address] EAT @explorer.exe (StrChrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FCC)
[Address] EAT @explorer.exe (StrChrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F9C)
[Address] EAT @explorer.exe (StrChrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810E0)
[Address] EAT @explorer.exe (StrChrNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F8C)
[Address] EAT @explorer.exe (StrChrNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FBC)
[Address] EAT @explorer.exe (StrChrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981080)
[Address] EAT @explorer.exe (StrCmpCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DEC)
[Address] EAT @explorer.exe (StrCmpCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982C90)
[Address] EAT @explorer.exe (StrCmpICA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981100)
[Address] EAT @explorer.exe (StrCmpICW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810F0)
[Address] EAT @explorer.exe (StrCmpIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983650)
[Address] EAT @explorer.exe (StrCmpLogicalW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DDC)
[Address] EAT @explorer.exe (StrCmpNA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EBC)
[Address] EAT @explorer.exe (StrCmpNCA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E0C)
[Address] EAT @explorer.exe (StrCmpNCW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999DFC)
[Address] EAT @explorer.exe (StrCmpNIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EAC)
[Address] EAT @explorer.exe (StrCmpNICA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860A0)
[Address] EAT @explorer.exe (StrCmpNICW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B70)
[Address] EAT @explorer.exe (StrCmpNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983670)
[Address] EAT @explorer.exe (StrCmpNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983770)
[Address] EAT @explorer.exe (StrCmpW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810B0)
[Address] EAT @explorer.exe (StrCpyNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FFC)
[Address] EAT @explorer.exe (StrCpyW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FD38)
[Address] EAT @explorer.exe (StrDupA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E4C)
[Address] EAT @explorer.exe (StrDupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5982B50)
[Address] EAT @explorer.exe (StrFormatByteSize64A) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC00)
[Address] EAT @explorer.exe (StrFormatByteSizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FBF4)
[Address] EAT @explorer.exe (StrFormatByteSizeEx) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59832D0)
[Address] EAT @explorer.exe (StrFormatByteSizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC60)
[Address] EAT @explorer.exe (StrFormatKBSizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FB74)
[Address] EAT @explorer.exe (StrFormatKBSizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FBE0)
[Address] EAT @explorer.exe (StrFromTimeIntervalA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A8AC8)
[Address] EAT @explorer.exe (StrFromTimeIntervalW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A8A44)
[Address] EAT @explorer.exe (StrIsIntlEqualA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E3C)
[Address] EAT @explorer.exe (StrIsIntlEqualW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E2C)
[Address] EAT @explorer.exe (StrNCatA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FCB8)
[Address] EAT @explorer.exe (StrNCatW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FC74)
[Address] EAT @explorer.exe (StrPBrkA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F5C)
[Address] EAT @explorer.exe (StrPBrkW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59861E0)
[Address] EAT @explorer.exe (StrRChrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999FAC)
[Address] EAT @explorer.exe (StrRChrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F7C)
[Address] EAT @explorer.exe (StrRChrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F6C)
[Address] EAT @explorer.exe (StrRChrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986210)
[Address] EAT @explorer.exe (StrRStrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E9C)
[Address] EAT @explorer.exe (StrRStrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E8C)
[Address] EAT @explorer.exe (StrRetToBSTR) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59860D0)
[Address] EAT @explorer.exe (StrRetToBufA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599F9E8)
[Address] EAT @explorer.exe (StrRetToBufW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981110)
[Address] EAT @explorer.exe (StrRetToStrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599FA98)
[Address] EAT @explorer.exe (StrRetToStrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983330)
[Address] EAT @explorer.exe (StrSpnA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F0C)
[Address] EAT @explorer.exe (StrSpnW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999EFC)
[Address] EAT @explorer.exe (StrStrA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E7C)
[Address] EAT @explorer.exe (StrStrIA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5986490)
[Address] EAT @explorer.exe (StrStrIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810D0)
[Address] EAT @explorer.exe (StrStrNIW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E5C)
[Address] EAT @explorer.exe (StrStrNW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E6C)
[Address] EAT @explorer.exe (StrStrW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983660)
[Address] EAT @explorer.exe (StrToInt64ExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F2C)
[Address] EAT @explorer.exe (StrToInt64ExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F3C)
[Address] EAT @explorer.exe (StrToIntA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F4C)
[Address] EAT @explorer.exe (StrToIntExA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999F1C)
[Address] EAT @explorer.exe (StrToIntExW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59861F0)
[Address] EAT @explorer.exe (StrToIntW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59810A0)
[Address] EAT @explorer.exe (StrTrimA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999E1C)
[Address] EAT @explorer.exe (StrTrimW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983320)
[Address] EAT @explorer.exe (UrlApplySchemeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999760)
[Address] EAT @explorer.exe (UrlApplySchemeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999750)
[Address] EAT @explorer.exe (UrlCanonicalizeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999740)
[Address] EAT @explorer.exe (UrlCanonicalizeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836B0)
[Address] EAT @explorer.exe (UrlCombineA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999728)
[Address] EAT @explorer.exe (UrlCombineW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983750)
[Address] EAT @explorer.exe (UrlCompareA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999714)
[Address] EAT @explorer.exe (UrlCompareW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999704)
[Address] EAT @explorer.exe (UrlCreateFromPathA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996F4)
[Address] EAT @explorer.exe (UrlCreateFromPathW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983BF0)
[Address] EAT @explorer.exe (UrlEscapeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996E4)
[Address] EAT @explorer.exe (UrlEscapeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983720)
[Address] EAT @explorer.exe (UrlFixupW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996D4)
[Address] EAT @explorer.exe (UrlGetLocationA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996C4)
[Address] EAT @explorer.exe (UrlGetLocationW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59996B4)
[Address] EAT @explorer.exe (UrlGetPartA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599969C)
[Address] EAT @explorer.exe (UrlGetPartW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5983700)
[Address] EAT @explorer.exe (UrlHashA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999688)
[Address] EAT @explorer.exe (UrlHashW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999678)
[Address] EAT @explorer.exe (UrlIsA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999668)
[Address] EAT @explorer.exe (UrlIsNoHistoryA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59995EC)
[Address] EAT @explorer.exe (UrlIsNoHistoryW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5981150)
[Address] EAT @explorer.exe (UrlIsOpaqueA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE599960C)
[Address] EAT @explorer.exe (UrlIsOpaqueW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59995FC)
[Address] EAT @explorer.exe (UrlIsW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836A0)
[Address] EAT @explorer.exe (UrlUnescapeA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE5999658)
[Address] EAT @explorer.exe (UrlUnescapeW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59836D0)
[Address] EAT @explorer.exe (WhichPlatform) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59AA6D0)
[Address] EAT @explorer.exe (wnsprintfA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A93AC)
[Address] EAT @explorer.exe (wnsprintfW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9318)
[Address] EAT @explorer.exe (wvnsprintfA) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A93F8)
[Address] EAT @explorer.exe (wvnsprintfW) : SHELL32.dll -> HOOKED (C:\Windows\system32\SHLWAPI.dll @ 0xE59A9368)
[Address] EAT @explorer.exe (GdipAddPathArc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC868)
[Address] EAT @explorer.exe (GdipAddPathArcI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC7C8)
[Address] EAT @explorer.exe (GdipAddPathBezier) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F400)
[Address] EAT @explorer.exe (GdipAddPathBezierI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F31C)
[Address] EAT @explorer.exe (GdipAddPathBeziers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F258)
[Address] EAT @explorer.exe (GdipAddPathBeziersI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F174)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EAC4)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E90C)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E824)
[Address] EAT @explorer.exe (GdipAddPathClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E9E0)
[Address] EAT @explorer.exe (GdipAddPathCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F094)
[Address] EAT @explorer.exe (GdipAddPathCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EE94)
[Address] EAT @explorer.exe (GdipAddPathCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0ED74)
[Address] EAT @explorer.exe (GdipAddPathCurve3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EC90)
[Address] EAT @explorer.exe (GdipAddPathCurve3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EB90)
[Address] EAT @explorer.exe (GdipAddPathCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0EF78)
[Address] EAT @explorer.exe (GdipAddPathEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E3FC)
[Address] EAT @explorer.exe (GdipAddPathEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E378)
[Address] EAT @explorer.exe (GdipAddPathLine) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB964)
[Address] EAT @explorer.exe (GdipAddPathLine2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F61C)
[Address] EAT @explorer.exe (GdipAddPathLine2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F538)
[Address] EAT @explorer.exe (GdipAddPathLineI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB8E0)
[Address] EAT @explorer.exe (GdipAddPathPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DF7C)
[Address] EAT @explorer.exe (GdipAddPathPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E280)
[Address] EAT @explorer.exe (GdipAddPathPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E1E0)
[Address] EAT @explorer.exe (GdipAddPathPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E11C)
[Address] EAT @explorer.exe (GdipAddPathPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E038)
[Address] EAT @explorer.exe (GdipAddPathRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E730)
[Address] EAT @explorer.exe (GdipAddPathRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E6AC)
[Address] EAT @explorer.exe (GdipAddPathRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E5E8)
[Address] EAT @explorer.exe (GdipAddPathRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0E4E8)
[Address] EAT @explorer.exe (GdipAddPathString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DDBC)
[Address] EAT @explorer.exe (GdipAddPathStringI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DCD4)
[Address] EAT @explorer.exe (GdipAlloc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C99ADC)
[Address] EAT @explorer.exe (GdipBeginContainer) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB1C4)
[Address] EAT @explorer.exe (GdipBeginContainer2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB100)
[Address] EAT @explorer.exe (GdipBeginContainerI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB000)
[Address] EAT @explorer.exe (GdipBitmapApplyEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02874)
[Address] EAT @explorer.exe (GdipBitmapConvertFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02B20)
[Address] EAT @explorer.exe (GdipBitmapCreateApplyEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0295C)
[Address] EAT @explorer.exe (GdipBitmapGetHistogram) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0278C)
[Address] EAT @explorer.exe (GdipBitmapGetHistogramSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02740)

[CZechBoY]

[Address] EAT @explorer.exe (GdipBitmapGetPixel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02E18)
[Address] EAT @explorer.exe (GdipBitmapLockBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C490)
[Address] EAT @explorer.exe (GdipBitmapSetPixel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB31E0)
[Address] EAT @explorer.exe (GdipBitmapSetResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB4880)
[Address] EAT @explorer.exe (GdipBitmapUnlockBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C5C8)
[Address] EAT @explorer.exe (GdipClearPathMarkers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F848)
[Address] EAT @explorer.exe (GdipCloneBitmapArea) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02F04)
[Address] EAT @explorer.exe (GdipCloneBitmapAreaI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE12D8)
[Address] EAT @explorer.exe (GdipCloneBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A32C)
[Address] EAT @explorer.exe (GdipCloneCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05450)
[Address] EAT @explorer.exe (GdipCloneFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF996C)
[Address] EAT @explorer.exe (GdipCloneFontFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9C18)
[Address] EAT @explorer.exe (GdipCloneImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB70D8)
[Address] EAT @explorer.exe (GdipCloneImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02538)
[Address] EAT @explorer.exe (GdipCloneMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB360)
[Address] EAT @explorer.exe (GdipClonePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10184)
[Address] EAT @explorer.exe (GdipClonePen) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07048)
[Address] EAT @explorer.exe (GdipCloneRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B8FC)
[Address] EAT @explorer.exe (GdipCloneStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8CF0)
[Address] EAT @explorer.exe (GdipClosePathFigure) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FA28)
[Address] EAT @explorer.exe (GdipClosePathFigures) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F988)
[Address] EAT @explorer.exe (GdipCombineRegionPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B538)
[Address] EAT @explorer.exe (GdipCombineRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B6F4)
[Address] EAT @explorer.exe (GdipCombineRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B654)
[Address] EAT @explorer.exe (GdipCombineRegionRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB88A4)
[Address] EAT @explorer.exe (GdipComment) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9878)
[Address] EAT @explorer.exe (GdipConvertToEmfPlus) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF80FC)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF7FFC)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF7EFC)
[Address] EAT @explorer.exe (GdipCreateAdjustableArrowCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04B88)
[Address] EAT @explorer.exe (GdipCreateBitmapFromDirectDrawSurface) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D030A4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB06FC)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFileICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03330)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGdiDib) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAB994)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D031D4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHBITMAP) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C92F28)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHICON) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7B2C)
[Address] EAT @explorer.exe (GdipCreateBitmapFromResource) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0300C)
[Address] EAT @explorer.exe (GdipCreateBitmapFromScan0) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA84A4)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDFF40)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStreamICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03480)
[Address] EAT @explorer.exe (GdipCreateCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2F6C)
[Address] EAT @explorer.exe (GdipCreateCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0551C)
[Address] EAT @explorer.exe (GdipCreateEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02DB0)
[Address] EAT @explorer.exe (GdipCreateFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB97BC)
[Address] EAT @explorer.exe (GdipCreateFontFamilyFromName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8DD4)
[Address] EAT @explorer.exe (GdipCreateFontFromDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9520)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9408)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontW) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9380)
[Address] EAT @explorer.exe (GdipCreateFromHDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9D848)
[Address] EAT @explorer.exe (GdipCreateFromHDC2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0196C)
[Address] EAT @explorer.exe (GdipCreateFromHWND) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D018CC)
[Address] EAT @explorer.exe (GdipCreateFromHWNDICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0182C)
[Address] EAT @explorer.exe (GdipCreateHBITMAPFromBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA3830)
[Address] EAT @explorer.exe (GdipCreateHICONFromBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB779C)
[Address] EAT @explorer.exe (GdipCreateHalftonePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9ED8)
[Address] EAT @explorer.exe (GdipCreateHatchBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A198)
[Address] EAT @explorer.exe (GdipCreateImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6D10)
[Address] EAT @explorer.exe (GdipCreateLineBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0984C)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2150)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2044)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0961C)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09514)
[Address] EAT @explorer.exe (GdipCreateLineBrushI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09738)
[Address] EAT @explorer.exe (GdipCreateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA74C8)
[Address] EAT @explorer.exe (GdipCreateMatrix2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB244)
[Address] EAT @explorer.exe (GdipCreateMatrix3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C3C0)
[Address] EAT @explorer.exe (GdipCreateMatrix3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C274)
[Address] EAT @explorer.exe (GdipCreateMetafileFromEmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAB18)
[Address] EAT @explorer.exe (GdipCreateMetafileFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAA30)
[Address] EAT @explorer.exe (GdipCreateMetafileFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA854)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAC0C)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmfFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA93C)
[Address] EAT @explorer.exe (GdipCreatePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF200)
[Address] EAT @explorer.exe (GdipCreatePath2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D103C4)
[Address] EAT @explorer.exe (GdipCreatePath2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D1023C)
[Address] EAT @explorer.exe (GdipCreatePathGradient) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08778)
[Address] EAT @explorer.exe (GdipCreatePathGradientFromPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08598)
[Address] EAT @explorer.exe (GdipCreatePathGradientI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0864C)
[Address] EAT @explorer.exe (GdipCreatePathIter) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CEE0)
[Address] EAT @explorer.exe (GdipCreatePen1) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAA7E8)
[Address] EAT @explorer.exe (GdipCreatePen2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7D40)
[Address] EAT @explorer.exe (GdipCreateRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8040)
[Address] EAT @explorer.exe (GdipCreateRegionHrgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BA00)
[Address] EAT @explorer.exe (GdipCreateRegionPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BB94)
[Address] EAT @explorer.exe (GdipCreateRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD9CC)
[Address] EAT @explorer.exe (GdipCreateRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD918)
[Address] EAT @explorer.exe (GdipCreateRegionRgnData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BAC8)
[Address] EAT @explorer.exe (GdipCreateSolidFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5630)
[Address] EAT @explorer.exe (GdipCreateStreamOnFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CCAB24)
[Address] EAT @explorer.exe (GdipCreateStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8EA0)
[Address] EAT @explorer.exe (GdipCreateTexture) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2A40)
[Address] EAT @explorer.exe (GdipCreateTexture2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09EC4)
[Address] EAT @explorer.exe (GdipCreateTexture2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09C40)
[Address] EAT @explorer.exe (GdipCreateTextureIA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09D10)
[Address] EAT @explorer.exe (GdipCreateTextureIAI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09BF0)
[Address] EAT @explorer.exe (GdipDeleteBrush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5170)
[Address] EAT @explorer.exe (GdipDeleteCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB3498)
[Address] EAT @explorer.exe (GdipDeleteCustomLineCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05308)
[Address] EAT @explorer.exe (GdipDeleteEffect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02D60)
[Address] EAT @explorer.exe (GdipDeleteFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA834C)
[Address] EAT @explorer.exe (GdipDeleteFontFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9CD0)
[Address] EAT @explorer.exe (GdipDeleteGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9D378)
[Address] EAT @explorer.exe (GdipDeleteMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA73FC)
[Address] EAT @explorer.exe (GdipDeletePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF2E0)
[Address] EAT @explorer.exe (GdipDeletePathIter) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CE4C)
[Address] EAT @explorer.exe (GdipDeletePen) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA521C)
[Address] EAT @explorer.exe (GdipDeletePrivateFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF924C)
[Address] EAT @explorer.exe (GdipDeleteRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA76B8)
[Address] EAT @explorer.exe (GdipDeleteStringFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8C7C)
[Address] EAT @explorer.exe (GdipDisposeImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C91CE0)
[Address] EAT @explorer.exe (GdipDisposeImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6B70)
[Address] EAT @explorer.exe (GdipDrawArc) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0040C)
[Address] EAT @explorer.exe (GdipDrawArcI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00360)
[Address] EAT @explorer.exe (GdipDrawBezier) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00208)
[Address] EAT @explorer.exe (GdipDrawBezierI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00114)
[Address] EAT @explorer.exe (GdipDrawBeziers) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFFF8)
[Address] EAT @explorer.exe (GdipDrawBeziersI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFEDC)
[Address] EAT @explorer.exe (GdipDrawCachedBitmap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0EF0)
[Address] EAT @explorer.exe (GdipDrawClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF140)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEF38)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEE44)
[Address] EAT @explorer.exe (GdipDrawClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF05C)
[Address] EAT @explorer.exe (GdipDrawCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF7B4)
[Address] EAT @explorer.exe (GdipDrawCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF59C)
[Address] EAT @explorer.exe (GdipDrawCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF4A8)
[Address] EAT @explorer.exe (GdipDrawCurve3) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF374)
[Address] EAT @explorer.exe (GdipDrawCurve3I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF268)
[Address] EAT @explorer.exe (GdipDrawCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF6D0)
[Address] EAT @explorer.exe (GdipDrawDriverString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD9A8)
[Address] EAT @explorer.exe (GdipDrawEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFB64)
[Address] EAT @explorer.exe (GdipDrawEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFAD4)
[Address] EAT @explorer.exe (GdipDrawImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2DF0)
[Address] EAT @explorer.exe (GdipDrawImageFX) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD004)
[Address] EAT @explorer.exe (GdipDrawImageI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB2D6C)
[Address] EAT @explorer.exe (GdipDrawImagePointRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD77C)
[Address] EAT @explorer.exe (GdipDrawImagePointRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD6B8)
[Address] EAT @explorer.exe (GdipDrawImagePoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD658)
[Address] EAT @explorer.exe (GdipDrawImagePointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD53C)
[Address] EAT @explorer.exe (GdipDrawImagePointsRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD2CC)
[Address] EAT @explorer.exe (GdipDrawImagePointsRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD134)
[Address] EAT @explorer.exe (GdipDrawImageRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA2664)
[Address] EAT @explorer.exe (GdipDrawImageRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA25C4)
[Address] EAT @explorer.exe (GdipDrawImageRectRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDEFC4)
[Address] EAT @explorer.exe (GdipDrawImageRectRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDEE90)
[Address] EAT @explorer.exe (GdipDrawLine) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D005D8)
[Address] EAT @explorer.exe (GdipDrawLineI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00548)
[Address] EAT @explorer.exe (GdipDrawLines) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACA40)
[Address] EAT @explorer.exe (GdipDrawLinesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAC958)
[Address] EAT @explorer.exe (GdipDrawPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDAFA0)
[Address] EAT @explorer.exe (GdipDrawPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF998)
[Address] EAT @explorer.exe (GdipDrawPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFF8EC)
[Address] EAT @explorer.exe (GdipDrawPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC27D0)
[Address] EAT @explorer.exe (GdipDrawPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC26E0)
[Address] EAT @explorer.exe (GdipDrawRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACD30)
[Address] EAT @explorer.exe (GdipDrawRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CACC90)
[Address] EAT @explorer.exe (GdipDrawRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFDC0)
[Address] EAT @explorer.exe (GdipDrawRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFFC88)
[Address] EAT @explorer.exe (GdipDrawString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE018)
[Address] EAT @explorer.exe (GdipEmfToWmfBits) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC6A28)
[Address] EAT @explorer.exe (GdipEndContainer) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAF58)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCE6C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCDD0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC9D4)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC894)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCC38)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFCB80)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC6D0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC5E0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC15C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBFD4)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC41C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFC328)
[Address] EAT @explorer.exe (GdipFillClosedCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE524)
[Address] EAT @explorer.exe (GdipFillClosedCurve2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE310)
[Address] EAT @explorer.exe (GdipFillClosedCurve2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE210)
[Address] EAT @explorer.exe (GdipFillClosedCurveI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE440)
[Address] EAT @explorer.exe (GdipFillEllipse) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF768)
[Address] EAT @explorer.exe (GdipFillEllipseI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE990)
[Address] EAT @explorer.exe (GdipFillPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE654)
[Address] EAT @explorer.exe (GdipFillPie) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE850)
[Address] EAT @explorer.exe (GdipFillPieI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFE79C)
[Address] EAT @explorer.exe (GdipFillPolygon) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC29AC)
[Address] EAT @explorer.exe (GdipFillPolygon2) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEB04)
[Address] EAT @explorer.exe (GdipFillPolygon2I) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEA20)
[Address] EAT @explorer.exe (GdipFillPolygonI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC28BC)
[Address] EAT @explorer.exe (GdipFillRectangle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA5870)
[Address] EAT @explorer.exe (GdipFillRectangleI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA57DC)
[Address] EAT @explorer.exe (GdipFillRectangles) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFED28)
[Address] EAT @explorer.exe (GdipFillRectanglesI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFEC28)
[Address] EAT @explorer.exe (GdipFillRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD354)
[Address] EAT @explorer.exe (GdipFindFirstImageItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03730)
[Address] EAT @explorer.exe (GdipFindNextImageItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03680)
[Address] EAT @explorer.exe (GdipFlattenPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDAEC4)
[Address] EAT @explorer.exe (GdipFlush) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01764)
[Address] EAT @explorer.exe (GdipFree) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C99A74)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapFillState) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D045B0)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04A10)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapMiddleInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04720)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04898)
[Address] EAT @explorer.exe (GdipGetAllPropertyItems) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB11D8)
[Address] EAT @explorer.exe (GdipGetBrushType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A27C)
[Address] EAT @explorer.exe (GdipGetCellAscent) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9708)
[Address] EAT @explorer.exe (GdipGetCellDescent) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9644)
[Address] EAT @explorer.exe (GdipGetClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8424)
[Address] EAT @explorer.exe (GdipGetClipBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB938)
[Address] EAT @explorer.exe (GdipGetClipBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7B04)
[Address] EAT @explorer.exe (GdipGetCompositingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD0E0)
[Address] EAT @explorer.exe (GdipGetCompositingQuality) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01478)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04EF4)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04DBC)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeCaps) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05198)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05058)
[Address] EAT @explorer.exe (GdipGetCustomLineCapType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0539C)
[Address] EAT @explorer.exe (GdipGetCustomLineCapWidthScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04C84)
[Address] EAT @explorer.exe (GdipGetDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC35E8)
[Address] EAT @explorer.exe (GdipGetDpiX) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00A68)
[Address] EAT @explorer.exe (GdipGetDpiY) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8AD8)
[Address] EAT @explorer.exe (GdipGetEffectParameterSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02C8C)
[Address] EAT @explorer.exe (GdipGetEffectParameters) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02C18)
[Address] EAT @explorer.exe (GdipGetEmHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9A70)
[Address] EAT @explorer.exe (GdipGetEncoderParameterList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0419C)
[Address] EAT @explorer.exe (GdipGetEncoderParameterListSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04260)
[Address] EAT @explorer.exe (GdipGetFamily) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8C70)
[Address] EAT @explorer.exe (GdipGetFamilyName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9984)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9178)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF90BC)
[Address] EAT @explorer.exe (GdipGetFontHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9660)
[Address] EAT @explorer.exe (GdipGetFontHeightGivenDPI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9A64)
[Address] EAT @explorer.exe (GdipGetFontSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8CF0)

[CZechBoY]

[Address] EAT @explorer.exe (GdipGetFontStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8B6C)
[Address] EAT @explorer.exe (GdipGetFontUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8BF0)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilyMonospace) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9DC4)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySansSerif) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9EAC)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySerif) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9E38)
[Address] EAT @explorer.exe (GdipGetHatchBackgroundColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A030)
[Address] EAT @explorer.exe (GdipGetHatchForegroundColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D084E4)
[Address] EAT @explorer.exe (GdipGetHatchStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A0E4)
[Address] EAT @explorer.exe (GdipGetHemfFromMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC5A24)
[Address] EAT @explorer.exe (GdipGetImageAttributesAdjustedPalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01A18)
[Address] EAT @explorer.exe (GdipGetImageBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03CEC)
[Address] EAT @explorer.exe (GdipGetImageDecoders) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD9270)
[Address] EAT @explorer.exe (GdipGetImageDecodersSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD9428)
[Address] EAT @explorer.exe (GdipGetImageDimension) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03C28)
[Address] EAT @explorer.exe (GdipGetImageEncoders) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C96798)
[Address] EAT @explorer.exe (GdipGetImageEncodersSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C969D8)
[Address] EAT @explorer.exe (GdipGetImageFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0396C)
[Address] EAT @explorer.exe (GdipGetImageGraphicsContext) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA9214)
[Address] EAT @explorer.exe (GdipGetImageHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9B680)
[Address] EAT @explorer.exe (GdipGetImageHorizontalResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03B3C)
[Address] EAT @explorer.exe (GdipGetImageItemData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D035D0)
[Address] EAT @explorer.exe (GdipGetImagePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE05B4)
[Address] EAT @explorer.exe (GdipGetImagePaletteSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE067C)
[Address] EAT @explorer.exe (GdipGetImagePixelFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9B588)
[Address] EAT @explorer.exe (GdipGetImageRawFormat) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB18F4)
[Address] EAT @explorer.exe (GdipGetImageThumbnail) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D037E0)
[Address] EAT @explorer.exe (GdipGetImageType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6EA0)
[Address] EAT @explorer.exe (GdipGetImageVerticalResolution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03A50)
[Address] EAT @explorer.exe (GdipGetImageWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C9C344)
[Address] EAT @explorer.exe (GdipGetInterpolationMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01108)
[Address] EAT @explorer.exe (GdipGetLineBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D090C8)
[Address] EAT @explorer.exe (GdipGetLineBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07A4C)
[Address] EAT @explorer.exe (GdipGetLineColors) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09360)
[Address] EAT @explorer.exe (GdipGetLineGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09198)
[Address] EAT @explorer.exe (GdipGetLinePresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08E88)
[Address] EAT @explorer.exe (GdipGetLinePresetBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09004)
[Address] EAT @explorer.exe (GdipGetLineRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07C48)
[Address] EAT @explorer.exe (GdipGetLineRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09280)
[Address] EAT @explorer.exe (GdipGetLineSpacing) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9B34)
[Address] EAT @explorer.exe (GdipGetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetLineWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08AA0)
[Address] EAT @explorer.exe (GdipGetLogFontA) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9B0C)
[Address] EAT @explorer.exe (GdipGetLogFontW) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8EEC)
[Address] EAT @explorer.exe (GdipGetMatrixElements) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA75F0)
[Address] EAT @explorer.exe (GdipGetMetafileDownLevelRasterizationLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9F20)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromEmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAE8C)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAE34)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAD14)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFADC4)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromWmf) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFAEE4)
[Address] EAT @explorer.exe (GdipGetNearestColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D006F8)
[Address] EAT @explorer.exe (GdipGetPageScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00BD0)
[Address] EAT @explorer.exe (GdipGetPageUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00C84)
[Address] EAT @explorer.exe (GdipGetPathData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FB68)
[Address] EAT @explorer.exe (GdipGetPathFillMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FC14)
[Address] EAT @explorer.exe (GdipGetPathGradientBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0797C)
[Address] EAT @explorer.exe (GdipGetPathGradientBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07A4C)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D084E4)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08034)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07F98)
[Address] EAT @explorer.exe (GdipGetPathGradientFocusScales) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D071BC)
[Address] EAT @explorer.exe (GdipGetPathGradientGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07B00)
[Address] EAT @explorer.exe (GdipGetPathGradientPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D080E0)
[Address] EAT @explorer.exe (GdipGetPathGradientPointCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07DB4)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07764)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlendCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09004)
[Address] EAT @explorer.exe (GdipGetPathGradientRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07C48)
[Address] EAT @explorer.exe (GdipGetPathGradientRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09280)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07CF8)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorsWithCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D082FC)
[Address] EAT @explorer.exe (GdipGetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetPathGradientWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08AA0)
[Address] EAT @explorer.exe (GdipGetPathLastPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F6E0)
[Address] EAT @explorer.exe (GdipGetPathPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FE14)
[Address] EAT @explorer.exe (GdipGetPathPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FCC8)
[Address] EAT @explorer.exe (GdipGetPathTypes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FF24)
[Address] EAT @explorer.exe (GdipGetPathWorldBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D680)
[Address] EAT @explorer.exe (GdipGetPathWorldBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D4FC)
[Address] EAT @explorer.exe (GdipGetPenBrushFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05D44)
[Address] EAT @explorer.exe (GdipGetPenColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF640)
[Address] EAT @explorer.exe (GdipGetPenCompoundArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D056CC)
[Address] EAT @explorer.exe (GdipGetPenCompoundCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0586C)
[Address] EAT @explorer.exe (GdipGetPenCustomEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0674C)
[Address] EAT @explorer.exe (GdipGetPenCustomStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D068FC)
[Address] EAT @explorer.exe (GdipGetPenDashArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0591C)
[Address] EAT @explorer.exe (GdipGetPenDashCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06B5C)
[Address] EAT @explorer.exe (GdipGetPenDashCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05A94)
[Address] EAT @explorer.exe (GdipGetPenDashOffset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05BE4)
[Address] EAT @explorer.exe (GdipGetPenDashStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05C94)
[Address] EAT @explorer.exe (GdipGetPenEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06C10)
[Address] EAT @explorer.exe (GdipGetPenFillType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFB50)
[Address] EAT @explorer.exe (GdipGetPenLineJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06AAC)
[Address] EAT @explorer.exe (GdipGetPenMiterLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D065F0)
[Address] EAT @explorer.exe (GdipGetPenMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06498)
[Address] EAT @explorer.exe (GdipGetPenStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06CC0)
[Address] EAT @explorer.exe (GdipGetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0624C)
[Address] EAT @explorer.exe (GdipGetPenUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06EE4)
[Address] EAT @explorer.exe (GdipGetPenWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF6E0)
[Address] EAT @explorer.exe (GdipGetPixelOffsetMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D013C4)
[Address] EAT @explorer.exe (GdipGetPointCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10030)
[Address] EAT @explorer.exe (GdipGetPropertyCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03F08)
[Address] EAT @explorer.exe (GdipGetPropertyIdList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03E6C)
[Address] EAT @explorer.exe (GdipGetPropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB57EC)
[Address] EAT @explorer.exe (GdipGetPropertyItemSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB5760)
[Address] EAT @explorer.exe (GdipGetPropertySize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFEF0)
[Address] EAT @explorer.exe (GdipGetRegionBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B260)
[Address] EAT @explorer.exe (GdipGetRegionBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B0C4)
[Address] EAT @explorer.exe (GdipGetRegionData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0ABA8)
[Address] EAT @explorer.exe (GdipGetRegionDataSize) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AC7C)
[Address] EAT @explorer.exe (GdipGetRegionHRgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB866C)
[Address] EAT @explorer.exe (GdipGetRegionScans) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A4EC)
[Address] EAT @explorer.exe (GdipGetRegionScansCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A60C)
[Address] EAT @explorer.exe (GdipGetRegionScansI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A3EC)
[Address] EAT @explorer.exe (GdipGetRenderingOrigin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D015D4)
[Address] EAT @explorer.exe (GdipGetSmoothingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAA70)
[Address] EAT @explorer.exe (GdipGetSolidFillColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09964)
[Address] EAT @explorer.exe (GdipGetStringFormatAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8A30)
[Address] EAT @explorer.exe (GdipGetStringFormatDigitSubstitution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8390)
[Address] EAT @explorer.exe (GdipGetStringFormatFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8B58)
[Address] EAT @explorer.exe (GdipGetStringFormatHotkeyPrefix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF87E0)
[Address] EAT @explorer.exe (GdipGetStringFormatLineAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8908)
[Address] EAT @explorer.exe (GdipGetStringFormatMeasurableCharacterRangeCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF856C)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStopCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8698)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStops) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF85DC)
[Address] EAT @explorer.exe (GdipGetStringFormatTrimming) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8260)
[Address] EAT @explorer.exe (GdipGetTextContrast) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D011B0)
[Address] EAT @explorer.exe (GdipGetTextRenderingHint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8160)
[Address] EAT @explorer.exe (GdipGetTextureImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDE20)
[Address] EAT @explorer.exe (GdipGetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09AD0)
[Address] EAT @explorer.exe (GdipGetTextureWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDCCC)
[Address] EAT @explorer.exe (GdipGetVisibleClipBounds) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB7D0)
[Address] EAT @explorer.exe (GdipGetVisibleClipBoundsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB690)
[Address] EAT @explorer.exe (GdipGetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA780C)
[Address] EAT @explorer.exe (GdipGraphicsClear) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB19E8)
[Address] EAT @explorer.exe (GdipGraphicsSetAbort) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D025EC)
[Address] EAT @explorer.exe (GdipImageForceValidation) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB6F4C)
[Address] EAT @explorer.exe (GdipImageGetFrameCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0478)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE0204)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsList) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE02A4)
[Address] EAT @explorer.exe (GdipImageRotateFlip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE3500)
[Address] EAT @explorer.exe (GdipImageSelectActiveFrame) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03F94)
[Address] EAT @explorer.exe (GdipImageSetAbort) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02690)
[Address] EAT @explorer.exe (GdipInitializePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02A30)
[Address] EAT @explorer.exe (GdipInvertMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C100)
[Address] EAT @explorer.exe (GdipIsClipEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB884)
[Address] EAT @explorer.exe (GdipIsEmptyRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AF40)
[Address] EAT @explorer.exe (GdipIsEqualRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AD48)
[Address] EAT @explorer.exe (GdipIsInfiniteRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB8268)
[Address] EAT @explorer.exe (GdipIsMatrixEqual) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BCA0)
[Address] EAT @explorer.exe (GdipIsMatrixIdentity) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7760)
[Address] EAT @explorer.exe (GdipIsMatrixInvertible) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BDC4)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D080)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CFF8)
[Address] EAT @explorer.exe (GdipIsStyleAvailable) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF97B8)
[Address] EAT @explorer.exe (GdipIsVisibleClipEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB5D4)
[Address] EAT @explorer.exe (GdipIsVisiblePathPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D344)
[Address] EAT @explorer.exe (GdipIsVisiblePathPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D2C8)
[Address] EAT @explorer.exe (GdipIsVisiblePoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB4F0)
[Address] EAT @explorer.exe (GdipIsVisiblePointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB480)
[Address] EAT @explorer.exe (GdipIsVisibleRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB37C)
[Address] EAT @explorer.exe (GdipIsVisibleRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB2F0)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0AA08)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A98C)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A7A8)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0A70C)
[Address] EAT @explorer.exe (GdipLoadImageFromFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D044D4)
[Address] EAT @explorer.exe (GdipLoadImageFromFileICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04314)
[Address] EAT @explorer.exe (GdipLoadImageFromStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA9F24)
[Address] EAT @explorer.exe (GdipLoadImageFromStreamICM) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D043F4)
[Address] EAT @explorer.exe (GdipMeasureCharacterRanges) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFDC28)
[Address] EAT @explorer.exe (GdipMeasureDriverString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFD7D0)
[Address] EAT @explorer.exe (GdipMeasureString) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFDDF0)
[Address] EAT @explorer.exe (GdipMultiplyLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA8BC)
[Address] EAT @explorer.exe (GdipMultiplyPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06094)
[Address] EAT @explorer.exe (GdipMultiplyTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07354)
[Address] EAT @explorer.exe (GdipMultiplyWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00F58)
[Address] EAT @explorer.exe (GdipNewInstalledFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF93A0)
[Address] EAT @explorer.exe (GdipNewPrivateFontCollection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF92EC)
[Address] EAT @explorer.exe (GdipPathIterCopyData) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C4A8)
[Address] EAT @explorer.exe (GdipPathIterEnumerate) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C598)
[Address] EAT @explorer.exe (GdipPathIterGetCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C93C)
[Address] EAT @explorer.exe (GdipPathIterGetSubpathCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C888)
[Address] EAT @explorer.exe (GdipPathIterHasCurve) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C728)
[Address] EAT @explorer.exe (GdipPathIterIsValid) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C7D4)
[Address] EAT @explorer.exe (GdipPathIterNextMarker) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CAB4)
[Address] EAT @explorer.exe (GdipPathIterNextMarkerPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C9F0)
[Address] EAT @explorer.exe (GdipPathIterNextPathType) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CB98)
[Address] EAT @explorer.exe (GdipPathIterNextSubpath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CD5C)
[Address] EAT @explorer.exe (GdipPathIterNextSubpathPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0CC84)
[Address] EAT @explorer.exe (GdipPathIterRewind) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C680)
[Address] EAT @explorer.exe (GdipPlayMetafileRecord) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBEF4)
[Address] EAT @explorer.exe (GdipPlayTSClientRecord) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF79F8)
[Address] EAT @explorer.exe (GdipPrivateAddFontFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF9020)
[Address] EAT @explorer.exe (GdipPrivateAddMemoryFont) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8F74)
[Address] EAT @explorer.exe (GdipRecordMetafile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CD2A54)
[Address] EAT @explorer.exe (GdipRecordMetafileFileName) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA510)
[Address] EAT @explorer.exe (GdipRecordMetafileFileNameI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA40C)
[Address] EAT @explorer.exe (GdipRecordMetafileI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA66C)

[CZechBoY]

[Address] EAT @explorer.exe (GdipRecordMetafileStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA2B0)
[Address] EAT @explorer.exe (GdipRecordMetafileStreamI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA1AC)
[Address] EAT @explorer.exe (GdipReleaseDC) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC3508)
[Address] EAT @explorer.exe (GdipRemovePropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D03DE0)
[Address] EAT @explorer.exe (GdipResetClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC2D60)
[Address] EAT @explorer.exe (GdipResetImageAttributes) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02358)
[Address] EAT @explorer.exe (GdipResetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetPageTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00D38)
[Address] EAT @explorer.exe (GdipResetPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D100E0)
[Address] EAT @explorer.exe (GdipResetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06198)
[Address] EAT @explorer.exe (GdipResetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08914)
[Address] EAT @explorer.exe (GdipResetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0106C)
[Address] EAT @explorer.exe (GdipRestoreGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB81E8)
[Address] EAT @explorer.exe (GdipReversePath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F7A8)
[Address] EAT @explorer.exe (GdipRotateLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDB700)
[Address] EAT @explorer.exe (GdipRotatePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotatePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05E0C)
[Address] EAT @explorer.exe (GdipRotateTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09A18)
[Address] EAT @explorer.exe (GdipRotateWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00DE0)
[Address] EAT @explorer.exe (GdipSaveAdd) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D040F8)
[Address] EAT @explorer.exe (GdipSaveAddImage) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04040)
[Address] EAT @explorer.exe (GdipSaveGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7F9C)
[Address] EAT @explorer.exe (GdipSaveImageToFile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C95FD0)
[Address] EAT @explorer.exe (GdipSaveImageToStream) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAFC80)
[Address] EAT @explorer.exe (GdipScaleLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScaleMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA738)
[Address] EAT @explorer.exe (GdipScalePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScalePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05EDC)
[Address] EAT @explorer.exe (GdipScaleTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0728C)
[Address] EAT @explorer.exe (GdipScaleWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00E94)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapFillState) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04660)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapHeight) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04AC0)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapMiddleInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D047D0)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04948)
[Address] EAT @explorer.exe (GdipSetClipGraphics) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBDEC)
[Address] EAT @explorer.exe (GdipSetClipHrgn) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBB08)
[Address] EAT @explorer.exe (GdipSetClipPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBCDC)
[Address] EAT @explorer.exe (GdipSetClipRect) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA69B0)
[Address] EAT @explorer.exe (GdipSetClipRectI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6910)
[Address] EAT @explorer.exe (GdipSetClipRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBBD4)
[Address] EAT @explorer.exe (GdipSetCompositingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB3358)
[Address] EAT @explorer.exe (GdipSetCompositingQuality) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0152C)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04FA0)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseInset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04E5C)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeCaps) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05250)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05104)
[Address] EAT @explorer.exe (GdipSetCustomLineCapWidthScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D04D24)
[Address] EAT @explorer.exe (GdipSetEffectParameters) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02CEC)
[Address] EAT @explorer.exe (GdipSetEmpty) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B7C4)
[Address] EAT @explorer.exe (GdipSetImageAttributesCachedBackground) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01BC8)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorKeys) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7460)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02284)
[Address] EAT @explorer.exe (GdipSetImageAttributesGamma) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0205C)
[Address] EAT @explorer.exe (GdipSetImageAttributesNoOp) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01F54)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannel) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01E38)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannelColorProfile) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01D74)
[Address] EAT @explorer.exe (GdipSetImageAttributesRemapTable) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01C70)
[Address] EAT @explorer.exe (GdipSetImageAttributesThreshold) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02164)
[Address] EAT @explorer.exe (GdipSetImageAttributesToIdentity) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D02448)
[Address] EAT @explorer.exe (GdipSetImageAttributesWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01B10)
[Address] EAT @explorer.exe (GdipSetImagePalette) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D038AC)
[Address] EAT @explorer.exe (GdipSetInfinite) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B860)
[Address] EAT @explorer.exe (GdipSetInterpolationMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE1170)
[Address] EAT @explorer.exe (GdipSetLineBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE273C)
[Address] EAT @explorer.exe (GdipSetLineColors) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09454)
[Address] EAT @explorer.exe (GdipSetLineGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D09214)
[Address] EAT @explorer.exe (GdipSetLineLinearBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08C10)
[Address] EAT @explorer.exe (GdipSetLinePresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08CD0)
[Address] EAT @explorer.exe (GdipSetLineSigmaBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE2A58)
[Address] EAT @explorer.exe (GdipSetLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetLineWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08B50)
[Address] EAT @explorer.exe (GdipSetMatrixElements) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA7E0)
[Address] EAT @explorer.exe (GdipSetMetafileDownLevelRasterizationLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFA068)
[Address] EAT @explorer.exe (GdipSetPageScale) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D00B1C)
[Address] EAT @explorer.exe (GdipSetPageUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB9E40)
[Address] EAT @explorer.exe (GdipSetPathFillMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAF4BC)
[Address] EAT @explorer.exe (GdipSetPathGradientBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D078A8)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08444)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPoint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07EDC)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPointI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07E68)
[Address] EAT @explorer.exe (GdipSetPathGradientFocusScales) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07104)
[Address] EAT @explorer.exe (GdipSetPathGradientGammaCorrection) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07BB0)
[Address] EAT @explorer.exe (GdipSetPathGradientLinearBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08C10)
[Address] EAT @explorer.exe (GdipSetPathGradientPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D080E0)
[Address] EAT @explorer.exe (GdipSetPathGradientPresetBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D075C4)
[Address] EAT @explorer.exe (GdipSetPathGradientSigmaBlend) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07504)
[Address] EAT @explorer.exe (GdipSetPathGradientSurroundColorsWithCount) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D08110)
[Address] EAT @explorer.exe (GdipSetPathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetPathGradientWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D07458)
[Address] EAT @explorer.exe (GdipSetPathMarker) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0F8E8)
[Address] EAT @explorer.exe (GdipSetPenBrushFill) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA7974)
[Address] EAT @explorer.exe (GdipSetPenColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC08F8)
[Address] EAT @explorer.exe (GdipSetPenCompoundArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D057B0)
[Address] EAT @explorer.exe (GdipSetPenCustomEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06814)
[Address] EAT @explorer.exe (GdipSetPenCustomStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D069C4)
[Address] EAT @explorer.exe (GdipSetPenDashArray) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D059D8)
[Address] EAT @explorer.exe (GdipSetPenDashCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06D70)
[Address] EAT @explorer.exe (GdipSetPenDashOffset) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05B44)
[Address] EAT @explorer.exe (GdipSetPenDashStyle) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CC0860)
[Address] EAT @explorer.exe (GdipSetPenEndCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAABC0)
[Address] EAT @explorer.exe (GdipSetPenLineCap197819) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06E18)
[Address] EAT @explorer.exe (GdipSetPenLineJoin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAC50)
[Address] EAT @explorer.exe (GdipSetPenMiterLimit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D066A0)
[Address] EAT @explorer.exe (GdipSetPenMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06548)
[Address] EAT @explorer.exe (GdipSetPenStartCap) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CAAB30)
[Address] EAT @explorer.exe (GdipSetPenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06368)
[Address] EAT @explorer.exe (GdipSetPenUnit) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D06F94)
[Address] EAT @explorer.exe (GdipSetPenWidth) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6B50)
[Address] EAT @explorer.exe (GdipSetPixelOffsetMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CE346C)
[Address] EAT @explorer.exe (GdipSetPropertyItem) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB4558)
[Address] EAT @explorer.exe (GdipSetRenderingOrigin) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D016AC)
[Address] EAT @explorer.exe (GdipSetSmoothingMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA1DB8)
[Address] EAT @explorer.exe (GdipSetSolidFillColor) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CA6C1C)
[Address] EAT @explorer.exe (GdipSetStringFormatAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8AC0)
[Address] EAT @explorer.exe (GdipSetStringFormatDigitSubstitution) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF843C)
[Address] EAT @explorer.exe (GdipSetStringFormatFlags) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8BE8)
[Address] EAT @explorer.exe (GdipSetStringFormatHotkeyPrefix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8870)
[Address] EAT @explorer.exe (GdipSetStringFormatLineAlign) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8998)
[Address] EAT @explorer.exe (GdipSetStringFormatMeasurableCharacterRanges) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF84E8)
[Address] EAT @explorer.exe (GdipSetStringFormatTabStops) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8728)
[Address] EAT @explorer.exe (GdipSetStringFormatTrimming) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF82F8)
[Address] EAT @explorer.exe (GdipSetTextContrast) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D01264)
[Address] EAT @explorer.exe (GdipSetTextRenderingHint) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0130C)
[Address] EAT @explorer.exe (GdipSetTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D089B4)
[Address] EAT @explorer.exe (GdipSetTextureWrapMode) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDDF10)
[Address] EAT @explorer.exe (GdipSetWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDD014)
[Address] EAT @explorer.exe (GdipShearMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C19C)
[Address] EAT @explorer.exe (GdipStartPathFigure) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0FAC8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericDefault) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8DF8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericTypographic) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF8D90)
[Address] EAT @explorer.exe (GdipTestControl) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CF81EC)
[Address] EAT @explorer.exe (GdipTransformMatrixPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDC110)
[Address] EAT @explorer.exe (GdipTransformMatrixPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDBFE4)
[Address] EAT @explorer.exe (GdipTransformPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D804)
[Address] EAT @explorer.exe (GdipTransformPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0098C)
[Address] EAT @explorer.exe (GdipTransformPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D007AC)
[Address] EAT @explorer.exe (GdipTransformRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B374)
[Address] EAT @explorer.exe (GdipTranslateClip) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFBA4C)
[Address] EAT @explorer.exe (GdipTranslateClipI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CFB9EC)
[Address] EAT @explorer.exe (GdipTranslateLineTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslateMatrix) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CDA68C)
[Address] EAT @explorer.exe (GdipTranslatePathGradientTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslatePenTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D05FB8)
[Address] EAT @explorer.exe (GdipTranslateRegion) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B4BC)
[Address] EAT @explorer.exe (GdipTranslateRegionI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0B45C)
[Address] EAT @explorer.exe (GdipTranslateTextureTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0884C)
[Address] EAT @explorer.exe (GdipTranslateWorldTransform) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8CB7EEC)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPoints) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0C038)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPointsI) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0BE78)
[Address] EAT @explorer.exe (GdipWarpPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0D914)
[Address] EAT @explorer.exe (GdipWidenPath) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DA68)
[Address] EAT @explorer.exe (GdipWindingModeOutline) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D0DBD0)
[Address] EAT @explorer.exe (GdiplusNotificationHook) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D10510)
[Address] EAT @explorer.exe (GdiplusNotificationUnhook) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8D104AC)
[Address] EAT @explorer.exe (GdiplusShutdown) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C988CC)
[Address] EAT @explorer.exe (GdiplusStartup) : WINSPOOL.DRV -> HOOKED (C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.9200.16518_none_726fbfe0cc22f012\gdiplus.dll @ 0xD8C932B0)
[Address] EAT @explorer.exe (DllCanUnloadNow) : MSACM32.dll -> HOOKED (C:\Windows\System32\cscobj.dll @ 0xDBCB1010)
[Address] EAT @explorer.exe (DllGetClassObject) : MSACM32.dll -> HOOKED (C:\Windows\System32\cscobj.dll @ 0xDBCB2AB0)
[Address] EAT @explorer.exe (DllRegisterServer) : MSACM32.dll -> HOOKED (C:\Windows\System32\cscobj.dll @ 0xDBCD0AE0)
[Address] EAT @explorer.exe (DllUnregisterServer) : MSACM32.dll -> HOOKED (C:\Windows\System32\cscobj.dll @ 0xDBCD0B20)
[Address] EAT @explorer.exe (ProcessGroupPolicy) : MSACM32.dll -> HOOKED (C:\Windows\System32\cscobj.dll @ 0xDBCD40A8)
[Address] EAT @explorer.exe (ProcessPolicy) : MSACM32.dll -> HOOKED (C:\Windows\System32\cscobj.dll @ 0xDBCD4088)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST1000LM024 HN-M101MBB +++++
--- User ---
[MBR] af2d5d26254f379ef01a9d18b0ba1e96
[BSP] e5564d3a591cf8403f708aa9e7a52e9a : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 718848 | Size: 150775 MB
2 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 309506048 | Size: 1500 MB
3 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 312578048 | Size: 801242 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_04302014_210014.txt >>
RKreport[0]_S_04302014_204752.txt;RKreport[0]_S_04302014_205956.txt