Intercepting GDI calls