# NtWin32k

hook all win32k syscalls with a single .data pointer swap