hook ZwCreateFile(the problem of string remains to be solved)