mhook: hack around EMET