3 hooks: ZwAllocateVirtualMemory, DeviceIoControl, GetSystemTimeAsFileTime
crypto api hooks now support interactive mode