almost working x64 hook (doesn't handle CALL)