SSDT example to hijack syscalls operating on registry for Windows® XP