cannot hide process， hook ZwQuerySystemInformation， maybe use wrong struct