step1: call hidebadproc from getproc sys call