Checks if the export is listed as a hook target, and if so install a hook.

The hook handler for ExAllocatePoolWithTag(). Logs if ExAllocatePoolWithTag() is called from where not backed by any image.

The hook handler for ExFreePool(). Logs if ExFreePool() is called from where not backed by any image

The hook handler for ExFreePoolWithTag(). Logs if ExFreePoolWithTag() is called from where not backed by any image.

The hook handler for ExQueueWorkItem(). Logs if a WorkerRoutine points to where not backed by any image.

The hook handler for NtQuerySystemInformation(). Removes an entry for cmd.exe and hides it from being listed.

The hook handler for ZwCreateFile(). Logs if ZwCreateFile() is called from where not backed by any image.