> PT_DENY_ATTACH

All you have to do is attach to the process before it does that, and then prevent this call from going through.