INTERCEPT_NT 64 sandbox/win/src/filesystem_dispatcher.cc return INTERCEPT_NT(manager, NtCreateFile, CREATE_FILE_ID, 48); INTERCEPT_NT 67 sandbox/win/src/filesystem_dispatcher.cc return INTERCEPT_NT(manager, NtOpenFile, OPEN_FILE_ID, 28); INTERCEPT_NT 70 sandbox/win/src/filesystem_dispatcher.cc return INTERCEPT_NT(manager, NtQueryAttributesFile, QUERY_ATTRIB_FILE_ID, INTERCEPT_NT 74 sandbox/win/src/filesystem_dispatcher.cc return INTERCEPT_NT(manager, NtQueryFullAttributesFile, INTERCEPT_NT 78 sandbox/win/src/filesystem_dispatcher.cc return INTERCEPT_NT(manager, NtSetInformationFile, SET_INFO_FILE_ID, 24); INTERCEPT_NT 91 sandbox/win/src/policy_broker.cc if (!INTERCEPT_NT(manager, NtOpenThread, OPEN_TREAD_ID, 20) || INTERCEPT_NT 92 sandbox/win/src/policy_broker.cc !INTERCEPT_NT(manager, NtOpenProcess, OPEN_PROCESS_ID, 20) || INTERCEPT_NT 93 sandbox/win/src/policy_broker.cc !INTERCEPT_NT(manager, NtOpenProcessToken, OPEN_PROCESS_TOKEN_ID, 16)) INTERCEPT_NT 97 sandbox/win/src/policy_broker.cc if (!INTERCEPT_NT(manager, NtSetInformationThread, SET_INFORMATION_THREAD_ID, INTERCEPT_NT 99 sandbox/win/src/policy_broker.cc !INTERCEPT_NT(manager, NtOpenThreadToken, OPEN_THREAD_TOKEN_ID, 20)) INTERCEPT_NT 105 sandbox/win/src/policy_broker.cc if (!INTERCEPT_NT(manager, NtOpenProcessTokenEx, OPEN_PROCESS_TOKEN_EX_ID, INTERCEPT_NT 109 sandbox/win/src/policy_broker.cc return INTERCEPT_NT(manager, NtOpenThreadTokenEx, OPEN_THREAD_TOKEN_EX_ID, INTERCEPT_NT 62 sandbox/win/src/registry_dispatcher.cc return INTERCEPT_NT(manager, NtCreateKey, CREATE_KEY_ID, 32); INTERCEPT_NT 65 sandbox/win/src/registry_dispatcher.cc bool result = INTERCEPT_NT(manager, NtOpenKey, OPEN_KEY_ID, 16); INTERCEPT_NT 67 sandbox/win/src/registry_dispatcher.cc result &= INTERCEPT_NT(manager, NtOpenKeyEx, OPEN_KEY_EX_ID, 20); INTERCEPT_NT 39 sandbox/win/src/sync_dispatcher.cc return INTERCEPT_NT(manager, NtCreateEvent, CREATE_EVENT_ID, 24); INTERCEPT_NT 41 sandbox/win/src/sync_dispatcher.cc return INTERCEPT_NT(manager, NtOpenEvent, OPEN_EVENT_ID, 16);