INTERCEPT_NT       64 sandbox/win/src/filesystem_dispatcher.cc       return INTERCEPT_NT(manager, NtCreateFile, CREATE_FILE_ID, 48);
INTERCEPT_NT       67 sandbox/win/src/filesystem_dispatcher.cc       return INTERCEPT_NT(manager, NtOpenFile, OPEN_FILE_ID, 28);
INTERCEPT_NT       70 sandbox/win/src/filesystem_dispatcher.cc       return INTERCEPT_NT(manager, NtQueryAttributesFile, QUERY_ATTRIB_FILE_ID,
INTERCEPT_NT       74 sandbox/win/src/filesystem_dispatcher.cc         return INTERCEPT_NT(manager, NtQueryFullAttributesFile,
INTERCEPT_NT       78 sandbox/win/src/filesystem_dispatcher.cc       return INTERCEPT_NT(manager, NtSetInformationFile, SET_INFO_FILE_ID, 24);
INTERCEPT_NT       91 sandbox/win/src/policy_broker.cc   if (!INTERCEPT_NT(manager, NtOpenThread, OPEN_TREAD_ID, 20) ||
INTERCEPT_NT       92 sandbox/win/src/policy_broker.cc       !INTERCEPT_NT(manager, NtOpenProcess, OPEN_PROCESS_ID, 20) ||
INTERCEPT_NT       93 sandbox/win/src/policy_broker.cc       !INTERCEPT_NT(manager, NtOpenProcessToken, OPEN_PROCESS_TOKEN_ID, 16))
INTERCEPT_NT       97 sandbox/win/src/policy_broker.cc   if (!INTERCEPT_NT(manager, NtSetInformationThread, SET_INFORMATION_THREAD_ID,
INTERCEPT_NT       99 sandbox/win/src/policy_broker.cc       !INTERCEPT_NT(manager, NtOpenThreadToken, OPEN_THREAD_TOKEN_ID, 20))
INTERCEPT_NT      105 sandbox/win/src/policy_broker.cc     if (!INTERCEPT_NT(manager, NtOpenProcessTokenEx, OPEN_PROCESS_TOKEN_EX_ID,
INTERCEPT_NT      109 sandbox/win/src/policy_broker.cc     return INTERCEPT_NT(manager, NtOpenThreadTokenEx, OPEN_THREAD_TOKEN_EX_ID,
INTERCEPT_NT       62 sandbox/win/src/registry_dispatcher.cc     return INTERCEPT_NT(manager, NtCreateKey, CREATE_KEY_ID, 32);
INTERCEPT_NT       65 sandbox/win/src/registry_dispatcher.cc     bool result = INTERCEPT_NT(manager, NtOpenKey, OPEN_KEY_ID, 16);
INTERCEPT_NT       67 sandbox/win/src/registry_dispatcher.cc       result &= INTERCEPT_NT(manager, NtOpenKeyEx, OPEN_KEY_EX_ID, 20);
INTERCEPT_NT       39 sandbox/win/src/sync_dispatcher.cc     return INTERCEPT_NT(manager, NtCreateEvent, CREATE_EVENT_ID, 24);
INTERCEPT_NT       41 sandbox/win/src/sync_dispatcher.cc     return INTERCEPT_NT(manager, NtOpenEvent, OPEN_EVENT_ID, 16);