4 ms·intercepting the win32 calls that make the syscall is often enoughby jb613 11y agointercepting the win32 calls that make the syscall is often enough