Differential canary tid=17 (sub_821748F0 worker) vs ours tid=13 canary tid=17 total events: 4140, ours tid=13 total: 435 canary tid=17 duration: 1.9378s..2.0918s (154ms, terminates) ours tid=13 duration: until wedge, never terminates kernel.call canary ours delta RtlEnterCriticalSection 607 58 +549 RtlLeaveCriticalSection 607 58 +549 NtClose 19 2 +17 NtCreateEvent 18 3 +15 NtDuplicateObject 16 2 +14 RtlInitAnsiString 11 1 +10 NtWaitForSingleObjectEx 11 2 +9 RtlInitializeCriticalSectionAndSpinCount 15 6 +9 NtQueryFullAttributesFile 9 1 +8 NtReleaseSemaphore 9 1 +8 RtlNtStatusToDosError 9 1 +8 NtSetEvent 8 1 +7 KeTlsSetValue 2 0 +2 NtCreateFile 2 0 +2 ExCreateThread 1 0 +1 ExTerminateThread 1 0 +1 KeQueryPerformanceFrequency 0 1 -1 KeTlsGetValue 1 0 +1 ExGetXConfigSetting 1 1 +0 KeSetAffinityThread 1 1 +0 ObDereferenceObject 1 1 +0 ObReferenceObjectByHandle 1 1 +0 XNotifyPositionUI 1 1 +0