ZwOpenProcessTokenEx

NTSTATUS __stdcall ZwOpenProcessTokenEx(
        PVOID ProcessHandle,
        UINT64 DesiredAccess,
        UINT64 HandleAttributes,
        PVOID *TokenHandle){
  NTSTATUS result; 
  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

BiAdjustPrivilege
RtlAcquirePrivilege
RtlImpersonateSelfEx
RtlpIsAppContainer
SysCtxRegOpenCurrentUserKey