RtlGetSystemBootStatus

NTSTATUS __fastcall RtlGetSystemBootStatus(int a1, __int64 a2, int a3, VOID *a4){
  _DWORD v5[2]; 
  __int64 v6; 
  int v7; 
  int v8; 

  v5[1] = 0;
  v8 = 0;
  v7 = a3;
  v5[0] = a1;
  v6 = a2;
  return RtlpSystemBootStatusRequest(31, (__int64)v5, 1u, a4);
}

Referenced by:

PopProcessBootstat