ZwCreateTimer

NTSTATUS __stdcall ZwCreateTimer(
        VOID **TimerHandle,
        _ACCESS_MASK DesiredAccess,
        POBJECT_ATTRIBUTES ObjectAttributes,
        _TIMER_TYPE TimerType,
        VOID *a5){
  NTSTATUS result; 

  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

DbgkpWerInitializeDeferredLiveDump