RtlGetSystemBootStatusEx

NTSTATUS __fastcall RtlGetSystemBootStatusEx(INT64 a1, UINT64 a2, VOID *a3){
  return RtlpSystemBootStatusRequest(31i64, a1, (unsigned int)a2, a3);
}

Referenced by:

PopCheckShutdownMarker