ZwOpenEvent

NTSTATUS __stdcall ZwOpenEvent(PVOID *EventHandle, UINT64 DesiredAccess, OBJECT_ATTRIBUTES *ObjectAttributes){
  NTSTATUS result; 
  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

PspShutdownCsrProcess