RtlGetSystemBootStatusEx

NTSTATUS __fastcall RtlGetSystemBootStatusEx(__int64 a1, unsigned int a2, VOID *a3){
  return RtlpSystemBootStatusRequest(31, a1, a2, a3);
}

Referenced by:

PopCheckShutdownMarker