ZwOpenEvent

NTSTATUS __stdcall ZwOpenEvent(VOID **EventHandle, _ACCESS_MASK DesiredAccess, POBJECT_ATTRIBUTES ObjectAttributes){
  NTSTATUS result; 

  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

PspShutdownCsrProcess