ZwCreateTimer

NTSTATUS __stdcall ZwCreateTimer(
        PVOID *TimerHandle,
        UINT64 DesiredAccess,
        OBJECT_ATTRIBUTES *ObjectAttributes,
        TIMER_TYPE TimerType){
  NTSTATUS result; 
  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

DbgkpWerInitializeDeferredLiveDump