The only good win32k syscall is a blocked win32k syscall.

 — @tiraniddo