ZwReadFile

NTSTATUS __stdcall ZwReadFile(
        _HANDLE FileHandle,
        _HANDLE Event,
        PIO_APC_ROUTINE ApcRoutine,
        PVOID ApcContext,
        PIO_STATUS_BLOCK IoStatusBlock,
        PVOID Buffer,
        ULONG Length,
        PLARGE_INTEGER ByteOffset,
        PULONG Key){
  NTSTATUS result; 

  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

CMFSystemThreadRoutine
CmpDoFileRead
EmInitSystem
EtwpFinalizeHeader
EtwpRealtimeRestoreBuffer
EtwpRealtimeRestoreState
EtwpUpdateFileHeader
RtlCheckBootStatusIntegrity
RtlInitializeBootStatDataCache
RtlInitializeBootStatusDataBlackBox
RtlpGetSetBootStatusData