ZwReadVirtualMemory

NTSTATUS __stdcall ZwReadVirtualMemory(
        VOID *ProcessHandle,
        VOID *BaseAddress,
        VOID *Buffer,
        UINT64 BufferSize,
        UINT64 *NumberOfBytesRead){
  NTSTATUS result; 

  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

MmCopyMemory