ZwSetInformationThread

NTSTATUS __fastcall ZwSetInformationThread(UINT64 a1, INT64 a2, UINT64 a3, UINT64 a4){
  NTSTATUS result; 

  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

DbgkUserReportWorkRoutine
EtwpCovSampCaptureContextStart
ExpWorkerFactoryCreateThread
RtlAcquirePrivilege
RtlImpersonateSelfEx
RtlReleasePrivilege