ZwWriteFile

NTSTATUS __stdcall ZwWriteFile(
        _HANDLE FileHandle,
        _HANDLE Event,
        PIO_APC_ROUTINE ApcRoutine,
        PVOID ApcContext,
        PIO_STATUS_BLOCK IoStatusBlock,
        PVOID Buffer,
        ULONG Length,
        PLARGE_INTEGER ByteOffset,
        PULONG Key){
  NTSTATUS result; 

  _disable();
  __readeflags();
  KiServiceInternal();
  return result;
}

Referenced by:

BapdpProcessVsmKeyBlobs
CMFFlushHitsFile
CmpDoFileWrite
DbgkpWerWriteSecondaryData
DbgkpWerWriteTriageDump
EtwpFinalizeHeader
EtwpFlushBufferToLogfile
EtwpRealtimeRestoreState
EtwpRealtimeSaveBuffer
EtwpRealtimeSaveState
EtwpSavePersistedLogger
EtwpUpdateFileHeader
EtwpWriteBufferCompressed
EtwpWriteRemainingCompressedData
IopBootLogToFile
IopLiveDumpWriteBuffer
KdpWriteFileCallback
LkmdTelpWriteDumpFile
RtlRestoreBootStatusDefaults
RtlpGetSetBootStatusData
SmKmStoreFileWriteHeader