KiTpWriteUmMemory

__int64 __fastcall KiTpWriteUmMemory(ULONG_PTR a1, char *a2, char *a3, size_t Size){
  _HHIVE *v4; 
  __int64 v6; 
  int v8; 
  INT64 Sizea; 
  UINT64 a4; 
  INT64 a3a; 
  unsigned int Enlistment; 
  v4 = (_HHIVE *)PsInitialSystemProcess;
  Enlistment = 0;
  v6 = (unsigned int)Size;
  a3a = (INT64)a2;
  LODWORD(Sizea) = 128;
  a4 = (unsigned int)Size;
  v8 = MmProtectVirtualMemory(PsInitialSystemProcess, (LARGE_INTEGER *)a1, &a3a, &a4, Sizea, (KENLISTMENT *)&Enlistment);
  if( v8 >= 0 )
  {
    v8 = MmCopyVirtualMemory(v4, (INT64)a3, (_LIST_ENTRY *)a1);
    MmProtectVirtualMemory(
      v4,
      (LARGE_INTEGER *)a1,
      &a3a,
      &a4,
      __SPAIR64__(HIDWORD(v6), Enlistment),
      (KENLISTMENT *)&Enlistment);
  }
  return(unsigned int)v8;
}

Referenced by: