sub_1405D28BC

NTSTATUS __fastcall sub_1405D28BC(VOID *a1, UINT64 a2, INT64 a3, MDL **a4, UINT64 *a5){
  if( (_DWORD)a3 )
    return WbMakeUserExecutablePagesKernelWritable(a1, a2, a4, a5);
  else
    return WbMakeUserDataPagesKernelWritable(a1, a2);
}

Referenced by:

WbDecryptWarbirdEncryptionSegmentBlockV0
sub_1405D27A4
sub_140963C98
sub_140963E88