PopIdleWakeFinalizeWakeSource
void __fastcall PopIdleWakeFinalizeWakeSource(int a1, __int64 a2){
WCHAR *v3;
WCHAR *v4;
WCHAR *v5;
if( a1 == 6 && *(_BYTE *)a2 == 3 )
{
v3 = 0i64;
if( *(&stru_140C23628 + 596) && *(_QWORD *)&KUSER_SHARED_DATA.SystemTime.LowPart >= *(&stru_140C23628 + 596) )
{
v4 = (WCHAR *)((char *)&stru_140C23628 + 4792);
if( (unsigned __int64)(*(&stru_140C23628 + 596) + 20000000i64) < *(_QWORD *)&KUSER_SHARED_DATA.SystemTime.LowPart )
v4 = 0i64;
v3 = v4;
}
v5 = (WCHAR *)L"Unknown";
if( v3 )
v5 = v3;
RtlStringCbCopyW((WCHAR *)(a2 + 2), 0x80ui64, v5);
}
}Referenced by:
PopIdleWakeNotifyWakeSource