NTSTATUS __fastcall PopUpdateWatchdogNoWorkersEvent(__int64 a1){ if( *(_BYTE *)(a1 + 20) || *(_BYTE *)(a1 + 21) ) return KeResetEvent((_KEVENT *)(a1 + 24)); else return KeSetEvent((PRKEVENT)(a1 + 24), 0, 0); }