PopClearHiberFileSignature
VOID __stdcall PopClearHiberFileSignature(){
struct _IO_STATUS_BLOCK v0;
int v1[2];
__int64 v2;
__int64 v3;
v0 = 0i64;
if( (PopSimulateHiberBugcheck & 0x200) == 0 && *(_QWORD *)FileObject )
{
v1[0] = 0;
v1[1] = 1;
v2 = 4096i64;
v3 = -4097i64;
if( ZwFsControlFile(*(HANDLE *)&PopHiberInfo, 0i64, 0i64, 0i64, &v0, 0x98208u, v1, 0x18u, 0i64, 0) == 259 )
KeWaitForSingleObject((PVOID)(*(_QWORD *)FileObject + 152i64), Executive, 0, 0, 0i64);
}
}Referenced by:
PopEnableHiberFile