PoNotifySystemTimeSet
VOID __stdcall PoNotifySystemTimeSet(
_LARGE_INTEGER *NewTime,
_LARGE_INTEGER *OldTime,
_TIME_CHANGE_REASON ChangeReason){
unsigned __int8 CurrentIrql;
if( PsWin32CalloutsEstablished )
{
*(&stru_140C23628 + 779) = NewTime->QuadPart;
*(&stru_140C23628 + 780) = OldTime->QuadPart;
EtwTraceSystemTimeChange(NewTime, OldTime, *(UINT64 *)&ChangeReason);
CurrentIrql = KeGetCurrentIrql();
__writecr8(2ui64);
ExNotifyWithProcessing(*(&ExBootDevicesRemovedEvent + 23), 0i64, 0i64, 0i64);
PopGetPolicyWorker(0x10ui64);
PopCheckForWork();
__writecr8(CurrentIrql);
}
}Referenced by:
ExpRefreshSystemTime
ExpSetSystemTime
NtSetSystemTime