PoNotifySystemTimeSet
VOID __fastcall PoNotifySystemTimeSet(LARGE_INTEGER *a1, LARGE_INTEGER *a2, UINT64 a3){
unsigned __int8 CurrentIrql;
if( PsWin32CalloutsEstablished )
{
PopTimeChangeInfo = a1->QuadPart;
qword_140C24E88 = a2->QuadPart;
EtwTraceSystemTimeChange(a1, a2, a3);
CurrentIrql = KeGetCurrentIrql();
__writecr8(2ui64);
ExNotifyWithProcessing(ExCbSetSystemTime, 0i64, 0i64, 0i64);
PopGetPolicyWorker(0x10ui64);
PopCheckForWork();
__writecr8(CurrentIrql);
}
}Referenced by:
ExpRefreshSystemTime
ExpSetSystemTime
NtSetSystemTime
Phase1InitializationDiscard