PopClearSystemSleepCheckpoint
NTSTATUS __stdcall PopClearSystemSleepCheckpoint(){
char v0;
NTSTATUS v1;
NTSTATUS result;
UINT64 Attributes;
v1 = 0;
if( (PopCheckpointSystemSleepEnabled || v0) && (*(&stru_140C23628 + 2324) & 2) == 0 )
{
LODWORD(Attributes) = 1;
v1 = ExSetFirmwareEnvironmentVariable(
(_UNICODE_STRING *)&PopCheckpointSystemSleepVariable,
(_GUID *)&SYSTEM_SLEEP_ETW_CHECKPOINT_GUID,
0i64,
0i64,
Attributes);
if( v1 == -1073741568 )
v1 = 0;
}
PopCheckpointSystemSleepEnabled = 0;
result = v1;
PopSleepCheckpoint = 0;
_InterlockedExchange((_DWORD *)&stru_140C23628 + 67, 0);
return result;
}Referenced by:
PopCheckShutdownMarker
PopUnlockAfterSleepWorker