EtwTraceThreadSetName
VOID __fastcall EtwTraceThreadSetName(INT64 a1){
unsigned int v1;
unsigned __int16 *v2;
__int64 *v3;
unsigned int v4;
unsigned __int64 v5;
UINT64 Flag;
int v7[4];
EVENT_DATA_DESCRIPTOR EventData;
__int64 *v9;
__int64 v10;
__int64 *v11;
__int64 v12;
v7[0] = *(_DWORD *)(a1 + 1144);
v1 = 2;
v7[1] = *(_DWORD *)(a1 + 1152);
EventData.Ptr = (unsigned __int64)v7;
v2 = *(unsigned __int16 **)(a1 + 1552);
v7[2] = 0;
*(_QWORD *)&EventData.Size = 8i64;
if( v2 && (v3 = (__int64 *)*((_QWORD *)v2 + 1)) != 0i64 )
{
v4 = *v2;
v5 = 2048i64;
if( (unsigned __int16)v4 < 0x800u )
v5 = v4;
v9 = v3;
v10 = (unsigned int)v5;
if( !(_DWORD)v5 || *((_WORD *)v3 + (v5 >> 1) - 1) )
{
v12 = 2i64;
v11 = &EtwpNull;
v1 = 3;
}
}
else
{
v10 = 2i64;
v9 = &EtwpNull;
}
LODWORD(Flag) = 5249026;
EtwTraceKernelEvent(&EventData, v1, 2ui64, 0x548u, Flag);
}Referenced by:
NtSetInformationThread