EtwpInitializeActivityIdSeed

INT64 __fastcall EtwpInitializeActivityIdSeed(INT64 a1, INT16 a2){
  unsigned int LowPart; 
  INT64 result; 
  INT64 v5; 
  __int128 v6; 
  *(_WORD *)(a1 + 6) = a2;
  v6 = 0i64;
  *(_QWORD *)(a1 + 8) = *(_QWORD *)&KUSER_SHARED_DATA.SystemTime.LowPart;
  v5 = 16i64;
  if( (unsigned int)HeadlessDispatch(0x15ui64, 0i64, 0i64, (UINT8 *)&v6, &v5) )
  {
    LowPart = KUSER_SHARED_DATA.SystemTime.LowPart;
    *(_QWORD *)&v6 = *(_QWORD *)&KUSER_SHARED_DATA.SystemTime.LowPart;
  }
  else
  {
    LowPart = v6;
  }
  *(_DWORD *)a1 = LowPart;
  result = WORD2(v6);
  *(_WORD *)(a1 + 4) = WORD2(v6);
  return result;
}

Referenced by:

EtwInitializeProcessor