IoGetActivityIdIrp

NTSTATUS __stdcall IoGetActivityIdIrp(_IRP *Irp, _GUID *Guid){
  __int64 v2; 
  NTSTATUS result; 
  v2 = *((_QWORD *)Irp + 25);
  if( *((char *)Irp + 71) < 0 || !v2 || (*(_BYTE *)(v2 + 2) & 1) == 0 )
    return -1073741275;
  result = 0;
  *Guid = *(_GUID *)(*((_QWORD *)Irp + 25) + 24i64);
  return result;
}

Referenced by:

EtwpTraceIo
IoPropagateActivityIdToThread