EtwpInitializeActivityIdSeed
__int64 __fastcall EtwpInitializeActivityIdSeed(__int64 a1, __int16 a2){
unsigned int LowPart;
__int64 result;
UINT64 v5;
__int128 v6;
*(_WORD *)(a1 + 6) = a2;
v6 = 0i64;
*(_QWORD *)(a1 + 8) = *(_QWORD *)&KUSER_SHARED_DATA.SystemTime.LowPart;
v5 = 16i64;
if( HeadlessDispatch(HeadlessCmdQueryGUID, 0i64, 0i64, &v6, &v5) )
{
LowPart = KUSER_SHARED_DATA.SystemTime.LowPart;
*(_QWORD *)&v6 = *(_QWORD *)&KUSER_SHARED_DATA.SystemTime.LowPart;
}
else
{
LowPart = v6;
}
*(_DWORD *)a1 = LowPart;
result = WORD2(v6);
*(_WORD *)(a1 + 4) = WORD2(v6);
return result;
}Referenced by:
EtwInitializeProcessor