_GUID *__stdcall IoGetActivityIdThread(){ return(_GUID *)KeGetCurrentThread()[1].WaitBlock[1].WaitListEntry.Flink; }