IoGetActivityIdThread

const GUID *__fastcall IoGetActivityIdThread(){
  return(const GUID *)*((_QWORD *)KeGetCurrentThread() + 180);
}