NTSTATUS __fastcall RtlGetEnabledExtendedFeatures(INT64 a1){ return a1 & (LODWORD(KUSER_SHARED_DATA.XState.EnabledFeatures) | LODWORD(KUSER_SHARED_DATA.XState.EnabledUserVisibleSupervisorFeatures)); }