NTSTATUS __stdcall IvtGetIdentityMappedDomain(INT64 a1, INT64 *a2){ *a2 = *(__int64 *)(a1 + 272) >> 12; return *(_DWORD *)(a1 + 224); }