ObGetExtendedUserInfo

INT64 __fastcall ObGetExtendedUserInfo(INT64 a1){
  char v1; 
  INT64 v2; 
  v1 = *(_BYTE *)(a1 - 22);
  v2 = a1 - 48;
  if( (v1 & 0x40) != 0 )
    return *(_QWORD *)(v2 - *((unsigned __int8 *)ObpInfoMaskToOffset + (v1 & 0x7F))) + 32i64;
  else
    return 0i64;
}

Referenced by:

PsReplaceSiloContext