RtlCreateAcl
NTSTATUS __stdcall RtlCreateAcl(PACL Acl, _ACL AclLength, UINT64 AclRevision, UINT64 a4){
__int16 v4;
unsigned __int8 v5;
NTSTATUS result;
v4 = *(_WORD *)&AclLength.AclRevision;
v5 = AclRevision;
if( *(_DWORD *)&AclLength.AclRevision < 8u )
return -1073741789;
if( (unsigned int)(AclRevision - 2) > 2 || *(_DWORD *)&AclLength.AclRevision > 0xFFFCu )
return -1073741811;
memset(Acl, 0i64, *(size_t *)&AclLength.AclRevision);
result = 0;
Acl->AclRevision = v5;
Acl->Sbz1 = 0;
Acl->AclSize = v4 & 0xFFFC;
*(_DWORD *)&Acl->AceCount = 0;
return result;
}Referenced by:
AdtpBuildAccessReasonAuditStringInternal
BiCreateKeySecurityDescriptor
CMFCreateSecurityDescriptor
CmGetRegKeySecurityDescriptor
CmpAdminSystemSecurityDescriptor
CmpGenerateAppHiveSecurityDescriptor
CmpHiveRootSecurityDescriptor
DbgkpCreateNotificationEvent
DrvDbGetSecurityDescriptor
ExpKeyedEventInitialization
IopApplySystemPartitionProt
IopCreateSecurityDescriptorPerType
IopCreateUmdfDirectory
MiCreateMemoryEventSD
MiCreatePagingFile
MiSessionObjectCreate
NtSetUuidSeed
ObCreateKernelObjectsSD
ObInitSystem
ObpCreateDefaultObjectTypeSD
ObpGetDosDevicesProtection
ObpGetSilosRootDirectory
ObpVerifyAccessToBoundaryEntry
PfpCreateEvent
PiAuCheckTokenMembership
PiAuCreateLocalSystemSecurityObject
PiAuCreateStandardSecurityObject
PiAuGetDriverDataDirectorySecurityObject
PiAuGetServiceStateSecurityObject
PiAuGetStateDirectorySecurityObject
PiDevCfgGetKeySecurityDescriptor
PiUEventInitClientRegistrationContext
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
PopCreateHiberFileSecurityDescriptor
PopCreateNotificationName
PopUmpoInitializeChannel
PspAllocateAndQueryNotificationChannel
PspAllocateAndQueryProcessNotificationChannel
PspInitializeSystemPartitionPhase0
RtlCheckTokenCapability
RtlCheckTokenMembershipEx
RtlpComputeMergedAcl2
RtlpCreateServerAcl
RtlpNewSecurityObject
RtlpSysVolCreateSecurityDescriptor
SeMakeAnonymousLogonToken
SeMakeAnonymousLogonTokenNoEveryone
SeMakeSystemToken
SepAppendAceToTokenDefaultDacl
SepAppendAceToTokenObjectAcl
SepCreateImpersonationTokenDacl
SepInitProcessAuditSd
SepInitSystemDacls
SepInitializationPhase1
SmKmStoreFileMakeSecurityDescriptor
ViInitializeLocalSystemDescriptor
WdipAccessCheck
WmipInitializeSecurity
sub_1405F50F8