RtlGetOwnerSecurityDescriptor
NTSTATUS __stdcall RtlGetOwnerSecurityDescriptor(VOID *SecurityDescriptor, VOID **Owner, UINT8 *OwnerDefaulted){
char *v4;
__int64 v5;
if( *(_BYTE *)SecurityDescriptor != 1 )
return -1073741736;
v4 = 0i64;
if( *((__int16 *)SecurityDescriptor + 1) >= 0 )
{
v4 = (char *)*((_QWORD *)SecurityDescriptor + 1);
}
else
{
v5 = *((unsigned int *)SecurityDescriptor + 1);
if( (_DWORD)v5 )
v4 = (char *)SecurityDescriptor + v5;
}
*Owner = v4;
*OwnerDefaulted = *((_BYTE *)SecurityDescriptor + 2) & 1;
return 0;
}Referenced by:
CmpCheckExeOwnerForPca
CmpCheckKeyOwnerForPca
CmpCopySaclToVirtualKey
IopGetSecurityDescriptorInformation
LocalConvertSDToStringSD_Rev1
PipChangeDeviceObjectFromRegistryProperties
PspAllocateAndQueryNotificationChannel
RtlReplaceSidInSd
RtlpSysVolCheckOwnerAndSecurity