RtlGetOwnerSecurityDescriptor

NTSTATUS __stdcall RtlGetOwnerSecurityDescriptor(VOID *SecurityDescriptor, VOID **Owner, UINT8 *OwnerDefaulted){
  char *v4; 
  __int64 v5; 

  if( *(_BYTE *)SecurityDescriptor != 1 )
    return -1073741736;
  v4 = 0i64;
  if( *((__int16 *)SecurityDescriptor + 1) >= 0 )
  {
    v4 = (char *)*((_QWORD *)SecurityDescriptor + 1);
  }
  else
  {
    v5 = *((unsigned int *)SecurityDescriptor + 1);
    if( (_DWORD)v5 )
      v4 = (char *)SecurityDescriptor + v5;
  }
  *Owner = v4;
  *OwnerDefaulted = *((_BYTE *)SecurityDescriptor + 2) & 1;
  return 0;
}

Referenced by:

CmpCheckExeOwnerForPca
CmpCheckKeyOwnerForPca
CmpCopySaclToVirtualKey
IopGetSecurityDescriptorInformation
LocalConvertSDToStringSD_Rev1
PipChangeDeviceObjectFromRegistryProperties
PspAllocateAndQueryNotificationChannel
RtlReplaceSidInSd
RtlpSysVolCheckOwnerAndSecurity