RtlValidSid
UINT8 __stdcall RtlValidSid(PVOID Sid){
UINT8 result;
if( (unsigned __int64)Sid <= 0x7FFFFFFF0000i64 )
return 0;
result = *(_BYTE *)Sid & 0xF;
if( result != 1 || *((_BYTE *)Sid + 1) > 0xFu )
return 0;
return result;
}Referenced by:
AdtpPackageParameters
CmGetRegKeySecurityDescriptor
DrvDbGetSecurityDescriptor
IoCheckQuotaBufferValidity
IopCheckGetQuotaBufferValidity
NtManageHotPatch
NtQueryQuotaInformationFile
PiAuCheckClientInteractive
PiAuCreateStandardSecurityObject
PiAuCreateUserSids
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
RtlAddAccessFilterAce
RtlAddMandatoryAce
RtlAddProcessTrustLabelAce
RtlAddResourceAttributeAce
RtlConvertSidToUnicodeString
RtlLengthSidAsUnicodeString
RtlValidSecurityDescriptor
RtlpAddKnownObjectAce
RtlpSetSecurityObject
RtlpValidateSidBuffer
SddlAddAccessFilterAce
SddlAddMandatoryAce
SddlAddProcessTrustLabelAce
SddlAddScopedPolicyIDAce
SeCaptureSid
SeCaptureSidAndAttributesArray
SepReadSingleCap
SepValidateCAPIDs