RtlGetGroupSecurityDescriptor
INT64 __stdcall RtlGetGroupSecurityDescriptor(VOID *SecurityDescriptor, VOID **Group, UINT8 *GroupDefaulted){
char *v4;
__int64 v5;
if( *(_BYTE *)SecurityDescriptor != 1 )
return 3221225560i64;
v4 = 0i64;
if( *((__int16 *)SecurityDescriptor + 1) >= 0 )
{
v4 = (char *)*((_QWORD *)SecurityDescriptor + 2);
}
else
{
v5 = *((unsigned int *)SecurityDescriptor + 2);
if( (_DWORD)v5 )
v4 = (char *)SecurityDescriptor + v5;
}
*Group = v4;
*GroupDefaulted = (*((_BYTE *)SecurityDescriptor + 2) & 2) != 0;
return 0i64;
}Referenced by:
CmpCopySaclToVirtualKey
IopGetSecurityDescriptorInformation
LocalConvertSDToStringSD_Rev1
PiDevCfgGetKeySecurityDescriptor
PipChangeDeviceObjectFromRegistryProperties
RtlReplaceSidInSd