RtlGetGroupSecurityDescriptor

INT64 __stdcall RtlGetGroupSecurityDescriptor(VOID *SecurityDescriptor, VOID **Group, UINT8 *GroupDefaulted){
  char *v4; 
  __int64 v5; 
  if( *(_BYTE *)SecurityDescriptor != 1 )
    return 3221225560i64;
  v4 = 0i64;
  if( *((__int16 *)SecurityDescriptor + 1) >= 0 )
  {
    v4 = (char *)*((_QWORD *)SecurityDescriptor + 2);
  }
  else
  {
    v5 = *((unsigned int *)SecurityDescriptor + 2);
    if( (_DWORD)v5 )
      v4 = (char *)SecurityDescriptor + v5;
  }
  *Group = v4;
  *GroupDefaulted = (*((_BYTE *)SecurityDescriptor + 2) & 2) != 0;
  return 0i64;
}

Referenced by:

CmpCopySaclToVirtualKey
IopGetSecurityDescriptorInformation
LocalConvertSDToStringSD_Rev1
PiDevCfgGetKeySecurityDescriptor
PipChangeDeviceObjectFromRegistryProperties
RtlReplaceSidInSd