RtlAddAccessDeniedObjectAce

NTSTATUS __stdcall RtlAddAccessDeniedObjectAce(
        PACL Acl,
        UINT64 AceRevision,
        UINT64 AceFlags,
        _ACCESS_MASK AccessMask,
        _GUID *ObjectTypeGuid,
        _GUID *InheritedObjectTypeGuid,
        VOID *Sid){
  if( ObjectTypeGuid || InheritedObjectTypeGuid )
    return RtlpAddKnownObjectAce(
             Acl,
             AceRevision,
             AceFlags,
             AccessMask,
             ObjectTypeGuid,
             InheritedObjectTypeGuid,
             Sid,
             6u);
  else
    return RtlpAddKnownAce(Acl, AceRevision, AceFlags, *(UINT64 *)&AccessMask, Sid, 1u);
}

Referenced by:

LocalGetAclForString