RtlValidSid
INT8 __fastcall RtlValidSid(_BYTE *a1){
INT8 result;
if( (unsigned __int64)a1 <= 0x7FFFFFFF0000i64 )
return 0;
result = *a1 & 0xF;
if( result != 1 || a1[1] > 0xFu )
return 0;
return result;
}Referenced by:
AdtpPackageParameters
CmGetRegKeySecurityDescriptor
DrvDbGetSecurityDescriptor
IoCheckQuotaBufferValidity
IopCheckGetQuotaBufferValidity
NtManageHotPatch
NtQueryQuotaInformationFile
PiAuCheckClientInteractive
PiAuCreateStandardSecurityObject
PiAuCreateUserSids
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
RtlAddAccessFilterAce
RtlAddMandatoryAce
RtlAddProcessTrustLabelAce
RtlAddResourceAttributeAce
RtlConvertSidToUnicodeString
RtlLengthSidAsUnicodeString
RtlValidSecurityDescriptor
RtlpAddKnownObjectAce
RtlpSetSecurityObject
RtlpValidateSidBuffer
SddlAddAccessFilterAce
SddlAddMandatoryAce
SddlAddProcessTrustLabelAce
SddlAddScopedPolicyIDAce
SeCaptureSid
SeCaptureSidAndAttributesArray
SepReadSingleCap
SepValidateCAPIDs