RtlInitializeSid
INT64 __fastcall RtlInitializeSid(VOID *Sid, SID_IDENTIFIER_AUTHORITY *IdentifierAuthority, UINT64 SubAuthorityCount){
if( (unsigned __int8)SubAuthorityCount > 0xFu )
return 3221225485i64;
*((_BYTE *)Sid + 1) = SubAuthorityCount;
*(_BYTE *)Sid = 1;
*(SID_IDENTIFIER_AUTHORITY *)((char *)Sid + 2) = *IdentifierAuthority;
return 0i64;
}Referenced by:
CMFCreateSecurityDescriptor
CmGetRegKeySecurityDescriptor
CmpAdminSystemSecurityDescriptor
CmpHiveRootSecurityDescriptor
CmpInitializeTrustedInstallerSid
DrvDbGetSecurityDescriptor
ExpFirmwareAccessAppContainerCheck
InitializeSidLookupTable
IopCreateUmdfDirectory
NtSetUuidSeed
ObpVerifyCreatorAccessCheck
PiAuAllocateAndInitializeSid
PiAuCheckClientInteractive
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
PopCreateHiberFileSecurityDescriptor
PopCreateTimebrokerServiceSid
PopNetInitialize
RtlCapabilityCheck
RtlDeriveCapabilitySidsFromName
RtlGetAppContainerParent
RtlInitializeSidEx
RtlpCapabilityCheckSystemCapability
RtlpSetSecurityObject
SepVariableInitialization
SmKmStoreFileMakeSecurityDescriptor
SysCtxRegOpenCurrentUserKey
WdipAccessCheck