#ifndef _NTRTL_H
_Must_inspect_result_
NTSYSAPI
NTSTATUS
NTAPI
RtlAllocateAndInitializeSid(
_In_ PSID_IDENTIFIER_AUTHORITY IdentifierAuthority,
_In_ UCHAR SubAuthorityCount,
_In_ ULONG SubAuthority0,
_In_ ULONG SubAuthority1,
_In_ ULONG SubAuthority2,
_In_ ULONG SubAuthority3,
_In_ ULONG SubAuthority4,
_In_ ULONG SubAuthority5,
_In_ ULONG SubAuthority6,
_In_ ULONG SubAuthority7,
_Outptr_ PSID *Sid
);
View code on GitHub// ntifs.h
NTSYSAPI NTSTATUS RtlAllocateAndInitializeSid(
PSID_IDENTIFIER_AUTHORITY IdentifierAuthority,
UCHAR SubAuthorityCount,
ULONG SubAuthority0,
ULONG SubAuthority1,
ULONG SubAuthority2,
ULONG SubAuthority3,
ULONG SubAuthority4,
ULONG SubAuthority5,
ULONG SubAuthority6,
ULONG SubAuthority7,
PSID *Sid
);
View the official Windows Driver Kit DDI referenceThis function is documented in Windows Driver Kit.
The RtlAllocateAndInitializeSid routine is reserved for system use. See RtlCopySid and RtlInitializeSid.
IdentifierAuthorityReserved.
SubAuthorityCountReserved.
SubAuthority0Reserved.
SubAuthority1Reserved.
SubAuthority2Reserved.
SubAuthority3Reserved.
SubAuthority4Reserved.
SubAuthority5Reserved.
SubAuthority6Reserved.
SubAuthority7Reserved.
SidReserved.
Reserved.