SepGetScopedPolicySid

VOID *__stdcall SepGetScopedPolicySid(_ACL *Sacl){
  VOID *result; 
  UINT64 pIndex; 

  LODWORD(pIndex) = 0;
  while( 1 )
  {
    result = RtlFindAceByType(Sacl, 0x13ui64, &pIndex);
    if( result )
    {
      if( (*((_BYTE *)result + 1) & 8) == 0 )
        break;
    }
    LODWORD(pIndex) = pIndex + 1;
    if( !result )
      return result;
  }
  return(char *)result + 8;
}

Referenced by: