RtlIsElevatedRid

CHAR __fastcall RtlIsElevatedRid(INT64 a1){
  void *v1; 
  int v2; 
  UINT *v3; 
  int v4; 
  UINT v5; 
  __int64 *i; 
  if( !a1 )
    return 0;
  if( (*(_DWORD *)(a1 + 8) & 0x30) != 0 )
    return 0;
  v1 = *(void **)a1;
  v2 = *RtlSubAuthorityCountSid(*(void **)a1);
  if( !(_BYTE)v2 || *RtlSubAuthoritySid(v1, 0i64) - 80 <= 0x1F )
    return 0;
  v3 = RtlSubAuthoritySid(v1, (unsigned int)(v2 - 1));
  v4 = 0;
  v5 = *v3;
  for( i = qword_1400178E0; v5 != *(_DWORD *)i; i = (__int64 *)((char *)i + 4) )
  {
    if( (unsigned int)++v4 >= 0x13 )
      return 0;
  }
  return 1;
}

Referenced by: