SepSDContainsAttributeACE

UINT8 __stdcall SepSDContainsAttributeACE(VOID *pSecurityDescriptor){
  UINT8 v1; 
  _ACL *pAcl; 
  UINT8 v4; 
  UINT8 v5; 
  UINT64 pIndex; 

  v1 = 0;
  pAcl = 0i64;
  v4 = 0;
  LODWORD(pIndex) = 0;
  if( RtlGetSaclSecurityDescriptor(pSecurityDescriptor, &v4, &pAcl, &v5) >= 0 && v4 )
    return RtlFindAceByType(pAcl, 0x12ui64, &pIndex) != 0i64;
  return v1;
}

Referenced by:

SepAdtOpenObjectAuditAlarm