SeAuditingFileEventsWithContextEx

INT8 __fastcall SeAuditingFileEventsWithContextEx(INT8 a1, INT64 a2, INT64 *a3, INT8 *a4){
  INT8 v6; 
  unsigned int v7; 

  v6 = 0;
  v7 = a1 != 0 ? 0xFFFFFFD3 : 0;
  if( a4 )
    *a4 = SepAdtAuditThisEventWithContext(0x81ui64, a1, a1 == 0, (_SECURITY_SUBJECT_CONTEXT *)a3);
  if( SepAdtAuditThisEventWithContext(0x74ui64, a1, a1 == 0, (_SECURITY_SUBJECT_CONTEXT *)a3)
    || SepAdtAuditThisEventByCategoryWithContext(3ui64, v7 + 48, (_SECURITY_SUBJECT_CONTEXT *)a3) )
  {
    return 1;
  }
  return v6;
}

Referenced by: