SepAuditingEnabledForSubcategory
BOOL __fastcall SepAuditingEnabledForSubcategory(UINT64 Subcategory, INT64 AccessGranted, INT64 AccessDenied){
__int64 v3;
INT64 *v4;
v3 = (unsigned int)(Subcategory - 100);
v4 = &SeAuditingState;
LOBYTE(v4) = *((_BYTE *)&SeAuditingState + 2 * v3) && (_BYTE)AccessGranted
|| *((_BYTE *)&SeAuditingState + 2 * v3 + 1) && (_BYTE)AccessDenied;
return(int)v4;
}Referenced by:
SepAdtAuditPrivilegeUseWithContext
SepAdtAuditThisEventWithContext
SepAdtClassifyObjectIntoSubCategory