SepAuditingEnabledForSubcategory

BOOL __fastcall SepAuditingEnabledForSubcategory(UINT64 Subcategory, INT64 AccessGranted, INT64 AccessDenied){
  __int64 v3; 
  INT64 *v4; 
  v3 = (unsigned int)(Subcategory - 100);
  v4 = &SeAuditingState;
  LOBYTE(v4) = *((_BYTE *)&SeAuditingState + 2 * v3) && (_BYTE)AccessGranted
            || *((_BYTE *)&SeAuditingState + 2 * v3 + 1) && (_BYTE)AccessDenied;
  return(int)v4;
}

Referenced by:

SepAdtAuditPrivilegeUseWithContext
SepAdtAuditThisEventWithContext
SepAdtClassifyObjectIntoSubCategory