SeAuditingFileEventsWithContextEx

BOOL __fastcall SeAuditingFileEventsWithContextEx(
        INT64 AccessGranted,
        VOID *SecurityDescriptor,
        SECURITY_SUBJECT_CONTEXT *SubjectSecurityContext,
        UINT8 *StagingEnabled){
  UINT8 v5; 
  char v6; 
  unsigned int v7; 
  BOOL result; 
  v5 = AccessGranted;
  v6 = 0;
  v7 = (_BYTE)AccessGranted != 0 ? 0xFFFFFFD3 : 0;
  if( StagingEnabled )
    *StagingEnabled = SepAdtAuditThisEventWithContext(
                        0x81ui64,
                        AccessGranted,
                        (_BYTE)AccessGranted == 0,
                        SubjectSecurityContext);
  if( SepAdtAuditThisEventWithContext(0x74ui64, v5, v5 == 0, SubjectSecurityContext)
    || SepAdtAuditThisEventByCategoryWithContext(3ui64, v7 + 48, SubjectSecurityContext) )
  {
    v6 = 1;
  }
  LOBYTE(result) = v6;
  return result;
}

Referenced by: