SeAuditingHardLinkEventsWithContext

UINT8 __stdcall SeAuditingHardLinkEventsWithContext(
        UINT8 AccessGranted,
        VOID *SecurityDescriptor,
        _SECURITY_SUBJECT_CONTEXT *SubjectSecurityContext){
  __int16 v3; 
  __int64 v4; 
  char *v5; 

  v3 = *((_WORD *)SecurityDescriptor + 1);
  if( (v3 & 0x10) == 0 )
    return 0;
  if( v3 >= 0 )
  {
    v5 = (char *)*((_QWORD *)SecurityDescriptor + 3);
  }
  else
  {
    v4 = *((unsigned int *)SecurityDescriptor + 3);
    if( !(_DWORD)v4 )
      return 0;
    v5 = (char *)SecurityDescriptor + v4;
  }
  return v5
      && *((_WORD *)v5 + 2)
      && SepAdtAuditThisEventWithContext(0x74ui64, AccessGranted, AccessGranted == 0, SubjectSecurityContext);
}

Referenced by:

No references.