SeAuditingHardLinkEventsWithContext
UINT8 __stdcall SeAuditingHardLinkEventsWithContext(
UINT8 AccessGranted,
VOID *SecurityDescriptor,
_SECURITY_SUBJECT_CONTEXT *SubjectSecurityContext){
__int16 v3;
__int64 v4;
char *v5;
v3 = *((_WORD *)SecurityDescriptor + 1);
if( (v3 & 0x10) == 0 )
return 0;
if( v3 >= 0 )
{
v5 = (char *)*((_QWORD *)SecurityDescriptor + 3);
}
else
{
v4 = *((unsigned int *)SecurityDescriptor + 3);
if( !(_DWORD)v4 )
return 0;
v5 = (char *)SecurityDescriptor + v4;
}
return v5
&& *((_WORD *)v5 + 2)
&& SepAdtAuditThisEventWithContext(0x74ui64, AccessGranted, AccessGranted == 0, SubjectSecurityContext);
}Referenced by:
No references.