CmpVerifyCreateOrDeleteKeyLogRecord

INT64 __fastcall CmpVerifyCreateOrDeleteKeyLogRecord(INT64 a1){
  unsigned int v1; 
  __int64 v2; 
  unsigned int v3; 
  v1 = *(_DWORD *)(a1 + 4);
  if( v1 < 0x40 )
    return 3222863920i64;
  if( *(_DWORD *)(a1 + 48) > 1u )
    return 3222863920i64;
  v2 = *(unsigned __int16 *)(a1 + 32);
  if( (v2 & 1) != 0 )
    return 3222863920i64;
  v3 = v2 + 64;
  if( v1 < v3 )
    return 3222863920i64;
  else
    return RtlValidRelativeSecurityDescriptor((PVOID)(v2 + a1 + 64), v1 - v3, 0i64) != 0 ? 0 : 0xC0190030;
}

Referenced by: