pub unsafe extern "system" fn AuditQueryPerUserPolicy(
    pSid: *const SID,
    pSubCategoryGuids: *const GUID,
    PolicyCount: ULONG,
    ppAuditPolicy: *mut PAUDIT_POLICY_INFORMATION
) -> BOOLEAN