pub unsafe extern "system" fn SeAuditTransactionStateChange(
    transactionid: *const GUID,
    resourcemanagerid: *const GUID,
    newtransactionstate: u32
)