SepPotentialGlobalTableAttribute
UINT8 __stdcall SepPotentialGlobalTableAttribute(UNICODE_STRING *pAttribute){
UNICODE_STRING *v2;
int v3;
UINT8 result;
v2 = &PotentialGlobalAttributePrefixes;
v3 = 0;
while( 1 )
{
if( KeGetCurrentIrql() >= 2u )
result = v2->Length <= pAttribute->Length && memcmp(v2->Buffer, pAttribute->Buffer, v2->Length) == 0;
else
result = RtlPrefixUnicodeString(v2, (INT64 *)pAttribute);
if( result )
break;
++v3;
++v2;
if( v3 )
return result;
}
return 1;
}Referenced by:
AuthzBasepEvaluateAceCondition
SepInternalQuerySecurityAttributesTokenEx
SepShouldSetDelinkFlags