SepMatchCapability

VOID __stdcall SepMatchCapability(
        _TOKEN *Token,
        UINT64 DesiredAccess,
        VOID *Sid,
        UINT64 AceMask,
        UINT8 *CapabilityMatched,
        UINT64 *GrantedAccess){
  int v6; 
  int v7; 

  v6 = AceMask;
  v7 = DesiredAccess;
  if( SepSidInTokenSidHash(&Token->CapabilitiesHash, 0i64, Sid, 0, 1u, 0) )
  {
    *(_DWORD *)GrantedAccess |= v6 & v7;
    *CapabilityMatched = 1;
  }
}

Referenced by:

SepMaximumAccessCheck
SepMaximumAccessCheckEx
SepNormalAccessCheck
SepNormalAccessCheckEx