ObpAdjustAccessMask

NTSTATUS __stdcall ObpAdjustAccessMask(_ACCESS_STATE *AccessState){
  _BYTE *v1; 

  v1 = (_BYTE *)*((_QWORD *)AccessState + 8);
  if( !v1 )
    return 0;
  if( RtlValidSecurityDescriptor(*((VOID **)AccessState + 8)) )
  {
    if( (v1[2] & 0x10) != 0 && (*((_DWORD *)AccessState + 5) & 0x1000000) == 0 )
      *((_DWORD *)AccessState + 4) |= SeObjectCreateSaclAccessBits(v1);
    return 0;
  }
  return -1073741703;
}

Referenced by:

ObReferenceObjectByNameEx