RtlValidSid

UINT8 __stdcall RtlValidSid(PVOID Sid){
  UINT8 result; 
  if( (unsigned __int64)Sid <= 0x7FFFFFFF0000i64 )
    return 0;
  result = *(_BYTE *)Sid & 0xF;
  if( result != 1 || *((_BYTE *)Sid + 1) > 0xFu )
    return 0;
  return result;
}

Referenced by:

AdtpPackageParameters
CmGetRegKeySecurityDescriptor
DrvDbGetSecurityDescriptor
IoCheckQuotaBufferValidity
IopCheckGetQuotaBufferValidity
NtManageHotPatch
NtQueryQuotaInformationFile
PiAuCheckClientInteractive
PiAuCreateStandardSecurityObject
PiAuCreateUserSids
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
RtlAddAccessFilterAce
RtlAddMandatoryAce
RtlAddProcessTrustLabelAce
RtlAddResourceAttributeAce
RtlConvertSidToUnicodeString
RtlLengthSidAsUnicodeString
RtlValidSecurityDescriptor
RtlpAddKnownObjectAce
RtlpSetSecurityObject
RtlpValidateSidBuffer
SddlAddAccessFilterAce
SddlAddMandatoryAce
SddlAddProcessTrustLabelAce
SddlAddScopedPolicyIDAce
SeCaptureSid
SeCaptureSidAndAttributesArray
SepReadSingleCap
SepValidateCAPIDs