RtlValidSid

INT8 __fastcall RtlValidSid(_BYTE *a1){
  INT8 result; 

  if( (unsigned __int64)a1 <= 0x7FFFFFFF0000i64 )
    return 0;
  result = *a1 & 0xF;
  if( result != 1 || a1[1] > 0xFu )
    return 0;
  return result;
}

Referenced by:

AdtpPackageParameters
CmGetRegKeySecurityDescriptor
DrvDbGetSecurityDescriptor
IoCheckQuotaBufferValidity
IopCheckGetQuotaBufferValidity
NtManageHotPatch
NtQueryQuotaInformationFile
PiAuCheckClientInteractive
PiAuCreateStandardSecurityObject
PiAuCreateUserSids
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
RtlAddAccessFilterAce
RtlAddMandatoryAce
RtlAddProcessTrustLabelAce
RtlAddResourceAttributeAce
RtlConvertSidToUnicodeString
RtlLengthSidAsUnicodeString
RtlValidSecurityDescriptor
RtlpAddKnownObjectAce
RtlpSetSecurityObject
RtlpValidateSidBuffer
SddlAddAccessFilterAce
SddlAddMandatoryAce
SddlAddProcessTrustLabelAce
SddlAddScopedPolicyIDAce
SeCaptureSid
SeCaptureSidAndAttributesArray
SepReadSingleCap
SepValidateCAPIDs