RtlSubAuthoritySid
UINT *__fastcall RtlSubAuthoritySid(void *Sid, UINT64 SubAuthority){
return(UINT *)((char *)Sid + 4 * (unsigned int)SubAuthority + 8);
}Referenced by:
CMFCreateSecurityDescriptor
CmGetRegKeySecurityDescriptor
CmpAdminSystemSecurityDescriptor
CmpHiveRootSecurityDescriptor
DrvDbGetSecurityDescriptor
ExpFirmwareAccessAppContainerCheck
InitializeSidLookupTable
LookupSidInTable
NtCreateLowBoxToken
NtSetInformationToken
NtSetUuidSeed
ObpVerifyCreatorAccessCheck
PiAuCheckClientInteractive
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
PopCreateHiberFileSecurityDescriptor
RtlCapabilityCheck
RtlGetAppContainerParent
RtlIsElevatedRid
RtlIsParentOfChildAppContainer
RtlpCapabilityCheckSystemCapability
RtlpGetTokenNamedObjectPath
RtlpNewSecurityObject
SeQueryInformationToken
SeQueryMandatoryLabel
SepCheckCapabilities
SepValidateReferencedCachedHandles
SmKmStoreFileMakeSecurityDescriptor
SysCtxRegOpenCurrentUserKey