RtlSubAuthoritySid

UINT *__fastcall RtlSubAuthoritySid(void *Sid, UINT64 SubAuthority){
  return(UINT *)((char *)Sid + 4 * (unsigned int)SubAuthority + 8);
}

Referenced by:

CMFCreateSecurityDescriptor
CmGetRegKeySecurityDescriptor
CmpAdminSystemSecurityDescriptor
CmpHiveRootSecurityDescriptor
DrvDbGetSecurityDescriptor
ExpFirmwareAccessAppContainerCheck
InitializeSidLookupTable
LookupSidInTable
NtCreateLowBoxToken
NtSetInformationToken
NtSetUuidSeed
ObpVerifyCreatorAccessCheck
PiAuCheckClientInteractive
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
PopCreateHiberFileSecurityDescriptor
RtlCapabilityCheck
RtlGetAppContainerParent
RtlIsElevatedRid
RtlIsParentOfChildAppContainer
RtlpCapabilityCheckSystemCapability
RtlpGetTokenNamedObjectPath
RtlpNewSecurityObject
SeQueryInformationToken
SeQueryMandatoryLabel
SepCheckCapabilities
SepValidateReferencedCachedHandles
SmKmStoreFileMakeSecurityDescriptor
SysCtxRegOpenCurrentUserKey