RtlInitializeSid

INT64 __fastcall RtlInitializeSid(VOID *Sid, SID_IDENTIFIER_AUTHORITY *IdentifierAuthority, UINT64 SubAuthorityCount){
  if( (unsigned __int8)SubAuthorityCount > 0xFu )
    return 3221225485i64;
  *((_BYTE *)Sid + 1) = SubAuthorityCount;
  *(_BYTE *)Sid = 1;
  *(SID_IDENTIFIER_AUTHORITY *)((char *)Sid + 2) = *IdentifierAuthority;
  return 0i64;
}

Referenced by:

CMFCreateSecurityDescriptor
CmGetRegKeySecurityDescriptor
CmpAdminSystemSecurityDescriptor
CmpHiveRootSecurityDescriptor
CmpInitializeTrustedInstallerSid
DrvDbGetSecurityDescriptor
ExpFirmwareAccessAppContainerCheck
InitializeSidLookupTable
IopCreateUmdfDirectory
NtSetUuidSeed
ObpVerifyCreatorAccessCheck
PiAuAllocateAndInitializeSid
PiAuCheckClientInteractive
PnpGetEnumSecurityDescriptor
PnpGetPropertiesSecurityDescriptor
PopCreateHiberFileSecurityDescriptor
PopCreateTimebrokerServiceSid
PopNetInitialize
RtlCapabilityCheck
RtlDeriveCapabilitySidsFromName
RtlGetAppContainerParent
RtlInitializeSidEx
RtlpCapabilityCheckSystemCapability
RtlpSetSecurityObject
SepVariableInitialization
SmKmStoreFileMakeSecurityDescriptor
SysCtxRegOpenCurrentUserKey
WdipAccessCheck