SeReleaseSid

VOID __stdcall SeReleaseSid(VOID *CapturedSid, CHAR RequestorMode, UINT8 ForceCapture){
  if( !RequestorMode && ForceCapture == 1 || RequestorMode == 1 )
    ExFreePoolWithTag(CapturedSid, 0);
}

Referenced by:

AlpcpConnectPort
AlpcpPortQueryConnectedSidInfo
ExpWnfReleaseCapturedScopeInstanceId
NtCreateLowBoxToken
NtCreateTokenEx
NtSecureConnectPort
NtSetInformationToken
SeAccessCheckByTypeWithAdminlessChecks
SepAccessCheckAndAuditAlarmWithAdminlessChecks