authz.dll

Description: Authorization Framework

Version: 10.0.19041.6328

Architecture: 64-bit

Operating System: Windows NT

SHA256: 88f29abfab53d4985b9c87f367ada147

File Size: 294.0 KB

Uploaded At: Dec. 1, 2025, 7:23 a.m.

Views: 24

Exported Functions

AuthzAccessCheck (Ordinal: 1, Address: 0x1e00)
AuthzAddSidsToContext (Ordinal: 2, Address: 0x12270)
AuthzCachedAccessCheck (Ordinal: 3, Address: 0x12390)
AuthzComputeEffectivePermission (Ordinal: 4, Address: 0x21c80)
AuthzEnumerateSecurityEventSources (Ordinal: 5, Address: 0x128f0)
AuthzEvaluateSacl (Ordinal: 6, Address: 0x12f20)
AuthzFreeAuditEvent (Ordinal: 7, Address: 0x5cc0)
AuthzFreeCentralAccessPolicyCache (Ordinal: 8, Address: 0x12fb0)
AuthzFreeContext (Ordinal: 9, Address: 0x2900)
AuthzFreeHandle (Ordinal: 10, Address: 0x12fc0)
AuthzFreeResourceManager (Ordinal: 11, Address: 0x5520)
AuthzGetInformationFromContext (Ordinal: 12, Address: 0x2650)
AuthzInitializeCompoundContext (Ordinal: 13, Address: 0x13060)
AuthzInitializeContextFromAuthzContext (Ordinal: 14, Address: 0x8940)
AuthzInitializeContextFromSid (Ordinal: 15, Address: 0x2820)
AuthzInitializeContextFromToken (Ordinal: 16, Address: 0x2d70)
AuthzInitializeObjectAccessAuditEvent (Ordinal: 17, Address: 0x13160)
AuthzInitializeObjectAccessAuditEvent2 (Ordinal: 18, Address: 0x4f20)
AuthzInitializeRemoteAccessCheck (Ordinal: 19, Address: 0x8ce0)
AuthzInitializeRemoteResourceManager (Ordinal: 20, Address: 0x131b0)
AuthzInitializeResourceManager (Ordinal: 21, Address: 0x59b0)
AuthzInitializeResourceManagerEx (Ordinal: 22, Address: 0x90d0)
AuthzInstallSecurityEventSource (Ordinal: 23, Address: 0x131f0)
AuthzModifyClaims (Ordinal: 24, Address: 0x13610)
AuthzModifySecurityAttributes (Ordinal: 25, Address: 0x13680)
AuthzModifySids (Ordinal: 26, Address: 0x136f0)
AuthzOpenObjectAudit (Ordinal: 27, Address: 0x13760)
AuthzRegisterCapChangeNotification (Ordinal: 28, Address: 0x13980)
AuthzRegisterSecurityEventSource (Ordinal: 29, Address: 0x13a70)
AuthzReportSecurityEvent (Ordinal: 30, Address: 0x13b60)
AuthzReportSecurityEventFromParams (Ordinal: 31, Address: 0x13c20)
AuthzSetAppContainerInformation (Ordinal: 32, Address: 0x13dc0)
AuthzShutdownRemoteAccessCheck (Ordinal: 33, Address: 0x13e10)
AuthzUninstallSecurityEventSource (Ordinal: 34, Address: 0x13e20)
AuthzUnregisterCapChangeNotification (Ordinal: 35, Address: 0x13ee0)
AuthzUnregisterSecurityEventSource (Ordinal: 36, Address: 0x13f50)
AuthziAccessCheckEx (Ordinal: 37, Address: 0x14010)
AuthziAllocateAuditParams (Ordinal: 38, Address: 0x11f0)
AuthziCheckContextMembership (Ordinal: 39, Address: 0x140b0)
AuthziFreeAuditEventType (Ordinal: 40, Address: 0x5ca0)
AuthziFreeAuditParams (Ordinal: 41, Address: 0x1190)
AuthziFreeAuditQueue (Ordinal: 42, Address: 0x14110)
AuthziGenerateAdminAlertAuditW (Ordinal: 43, Address: 0x11b80)
AuthziInitializeAuditEvent (Ordinal: 44, Address: 0x50a0)
AuthziInitializeAuditEventType (Ordinal: 45, Address: 0x6350)
AuthziInitializeAuditParams (Ordinal: 46, Address: 0x65d0)
AuthziInitializeAuditParamsFromArray (Ordinal: 47, Address: 0x14210)
AuthziInitializeAuditParamsWithRM (Ordinal: 48, Address: 0x87c0)
AuthziInitializeAuditQueue (Ordinal: 49, Address: 0x92a0)
AuthziInitializeContextFromSid (Ordinal: 50, Address: 0x143b0)
AuthziLogAuditEvent (Ordinal: 51, Address: 0x5e00)
AuthziModifyAuditEvent (Ordinal: 52, Address: 0x144c0)
AuthziModifyAuditEvent2 (Ordinal: 53, Address: 0x8270)
AuthziModifyAuditEventType (Ordinal: 54, Address: 0x14500)
AuthziModifyAuditQueue (Ordinal: 55, Address: 0x14570)
AuthziModifySecurityAttributes (Ordinal: 56, Address: 0x145f0)
AuthziQuerySecurityAttributes (Ordinal: 57, Address: 0x14660)
AuthziSourceAudit (Ordinal: 58, Address: 0x1010)
FreeClaimDefinitions (Ordinal: 59, Address: 0x211b0)
FreeClaimDictionary (Ordinal: 60, Address: 0x21260)
GenerateNewCAPID (Ordinal: 61, Address: 0x194c0)
GetCentralAccessPoliciesByCapID (Ordinal: 62, Address: 0x1f250)
GetCentralAccessPoliciesByDN (Ordinal: 63, Address: 0x1f8c0)
GetClaimDefinitions (Ordinal: 64, Address: 0x21280)
GetClaimDomainInfo (Ordinal: 65, Address: 0x21360)
GetDefaultCAPESecurityDescriptor (Ordinal: 66, Address: 0x195f0)
InitializeClaimDictionary (Ordinal: 67, Address: 0x21430)
RefreshClaimDictionary (Ordinal: 68, Address: 0x215d0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180039230)

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x180039240)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180039250)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180039260)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180039280)
SetLastError (Address: 0x180039278)
SetUnhandledExceptionFilter (Address: 0x180039288)
UnhandledExceptionFilter (Address: 0x180039270)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180039298)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1800392b0)
LocalFree (Address: 0x1800392a8)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1800392c0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800392d0)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x1800392e8)
VirtualFree (Address: 0x1800392e0)
VirtualProtect (Address: 0x1800392f8)
VirtualQuery (Address: 0x1800392f0)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180039308)
GetCurrentProcess (Address: 0x180039320)
GetCurrentProcessId (Address: 0x180039350)
GetCurrentThread (Address: 0x180039310)
GetCurrentThreadId (Address: 0x180039348)
OpenProcessToken (Address: 0x180039328)
OpenThreadToken (Address: 0x180039318)
SetThreadPriority (Address: 0x180039338)
SetThreadStackGuarantee (Address: 0x180039340)
TerminateProcess (Address: 0x180039330)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x180039360)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180039370)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800393a0)
RegCreateKeyExW (Address: 0x1800393b0)
RegDeleteKeyExW (Address: 0x180039388)
RegDeleteValueW (Address: 0x180039398)
RegEnumKeyExW (Address: 0x1800393c0)
RegEnumValueW (Address: 0x180039390)
RegOpenKeyExA (Address: 0x1800393d8)
RegOpenKeyExW (Address: 0x1800393b8)
RegQueryInfoKeyW (Address: 0x180039380)
RegQueryValueExA (Address: 0x1800393d0)
RegQueryValueExW (Address: 0x1800393c8)
RegSetValueExW (Address: 0x1800393a8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800393e8)
RtlCompareMemory (Address: 0x1800393f0)
RtlLookupFunctionEntry (Address: 0x1800393f8)
RtlVirtualUnwind (Address: 0x180039400)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x180039438)
DeleteCriticalSection (Address: 0x180039430)
EnterCriticalSection (Address: 0x180039410)
InitializeCriticalSection (Address: 0x180039448)
LeaveCriticalSection (Address: 0x180039440)
ResetEvent (Address: 0x180039420)
SetEvent (Address: 0x180039428)
WaitForSingleObject (Address: 0x180039418)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x180039460)
Sleep (Address: 0x180039458)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x180039478)
GetSystemInfo (Address: 0x180039480)
GetSystemTimeAsFileTime (Address: 0x180039470)

api-ms-win-core-sysinfo-l1-2-0.dll

GetOsSafeBootMode (Address: 0x180039490)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180039530)
_o___std_type_info_destroy_list (Address: 0x180039520)
_o___stdio_common_vswprintf (Address: 0x180039518)
_o__callnewh (Address: 0x1800394a0)
_o__cexit (Address: 0x1800394a8)
_o__configure_narrow_argv (Address: 0x1800394b0)
_o__execute_onexit_table (Address: 0x1800394b8)
_o__initialize_narrow_environment (Address: 0x1800394c0)
_o__initialize_onexit_table (Address: 0x1800394c8)
_o__seh_filter_dll (Address: 0x1800394d0)
_o__wcsicmp (Address: 0x1800394e0)
_o__wcsnicmp (Address: 0x1800394e8)
_o__wtoi (Address: 0x1800394f0)
_o__wtoi64 (Address: 0x1800394f8)
_o_free (Address: 0x180039500)
_o_malloc (Address: 0x180039508)
_o_wcstol (Address: 0x180039510)
memcmp (Address: 0x180039538)
memcpy (Address: 0x1800394d8)
wcsstr (Address: 0x180039528)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180039548)
_initterm_e (Address: 0x180039550)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180039560)
wcscmp (Address: 0x180039568)
wcsncmp (Address: 0x180039570)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x1800395d8)
AdjustTokenPrivileges (Address: 0x1800395f8)
AllocateAndInitializeSid (Address: 0x180039598)
CreateWellKnownSid (Address: 0x1800395c8)
EqualDomainSid (Address: 0x1800395d0)
GetLengthSid (Address: 0x180039608)
GetSecurityDescriptorControl (Address: 0x180039610)
GetSecurityDescriptorDacl (Address: 0x1800395b8)
GetSecurityDescriptorGroup (Address: 0x180039630)
GetSecurityDescriptorLength (Address: 0x1800395f0)
GetSecurityDescriptorOwner (Address: 0x180039620)
GetSecurityDescriptorSacl (Address: 0x1800395a8)
GetSidSubAuthority (Address: 0x180039588)
GetSidSubAuthorityCount (Address: 0x180039640)
GetTokenInformation (Address: 0x180039600)
InitializeAcl (Address: 0x180039580)
InitializeSecurityDescriptor (Address: 0x180039618)
InitializeSid (Address: 0x180039590)
IsValidSecurityDescriptor (Address: 0x1800395e8)
IsValidSid (Address: 0x1800395e0)
IsWellKnownSid (Address: 0x1800395c0)
SetSecurityDescriptorDacl (Address: 0x1800395b0)
SetSecurityDescriptorGroup (Address: 0x180039638)
SetSecurityDescriptorOwner (Address: 0x180039628)
SetSecurityDescriptorSacl (Address: 0x1800395a0)

ntdll.dll

EtwGetTraceEnableFlags (Address: 0x1800397b0)
EtwGetTraceEnableLevel (Address: 0x1800397b8)
EtwGetTraceLoggerHandle (Address: 0x1800397c0)
EtwRegisterTraceGuidsW (Address: 0x1800397a8)
EtwTraceMessage (Address: 0x180039720)
EtwUnregisterTraceGuids (Address: 0x1800397a0)
NtAllocateLocallyUniqueId (Address: 0x1800397f0)
NtClose (Address: 0x1800396b8)
NtOpenKey (Address: 0x1800396a8)
NtQueryInformationToken (Address: 0x180039788)
NtQuerySecurityAttributesToken (Address: 0x180039780)
NtQueryValueKey (Address: 0x1800396b0)
RtlAcquireResourceExclusive (Address: 0x180039798)
RtlAcquireResourceShared (Address: 0x180039670)
RtlAllocateHeap (Address: 0x180039730)
RtlCompareUnicodeString (Address: 0x180039758)
RtlCopyLuid (Address: 0x1800396f0)
RtlCopyLuidAndAttributesArray (Address: 0x1800396f8)
RtlCopySid (Address: 0x1800396d8)
RtlCopyUnicodeString (Address: 0x180039750)
RtlDeleteCriticalSection (Address: 0x180039770)
RtlDeleteResource (Address: 0x180039668)
RtlEnterCriticalSection (Address: 0x1800397d8)
RtlEqualSid (Address: 0x180039678)
RtlEqualUnicodeString (Address: 0x180039748)
RtlFreeHeap (Address: 0x180039740)
RtlGetNtProductType (Address: 0x180039718)
RtlImageNtHeader (Address: 0x180039738)
RtlInitializeCriticalSection (Address: 0x1800396c0)
RtlInitializeResource (Address: 0x180039660)
RtlInitializeSid (Address: 0x1800397e0)
RtlInitString (Address: 0x180039710)
RtlInitUnicodeString (Address: 0x1800396a0)
RtlIsCapabilitySid (Address: 0x1800396d0)
RtlIsNameInExpression (Address: 0x180039768)
RtlIsPackageSid (Address: 0x1800396c8)
RtlLeaveCriticalSection (Address: 0x1800397d0)
RtlLengthRequiredSid (Address: 0x1800397f8)
RtlLengthSecurityDescriptor (Address: 0x180039690)
RtlLengthSid (Address: 0x1800397c8)
RtlMakeSelfRelativeSD (Address: 0x180039698)
RtlNtStatusToDosError (Address: 0x1800397e8)
RtlNtStatusToDosErrorNoTeb (Address: 0x180039728)
RtlOwnerAcesPresent (Address: 0x180039688)
RtlReleaseResource (Address: 0x180039790)
RtlSidHashInitialize (Address: 0x180039778)
RtlSubAuthorityCountSid (Address: 0x180039700)
RtlSubAuthoritySid (Address: 0x180039708)
RtlSubscribeWnfStateChangeNotification (Address: 0x180039650)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180039658)
RtlUpcaseUnicodeChar (Address: 0x180039760)
RtlValidRelativeSecurityDescriptor (Address: 0x1800396e8)
RtlValidSecurityDescriptor (Address: 0x180039680)
RtlValidSid (Address: 0x1800396e0)