authz.dll

Description: Authorization Framework

Version: 10.0.19041.6328

Architecture: 32-bit

Operating System: Windows NT

SHA256: c6265a1345523476d699974c24411b0a

File Size: 183.5 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 9

Exported Functions

AuthzAccessCheck (Ordinal: 1, Address: 0x9970)
AuthzAddSidsToContext (Ordinal: 2, Address: 0x12140)
AuthzCachedAccessCheck (Ordinal: 3, Address: 0x121e0)
AuthzComputeEffectivePermission (Ordinal: 4, Address: 0x20210)
AuthzEnumerateSecurityEventSources (Ordinal: 5, Address: 0x12650)
AuthzEvaluateSacl (Ordinal: 6, Address: 0x12bf0)
AuthzFreeAuditEvent (Ordinal: 7, Address: 0xa900)
AuthzFreeCentralAccessPolicyCache (Ordinal: 8, Address: 0x12c60)
AuthzFreeContext (Ordinal: 9, Address: 0xb740)
AuthzFreeHandle (Ordinal: 10, Address: 0x12c70)
AuthzFreeResourceManager (Ordinal: 11, Address: 0xbf20)
AuthzGetInformationFromContext (Ordinal: 12, Address: 0xbd80)
AuthzInitializeCompoundContext (Ordinal: 13, Address: 0x12ce0)
AuthzInitializeContextFromAuthzContext (Ordinal: 14, Address: 0x12db0)
AuthzInitializeContextFromSid (Ordinal: 15, Address: 0x7eb0)
AuthzInitializeContextFromToken (Ordinal: 16, Address: 0x82b0)
AuthzInitializeObjectAccessAuditEvent (Ordinal: 17, Address: 0x12e40)
AuthzInitializeObjectAccessAuditEvent2 (Ordinal: 18, Address: 0xbaf0)
AuthzInitializeRemoteAccessCheck (Ordinal: 19, Address: 0x12e70)
AuthzInitializeRemoteResourceManager (Ordinal: 20, Address: 0x12ea0)
AuthzInitializeResourceManager (Ordinal: 21, Address: 0xa9d0)
AuthzInitializeResourceManagerEx (Ordinal: 22, Address: 0x12ed0)
AuthzInstallSecurityEventSource (Ordinal: 23, Address: 0x12f40)
AuthzModifyClaims (Ordinal: 24, Address: 0x13230)
AuthzModifySecurityAttributes (Ordinal: 25, Address: 0x132a0)
AuthzModifySids (Ordinal: 26, Address: 0x13300)
AuthzOpenObjectAudit (Ordinal: 27, Address: 0x13370)
AuthzRegisterCapChangeNotification (Ordinal: 28, Address: 0x13510)
AuthzRegisterSecurityEventSource (Ordinal: 29, Address: 0x135a0)
AuthzReportSecurityEvent (Ordinal: 30, Address: 0x13670)
AuthzReportSecurityEventFromParams (Ordinal: 31, Address: 0x13710)
AuthzSetAppContainerInformation (Ordinal: 32, Address: 0x13840)
AuthzShutdownRemoteAccessCheck (Ordinal: 33, Address: 0x13880)
AuthzUninstallSecurityEventSource (Ordinal: 34, Address: 0x13890)
AuthzUnregisterCapChangeNotification (Ordinal: 35, Address: 0x13910)
AuthzUnregisterSecurityEventSource (Ordinal: 36, Address: 0x13960)
AuthziAccessCheckEx (Ordinal: 37, Address: 0x13a10)
AuthziAllocateAuditParams (Ordinal: 38, Address: 0x7e50)
AuthziCheckContextMembership (Ordinal: 39, Address: 0x13a60)
AuthziFreeAuditEventType (Ordinal: 40, Address: 0xb090)
AuthziFreeAuditParams (Ordinal: 41, Address: 0x7e00)
AuthziFreeAuditQueue (Ordinal: 42, Address: 0x13ab0)
AuthziGenerateAdminAlertAuditW (Ordinal: 43, Address: 0x11b30)
AuthziInitializeAuditEvent (Ordinal: 44, Address: 0xb8e0)
AuthziInitializeAuditEventType (Ordinal: 45, Address: 0xb540)
AuthziInitializeAuditParams (Ordinal: 46, Address: 0xac50)
AuthziInitializeAuditParamsFromArray (Ordinal: 47, Address: 0x13b50)
AuthziInitializeAuditParamsWithRM (Ordinal: 48, Address: 0xc410)
AuthziInitializeAuditQueue (Ordinal: 49, Address: 0xc790)
AuthziInitializeContextFromSid (Ordinal: 50, Address: 0x13ca0)
AuthziLogAuditEvent (Ordinal: 51, Address: 0xb160)
AuthziModifyAuditEvent2 (Ordinal: 52, Address: 0x13d30)
AuthziModifyAuditEvent (Ordinal: 53, Address: 0x13dc0)
AuthziModifyAuditEventType (Ordinal: 54, Address: 0x13df0)
AuthziModifyAuditQueue (Ordinal: 55, Address: 0x13e40)
AuthziModifySecurityAttributes (Ordinal: 56, Address: 0x13eb0)
AuthziQuerySecurityAttributes (Ordinal: 57, Address: 0x13f10)
AuthziSourceAudit (Ordinal: 58, Address: 0x7d10)
FreeClaimDefinitions (Ordinal: 59, Address: 0x1f9a0)
FreeClaimDictionary (Ordinal: 60, Address: 0x1fa10)
GenerateNewCAPID (Ordinal: 61, Address: 0x19b80)
GetCentralAccessPoliciesByCapID (Ordinal: 62, Address: 0x1e880)
GetCentralAccessPoliciesByDN (Ordinal: 63, Address: 0x1ebc0)
GetClaimDefinitions (Ordinal: 64, Address: 0x1fa30)
GetClaimDomainInfo (Ordinal: 65, Address: 0x1fad0)
GetDefaultCAPESecurityDescriptor (Ordinal: 66, Address: 0x19c60)
InitializeClaimDictionary (Ordinal: 67, Address: 0x1fb70)
RefreshClaimDictionary (Ordinal: 68, Address: 0x1fcc0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1002c000)

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x1002c008)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1002c010)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1002c018)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1002c024)
SetLastError (Address: 0x1002c020)
SetUnhandledExceptionFilter (Address: 0x1002c028)
UnhandledExceptionFilter (Address: 0x1002c02c)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1002c034)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x1002c040)
LocalFree (Address: 0x1002c03c)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1002c048)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1002c050)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x1002c058)
VirtualFree (Address: 0x1002c05c)
VirtualProtect (Address: 0x1002c064)
VirtualQuery (Address: 0x1002c060)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x1002c07c)
GetCurrentProcess (Address: 0x1002c084)
GetCurrentProcessId (Address: 0x1002c070)
GetCurrentThread (Address: 0x1002c06c)
GetCurrentThreadId (Address: 0x1002c074)
OpenProcessToken (Address: 0x1002c08c)
OpenThreadToken (Address: 0x1002c078)
SetThreadPriority (Address: 0x1002c088)
SetThreadStackGuarantee (Address: 0x1002c080)
TerminateProcess (Address: 0x1002c090)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1002c098)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1002c0a0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1002c0ac)
RegCreateKeyExW (Address: 0x1002c0d4)
RegDeleteKeyExW (Address: 0x1002c0c8)
RegDeleteValueW (Address: 0x1002c0d0)
RegEnumKeyExW (Address: 0x1002c0a8)
RegEnumValueW (Address: 0x1002c0cc)
RegOpenKeyExA (Address: 0x1002c0c0)
RegOpenKeyExW (Address: 0x1002c0b8)
RegQueryInfoKeyW (Address: 0x1002c0b4)
RegQueryValueExA (Address: 0x1002c0bc)
RegQueryValueExW (Address: 0x1002c0c4)
RegSetValueExW (Address: 0x1002c0b0)

api-ms-win-core-rtlsupport-l1-2-0.dll

RtlCompareMemory (Address: 0x1002c0dc)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x1002c100)
DeleteCriticalSection (Address: 0x1002c0e8)
EnterCriticalSection (Address: 0x1002c0fc)
InitializeCriticalSection (Address: 0x1002c0f4)
LeaveCriticalSection (Address: 0x1002c0e4)
ResetEvent (Address: 0x1002c0ec)
SetEvent (Address: 0x1002c0f0)
WaitForSingleObject (Address: 0x1002c0f8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceExecuteOnce (Address: 0x1002c10c)
Sleep (Address: 0x1002c108)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x1002c118)
GetSystemInfo (Address: 0x1002c11c)
GetSystemTimeAsFileTime (Address: 0x1002c114)

api-ms-win-core-sysinfo-l1-2-0.dll

GetOsSafeBootMode (Address: 0x1002c124)

api-ms-win-crt-private-l1-1-0.dll

_except_handler4_common (Address: 0x1002c168)
_o___std_type_info_destroy_list (Address: 0x1002c16c)
_o___stdio_common_vswprintf (Address: 0x1002c170)
_o__callnewh (Address: 0x1002c12c)
_o__cexit (Address: 0x1002c130)
_o__configure_narrow_argv (Address: 0x1002c134)
_o__execute_onexit_table (Address: 0x1002c138)
_o__initialize_narrow_environment (Address: 0x1002c13c)
_o__initialize_onexit_table (Address: 0x1002c140)
_o__seh_filter_dll (Address: 0x1002c144)
_o__wcsicmp (Address: 0x1002c14c)
_o__wcsnicmp (Address: 0x1002c150)
_o__wtoi (Address: 0x1002c154)
_o__wtoi64 (Address: 0x1002c158)
_o_free (Address: 0x1002c15c)
_o_malloc (Address: 0x1002c160)
_o_wcstol (Address: 0x1002c164)
memcmp (Address: 0x1002c178)
memcpy (Address: 0x1002c148)
wcsstr (Address: 0x1002c174)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1002c180)
_initterm_e (Address: 0x1002c184)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1002c18c)
wcsncmp (Address: 0x1002c190)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x1002c198)
AdjustTokenPrivileges (Address: 0x1002c1d4)
AllocateAndInitializeSid (Address: 0x1002c1c4)
CreateWellKnownSid (Address: 0x1002c1bc)
EqualDomainSid (Address: 0x1002c1c0)
GetLengthSid (Address: 0x1002c1dc)
GetSecurityDescriptorControl (Address: 0x1002c1e0)
GetSecurityDescriptorDacl (Address: 0x1002c1b8)
GetSecurityDescriptorGroup (Address: 0x1002c1f0)
GetSecurityDescriptorLength (Address: 0x1002c1a8)
GetSecurityDescriptorOwner (Address: 0x1002c1e8)
GetSecurityDescriptorSacl (Address: 0x1002c1b0)
GetSidSubAuthority (Address: 0x1002c1a0)
GetSidSubAuthorityCount (Address: 0x1002c1f8)
GetTokenInformation (Address: 0x1002c1d8)
InitializeAcl (Address: 0x1002c19c)
InitializeSecurityDescriptor (Address: 0x1002c1e4)
InitializeSid (Address: 0x1002c1d0)
IsValidSecurityDescriptor (Address: 0x1002c1cc)
IsValidSid (Address: 0x1002c1c8)
IsWellKnownSid (Address: 0x1002c1a4)
SetSecurityDescriptorDacl (Address: 0x1002c1b4)
SetSecurityDescriptorGroup (Address: 0x1002c1f4)
SetSecurityDescriptorOwner (Address: 0x1002c1ec)
SetSecurityDescriptorSacl (Address: 0x1002c1ac)

ntdll.dll

EtwGetTraceEnableFlags (Address: 0x1002c2b0)
EtwGetTraceEnableLevel (Address: 0x1002c2b4)
EtwGetTraceLoggerHandle (Address: 0x1002c2b8)
EtwRegisterTraceGuidsW (Address: 0x1002c2ac)
EtwTraceMessage (Address: 0x1002c26c)
EtwUnregisterTraceGuids (Address: 0x1002c2a8)
NtAllocateLocallyUniqueId (Address: 0x1002c2d0)
NtClose (Address: 0x1002c2d4)
NtOpenKey (Address: 0x1002c230)
NtQueryInformationToken (Address: 0x1002c29c)
NtQuerySecurityAttributesToken (Address: 0x1002c298)
NtQueryValueKey (Address: 0x1002c234)
RtlAcquireResourceExclusive (Address: 0x1002c2a4)
RtlAcquireResourceShared (Address: 0x1002c214)
RtlAllocateHeap (Address: 0x1002c274)
RtlCompareUnicodeString (Address: 0x1002c288)
RtlCopyLuid (Address: 0x1002c254)
RtlCopyLuidAndAttributesArray (Address: 0x1002c258)
RtlCopySid (Address: 0x1002c248)
RtlCopyUnicodeString (Address: 0x1002c284)
RtlDeleteCriticalSection (Address: 0x1002c200)
RtlDeleteResource (Address: 0x1002c210)
RtlEnterCriticalSection (Address: 0x1002c2c4)
RtlEqualSid (Address: 0x1002c218)
RtlEqualUnicodeString (Address: 0x1002c280)
RtlFreeHeap (Address: 0x1002c27c)
RtlGetNtProductType (Address: 0x1002c268)
RtlImageNtHeader (Address: 0x1002c278)
RtlInitializeCriticalSection (Address: 0x1002c294)
RtlInitializeResource (Address: 0x1002c20c)
RtlInitializeSid (Address: 0x1002c2c8)
RtlInitString (Address: 0x1002c264)
RtlInitUnicodeString (Address: 0x1002c22c)
RtlIsCapabilitySid (Address: 0x1002c244)
RtlIsNameInExpression (Address: 0x1002c290)
RtlIsPackageSid (Address: 0x1002c240)
RtlLeaveCriticalSection (Address: 0x1002c2c0)
RtlLengthRequiredSid (Address: 0x1002c23c)
RtlLengthSecurityDescriptor (Address: 0x1002c224)
RtlLengthSid (Address: 0x1002c2bc)
RtlMakeSelfRelativeSD (Address: 0x1002c228)
RtlNtStatusToDosError (Address: 0x1002c2cc)
RtlNtStatusToDosErrorNoTeb (Address: 0x1002c270)
RtlOwnerAcesPresent (Address: 0x1002c220)
RtlReleaseResource (Address: 0x1002c2a0)
RtlSidHashInitialize (Address: 0x1002c238)
RtlSubAuthorityCountSid (Address: 0x1002c25c)
RtlSubAuthoritySid (Address: 0x1002c260)
RtlSubscribeWnfStateChangeNotification (Address: 0x1002c204)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1002c208)
RtlUpcaseUnicodeChar (Address: 0x1002c28c)
RtlValidRelativeSecurityDescriptor (Address: 0x1002c250)
RtlValidSecurityDescriptor (Address: 0x1002c21c)
RtlValidSid (Address: 0x1002c24c)