Windows 10 DLL File Information - authz.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
File Description: | Authorization Framework |
File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
Company: | Microsoft Corporation |
Product Name: | Microsoft® Windows® Operating System |
DLL popularity | Medium - 20 other DLL files in system32 directory are statically linked to this file. |
File Size: | 176 KB |
Total Number of Exported Functions: | 68 |
Total Number of Exported Functions With Names: | 68 |
Section Headers
Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
---|---|---|---|---|---|
.text | 0x00001000 | 165,376 Bytes | 91.8% | Read, Execute | Code |
.data | 0x0002a000 | 512 Bytes | 0.3% | Write, Read | Initialized Data |
.idata | 0x0002b000 | 5,632 Bytes | 3.1% | Read | Initialized Data |
.didat | 0x0002d000 | 512 Bytes | 0.3% | Write, Read | Initialized Data |
.rsrc | 0x0002e000 | 1,024 Bytes | 0.6% | Read | Initialized Data |
.reloc | 0x0002f000 | 6,144 Bytes | 3.4% | Read, Discardable | Initialized Data |
Static Linking
authz.dll is statically linked to the following files:msvcrt.dll
api-ms-win-core-errorhandling-l1-1-1.dll
api-ms-win-core-heap-l2-1-0.dll
api-ms-win-core-synch-l1-2-0.dll
api-ms-win-core-processthreads-l1-1-2.dll
api-ms-win-security-base-l1-2-0.dll
api-ms-win-core-handle-l1-1-0.dll
api-ms-win-core-registry-l1-1-0.dll
api-ms-win-core-sysinfo-l1-2-1.dll
api-ms-win-core-rtlsupport-l1-2-0.dll
api-ms-win-core-memory-l1-1-2.dll
api-ms-win-core-profile-l1-1-0.dll
api-ms-win-core-apiquery-l1-1-0.dll
ntdll.dll
api-ms-win-core-delayload-l1-1-1.dll
This means that when authz.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, authz.dll won't be loaded.
General Resources Information
Resource Type | Number of Items | Total Size | % of File |
---|---|---|---|
Icons | 0 | 0 Bytes | 0.0% |
Animated Icons | 0 | 0 Bytes | 0.0% |
Cursors | 0 | 0 Bytes | 0.0% |
Animated Cursors | 0 | 0 Bytes | 0.0% |
Bitmaps | 0 | 0 Bytes | 0.0% |
AVI Files | 0 | 0 Bytes | 0.0% |
Dialog-Boxes | 0 | 0 Bytes | 0.0% |
HTML Related Files | 0 | 0 Bytes | 0.0% |
Menus | 0 | 0 Bytes | 0.0% |
Strings | 0 | 0 Bytes | 0.0% |
Type Libraries | 0 | 0 Bytes | 0.0% |
Manifest | 0 | 0 Bytes | 0.0% |
All Others | 1 | 912 Bytes | 0.5% |
Total | 1 | 912 Bytes | 0.5% |
Icons in this file
No icons found in this file
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
No dialog resources in this file.
String resources in this dll (up to 1000 strings)
No string resources in this file.
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:AuthzAccessCheck | AuthzAddSidsToContext | AuthzCachedAccessCheck |
AuthzComputeEffectivePermission | AuthzEnumerateSecurityEventSources | AuthzEvaluateSacl |
AuthzFreeAuditEvent | AuthzFreeCentralAccessPolicyCache | AuthzFreeContext |
AuthzFreeHandle | AuthzFreeResourceManager | AuthzGetInformationFromContext |
AuthzInitializeCompoundContext | AuthzInitializeContextFromAuthzContext | AuthzInitializeContextFromSid |
AuthzInitializeContextFromToken | AuthzInitializeObjectAccessAuditEvent | AuthzInitializeObjectAccessAuditEvent2 |
AuthzInitializeRemoteAccessCheck | AuthzInitializeRemoteResourceManager | AuthzInitializeResourceManager |
AuthzInitializeResourceManagerEx | AuthzInstallSecurityEventSource | AuthzModifyClaims |
AuthzModifySecurityAttributes | AuthzModifySids | AuthzOpenObjectAudit |
AuthzRegisterCapChangeNotification | AuthzRegisterSecurityEventSource | AuthzReportSecurityEvent |
AuthzReportSecurityEventFromParams | AuthzSetAppContainerInformation | AuthzShutdownRemoteAccessCheck |
AuthzUninstallSecurityEventSource | AuthzUnregisterCapChangeNotification | AuthzUnregisterSecurityEventSource |
AuthziAccessCheckEx | AuthziAllocateAuditParams | AuthziCheckContextMembership |
AuthziFreeAuditEventType | AuthziFreeAuditParams | AuthziFreeAuditQueue |
AuthziGenerateAdminAlertAuditW | AuthziInitializeAuditEvent | AuthziInitializeAuditEventType |
AuthziInitializeAuditParams | AuthziInitializeAuditParamsFromArray | AuthziInitializeAuditParamsWithRM |
AuthziInitializeAuditQueue | AuthziInitializeContextFromSid | AuthziLogAuditEvent |
AuthziModifyAuditEvent | AuthziModifyAuditEvent2 | AuthziModifyAuditEventType |
AuthziModifyAuditQueue | AuthziModifySecurityAttributes | AuthziQuerySecurityAttributes |
AuthziSourceAudit | FreeClaimDefinitions | FreeClaimDictionary |
GenerateNewCAPID | GetCentralAccessPoliciesByCapID | GetCentralAccessPoliciesByDN |
GetClaimDefinitions | GetClaimDomainInfo | GetDefaultCAPESecurityDescriptor |
InitializeClaimDictionary | RefreshClaimDictionary |
Imported Functions List
The following functions are imported by this dll:- msvcrt.dll:
_XcptFilter _amsg_exit _callnewh _except_handler4_common _initterm _vsnwprintf _wcsicmp _wcsnicmp _wtoi _wtoi64 free malloc memcmp memcpy memset wcsncmp wcsstr wcstol - api-ms-win-core-errorhandling-l1-1-1.dll:
KernelBase!GetLastError KernelBase!SetUnhandledExceptionFilter KernelBase!UnhandledExceptionFilter ntdll!RtlRestoreLastWin32Error - api-ms-win-core-heap-l2-1-0.dll:
KernelBase!LocalAlloc KernelBase!LocalFree - api-ms-win-core-synch-l1-2-0.dll:
KernelBase!CreateEventW KernelBase!ResetEvent KernelBase!SetEvent KernelBase!Sleep KernelBase!WaitForSingleObject ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSection - api-ms-win-core-processthreads-l1-1-2.dll:
KernelBase!OpenProcessToken KernelBase!OpenThreadToken kernel32!CreateThread kernel32!GetCurrentProcess kernel32!GetCurrentProcessId kernel32!GetCurrentThread kernel32!GetCurrentThreadId kernel32!SetThreadPriority kernel32!SetThreadStackGuarantee kernel32!TerminateProcess - api-ms-win-security-base-l1-2-0.dll:
KernelBase!AddAccessAllowedAce KernelBase!AdjustTokenPrivileges KernelBase!AllocateAndInitializeSid KernelBase!CreateWellKnownSid KernelBase!EqualDomainSid KernelBase!GetLengthSid KernelBase!GetSecurityDescriptorControl KernelBase!GetSecurityDescriptorDacl KernelBase!GetSecurityDescriptorGroup KernelBase!GetSecurityDescriptorLength KernelBase!GetSecurityDescriptorOwner KernelBase!GetSecurityDescriptorSacl KernelBase!GetSidSubAuthority KernelBase!GetSidSubAuthorityCount KernelBase!GetTokenInformation KernelBase!InitializeAcl KernelBase!InitializeSecurityDescriptor KernelBase!InitializeSid KernelBase!IsValidSecurityDescriptor KernelBase!IsValidSid KernelBase!IsWellKnownSid KernelBase!SetSecurityDescriptorDacl KernelBase!SetSecurityDescriptorGroup KernelBase!SetSecurityDescriptorOwner KernelBase!SetSecurityDescriptorSacl - api-ms-win-core-handle-l1-1-0.dll:
KernelBase!CloseHandle - api-ms-win-core-registry-l1-1-0.dll:
KernelBase!RegCloseKey KernelBase!RegCreateKeyExW KernelBase!RegDeleteKeyExW KernelBase!RegDeleteValueW KernelBase!RegEnumKeyExW KernelBase!RegEnumValueW KernelBase!RegOpenKeyExA KernelBase!RegOpenKeyExW KernelBase!RegQueryInfoKeyW KernelBase!RegQueryValueExA KernelBase!RegQueryValueExW KernelBase!RegSetValueExW - api-ms-win-core-sysinfo-l1-2-1.dll:
KernelBase!GetComputerNameExW KernelBase!GetOsSafeBootMode KernelBase!GetSystemInfo KernelBase!GetSystemTimeAsFileTime KernelBase!GetTickCount - api-ms-win-core-rtlsupport-l1-2-0.dll:
ntdll!RtlCompareMemory - api-ms-win-core-memory-l1-1-2.dll:
KernelBase!VirtualAlloc KernelBase!VirtualFree KernelBase!VirtualProtect KernelBase!VirtualQuery - api-ms-win-core-profile-l1-1-0.dll:
ntdll!RtlQueryPerformanceCounter - api-ms-win-core-apiquery-l1-1-0.dll:
ntdll!ApiSetQueryApiSetPresence - ntdll.dll:
EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwRegisterTraceGuidsW EtwTraceMessage EtwUnregisterTraceGuids NtAllocateLocallyUniqueId NtClose NtOpenKey NtQueryInformationToken NtQuerySecurityAttributesToken NtQueryValueKey RtlAcquireResourceExclusive RtlAcquireResourceShared RtlAllocateHeap RtlCompareUnicodeString RtlCopyLuid RtlCopyLuidAndAttributesArray RtlCopySid RtlCopyUnicodeString RtlDeleteCriticalSection RtlDeleteResource RtlEnterCriticalSection RtlEqualSid RtlEqualUnicodeString RtlFreeHeap RtlGetNtProductType RtlImageNtHeader RtlInitString RtlInitUnicodeString RtlInitializeCriticalSection RtlInitializeResource RtlInitializeSid RtlIsCapabilitySid RtlIsNameInExpression RtlIsPackageSid RtlLeaveCriticalSection RtlLengthRequiredSid RtlLengthSecurityDescriptor RtlLengthSid RtlMakeSelfRelativeSD RtlNtStatusToDosError RtlNtStatusToDosErrorNoTeb RtlOwnerAcesPresent RtlReleaseResource RtlSidHashInitialize RtlSubAuthorityCountSid RtlSubAuthoritySid RtlSubscribeWnfStateChangeNotification RtlUnsubscribeWnfNotificationWaitForCompletion RtlUpcaseUnicodeChar RtlValidSecurityDescriptor RtlValidSid - api-ms-win-core-delayload-l1-1-1.dll:
KernelBase!DelayLoadFailureHook KernelBase!ResolveDelayLoadedAPI