PayloadRestrictions.dll

Description: Payload Restrictions Mitigation Provider

Version: 10.0.19041.5438

Architecture: 32-bit

Operating System: Windows NT

SHA256: 145b53efeb44b0722d30eb3fb697ba08

File Size: 690.5 KB

Uploaded At: Dec. 1, 2025, 8:02 a.m.

Views: 19

Exported Functions

MitLibInitialize (Ordinal: 1, Address: 0x6c830)
MitLibQueryMitigations (Ordinal: 2, Address: 0x6ca70)
MitLibUninitialize (Ordinal: 3, Address: 0x6ca20)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x1009a000)

api-ms-win-core-errorhandling-l1-1-0.dll

SetUnhandledExceptionFilter (Address: 0x1009a00c)
UnhandledExceptionFilter (Address: 0x1009a008)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1009a014)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1009a01c)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1009a024)

api-ms-win-core-rtlsupport-l1-2-0.dll

RtlPcToFileHeader (Address: 0x1009a02c)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x1009a0a4)
__std_terminate (Address: 0x1009a09c)
_except_handler4_common (Address: 0x1009a0a0)
_o___std_type_info_destroy_list (Address: 0x1009a034)
_o___stdio_common_vswprintf (Address: 0x1009a038)
_o___stdio_common_vswprintf_s (Address: 0x1009a03c)
_o__callnewh (Address: 0x1009a040)
_o__cexit (Address: 0x1009a044)
_o__configure_narrow_argv (Address: 0x1009a048)
_o__crt_atexit (Address: 0x1009a04c)
_o__execute_onexit_table (Address: 0x1009a050)
_o__initialize_narrow_environment (Address: 0x1009a054)
_o__initialize_onexit_table (Address: 0x1009a058)
_o__itow_s (Address: 0x1009a05c)
_o__register_onexit_function (Address: 0x1009a060)
_o__seh_filter_dll (Address: 0x1009a068)
_o__stricmp (Address: 0x1009a06c)
_o__ui64tow_s (Address: 0x1009a070)
_o__ultow_s (Address: 0x1009a074)
_o__wcsicmp (Address: 0x1009a078)
_o__wcsnicmp (Address: 0x1009a07c)
_o_free (Address: 0x1009a080)
_o_iswdigit (Address: 0x1009a084)
_o_malloc (Address: 0x1009a088)
_o_realloc (Address: 0x1009a08c)
_o_towlower (Address: 0x1009a090)
_o_wcscpy_s (Address: 0x1009a094)
_o_wcsncpy_s (Address: 0x1009a098)
memchr (Address: 0x1009a064)
memcpy (Address: 0x1009a0ac)
wcschr (Address: 0x1009a0a8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1009a0b4)
_initterm_e (Address: 0x1009a0b8)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1009a0c0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1009a0c8)
EventSetInformation (Address: 0x1009a0cc)
EventUnregister (Address: 0x1009a0d0)
EventWriteTransfer (Address: 0x1009a0d4)

ntdll.dll

EtwEventRegister (Address: 0x1009a158)
EtwEventUnregister (Address: 0x1009a150)
EtwEventWrite (Address: 0x1009a154)
LdrGetDllFullName (Address: 0x1009a100)
LdrGetProcedureAddress (Address: 0x1009a104)
LdrQueryImageFileKeyOption (Address: 0x1009a134)
NtAllocateVirtualMemory (Address: 0x1009a130)
NtClose (Address: 0x1009a140)
NtCreateEvent (Address: 0x1009a144)
NtCreateThreadEx (Address: 0x1009a13c)
NtFreeVirtualMemory (Address: 0x1009a160)
NtGetContextThread (Address: 0x1009a164)
NtProtectVirtualMemory (Address: 0x1009a10c)
NtQueryInformationProcess (Address: 0x1009a180)
NtQueryVirtualMemory (Address: 0x1009a0e8)
NtResumeThread (Address: 0x1009a174)
NtSetContextThread (Address: 0x1009a168)
NtSetEvent (Address: 0x1009a148)
NtTerminateProcess (Address: 0x1009a17c)
NtWaitForSingleObject (Address: 0x1009a15c)
RtlAcquirePebLock (Address: 0x1009a108)
RtlAcquireSRWLockExclusive (Address: 0x1009a0e0)
RtlAcquireSRWLockShared (Address: 0x1009a0f0)
RtlAddVectoredExceptionHandler (Address: 0x1009a0e4)
RtlAllocateHeap (Address: 0x1009a138)
RtlAnsiStringToUnicodeString (Address: 0x1009a184)
RtlCreateUnicodeString (Address: 0x1009a0fc)
RtlDecodePointer (Address: 0x1009a124)
RtlDecodeSystemPointer (Address: 0x1009a18c)
RtlEncodePointer (Address: 0x1009a128)
RtlEncodeSystemPointer (Address: 0x1009a118)
RtlFindClearBitsAndSet (Address: 0x1009a110)
RtlFreeHeap (Address: 0x1009a14c)
RtlImageNtHeaderEx (Address: 0x1009a0f8)
RtlInitAnsiString (Address: 0x1009a188)
RtlInitializeSRWLock (Address: 0x1009a120)
RtlInitUnicodeString (Address: 0x1009a0ec)
RtlNtStatusToDosError (Address: 0x1009a16c)
RtlRandom (Address: 0x1009a12c)
RtlRandomEx (Address: 0x1009a11c)
RtlReleasePebLock (Address: 0x1009a114)
RtlReleaseSRWLockExclusive (Address: 0x1009a0dc)
RtlReleaseSRWLockShared (Address: 0x1009a0f4)
RtlSetLastWin32Error (Address: 0x1009a170)
RtlUnhandledExceptionFilter (Address: 0x1009a178)