PayloadRestrictions.dll

v10.0.19041.5438 32-bit Windows NT Analyzed
Download
Description
Payload Restrictions Mitigation Provider
Authors
© Microsoft Corporation. All rights reserved.
File size
690.5 KB
Uploaded
2025-12-01 08:02
Views
66
SHA-256
145b53efeb44b0722d30eb3fb697ba08

Exported functions 3

MitLibInitialize #1 · 0x6c830
MitLibQueryMitigations #2 · 0x6ca70
MitLibUninitialize #3 · 0x6ca20

Imported DLLs & functions 90

api-ms-win-core-debug-l1-1-0.dll 1
IsDebuggerPresent 0x1009a000
api-ms-win-core-errorhandling-l1-1-0.dll 2
SetUnhandledExceptionFilter 0x1009a00c
UnhandledExceptionFilter 0x1009a008
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1009a014
api-ms-win-core-libraryloader-l1-2-0.dll 1
DisableThreadLibraryCalls 0x1009a01c
api-ms-win-core-processthreads-l1-1-1.dll 1
IsProcessorFeaturePresent 0x1009a024
api-ms-win-core-rtlsupport-l1-2-0.dll 1
RtlPcToFileHeader 0x1009a02c
api-ms-win-crt-private-l1-1-0.dll 31
__CxxFrameHandler3 0x1009a0a4
__std_terminate 0x1009a09c
_except_handler4_common 0x1009a0a0
_o___std_type_info_destroy_list 0x1009a034
_o___stdio_common_vswprintf 0x1009a038
_o___stdio_common_vswprintf_s 0x1009a03c
_o__callnewh 0x1009a040
_o__cexit 0x1009a044
_o__configure_narrow_argv 0x1009a048
_o__crt_atexit 0x1009a04c
_o__execute_onexit_table 0x1009a050
_o__initialize_narrow_environment 0x1009a054
_o__initialize_onexit_table 0x1009a058
_o__itow_s 0x1009a05c
_o__register_onexit_function 0x1009a060
_o__seh_filter_dll 0x1009a068
_o__stricmp 0x1009a06c
_o__ui64tow_s 0x1009a070
_o__ultow_s 0x1009a074
_o__wcsicmp 0x1009a078
_o__wcsnicmp 0x1009a07c
_o_free 0x1009a080
_o_iswdigit 0x1009a084
_o_malloc 0x1009a088
_o_realloc 0x1009a08c
_o_towlower 0x1009a090
_o_wcscpy_s 0x1009a094
_o_wcsncpy_s 0x1009a098
memchr 0x1009a064
memcpy 0x1009a0ac
wcschr 0x1009a0a8
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x1009a0b4
_initterm_e 0x1009a0b8
api-ms-win-crt-string-l1-1-0.dll 1
memset 0x1009a0c0
api-ms-win-eventing-provider-l1-1-0.dll 4
EventRegister 0x1009a0c8
EventSetInformation 0x1009a0cc
EventUnregister 0x1009a0d0
EventWriteTransfer 0x1009a0d4
ntdll.dll 45
EtwEventRegister 0x1009a158
EtwEventUnregister 0x1009a150
EtwEventWrite 0x1009a154
LdrGetDllFullName 0x1009a100
LdrGetProcedureAddress 0x1009a104
LdrQueryImageFileKeyOption 0x1009a134
NtAllocateVirtualMemory 0x1009a130
NtClose 0x1009a140
NtCreateEvent 0x1009a144
NtCreateThreadEx 0x1009a13c
NtFreeVirtualMemory 0x1009a160
NtGetContextThread 0x1009a164
NtProtectVirtualMemory 0x1009a10c
NtQueryInformationProcess 0x1009a180
NtQueryVirtualMemory 0x1009a0e8
NtResumeThread 0x1009a174
NtSetContextThread 0x1009a168
NtSetEvent 0x1009a148
NtTerminateProcess 0x1009a17c
NtWaitForSingleObject 0x1009a15c
RtlAcquirePebLock 0x1009a108
RtlAcquireSRWLockExclusive 0x1009a0e0
RtlAcquireSRWLockShared 0x1009a0f0
RtlAddVectoredExceptionHandler 0x1009a0e4
RtlAllocateHeap 0x1009a138
RtlAnsiStringToUnicodeString 0x1009a184
RtlCreateUnicodeString 0x1009a0fc
RtlDecodePointer 0x1009a124
RtlDecodeSystemPointer 0x1009a18c
RtlEncodePointer 0x1009a128
RtlEncodeSystemPointer 0x1009a118
RtlFindClearBitsAndSet 0x1009a110
RtlFreeHeap 0x1009a14c
RtlImageNtHeaderEx 0x1009a0f8
RtlInitAnsiString 0x1009a188
RtlInitializeSRWLock 0x1009a120
RtlInitUnicodeString 0x1009a0ec
RtlNtStatusToDosError 0x1009a16c
RtlRandom 0x1009a12c
RtlRandomEx 0x1009a11c
RtlReleasePebLock 0x1009a114
RtlReleaseSRWLockExclusive 0x1009a0dc
RtlReleaseSRWLockShared 0x1009a0f4
RtlSetLastWin32Error 0x1009a170
RtlUnhandledExceptionFilter 0x1009a178