PayloadRestrictions.dll

Description: Payload Restrictions Mitigation Provider

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 16b1a65423be8c811734c9a5c453cd1e

File Size: 950.5 KB

Uploaded At: Dec. 1, 2025, 7:36 a.m.

Views: 4

Exported Functions

MitLibInitialize (Ordinal: 1, Address: 0x388d0)
MitLibQueryMitigations (Ordinal: 2, Address: 0x38cd0)
MitLibUninitialize (Ordinal: 3, Address: 0x38c80)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x1800ac1b8)

api-ms-win-core-errorhandling-l1-1-0.dll

SetUnhandledExceptionFilter (Address: 0x1800ac1c8)
UnhandledExceptionFilter (Address: 0x1800ac1d0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1800ac1e0)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800ac1f0)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1800ac200)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800ac210)
RtlLookupFunctionEntry (Address: 0x1800ac218)
RtlPcToFileHeader (Address: 0x1800ac228)
RtlVirtualUnwind (Address: 0x1800ac220)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x1800ac300)
__CxxFrameHandler3 (Address: 0x1800ac308)
__std_terminate (Address: 0x1800ac318)
_o___std_type_info_destroy_list (Address: 0x1800ac238)
_o___stdio_common_vswprintf (Address: 0x1800ac240)
_o___stdio_common_vswprintf_s (Address: 0x1800ac248)
_o__callnewh (Address: 0x1800ac250)
_o__cexit (Address: 0x1800ac258)
_o__configure_narrow_argv (Address: 0x1800ac260)
_o__crt_atexit (Address: 0x1800ac268)
_o__execute_onexit_table (Address: 0x1800ac270)
_o__initialize_narrow_environment (Address: 0x1800ac278)
_o__initialize_onexit_table (Address: 0x1800ac280)
_o__itow_s (Address: 0x1800ac288)
_o__register_onexit_function (Address: 0x1800ac290)
_o__seh_filter_dll (Address: 0x1800ac298)
_o__stricmp (Address: 0x1800ac2a0)
_o__ui64tow_s (Address: 0x1800ac2a8)
_o__ultow_s (Address: 0x1800ac2b0)
_o__wcsicmp (Address: 0x1800ac2b8)
_o__wcsnicmp (Address: 0x1800ac2c0)
_o_free (Address: 0x1800ac2c8)
_o_iswdigit (Address: 0x1800ac2d0)
_o_malloc (Address: 0x1800ac2d8)
_o_realloc (Address: 0x1800ac2e0)
_o_towlower (Address: 0x1800ac2e8)
_o_wcscpy_s (Address: 0x1800ac2f0)
_o_wcsncpy_s (Address: 0x1800ac2f8)
memcpy (Address: 0x1800ac320)
wcschr (Address: 0x1800ac310)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1800ac338)
_initterm_e (Address: 0x1800ac330)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1800ac348)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800ac358)
EventSetInformation (Address: 0x1800ac360)
EventUnregister (Address: 0x1800ac368)
EventWriteTransfer (Address: 0x1800ac370)

ntdll.dll

EtwEventRegister (Address: 0x1800ac480)
EtwEventUnregister (Address: 0x1800ac470)
EtwEventWrite (Address: 0x1800ac478)
LdrGetDllFullName (Address: 0x1800ac3d0)
LdrGetProcedureAddress (Address: 0x1800ac3d8)
LdrQueryImageFileKeyOption (Address: 0x1800ac438)
NtAllocateVirtualMemory (Address: 0x1800ac430)
NtClose (Address: 0x1800ac450)
NtCreateEvent (Address: 0x1800ac458)
NtCreateThreadEx (Address: 0x1800ac448)
NtFreeVirtualMemory (Address: 0x1800ac490)
NtGetContextThread (Address: 0x1800ac498)
NtProtectVirtualMemory (Address: 0x1800ac3e8)
NtQueryInformationProcess (Address: 0x1800ac380)
NtQueryVirtualMemory (Address: 0x1800ac3a0)
NtResumeThread (Address: 0x1800ac4b8)
NtSetContextThread (Address: 0x1800ac4a0)
NtSetEvent (Address: 0x1800ac460)
NtTerminateProcess (Address: 0x1800ac4c0)
NtWaitForSingleObject (Address: 0x1800ac488)
RtlAcquirePebLock (Address: 0x1800ac3e0)
RtlAcquireSRWLockExclusive (Address: 0x1800ac390)
RtlAcquireSRWLockShared (Address: 0x1800ac3b0)
RtlAddVectoredExceptionHandler (Address: 0x1800ac398)
RtlAllocateHeap (Address: 0x1800ac440)
RtlAnsiStringToUnicodeString (Address: 0x1800ac4d0)
RtlCreateUnicodeString (Address: 0x1800ac3c8)
RtlDecodePointer (Address: 0x1800ac418)
RtlDecodeSystemPointer (Address: 0x1800ac410)
RtlEncodePointer (Address: 0x1800ac420)
RtlEncodeSystemPointer (Address: 0x1800ac400)
RtlFindClearBitsAndSet (Address: 0x1800ac3f0)
RtlFreeHeap (Address: 0x1800ac468)
RtlImageNtHeaderEx (Address: 0x1800ac3c0)
RtlInitAnsiString (Address: 0x1800ac4d8)
RtlInitializeSRWLock (Address: 0x1800ac4c8)
RtlInitUnicodeString (Address: 0x1800ac3a8)
RtlNtStatusToDosError (Address: 0x1800ac4a8)
RtlRandom (Address: 0x1800ac428)
RtlRandomEx (Address: 0x1800ac4e0)
RtlReleasePebLock (Address: 0x1800ac3f8)
RtlReleaseSRWLockExclusive (Address: 0x1800ac388)
RtlReleaseSRWLockShared (Address: 0x1800ac3b8)
RtlSetLastWin32Error (Address: 0x1800ac4b0)
RtlUnhandledExceptionFilter (Address: 0x1800ac408)