setupcl.dll

Description: System Clone Library

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4239

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8773e5ca1529ed867b5ee36b463a604f

File Size: 153.9 KB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 4

Exported Functions

  • SclAcquireRequiredPrivileges (Ordinal: 1, Address: 0x1510)
  • SclClearPendedRequest (Ordinal: 2, Address: 0x2830)
  • SclExecutePendedRequests (Ordinal: 3, Address: 0x5ac0)
  • SclExecuteRequest (Ordinal: 4, Address: 0x5680)
  • SclFreeRequest (Ordinal: 5, Address: 0x3ac0)
  • SclGetPendedRequest (Ordinal: 6, Address: 0x30f0)
  • SclLoadStringResource (Ordinal: 7, Address: 0x7c10)
  • SclPendRequest (Ordinal: 8, Address: 0x28f0)
  • SclPendedRequestExists (Ordinal: 9, Address: 0x3960)
  • SclPreCompilePendedRequests (Ordinal: 10, Address: 0x57b0)
  • SclReleasePrivileges (Ordinal: 11, Address: 0x16b0)

Imported DLLs & Functions

ntdll.dll
  • __chkstk (Address: 0x18001a640)
  • _vscwprintf (Address: 0x18001a610)
  • _vsnprintf (Address: 0x18001a548)
  • _vsnwprintf (Address: 0x18001a428)
  • _wcsicmp (Address: 0x18001a488)
  • _wcsnicmp (Address: 0x18001a458)
  • _wcsupr (Address: 0x18001a5e0)
  • DbgPrintEx (Address: 0x18001a630)
  • EtwEventWrite (Address: 0x18001a468)
  • LdrDisableThreadCalloutsForDll (Address: 0x18001a378)
  • LdrGetDllHandle (Address: 0x18001a5f8)
  • LdrGetProcedureAddress (Address: 0x18001a5f0)
  • memcmp (Address: 0x18001a648)
  • memcpy (Address: 0x18001a650)
  • memmove (Address: 0x18001a600)
  • memset (Address: 0x18001a658)
  • NtClose (Address: 0x18001a3f0)
  • NtCreateFile (Address: 0x18001a470)
  • NtCreateKey (Address: 0x18001a418)
  • NtDelayExecution (Address: 0x18001a518)
  • NtDeleteKey (Address: 0x18001a4f0)
  • NtDeleteValueKey (Address: 0x18001a448)
  • NtDeviceIoControlFile (Address: 0x18001a5a8)
  • NtEnumerateKey (Address: 0x18001a4f8)
  • NtEnumerateValueKey (Address: 0x18001a500)
  • NtFlushKey (Address: 0x18001a440)
  • NtFsControlFile (Address: 0x18001a5d0)
  • NtLoadKey (Address: 0x18001a508)
  • NtOpenFile (Address: 0x18001a478)
  • NtOpenKey (Address: 0x18001a438)
  • NtQueryAttributesFile (Address: 0x18001a5a0)
  • NtQueryDirectoryFile (Address: 0x18001a620)
  • NtQueryInformationFile (Address: 0x18001a450)
  • NtQueryKey (Address: 0x18001a3a8)
  • NtQueryObject (Address: 0x18001a608)
  • NtQuerySecurityObject (Address: 0x18001a420)
  • NtQuerySystemEnvironmentValueEx (Address: 0x18001a5b8)
  • NtQuerySystemInformation (Address: 0x18001a430)
  • NtQuerySystemTime (Address: 0x18001a498)
  • NtQueryValueKey (Address: 0x18001a540)
  • NtQueryVolumeInformationFile (Address: 0x18001a5d8)
  • NtRenameKey (Address: 0x18001a530)
  • NtRestoreKey (Address: 0x18001a580)
  • NtSaveKeyEx (Address: 0x18001a460)
  • NtSetInformationFile (Address: 0x18001a598)
  • NtSetSecurityObject (Address: 0x18001a3e0)
  • NtSetValueKey (Address: 0x18001a538)
  • NtTerminateProcess (Address: 0x18001a380)
  • NtUnloadKey (Address: 0x18001a528)
  • NtWaitForSingleObject (Address: 0x18001a628)
  • NtWriteFile (Address: 0x18001a590)
  • RtlAddAccessAllowedAce (Address: 0x18001a568)
  • RtlAdjustPrivilege (Address: 0x18001a3f8)
  • RtlAllocateAndInitializeSid (Address: 0x18001a3d8)
  • RtlAllocateHeap (Address: 0x18001a3b8)
  • RtlAnsiStringToUnicodeString (Address: 0x18001a490)
  • RtlCaptureContext (Address: 0x18001a388)
  • RtlCompareUnicodeStrings (Address: 0x18001a560)
  • RtlConvertSidToUnicodeString (Address: 0x18001a3c0)
  • RtlCreateAcl (Address: 0x18001a570)
  • RtlCreateEnvironment (Address: 0x18001a4d0)
  • RtlCreateSecurityDescriptor (Address: 0x18001a578)
  • RtlCreateUnicodeString (Address: 0x18001a4e0)
  • RtlDestroyEnvironment (Address: 0x18001a4d8)
  • RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18001a4a0)
  • RtlEqualUnicodeString (Address: 0x18001a5c8)
  • RtlExpandEnvironmentStrings_U (Address: 0x18001a4e8)
  • RtlFindMessage (Address: 0x18001a4c0)
  • RtlFreeHeap (Address: 0x18001a410)
  • RtlFreeSid (Address: 0x18001a400)
  • RtlFreeUnicodeString (Address: 0x18001a3c8)
  • RtlGetAce (Address: 0x18001a558)
  • RtlGetControlSecurityDescriptor (Address: 0x18001a3b0)
  • RtlGetVersion (Address: 0x18001a4b0)
  • RtlInitAnsiString (Address: 0x18001a4a8)
  • RtlInitUnicodeString (Address: 0x18001a3d0)
  • RtlLengthSid (Address: 0x18001a3e8)
  • RtlLookupFunctionEntry (Address: 0x18001a390)
  • RtlRaiseStatus (Address: 0x18001a638)
  • RtlReAllocateHeap (Address: 0x18001a510)
  • RtlSetControlSecurityDescriptor (Address: 0x18001a408)
  • RtlSetDaclSecurityDescriptor (Address: 0x18001a550)
  • RtlSetEnvironmentVariable (Address: 0x18001a4c8)
  • RtlSetThreadErrorMode (Address: 0x18001a4b8)
  • RtlUnhandledExceptionFilter (Address: 0x18001a3a0)
  • RtlValidSid (Address: 0x18001a480)
  • RtlVirtualUnwind (Address: 0x18001a398)
  • swprintf_s (Address: 0x18001a5b0)
  • towupper (Address: 0x18001a618)
  • wcschr (Address: 0x18001a520)
  • wcscpy_s (Address: 0x18001a5e8)
  • wcsncpy_s (Address: 0x18001a5c0)
  • wcsrchr (Address: 0x18001a588)