sppc.dll

Description: Software Licensing Client Dll

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 39e78eefa7b9b1fce2438a0c7c37d5a1

File Size: 127.0 KB

Uploaded At: Dec. 1, 2025, 7:39 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • SLCallServer (Ordinal: 1, Address: 0x158e0)
  • SLpAuthenticateGenuineTicketResponse (Ordinal: 2, Address: 0xe2a0)
  • SLpBeginGenuineTicketTransaction (Ordinal: 3, Address: 0xe440)
  • SLpClearActivationInProgress (Ordinal: 4, Address: 0xe560)
  • SLpDepositDownlevelGenuineTicket (Ordinal: 5, Address: 0xe620)
  • SLpDepositTokenActivationResponse (Ordinal: 6, Address: 0xe730)
  • SLpGenerateTokenActivationChallenge (Ordinal: 7, Address: 0xe8a0)
  • SLpGetGenuineBlob (Ordinal: 8, Address: 0xe9e0)
  • SLpGetGenuineLocal (Ordinal: 9, Address: 0xeb40)
  • SLpGetLicenseAcquisitionInfo (Ordinal: 10, Address: 0xeb80)
  • SLpGetMSPidInformation (Ordinal: 11, Address: 0xed20)
  • SLpGetMachineUGUID (Ordinal: 12, Address: 0xef80)
  • SLpGetTokenActivationGrantInfo (Ordinal: 13, Address: 0xf040)
  • SLpIAActivateProduct (Ordinal: 14, Address: 0xf1f0)
  • SLpIsCurrentInstalledProductKeyDefaultKey (Ordinal: 15, Address: 0xf2b0)
  • SLpProcessVMPipeMessage (Ordinal: 16, Address: 0xf380)
  • SLpSetActivationInProgress (Ordinal: 17, Address: 0xf500)
  • SLpTriggerServiceWorker (Ordinal: 18, Address: 0xf5d0)
  • SLpVLActivateProduct (Ordinal: 19, Address: 0xf760)
  • SLClose (Ordinal: 20, Address: 0x117d0)
  • SLConsumeRight (Ordinal: 21, Address: 0x11800)
  • SLDepositMigrationBlob (Ordinal: 22, Address: 0x118f0)
  • SLDepositOfflineConfirmationId (Ordinal: 23, Address: 0x119e0)
  • SLDepositOfflineConfirmationIdEx (Ordinal: 24, Address: 0x11a20)
  • SLDepositStoreToken (Ordinal: 25, Address: 0x11df0)
  • SLFireEvent (Ordinal: 26, Address: 0x11ef0)
  • SLGatherMigrationBlob (Ordinal: 27, Address: 0x11fe0)
  • SLGatherMigrationBlobEx (Ordinal: 28, Address: 0x12060)
  • SLGenerateOfflineInstallationId (Ordinal: 29, Address: 0x12180)
  • SLGenerateOfflineInstallationIdEx (Ordinal: 30, Address: 0x121c0)
  • SLGetActiveLicenseInfo (Ordinal: 31, Address: 0x12350)
  • SLGetApplicationInformation (Ordinal: 32, Address: 0x12480)
  • SLGetApplicationPolicy (Ordinal: 33, Address: 0x12520)
  • SLGetAuthenticationResult (Ordinal: 34, Address: 0x125b0)
  • SLGetEncryptedPIDEx (Ordinal: 35, Address: 0x126d0)
  • SLGetGenuineInformation (Ordinal: 36, Address: 0x12820)
  • SLGetInstalledProductKeyIds (Ordinal: 37, Address: 0x129c0)
  • SLGetLicense (Ordinal: 38, Address: 0x12b20)
  • SLGetLicenseFileId (Ordinal: 39, Address: 0x12c60)
  • SLGetLicenseInformation (Ordinal: 40, Address: 0x12da0)
  • SLGetLicensingStatusInformation (Ordinal: 41, Address: 0x12e40)
  • SLGetPKeyId (Ordinal: 42, Address: 0x12fc0)
  • SLGetPKeyInformation (Ordinal: 43, Address: 0x13140)
  • SLGetPolicyInformation (Ordinal: 44, Address: 0x131e0)
  • SLGetPolicyInformationDWORD (Ordinal: 45, Address: 0x13280)
  • SLGetProductSkuInformation (Ordinal: 46, Address: 0x13300)
  • SLGetSLIDList (Ordinal: 47, Address: 0x13390)
  • SLGetServiceInformation (Ordinal: 48, Address: 0x13550)
  • SLInstallLicense (Ordinal: 49, Address: 0x135a0)
  • SLInstallProofOfPurchase (Ordinal: 50, Address: 0x136d0)
  • SLInstallProofOfPurchaseEx (Ordinal: 51, Address: 0x13840)
  • SLIsGenuineLocalEx (Ordinal: 52, Address: 0x139f0)
  • SLLoadApplicationPolicies (Ordinal: 53, Address: 0x13ab0)
  • SLOpen (Ordinal: 54, Address: 0x13b40)
  • SLPersistApplicationPolicies (Ordinal: 55, Address: 0x13c30)
  • SLPersistRTSPayloadOverride (Ordinal: 56, Address: 0x13d40)
  • SLReArm (Ordinal: 57, Address: 0x13e90)
  • SLRegisterEvent (Ordinal: 58, Address: 0x13fa0)
  • SLRegisterPlugin (Ordinal: 59, Address: 0x14050)
  • SLSetAuthenticationData (Ordinal: 60, Address: 0x14140)
  • SLSetCurrentProductKey (Ordinal: 61, Address: 0x14250)
  • SLSetGenuineInformation (Ordinal: 62, Address: 0x14350)
  • SLUninstallLicense (Ordinal: 63, Address: 0x144b0)
  • SLUninstallProofOfPurchase (Ordinal: 64, Address: 0x14580)
  • SLUnloadApplicationPolicies (Ordinal: 65, Address: 0x14650)
  • SLUnregisterEvent (Ordinal: 66, Address: 0x146c0)
  • SLUnregisterPlugin (Ordinal: 67, Address: 0x14740)

Imported DLLs & Functions

api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180017b50)
  • RaiseException (Address: 0x180017b58)
  • SetLastError (Address: 0x180017b60)
  • SetUnhandledExceptionFilter (Address: 0x180017b68)
  • UnhandledExceptionFilter (Address: 0x180017b48)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x180017b78)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180017b88)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180017ba0)
  • HeapAlloc (Address: 0x180017ba8)
  • HeapFree (Address: 0x180017b98)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180017bc0)
  • LocalFree (Address: 0x180017bb8)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180017bd8)
  • FreeLibrary (Address: 0x180017bf0)
  • FreeLibraryAndExitThread (Address: 0x180017c00)
  • GetModuleFileNameW (Address: 0x180017bd0)
  • GetModuleHandleExW (Address: 0x180017bf8)
  • GetProcAddress (Address: 0x180017be8)
  • LoadLibraryExW (Address: 0x180017be0)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualQuery (Address: 0x180017c10)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x180017c28)
  • GetCurrentProcess (Address: 0x180017c60)
  • GetCurrentProcessId (Address: 0x180017c40)
  • GetCurrentThread (Address: 0x180017c58)
  • GetCurrentThreadId (Address: 0x180017c50)
  • GetThreadPriority (Address: 0x180017c48)
  • OpenThreadToken (Address: 0x180017c30)
  • ProcessIdToSessionId (Address: 0x180017c38)
  • SetThreadPriority (Address: 0x180017c20)
  • SetThreadToken (Address: 0x180017c68)
  • TerminateProcess (Address: 0x180017c70)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x180017c80)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180017c90)
api-ms-win-core-psapi-l1-1-0.dll
  • K32EnumProcessModules (Address: 0x180017ca8)
  • K32GetModuleInformation (Address: 0x180017ca0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180017cc8)
  • RegOpenKeyExW (Address: 0x180017cc0)
  • RegQueryValueExW (Address: 0x180017cb8)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180017ce8)
  • RtlLookupFunctionEntry (Address: 0x180017ce0)
  • RtlVirtualUnwind (Address: 0x180017cd8)
api-ms-win-core-synch-l1-1-0.dll
  • CreateEventW (Address: 0x180017d00)
  • CreateMutexW (Address: 0x180017d08)
  • DeleteCriticalSection (Address: 0x180017d38)
  • EnterCriticalSection (Address: 0x180017d28)
  • InitializeCriticalSectionAndSpinCount (Address: 0x180017d50)
  • LeaveCriticalSection (Address: 0x180017d30)
  • OpenMutexW (Address: 0x180017d18)
  • ReleaseMutex (Address: 0x180017d40)
  • ReleaseSemaphore (Address: 0x180017d20)
  • SetEvent (Address: 0x180017cf8)
  • WaitForMultipleObjectsEx (Address: 0x180017d10)
  • WaitForSingleObject (Address: 0x180017d48)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x180017d60)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x180017d78)
  • WaitForMultipleObjects (Address: 0x180017d70)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x180017d90)
  • GetTickCount (Address: 0x180017d88)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x180017da0)
  • EncodePointer (Address: 0x180017da8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180017dc0)
  • EventSetInformation (Address: 0x180017dd0)
  • EventUnregister (Address: 0x180017db8)
  • EventWriteTransfer (Address: 0x180017dc8)
api-ms-win-security-base-l1-1-0.dll
  • AllocateAndInitializeSid (Address: 0x180017de8)
  • FreeSid (Address: 0x180017de0)
  • RevertToSelf (Address: 0x180017df0)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x180017e00)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x180017e10)
  • OpenSCManagerW (Address: 0x180017e18)
  • OpenServiceW (Address: 0x180017e20)
api-ms-win-service-management-l2-1-0.dll
  • NotifyServiceStatusChangeW (Address: 0x180017e30)
  • QueryServiceStatusEx (Address: 0x180017e38)
KERNEL32.dll
  • GetProcessAffinityMask (Address: 0x180017ae8)
msvcrt.dll
  • __C_specific_handler (Address: 0x180017e98)
  • __dllonexit (Address: 0x180017e58)
  • _amsg_exit (Address: 0x180017e60)
  • _initterm (Address: 0x180017e80)
  • _lock (Address: 0x180017e50)
  • _onexit (Address: 0x180017ea8)
  • _purecall (Address: 0x180017ea0)
  • _unlock (Address: 0x180017e68)
  • _vsnwprintf (Address: 0x180017e78)
  • _XcptFilter (Address: 0x180017e90)
  • free (Address: 0x180017e88)
  • malloc (Address: 0x180017e48)
  • memcmp (Address: 0x180017eb0)
  • memcpy (Address: 0x180017eb8)
  • memmove (Address: 0x180017e70)
  • memset (Address: 0x180017ec0)
RPCRT4.dll
  • I_RpcExceptionFilter (Address: 0x180017af8)
  • I_RpcMapWin32Status (Address: 0x180017b20)
  • NdrClientCall3 (Address: 0x180017b38)
  • RpcBindingFree (Address: 0x180017b30)
  • RpcBindingFromStringBindingW (Address: 0x180017b10)
  • RpcBindingSetAuthInfoExW (Address: 0x180017b08)
  • RpcStringBindingComposeW (Address: 0x180017b18)
  • RpcStringFreeW (Address: 0x180017b00)
  • UuidCreate (Address: 0x180017b28)