sppc.dll

Description: Software Licensing Client Dll

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: ae335999a74562d49d025a91cb962dd2

File Size: 96.5 KB

Uploaded At: Dec. 1, 2025, 8:04 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • SLCallServer (Ordinal: 1, Address: 0x15390)
  • SLpAuthenticateGenuineTicketResponse (Ordinal: 2, Address: 0xf910)
  • SLpBeginGenuineTicketTransaction (Ordinal: 3, Address: 0xfa40)
  • SLpClearActivationInProgress (Ordinal: 4, Address: 0xfb10)
  • SLpDepositDownlevelGenuineTicket (Ordinal: 5, Address: 0xfba0)
  • SLpDepositTokenActivationResponse (Ordinal: 6, Address: 0xfc60)
  • SLpGenerateTokenActivationChallenge (Ordinal: 7, Address: 0xfd60)
  • SLpGetGenuineBlob (Ordinal: 8, Address: 0xfe60)
  • SLpGetGenuineLocal (Ordinal: 9, Address: 0xff40)
  • SLpGetLicenseAcquisitionInfo (Ordinal: 10, Address: 0xff80)
  • SLpGetMSPidInformation (Ordinal: 11, Address: 0x100d0)
  • SLpGetMachineUGUID (Ordinal: 12, Address: 0x102c0)
  • SLpGetTokenActivationGrantInfo (Ordinal: 13, Address: 0x10350)
  • SLpIAActivateProduct (Ordinal: 14, Address: 0x104b0)
  • SLpIsCurrentInstalledProductKeyDefaultKey (Ordinal: 15, Address: 0x10550)
  • SLpProcessVMPipeMessage (Ordinal: 16, Address: 0x105e0)
  • SLpSetActivationInProgress (Ordinal: 17, Address: 0x10700)
  • SLpTriggerServiceWorker (Ordinal: 18, Address: 0x10790)
  • SLpVLActivateProduct (Ordinal: 19, Address: 0x108c0)
  • SLClose (Ordinal: 20, Address: 0x12270)
  • SLConsumeRight (Ordinal: 21, Address: 0x122a0)
  • SLDepositMigrationBlob (Ordinal: 22, Address: 0x12350)
  • SLDepositOfflineConfirmationId (Ordinal: 23, Address: 0x12400)
  • SLDepositOfflineConfirmationIdEx (Ordinal: 24, Address: 0x12440)
  • SLDepositStoreToken (Ordinal: 25, Address: 0x12760)
  • SLFireEvent (Ordinal: 26, Address: 0x12810)
  • SLGatherMigrationBlob (Ordinal: 27, Address: 0x128d0)
  • SLGatherMigrationBlobEx (Ordinal: 28, Address: 0x12940)
  • SLGenerateOfflineInstallationId (Ordinal: 29, Address: 0x12a20)
  • SLGenerateOfflineInstallationIdEx (Ordinal: 30, Address: 0x12a60)
  • SLGetActiveLicenseInfo (Ordinal: 31, Address: 0x12b90)
  • SLGetApplicationInformation (Ordinal: 32, Address: 0x12c70)
  • SLGetApplicationPolicy (Ordinal: 33, Address: 0x12cc0)
  • SLGetAuthenticationResult (Ordinal: 34, Address: 0x12d30)
  • SLGetEncryptedPIDEx (Ordinal: 35, Address: 0x12e10)
  • SLGetGenuineInformation (Ordinal: 36, Address: 0x12f30)
  • SLGetInstalledProductKeyIds (Ordinal: 37, Address: 0x13080)
  • SLGetLicense (Ordinal: 38, Address: 0x131a0)
  • SLGetLicenseFileId (Ordinal: 39, Address: 0x132a0)
  • SLGetLicenseInformation (Ordinal: 40, Address: 0x13390)
  • SLGetLicensingStatusInformation (Ordinal: 41, Address: 0x133e0)
  • SLGetPKeyId (Ordinal: 42, Address: 0x13510)
  • SLGetPKeyInformation (Ordinal: 43, Address: 0x13650)
  • SLGetPolicyInformation (Ordinal: 44, Address: 0x136a0)
  • SLGetPolicyInformationDWORD (Ordinal: 45, Address: 0x136e0)
  • SLGetProductSkuInformation (Ordinal: 46, Address: 0x13720)
  • SLGetSLIDList (Ordinal: 47, Address: 0x13760)
  • SLGetServiceInformation (Ordinal: 48, Address: 0x138c0)
  • SLInstallLicense (Ordinal: 49, Address: 0x13900)
  • SLInstallProofOfPurchase (Ordinal: 50, Address: 0x139c0)
  • SLInstallProofOfPurchaseEx (Ordinal: 51, Address: 0x13ac0)
  • SLIsGenuineLocalEx (Ordinal: 52, Address: 0x13c10)
  • SLLoadApplicationPolicies (Ordinal: 53, Address: 0x13ca0)
  • SLOpen (Ordinal: 54, Address: 0x13d10)
  • SLPersistApplicationPolicies (Ordinal: 55, Address: 0x13dc0)
  • SLPersistRTSPayloadOverride (Ordinal: 56, Address: 0x13ea0)
  • SLReArm (Ordinal: 57, Address: 0x13f90)
  • SLRegisterEvent (Ordinal: 58, Address: 0x14050)
  • SLRegisterPlugin (Ordinal: 59, Address: 0x140d0)
  • SLSetAuthenticationData (Ordinal: 60, Address: 0x14180)
  • SLSetCurrentProductKey (Ordinal: 61, Address: 0x14240)
  • SLSetGenuineInformation (Ordinal: 62, Address: 0x14300)
  • SLUninstallLicense (Ordinal: 63, Address: 0x14420)
  • SLUninstallProofOfPurchase (Ordinal: 64, Address: 0x144b0)
  • SLUnloadApplicationPolicies (Ordinal: 65, Address: 0x14550)
  • SLUnregisterEvent (Ordinal: 66, Address: 0x145a0)
  • SLUnregisterPlugin (Ordinal: 67, Address: 0x14610)

Imported DLLs & Functions

api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x10018038)
  • RaiseException (Address: 0x1001803c)
  • SetLastError (Address: 0x10018034)
  • SetUnhandledExceptionFilter (Address: 0x10018040)
  • UnhandledExceptionFilter (Address: 0x10018030)
api-ms-win-core-errorhandling-l1-1-2.dll
  • RaiseFailFastException (Address: 0x10018048)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x10018050)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x10018060)
  • HeapAlloc (Address: 0x10018058)
  • HeapFree (Address: 0x1001805c)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x10018068)
  • LocalFree (Address: 0x1001806c)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x10018074)
  • FreeLibrary (Address: 0x10018080)
  • FreeLibraryAndExitThread (Address: 0x10018088)
  • GetModuleFileNameW (Address: 0x10018084)
  • GetModuleHandleExW (Address: 0x1001807c)
  • GetProcAddress (Address: 0x1001808c)
  • LoadLibraryExW (Address: 0x10018078)
api-ms-win-core-memory-l1-1-0.dll
  • VirtualQuery (Address: 0x10018094)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1001809c)
  • GetCurrentProcess (Address: 0x100180a0)
  • GetCurrentProcessId (Address: 0x100180a8)
  • GetCurrentThread (Address: 0x100180ac)
  • GetCurrentThreadId (Address: 0x100180b8)
  • GetThreadPriority (Address: 0x100180bc)
  • OpenThreadToken (Address: 0x100180c4)
  • ProcessIdToSessionId (Address: 0x100180a4)
  • SetThreadPriority (Address: 0x100180b0)
  • SetThreadToken (Address: 0x100180c0)
  • TerminateProcess (Address: 0x100180b4)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x100180cc)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x100180d4)
api-ms-win-core-psapi-l1-1-0.dll
  • K32EnumProcessModules (Address: 0x100180e0)
  • K32GetModuleInformation (Address: 0x100180dc)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x100180e8)
  • RegOpenKeyExW (Address: 0x100180f0)
  • RegQueryValueExW (Address: 0x100180ec)
api-ms-win-core-synch-l1-1-0.dll
  • CreateEventW (Address: 0x10018120)
  • CreateMutexW (Address: 0x10018104)
  • DeleteCriticalSection (Address: 0x1001810c)
  • EnterCriticalSection (Address: 0x10018100)
  • InitializeCriticalSectionAndSpinCount (Address: 0x10018108)
  • LeaveCriticalSection (Address: 0x10018124)
  • OpenMutexW (Address: 0x10018110)
  • ReleaseMutex (Address: 0x1001811c)
  • ReleaseSemaphore (Address: 0x100180fc)
  • SetEvent (Address: 0x100180f8)
  • WaitForMultipleObjectsEx (Address: 0x10018114)
  • WaitForSingleObject (Address: 0x10018118)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1001812c)
api-ms-win-core-synch-l1-2-1.dll
  • CreateSemaphoreW (Address: 0x10018138)
  • WaitForMultipleObjects (Address: 0x10018134)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x10018144)
  • GetTickCount (Address: 0x10018140)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1001814c)
  • EncodePointer (Address: 0x10018150)
api-ms-win-core-wow64-l1-1-0.dll
  • IsWow64Process (Address: 0x10018158)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x1001816c)
  • EventSetInformation (Address: 0x10018168)
  • EventUnregister (Address: 0x10018160)
  • EventWriteTransfer (Address: 0x10018164)
api-ms-win-security-base-l1-1-0.dll
  • AllocateAndInitializeSid (Address: 0x10018178)
  • FreeSid (Address: 0x1001817c)
  • RevertToSelf (Address: 0x10018174)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x10018184)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x10018194)
  • OpenSCManagerW (Address: 0x1001818c)
  • OpenServiceW (Address: 0x10018190)
api-ms-win-service-management-l2-1-0.dll
  • NotifyServiceStatusChangeW (Address: 0x100181a0)
  • QueryServiceStatusEx (Address: 0x1001819c)
KERNEL32.dll
  • GetProcessAffinityMask (Address: 0x10018000)
msvcrt.dll
  • __dllonexit (Address: 0x100181c4)
  • _amsg_exit (Address: 0x100181c0)
  • _except_handler4_common (Address: 0x100181d0)
  • _initterm (Address: 0x100181ac)
  • _lock (Address: 0x100181b0)
  • _onexit (Address: 0x100181cc)
  • _purecall (Address: 0x100181d4)
  • _unlock (Address: 0x100181bc)
  • _vsnwprintf (Address: 0x100181b4)
  • _XcptFilter (Address: 0x100181c8)
  • free (Address: 0x100181b8)
  • malloc (Address: 0x100181a8)
  • memcmp (Address: 0x100181dc)
  • memcpy (Address: 0x100181e0)
  • memmove (Address: 0x100181d8)
  • memset (Address: 0x100181e4)
RPCRT4.dll
  • I_RpcExceptionFilter (Address: 0x10018008)
  • I_RpcMapWin32Status (Address: 0x10018020)
  • NdrClientCall4 (Address: 0x10018028)
  • RpcBindingFree (Address: 0x1001800c)
  • RpcBindingFromStringBindingW (Address: 0x10018018)
  • RpcBindingSetAuthInfoExW (Address: 0x10018014)
  • RpcStringBindingComposeW (Address: 0x1001801c)
  • RpcStringFreeW (Address: 0x10018010)
  • UuidCreate (Address: 0x10018024)