xliveinstall.dll
v3.2.6.0
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 15
Initialize
#1 · 0x8194
Shutdown
#2 · 0x14931
SetActivationToken
#3 · 0x6070
GetActivationToken
#4 · 0x60a4
RemoveActivationToken
#5 · 0x60ce
InstallProduct
#6 · 0x60ed
#7 · 0x6161
IsProductInstalled
#8 · 0x623b
#9 · 0x6331
#10 · 0x6364
#11 · 0x63d1
#12 · 0x63f0
GetProductData
#13 · 0x62fe
RemoveProductEx
#14 · 0x61c9
GetRuntimePath
#15 · 0x62df
No function matches your filter.
Imported DLLs & functions 197
ADVAPI32.dll
13
CryptAcquireContextW
0x401010
CryptCreateHash
0x401014
CryptDestroyHash
0x401020
CryptGetHashParam
0x401000
CryptHashData
0x401018
CryptReleaseContext
0x401024
GetSidSubAuthority
0x40100c
GetSidSubAuthorityCount
0x401008
GetTokenInformation
0x401004
OpenProcessToken
0x40101c
RegCloseKey
0x40102c
RegOpenKeyExW
0x401028
RegQueryInfoKeyW
0x401030
CertVerifyCertificateChainPolicy
0x401038
CryptProtectData
0x40103c
CryptUnprotectData
0x401040
KERNEL32.dll
125
CloseHandle
0x401214
CompareStringA
0x4011dc
CompareStringW
0x4011e0
CreateEventW
0x401124
CreateFileA
0x4011d4
CreateFileW
0x40121c
CreateThread
0x401060
CreateToolhelp32Snapshot
0x4010bc
DeleteCriticalSection
0x4011f8
DeleteFileW
0x401218
EnterCriticalSection
0x4010e8
ExitProcess
0x401234
FindClose
0x401054
FindFirstFileW
0x40105c
FindNextFileW
0x401058
FlushFileBuffers
0x4011d8
FreeEnvironmentStringsA
0x40113c
FreeEnvironmentStringsW
0x401144
FreeLibrary
0x40108c
GetACP
0x401178
GetCommandLineA
0x4010fc
GetCommandLineW
0x4010c4
GetConsoleCP
0x4011a8
GetConsoleMode
0x4011ac
GetConsoleOutputCP
0x4011cc
GetCPInfo
0x401174
GetCurrentProcess
0x401088
GetCurrentProcessId
0x4010b0
GetCurrentThreadId
0x4010f8
GetDateFormatA
0x401194
GetDriveTypeW
0x401074
GetEnvironmentStrings
0x401140
GetEnvironmentStringsW
0x401148
GetExitCodeProcess
0x4010d4
GetExitCodeThread
0x4010c8
GetFileSize
0x40120c
GetFileSizeEx
0x401078
GetFileTime
0x401220
GetFileType
0x401130
GetFullPathNameW
0x4010d8
GetLastError
0x401238
GetLocaleInfoA
0x4011bc
GetModuleFileNameA
0x401138
GetModuleFileNameW
0x4011f0
GetModuleHandleA
0x401184
GetModuleHandleW
0x401098
GetOEMCP
0x40117c
GetPrivateProfileStringW
0x40106c
GetProcAddress
0x401090
GetProcessHeap
0x4010a8
GetProcessId
0x4010d0
GetStartupInfoA
0x401134
GetStdHandle
0x40112c
GetStringTypeA
0x4011b4
GetStringTypeW
0x4011b8
GetSystemDirectoryW
0x40107c
GetSystemInfo
0x4010f0
GetSystemTime
0x4010ec
GetSystemTimeAsFileTime
0x40115c
GetSystemWow64DirectoryW
0x401080
GetTempFileNameW
0x401048
GetTempPathW
0x401050
GetTickCount
0x40104c
GetTimeFormatA
0x401190
GetTimeZoneInformation
0x4011c0
GetUserDefaultLCID
0x40109c
GetUserDefaultUILanguage
0x401070
GetVersionExW
0x4010f4
HeapAlloc
0x4010a4
HeapCreate
0x40114c
HeapDestroy
0x401150
HeapFree
0x4010ac
HeapReAlloc
0x401100
HeapSize
0x401198
InitializeCriticalSection
0x4011fc
InitializeCriticalSectionAndSpinCount
0x4011a4
InterlockedDecrement
0x40111c
InterlockedExchange
0x40119c
InterlockedIncrement
0x401114
IsDebuggerPresent
0x40116c
IsValidCodePage
0x401180
IsWow64Process
0x401084
LCMapStringA
0x4011b0
LCMapStringW
0x401188
LeaveCriticalSection
0x4010e0
LoadLibraryA
0x4011a0
LoadLibraryW
0x401094
LocalAlloc
0x40122c
LocalFree
0x401230
MultiByteToWideChar
0x401210
OpenEventW
0x4010c0
OpenProcess
0x4010a0
Process32FirstW
0x4010b8
Process32NextW
0x4010b4
QueryPerformanceCounter
0x401158
QueueUserWorkItem
0x4011e8
RaiseException
0x401068
ReadFile
0x401208
RemoveDirectoryW
0x401064
RtlUnwind
0x40118c
SetEnvironmentVariableA
0x4011e4
SetEvent
0x4011f4
SetFilePointer
0x4010e4
SetHandleCount
0x401128
SetLastError
0x401118
SetStdHandle
0x4011c4
SetUnhandledExceptionFilter
0x401168
Sleep
0x401120
SystemTimeToTzSpecificLocalTime
0x4010dc
TerminateProcess
0x401160
TlsAlloc
0x401108
TlsFree
0x401110
TlsGetValue
0x401104
TlsSetValue
0x40110c
UnhandledExceptionFilter
0x401164
VerifyVersionInfoA
0x401228
VerSetConditionMask
0x401224
VirtualAlloc
0x401170
VirtualFree
0x401154
WaitForMultipleObjects
0x4010cc
WaitForSingleObject
0x4011ec
WideCharToMultiByte
0x401200
WriteConsoleA
0x4011c8
WriteConsoleW
0x4011d0
WriteFile
0x401204
msi.dll
17
0x40131c
0x4012e4
0x4012e8
0x4012ec
0x4012f0
0x4012f4
0x4012f8
0x4012fc
0x401300
0x401304
0x401308
0x40130c
0x401310
0x401314
0x401318
0x401320
0x401324
CoCreateInstance
0x401330
CoInitialize
0x401334
CoUninitialize
0x401338
IIDFromString
0x40133c
StringFromGUID2
0x40132c
SysAllocString
0x40124c
SysAllocStringByteLen
0x401248
SysFreeString
0x401258
SysStringByteLen
0x401244
SysStringLen
0x401240
VariantClear
0x401250
VariantInit
0x401254
SetupIterateCabinetW
0x401260
SHCreateDirectoryExW
0x40126c
ShellExecuteExW
0x401268
SHFileOperationW
0x401274
SHGetFolderPathW
0x401270
SHLWAPI.dll
13
PathAddBackslashW
0x401298
PathCombineW
0x401284
PathFileExistsW
0x401288
PathFindFileNameW
0x40129c
PathIsDirectoryW
0x40128c
PathMatchSpecW
0x4012a4
PathRemoveExtensionW
0x4012a0
PathRemoveFileSpecW
0x4012ac
PathStripPathW
0x4012a8
PathStripToRootW
0x401290
SHEnumKeyExW
0x401294
SHGetValueW
0x40127c
SHSetValueW
0x401280
IsCatalogFile
0x4012d4
WinVerifyTrustEx
0x4012d8
WTHelperGetProvSignerFromChain
0x4012d0
WTHelperProvDataFromStateData
0x4012dc
No function matches your filter.