xcellstub.dll

Description: XCell Compiler Runtime 64 bit

Version: 3.3.15.0

Architecture: 64-bit

Operating System: Windows NT

SHA256: 656cc854976b03425184d52fa14213cd

File Size: 2.5 MB

Uploaded At: Aug. 20, 2026, 10:44 a.m.

Views: 12

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

DummyFunc0 (Ordinal: 10, Address: 0x17c860)
DummyFunc1 (Ordinal: 11, Address: 0x17c720)
DummyFunc2 (Ordinal: 12, Address: 0x17c710)
DummyFunc3 (Ordinal: 13, Address: 0x17c6f0)
DummyFunc4 (Ordinal: 14, Address: 0x17bf50)
DummyFunc5 (Ordinal: 15, Address: 0x1797f0)
DummyFunc6 (Ordinal: 16, Address: 0x179110)
DummyFunc7 (Ordinal: 17, Address: 0x1790f0)
DummyFunc8 (Ordinal: 18, Address: 0x177550)
DummyFunc9 (Ordinal: 19, Address: 0x176f30)
DummyFunc10 (Ordinal: 20, Address: 0x173960)
DummyFunc11 (Ordinal: 21, Address: 0x176bc0)
DummyFunc12 (Ordinal: 22, Address: 0x176910)
DummyFunc13 (Ordinal: 23, Address: 0x1768f0)
DummyFunc14 (Ordinal: 24, Address: 0x176390)
DummyFunc15 (Ordinal: 25, Address: 0x176360)
DummyFunc16 (Ordinal: 26, Address: 0x175e70)
DummyFunc17 (Ordinal: 27, Address: 0x1745a0)
DummyFunc18 (Ordinal: 28, Address: 0x173820)
DummyFunc19 (Ordinal: 29, Address: 0x173780)
DummyFunc20 (Ordinal: 30, Address: 0x172370)
DummyFunc21 (Ordinal: 31, Address: 0x1793c0)
DummyFunc22 (Ordinal: 32, Address: 0x179260)
DummyFunc23 (Ordinal: 33, Address: 0x179120)
DummyFunc24 (Ordinal: 34, Address: 0x17bda0)
xlAutoFree12 (Ordinal: 35, Address: 0x1cdb20)
xlAutoFree (Ordinal: 36, Address: 0x1cdbe0)
xlAutoClose (Ordinal: 37, Address: 0x17c870)

Imported DLLs & Functions

ADVAPI32.dll

ChangeServiceConfigA (Address: 0x1801ea038)
CloseServiceHandle (Address: 0x1801ea048)
ControlService (Address: 0x1801ea020)
CreateServiceA (Address: 0x1801ea040)
DeleteService (Address: 0x1801ea010)
GetUserNameA (Address: 0x1801ea008)
InitializeSecurityDescriptor (Address: 0x1801ea078)
IsTextUnicode (Address: 0x1801ea080)
OpenSCManagerA (Address: 0x1801ea018)
OpenServiceA (Address: 0x1801ea028)
RegCloseKey (Address: 0x1801ea0b8)
RegCreateKeyExA (Address: 0x1801ea058)
RegCreateKeyExW (Address: 0x1801ea090)
RegDeleteKeyW (Address: 0x1801ea000)
RegDeleteValueW (Address: 0x1801ea088)
RegEnumKeyExW (Address: 0x1801ea0a8)
RegOpenKeyExA (Address: 0x1801ea068)
RegOpenKeyExW (Address: 0x1801ea0a0)
RegQueryInfoKeyW (Address: 0x1801ea0b0)
RegQueryValueExA (Address: 0x1801ea050)
RegSetValueExA (Address: 0x1801ea060)
RegSetValueExW (Address: 0x1801ea098)
SetSecurityDescriptorDacl (Address: 0x1801ea070)
StartServiceA (Address: 0x1801ea030)

COMDLG32.dll

ChooseColorW (Address: 0x1801ea0d0)
GetOpenFileNameW (Address: 0x1801ea0c8)
GetSaveFileNameW (Address: 0x1801ea0d8)

GDI32.dll

CreateBrushIndirect (Address: 0x1801ea128)
CreateFontW (Address: 0x1801ea0e8)
DeleteDC (Address: 0x1801ea110)
DeleteObject (Address: 0x1801ea118)
GetDeviceCaps (Address: 0x1801ea120)
GetStockObject (Address: 0x1801ea100)
GetTextExtentPoint32W (Address: 0x1801ea0f8)
SelectObject (Address: 0x1801ea108)
SetBkColor (Address: 0x1801ea0f0)

gdiplus.dll

GdipAlloc (Address: 0x1801eab20)
GdipCloneBrush (Address: 0x1801eab18)
GdipCloneImage (Address: 0x1801eab68)
GdipCreateFromHDC (Address: 0x1801eab48)
GdipCreateSolidFill (Address: 0x1801eab38)
GdipDeleteBrush (Address: 0x1801eab28)
GdipDeleteGraphics (Address: 0x1801eab50)
GdipDisposeImage (Address: 0x1801eab40)
GdipDrawImageRectI (Address: 0x1801eab78)
GdipFree (Address: 0x1801eab08)
GdipGetImageBounds (Address: 0x1801eab30)
GdipLoadImageFromStream (Address: 0x1801eab70)
GdiplusShutdown (Address: 0x1801eab10)
GdiplusStartup (Address: 0x1801eab80)
GdipSetCompositingQuality (Address: 0x1801eab58)
GdipSetSmoothingMode (Address: 0x1801eab60)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1801ea668)
BeginUpdateResourceW (Address: 0x1801ea1f8)
CloseHandle (Address: 0x1801ea308)
CompareStringW (Address: 0x1801ea3d8)
CreateDirectoryW (Address: 0x1801ea498)
CreateEventA (Address: 0x1801ea648)
CreateFileA (Address: 0x1801ea320)
CreateFileW (Address: 0x1801ea2f0)
CreateMutexW (Address: 0x1801ea240)
CreateProcessW (Address: 0x1801ea250)
CreateSemaphoreA (Address: 0x1801ea610)
CreateThread (Address: 0x1801ea210)
DecodePointer (Address: 0x1801ea198)
DeleteCriticalSection (Address: 0x1801ea188)
DeleteFileW (Address: 0x1801ea4b0)
DeviceIoControl (Address: 0x1801ea350)
EncodePointer (Address: 0x1801ea6b8)
EndUpdateResourceW (Address: 0x1801ea208)
EnterCriticalSection (Address: 0x1801ea140)
EnumSystemLocalesW (Address: 0x1801ea400)
ExitProcess (Address: 0x1801ea1e8)
ExitThread (Address: 0x1801ea490)
FileTimeToLocalFileTime (Address: 0x1801ea330)
FileTimeToSystemTime (Address: 0x1801ea328)
FindClose (Address: 0x1801ea478)
FindFirstFileExW (Address: 0x1801ea470)
FindNextFileW (Address: 0x1801ea468)
FindResourceW (Address: 0x1801ea168)
FlsAlloc (Address: 0x1801ea3f8)
FlsFree (Address: 0x1801ea3e0)
FlsGetValue (Address: 0x1801ea3f0)
FlsSetValue (Address: 0x1801ea3e8)
FlushFileBuffers (Address: 0x1801ea3a0)
FlushInstructionCache (Address: 0x1801ea698)
FreeEnvironmentStringsW (Address: 0x1801ea580)
FreeLibrary (Address: 0x1801ea558)
FreeLibraryAndExitThread (Address: 0x1801ea488)
GetACP (Address: 0x1801ea420)
GetCommandLineA (Address: 0x1801ea388)
GetCommandLineW (Address: 0x1801ea5a8)
GetComputerNameA (Address: 0x1801ea640)
GetConsoleMode (Address: 0x1801ea438)
GetConsoleOutputCP (Address: 0x1801ea3c0)
GetCPInfo (Address: 0x1801ea528)
GetCurrentDirectoryW (Address: 0x1801ea4c0)
GetCurrentProcess (Address: 0x1801ea1a8)
GetCurrentProcessId (Address: 0x1801ea570)
GetCurrentThread (Address: 0x1801ea6d0)
GetCurrentThreadId (Address: 0x1801ea1a0)
GetDateFormatW (Address: 0x1801ea340)
GetDriveTypeW (Address: 0x1801ea4a8)
GetEnvironmentStringsW (Address: 0x1801ea378)
GetEnvironmentVariableW (Address: 0x1801ea2c0)
GetExitCodeProcess (Address: 0x1801ea3a8)
GetExitCodeThread (Address: 0x1801ea1d0)
GetFileAttributesExW (Address: 0x1801ea4b8)
GetFileAttributesW (Address: 0x1801ea228)
GetFileSize (Address: 0x1801ea310)
GetFileSizeEx (Address: 0x1801ea3b8)
GetFileType (Address: 0x1801ea458)
GetFullPathNameW (Address: 0x1801ea4a0)
GetLastError (Address: 0x1801ea148)
GetLocaleInfoW (Address: 0x1801ea360)
GetLongPathNameW (Address: 0x1801ea258)
GetModuleFileNameW (Address: 0x1801ea178)
GetModuleHandleA (Address: 0x1801ea598)
GetModuleHandleExW (Address: 0x1801ea480)
GetModuleHandleW (Address: 0x1801ea548)
GetOEMCP (Address: 0x1801ea418)
GetOverlappedResult (Address: 0x1801ea650)
GetPriorityClass (Address: 0x1801ea5c0)
GetPrivateProfileIntA (Address: 0x1801ea608)
GetPrivateProfileStringA (Address: 0x1801ea5e8)
GetProcAddress (Address: 0x1801ea550)
GetProcessHeap (Address: 0x1801ea2a8)
GetShortPathNameW (Address: 0x1801ea230)
GetStartupInfoW (Address: 0x1801ea4f0)
GetStdHandle (Address: 0x1801ea448)
GetStringTypeW (Address: 0x1801ea678)
GetSystemDirectoryW (Address: 0x1801ea2b0)
GetSystemTime (Address: 0x1801ea370)
GetSystemTimeAsFileTime (Address: 0x1801ea530)
GetTempPathW (Address: 0x1801ea220)
GetThreadPriority (Address: 0x1801ea5c8)
GetTickCount (Address: 0x1801ea600)
GetTimeZoneInformation (Address: 0x1801ea450)
GetUserDefaultLCID (Address: 0x1801ea408)
GetVersionExA (Address: 0x1801ea5a0)
GetVersionExW (Address: 0x1801ea358)
GetVolumeInformationW (Address: 0x1801ea348)
GetWindowsDirectoryA (Address: 0x1801ea5f8)
GetWindowsDirectoryW (Address: 0x1801ea2b8)
GlobalAlloc (Address: 0x1801ea260)
GlobalFree (Address: 0x1801ea1c0)
GlobalLock (Address: 0x1801ea268)
GlobalReAlloc (Address: 0x1801ea280)
GlobalUnlock (Address: 0x1801ea1b8)
HeapAlloc (Address: 0x1801ea2a0)
HeapFree (Address: 0x1801ea288)
HeapQueryInformation (Address: 0x1801ea390)
HeapReAlloc (Address: 0x1801ea298)
HeapSize (Address: 0x1801ea290)
InitializeCriticalSectionAndSpinCount (Address: 0x1801ea180)
InitializeCriticalSectionEx (Address: 0x1801ea248)
InitializeSListHead (Address: 0x1801ea6b0)
InterlockedFlushSList (Address: 0x1801ea4e0)
InterlockedPopEntrySList (Address: 0x1801ea6a8)
InterlockedPushEntrySList (Address: 0x1801ea6a0)
IsDebuggerPresent (Address: 0x1801ea6c8)
IsProcessorFeaturePresent (Address: 0x1801ea4f8)
IsValidCodePage (Address: 0x1801ea428)
IsValidLocale (Address: 0x1801ea410)
LCMapStringEx (Address: 0x1801ea538)
LCMapStringW (Address: 0x1801ea3d0)
LeaveCriticalSection (Address: 0x1801ea138)
LoadLibraryA (Address: 0x1801ea618)
LoadLibraryExA (Address: 0x1801ea680)
LoadLibraryExW (Address: 0x1801ea170)
LoadLibraryW (Address: 0x1801ea270)
LoadResource (Address: 0x1801ea160)
LocalAlloc (Address: 0x1801ea5e0)
LocalFree (Address: 0x1801ea1f0)
LocalHandle (Address: 0x1801ea5d8)
LockFile (Address: 0x1801ea630)
LockResource (Address: 0x1801ea2f8)
lstrcatA (Address: 0x1801ea5f0)
lstrcmpiW (Address: 0x1801ea380)
lstrcpyA (Address: 0x1801ea5d0)
lstrlenA (Address: 0x1801ea638)
MulDiv (Address: 0x1801ea278)
MultiByteToWideChar (Address: 0x1801ea150)
OpenEventW (Address: 0x1801ea218)
OpenProcess (Address: 0x1801ea578)
OutputDebugStringW (Address: 0x1801ea6c0)
QueryPerformanceCounter (Address: 0x1801ea318)
QueryPerformanceFrequency (Address: 0x1801ea300)
RaiseException (Address: 0x1801ea190)
ReadConsoleW (Address: 0x1801ea430)
ReadFile (Address: 0x1801ea440)
ReleaseSRWLockExclusive (Address: 0x1801ea670)
RtlCaptureContext (Address: 0x1801ea520)
RtlLookupFunctionEntry (Address: 0x1801ea518)
RtlPcToFileHeader (Address: 0x1801ea4d8)
RtlUnwind (Address: 0x1801ea5b8)
RtlUnwindEx (Address: 0x1801ea4e8)
RtlVirtualUnwind (Address: 0x1801ea510)
SetCurrentDirectoryW (Address: 0x1801ea4c8)
SetEndOfFile (Address: 0x1801ea590)
SetEnvironmentVariableW (Address: 0x1801ea2c8)
SetEvent (Address: 0x1801ea1c8)
SetFilePointer (Address: 0x1801ea628)
SetFilePointerEx (Address: 0x1801ea3b0)
SetLastError (Address: 0x1801ea1b0)
SetPriorityClass (Address: 0x1801ea368)
SetStdHandle (Address: 0x1801ea398)
SetThreadPriority (Address: 0x1801ea5b0)
SetUnhandledExceptionFilter (Address: 0x1801ea500)
SizeofResource (Address: 0x1801ea158)
Sleep (Address: 0x1801ea1d8)
SleepConditionVariableSRW (Address: 0x1801ea540)
SystemTimeToFileTime (Address: 0x1801ea338)
SystemTimeToTzSpecificLocalTime (Address: 0x1801ea460)
TerminateProcess (Address: 0x1801ea1e0)
TlsAlloc (Address: 0x1801ea2e0)
TlsFree (Address: 0x1801ea2d8)
TlsGetValue (Address: 0x1801ea2d0)
TlsSetValue (Address: 0x1801ea4d0)
TryAcquireSRWLockExclusive (Address: 0x1801ea660)
UnhandledExceptionFilter (Address: 0x1801ea508)
UnlockFile (Address: 0x1801ea620)
UpdateResourceW (Address: 0x1801ea200)
VirtualAlloc (Address: 0x1801ea690)
VirtualFree (Address: 0x1801ea688)
VirtualProtect (Address: 0x1801ea568)
WaitForSingleObject (Address: 0x1801ea238)
WakeAllConditionVariable (Address: 0x1801ea658)
WideCharToMultiByte (Address: 0x1801ea2e8)
WriteConsoleW (Address: 0x1801ea588)
WriteFile (Address: 0x1801ea3c8)
WriteProcessMemory (Address: 0x1801ea560)

ole32.dll

CLSIDFromProgID (Address: 0x1801eabb8)
CoCreateInstance (Address: 0x1801eabc0)
CoInitialize (Address: 0x1801eabb0)
CoInitializeSecurity (Address: 0x1801eabe0)
CoSetProxyBlanket (Address: 0x1801eab98)
CoTaskMemAlloc (Address: 0x1801eabc8)
CoTaskMemFree (Address: 0x1801eabe8)
CoTaskMemRealloc (Address: 0x1801eabd8)
CoUninitialize (Address: 0x1801eaba8)
CreateBindCtx (Address: 0x1801eab90)
CreateStreamOnHGlobal (Address: 0x1801eaba0)
GetRunningObjectTable (Address: 0x1801eabd0)

OLEAUT32.dll

CreateErrorInfo (Address: 0x1801ea758)
SafeArrayCopy (Address: 0x1801ea760)
SafeArrayCreate (Address: 0x1801ea730)
SafeArrayDestroy (Address: 0x1801ea778)
SafeArrayGetDim (Address: 0x1801ea748)
SafeArrayGetElement (Address: 0x1801ea750)
SafeArrayGetLBound (Address: 0x1801ea768)
SafeArrayGetUBound (Address: 0x1801ea770)
SafeArrayGetVartype (Address: 0x1801ea740)
SafeArrayPutElement (Address: 0x1801ea738)
SysAllocString (Address: 0x1801ea6e8)
SysAllocStringByteLen (Address: 0x1801ea718)
SysFreeString (Address: 0x1801ea6f0)
SysStringByteLen (Address: 0x1801ea710)
SysStringLen (Address: 0x1801ea728)
VariantChangeType (Address: 0x1801ea6f8)
VariantClear (Address: 0x1801ea6e0)
VariantCopy (Address: 0x1801ea708)
VariantInit (Address: 0x1801ea700)
VarUI4FromStr (Address: 0x1801ea720)

PSAPI.DLL

GetModuleInformation (Address: 0x1801ea788)

SHELL32.dll

CommandLineToArgvW (Address: 0x1801ea7b0)
ExtractIconExW (Address: 0x1801ea7a0)
ExtractIconW (Address: 0x1801ea7a8)
ShellExecuteExW (Address: 0x1801ea7b8)
SHGetFolderPathW (Address: 0x1801ea798)

USER32.dll

BeginPaint (Address: 0x1801ea908)
CallNextHookEx (Address: 0x1801eaa38)
CallWindowProcW (Address: 0x1801eaa50)
CharNextW (Address: 0x1801ea7c8)
ClientToScreen (Address: 0x1801ea940)
CloseClipboard (Address: 0x1801ea880)
CreateWindowExW (Address: 0x1801ea8d8)
DdeAccessData (Address: 0x1801ea848)
DdeClientTransaction (Address: 0x1801ea850)
DdeConnect (Address: 0x1801ea860)
DdeCreateStringHandleW (Address: 0x1801ea868)
DdeFreeDataHandle (Address: 0x1801ea830)
DdeFreeStringHandle (Address: 0x1801ea858)
DdeGetLastError (Address: 0x1801ea840)
DdeInitializeW (Address: 0x1801ea870)
DdeQueryStringW (Address: 0x1801ea7f0)
DdeUnaccessData (Address: 0x1801ea838)
DdeUninitialize (Address: 0x1801ea878)
DefWindowProcW (Address: 0x1801ea9f8)
DestroyIcon (Address: 0x1801ea9b8)
DialogBoxIndirectParamW (Address: 0x1801ea9c0)
DialogBoxParamW (Address: 0x1801ea990)
DispatchMessageW (Address: 0x1801ea8a0)
EmptyClipboard (Address: 0x1801ea890)
EndDialog (Address: 0x1801ea9f0)
EndPaint (Address: 0x1801ea900)
EnumChildWindows (Address: 0x1801ea820)
EnumWindows (Address: 0x1801ea828)
FillRect (Address: 0x1801ea8d0)
FindWindowExW (Address: 0x1801ea9b0)
FindWindowW (Address: 0x1801ea988)
GetActiveWindow (Address: 0x1801ea998)
GetAsyncKeyState (Address: 0x1801ea8c0)
GetClassInfoExW (Address: 0x1801ea8e8)
GetClassNameW (Address: 0x1801ea808)
GetClientRect (Address: 0x1801eaa20)
GetDC (Address: 0x1801ea9d8)
GetDialogBaseUnits (Address: 0x1801ea8c8)
GetDlgCtrlID (Address: 0x1801ea910)
GetDlgItem (Address: 0x1801eaa18)
GetMessageW (Address: 0x1801ea8b0)
GetMonitorInfoW (Address: 0x1801ea928)
GetParent (Address: 0x1801ea978)
GetSystemMetrics (Address: 0x1801ea938)
GetWindow (Address: 0x1801ea918)
GetWindowLongPtrW (Address: 0x1801ea958)
GetWindowLongW (Address: 0x1801ea960)
GetWindowPlacement (Address: 0x1801ea7d8)
GetWindowRect (Address: 0x1801ea950)
GetWindowTextW (Address: 0x1801eaa40)
GetWindowThreadProcessId (Address: 0x1801ea980)
HideCaret (Address: 0x1801ea8f8)
InvalidateRect (Address: 0x1801eaa08)
IsWindow (Address: 0x1801ea9a8)
KillTimer (Address: 0x1801ea810)
LoadCursorW (Address: 0x1801ea8e0)
LoadStringW (Address: 0x1801ea9e8)
MapWindowPoints (Address: 0x1801ea930)
MessageBoxW (Address: 0x1801ea7f8)
MonitorFromWindow (Address: 0x1801ea920)
MoveWindow (Address: 0x1801ea9e0)
OpenClipboard (Address: 0x1801ea898)
PeekMessageW (Address: 0x1801ea8b8)
PostMessageW (Address: 0x1801ea7e8)
RegisterClassExW (Address: 0x1801ea8f0)
ScreenToClient (Address: 0x1801ea948)
SendMessageW (Address: 0x1801ea7e0)
SetClipboardData (Address: 0x1801ea888)
SetFocus (Address: 0x1801eaa00)
SetForegroundWindow (Address: 0x1801ea9a0)
SetTimer (Address: 0x1801ea9c8)
SetWindowLongPtrW (Address: 0x1801eaa48)
SetWindowLongW (Address: 0x1801ea968)
SetWindowPos (Address: 0x1801ea970)
SetWindowsHookExW (Address: 0x1801eaa30)
SetWindowTextW (Address: 0x1801eaa10)
ShowWindow (Address: 0x1801ea7d0)
TranslateMessage (Address: 0x1801ea8a8)
UnhookWindowsHookEx (Address: 0x1801eaa28)
UnregisterClassW (Address: 0x1801ea9d0)
UpdateWindow (Address: 0x1801ea818)
wsprintfA (Address: 0x1801ea800)

VERSION.dll

GetFileVersionInfoSizeW (Address: 0x1801eaa70)
GetFileVersionInfoW (Address: 0x1801eaa68)
VerQueryValueW (Address: 0x1801eaa60)

WINSPOOL.DRV

ClosePrinter (Address: 0x1801eaa80)
EnumPrintersA (Address: 0x1801eaa98)
OpenPrinterA (Address: 0x1801eaa90)
SetPrinterA (Address: 0x1801eaa88)

WSOCK32.dll

connect (Address: 0x1801eaab0)
gethostbyname (Address: 0x1801eaae0)
htonl (Address: 0x1801eaac0)
htons (Address: 0x1801eaad0)
inet_addr (Address: 0x1801eaaf0)
ntohl (Address: 0x1801eaac8)
recv (Address: 0x1801eaaa8)
select (Address: 0x1801eaaf8)
send (Address: 0x1801eaae8)
socket (Address: 0x1801eaab8)
WSAStartup (Address: 0x1801eaad8)