w32time.dll

Description: Windows Time Service

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: b8208f0a451aced6a4d20bc4b5682dfe

File Size: 510.0 KB

Uploaded At: Dec. 1, 2025, 7:42 a.m.

Views: 4

Exported Functions

fnW32TmI_ScSetServiceBits (Ordinal: 1, Address: 0x72f00)
fnW32TmRegisterServiceCtrlHandlerEx (Ordinal: 2, Address: 0x72f10)
fnW32TmSetServiceStatus (Ordinal: 3, Address: 0x72f08)
DllInstall (Ordinal: 4, Address: 0x29720)
DllRegisterServer (Ordinal: 5, Address: 0x298b0)
DllUnregisterServer (Ordinal: 6, Address: 0x29900)
SvchostEntry_W32Time (Ordinal: 7, Address: 0x3a550)
SvchostPushServiceGlobals (Ordinal: 8, Address: 0x3a590)
TimeProvClose (Ordinal: 9, Address: 0x27960)
TimeProvCommand (Ordinal: 10, Address: 0x279d0)
TimeProvOpen (Ordinal: 11, Address: 0x27a20)
W32TimeBufferFree (Ordinal: 12, Address: 0x3d980)
W32TimeDcPromo (Ordinal: 13, Address: 0x29920)
W32TimeDeleteConfig (Ordinal: 14, Address: 0x47910)
W32TimeGetNetlogonServiceBits (Ordinal: 15, Address: 0x467c0)
W32TimeLog (Ordinal: 16, Address: 0x46960)
W32TimeQueryConfig (Ordinal: 17, Address: 0x47980)
W32TimeQueryConfiguration (Ordinal: 18, Address: 0x46b00)
W32TimeQueryHardwareProviderStatus (Ordinal: 19, Address: 0x46d30)
W32TimeQueryNTPProviderStatus (Ordinal: 20, Address: 0x46d50)
W32TimeQueryNtpProviderConfiguration (Ordinal: 21, Address: 0x46d70)
W32TimeQuerySource (Ordinal: 22, Address: 0x46fc0)
W32TimeQueryStatus (Ordinal: 23, Address: 0x471f0)
W32TimeSetConfig (Ordinal: 24, Address: 0x47a20)
W32TimeSyncNow (Ordinal: 25, Address: 0x47420)
W32TimeVerifyJoinConfig (Ordinal: 26, Address: 0x29c50)
W32TimeVerifyUnjoinConfig (Ordinal: 27, Address: 0x29df0)
W32TmServiceMain (Ordinal: 28, Address: 0x3a5a0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18004bdd0)
IsDebuggerPresent (Address: 0x18004bdc8)
OutputDebugStringW (Address: 0x18004bdc0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18004bde0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18004bdf0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18004be08)
SetLastError (Address: 0x18004be10)
SetUnhandledExceptionFilter (Address: 0x18004be18)
UnhandledExceptionFilter (Address: 0x18004be00)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18004be38)
FileTimeToLocalFileTime (Address: 0x18004be30)
GetFileSizeEx (Address: 0x18004be40)
WriteFile (Address: 0x18004be28)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18004be50)
GetHandleInformation (Address: 0x18004be60)
SetHandleInformation (Address: 0x18004be58)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18004be78)
HeapAlloc (Address: 0x18004be70)
HeapFree (Address: 0x18004be80)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18004be90)
LocalFree (Address: 0x18004be98)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18004bea8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18004bec0)
FreeLibrary (Address: 0x18004bef8)
GetModuleFileNameA (Address: 0x18004bee0)
GetModuleFileNameW (Address: 0x18004bef0)
GetModuleHandleExW (Address: 0x18004bee8)
GetModuleHandleW (Address: 0x18004bed0)
GetProcAddress (Address: 0x18004beb8)
LoadLibraryExW (Address: 0x18004bec8)
LoadStringW (Address: 0x18004bed8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18004bf08)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x18004bf28)
VirtualProtect (Address: 0x18004bf18)
VirtualQuery (Address: 0x18004bf20)

api-ms-win-core-perfcounters-l1-1-0.dll

PerfCreateInstance (Address: 0x18004bf50)
PerfDeleteInstance (Address: 0x18004bf48)
PerfSetCounterRefValue (Address: 0x18004bf40)
PerfSetCounterSetInfo (Address: 0x18004bf38)
PerfStartProvider (Address: 0x18004bf58)
PerfStopProvider (Address: 0x18004bf60)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18004bf70)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18004bfb8)
GetCurrentProcess (Address: 0x18004bf98)
GetCurrentProcessId (Address: 0x18004bfc8)
GetCurrentThread (Address: 0x18004bfd0)
GetCurrentThreadId (Address: 0x18004bf80)
GetExitCodeThread (Address: 0x18004bfa0)
OpenProcessToken (Address: 0x18004bf88)
OpenThreadToken (Address: 0x18004bfc0)
SetThreadPriority (Address: 0x18004bf90)
SetThreadStackGuarantee (Address: 0x18004bfb0)
TerminateProcess (Address: 0x18004bfa8)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18004bfe0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18004bff0)
QueryPerformanceFrequency (Address: 0x18004bff8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18004c028)
RegCreateKeyExW (Address: 0x18004c010)
RegDeleteValueW (Address: 0x18004c030)
RegEnumKeyExW (Address: 0x18004c020)
RegGetValueA (Address: 0x18004c008)
RegGetValueW (Address: 0x18004c040)
RegOpenKeyExA (Address: 0x18004c048)
RegOpenKeyExW (Address: 0x18004c038)
RegSetValueExW (Address: 0x18004c018)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18004c060)
RtlLookupFunctionEntry (Address: 0x18004c068)
RtlVirtualUnwind (Address: 0x18004c058)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18004c0b0)
AcquireSRWLockShared (Address: 0x18004c100)
CreateEventW (Address: 0x18004c0a0)
CreateMutexExW (Address: 0x18004c0c8)
CreateSemaphoreExW (Address: 0x18004c090)
DeleteCriticalSection (Address: 0x18004c0b8)
EnterCriticalSection (Address: 0x18004c0f0)
InitializeCriticalSection (Address: 0x18004c078)
InitializeCriticalSectionEx (Address: 0x18004c110)
LeaveCriticalSection (Address: 0x18004c080)
OpenSemaphoreW (Address: 0x18004c0d8)
ReleaseMutex (Address: 0x18004c0e8)
ReleaseSemaphore (Address: 0x18004c0a8)
ReleaseSRWLockExclusive (Address: 0x18004c0d0)
ReleaseSRWLockShared (Address: 0x18004c108)
ResetEvent (Address: 0x18004c098)
SetEvent (Address: 0x18004c118)
TryEnterCriticalSection (Address: 0x18004c088)
WaitForMultipleObjectsEx (Address: 0x18004c0c0)
WaitForSingleObject (Address: 0x18004c0e0)
WaitForSingleObjectEx (Address: 0x18004c0f8)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18004c128)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x18004c138)
GetSystemTime (Address: 0x18004c140)
GetSystemTimeAdjustment (Address: 0x18004c150)
GetSystemTimeAsFileTime (Address: 0x18004c158)
GetTickCount (Address: 0x18004c160)
GetTickCount64 (Address: 0x18004c148)

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemTimePreciseAsFileTime (Address: 0x18004c170)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18004c188)
CreateThreadpoolTimer (Address: 0x18004c180)
SetThreadpoolTimer (Address: 0x18004c190)
WaitForThreadpoolTimerCallbacks (Address: 0x18004c198)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

ChangeTimerQueueTimer (Address: 0x18004c1c0)
CreateTimerQueueTimer (Address: 0x18004c1a8)
DeleteTimerQueueTimer (Address: 0x18004c1c8)
QueueUserWorkItem (Address: 0x18004c1b8)
UnregisterWaitEx (Address: 0x18004c1b0)

api-ms-win-core-threadpool-private-l1-1-0.dll

RegisterWaitForSingleObjectEx (Address: 0x18004c1d8)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x18004c1e8)
SystemTimeToFileTime (Address: 0x18004c1f8)
SystemTimeToTzSpecificLocalTime (Address: 0x18004c1f0)

api-ms-win-crt-math-l1-1-0.dll

logf (Address: 0x18004c208)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18004c340)
__CxxFrameHandler3 (Address: 0x18004c2e8)
__CxxFrameHandler4 (Address: 0x18004c350)
_CxxThrowException (Address: 0x18004c2c8)
_local_unwind (Address: 0x18004c358)
_o___std_exception_copy (Address: 0x18004c328)
_o___std_exception_destroy (Address: 0x18004c320)
_o___std_type_info_destroy_list (Address: 0x18004c318)
_o___stdio_common_vsnprintf_s (Address: 0x18004c310)
_o___stdio_common_vswprintf (Address: 0x18004c308)
_o__callnewh (Address: 0x18004c300)
_o__cexit (Address: 0x18004c2f8)
_o__configure_narrow_argv (Address: 0x18004c2f0)
_o__crt_atexit (Address: 0x18004c2e0)
_o__errno (Address: 0x18004c2d8)
_o__execute_onexit_table (Address: 0x18004c2d0)
_o__initialize_narrow_environment (Address: 0x18004c218)
_o__initialize_onexit_table (Address: 0x18004c220)
_o__invalid_parameter_noinfo (Address: 0x18004c228)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18004c230)
_o__purecall (Address: 0x18004c238)
_o__register_onexit_function (Address: 0x18004c240)
_o__seh_filter_dll (Address: 0x18004c248)
_o__ultow (Address: 0x18004c250)
_o__wcsicmp (Address: 0x18004c260)
_o__wcsnicmp (Address: 0x18004c268)
_o_ceil (Address: 0x18004c270)
_o_floor (Address: 0x18004c278)
_o_free (Address: 0x18004c280)
_o_iswspace (Address: 0x18004c288)
_o_log (Address: 0x18004c290)
_o_malloc (Address: 0x18004c298)
_o_qsort (Address: 0x18004c2a0)
_o_sqrt (Address: 0x18004c2a8)
_o_wcscpy_s (Address: 0x18004c2b0)
_o_wcsncpy_s (Address: 0x18004c2b8)
_o_wcstoul (Address: 0x18004c2c0)
_set_se_translator (Address: 0x18004c348)
memcmp (Address: 0x18004c360)
memcpy (Address: 0x18004c368)
memmove (Address: 0x18004c258)
wcschr (Address: 0x18004c338)
wcsstr (Address: 0x18004c330)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18004c380)
_initterm_e (Address: 0x18004c378)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18004c390)
wcscmp (Address: 0x18004c398)
wcscspn (Address: 0x18004c3a0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x18004c3c8)
EventSetInformation (Address: 0x18004c3b0)
EventUnregister (Address: 0x18004c3d0)
EventWrite (Address: 0x18004c3b8)
EventWriteTransfer (Address: 0x18004c3c0)

api-ms-win-power-setting-l1-1-0.dll

PowerSettingRegisterNotification (Address: 0x18004c3e8)
PowerSettingUnregisterNotification (Address: 0x18004c3e0)

api-ms-win-security-base-l1-1-0.dll

AdjustTokenPrivileges (Address: 0x18004c400)
GetSecurityDescriptorDacl (Address: 0x18004c3f8)
GetTokenInformation (Address: 0x18004c410)
PrivilegeCheck (Address: 0x18004c408)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18004c420)
SetServiceStatus (Address: 0x18004c428)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x18004c458)
CreateServiceW (Address: 0x18004c440)
DeleteService (Address: 0x18004c450)
OpenSCManagerW (Address: 0x18004c438)
OpenServiceW (Address: 0x18004c448)

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfig2W (Address: 0x18004c478)
ChangeServiceConfigW (Address: 0x18004c468)
QueryServiceConfigW (Address: 0x18004c470)

api-ms-win-service-private-l1-1-0.dll

I_ScSetServiceBitsW (Address: 0x18004c488)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x18004c498)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18004c4a8)

bcrypt.dll

BCryptCreateHash (Address: 0x18004c4d0)
BCryptDestroyHash (Address: 0x18004c4b8)
BCryptFinishHash (Address: 0x18004c4c0)
BCryptHashData (Address: 0x18004c4c8)

logoncli.dll

DsGetDcNameW (Address: 0x18004c4f8)
DsGetSiteNameW (Address: 0x18004c518)
I_NetlogonComputeClientDigest (Address: 0x18004c520)
I_NetlogonComputeClientSignature (Address: 0x18004c4f0)
I_NetlogonComputeServerDigest (Address: 0x18004c500)
I_NetlogonComputeServerSignature (Address: 0x18004c508)
I_NetlogonGetTrustRid (Address: 0x18004c510)
NetLogonGetTimeServiceParentDomain (Address: 0x18004c4e8)
NetLogonSetServiceBits (Address: 0x18004c4e0)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18004c530)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18004c538)

NSI.dll

NsiGetAllParameters (Address: 0x18004bd20)

ntdll.dll

EtwEventRegister (Address: 0x18004c590)
EtwEventUnregister (Address: 0x18004c5a0)
EtwEventWrite (Address: 0x18004c598)
NtOpenFile (Address: 0x18004c608)
NtQuerySystemInformation (Address: 0x18004c578)
NtSetSystemInformation (Address: 0x18004c570)
NtSetSystemTime (Address: 0x18004c568)
RtlAcquireResourceExclusive (Address: 0x18004c5f0)
RtlAcquireResourceShared (Address: 0x18004c650)
RtlAcquireSRWLockExclusive (Address: 0x18004c640)
RtlAllocateHeap (Address: 0x18004c548)
RtlAppendUnicodeStringToString (Address: 0x18004c620)
RtlConvertExclusiveToShared (Address: 0x18004c5e8)
RtlConvertSharedToExclusive (Address: 0x18004c588)
RtlDeleteCriticalSection (Address: 0x18004c5e0)
RtlDeleteElementGenericTableAvl (Address: 0x18004c5d8)
RtlDeleteResource (Address: 0x18004c560)
RtlEnterCriticalSection (Address: 0x18004c5b8)
RtlFreeHeap (Address: 0x18004c558)
RtlFreeUnicodeString (Address: 0x18004c618)
RtlImageNtHeader (Address: 0x18004c550)
RtlInitializeCriticalSection (Address: 0x18004c5a8)
RtlInitializeGenericTableAvl (Address: 0x18004c5b0)
RtlInitializeResource (Address: 0x18004c5f8)
RtlInitUnicodeString (Address: 0x18004c648)
RtlInsertElementGenericTableAvl (Address: 0x18004c5c0)
RtlIsStateSeparationEnabled (Address: 0x18004c580)
RtlLeaveCriticalSection (Address: 0x18004c5c8)
RtlLookupElementGenericTableAvl (Address: 0x18004c5d0)
RtlNtStatusToDosError (Address: 0x18004c638)
RtlReleaseResource (Address: 0x18004c600)
RtlReleaseSRWLockExclusive (Address: 0x18004c628)
RtlRunOnceExecuteOnce (Address: 0x18004c630)
RtlStringFromGUID (Address: 0x18004c610)

RPCRT4.dll

NdrClientCall3 (Address: 0x18004bd98)
NdrServerCall2 (Address: 0x18004bd30)
NdrServerCallAll (Address: 0x18004bd50)
RpcBindingFree (Address: 0x18004bd90)
RpcBindingFromStringBindingW (Address: 0x18004bda0)
RpcBindingSetAuthInfoW (Address: 0x18004bda8)
RpcImpersonateClient (Address: 0x18004bd78)
RpcMgmtInqServerPrincNameW (Address: 0x18004bd80)
RpcRevertToSelf (Address: 0x18004bd68)
RpcServerInqCallAttributesW (Address: 0x18004bd70)
RpcServerInqDefaultPrincNameW (Address: 0x18004bd38)
RpcServerRegisterAuthInfoW (Address: 0x18004bd40)
RpcServerRegisterIfEx (Address: 0x18004bd58)
RpcServerUnregisterIf (Address: 0x18004bd48)
RpcServerUseProtseqEpW (Address: 0x18004bd60)
RpcStringBindingComposeW (Address: 0x18004bdb0)
RpcStringFreeW (Address: 0x18004bd88)