Import table
advapi32.dll
EventRegister, I_ScSetServiceBitsW, OpenThreadToken, PrivilegeCheck, RegEnumKeyExW, GetTokenInformation, OpenProcessToken, AdjustTokenPrivileges, RegDeleteKeyExW, RegCreateKeyExW, GetSecurityDescriptorDacl, SetSecurityInfo, RegSetValueExW, RegDeleteValueW, EventWrite, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, EventUnregister, OpenServiceW, RegisterServiceCtrlHandlerExW, SetServiceStatus, StartServiceW, QueryServiceConfigW, QueryServiceStatus, RegOpenKeyExA, RegQueryValueExA, RegisterEventSourceW, LookupAccountSidW, ConvertSidToStringSidW, LookupPrivilegeValueW, LsaNtStatusToWinError, ReportEventW, DeregisterEventSource, RegDeleteKeyW, DeleteService, OpenSCManagerW, CreateServiceW, ChangeServiceConfig2W, ChangeServiceConfigW, CloseServiceHandle, ConvertStringSecurityDescriptorToSecurityDescriptorW
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, StartServiceW, DeleteService, OpenSCManagerW, CreateServiceW, OpenServiceW
api-ms-win-service-management-l2-1-0.dll
ChangeServiceConfig2W, QueryServiceConfigW, ChangeServiceConfigW
api-ms-win-service-winsvc-l1-1-0.dll
QueryServiceStatus
cryptdll.dll
MD5Init, MD5Update, MD5Final
kernel32.dll
GetCurrentProcess, QueueUserWorkItem, GetTickCount, SetEvent, RegisterWaitForSingleObject, GetHandleInformation, SetHandleInformation, UnregisterWait, UnregisterWaitEx, GetModuleHandleW, GetModuleFileNameW, GetSystemTimeAdjustment, GetSystemTime, WaitForMultipleObjects, FreeLibrary, GetProcAddress, LoadLibraryW, GetExitCodeThread, Sleep, SetThreadPriority, GetCurrentThread, SetSystemTimeAdjustment, ResetEvent, QueryPerformanceFrequency, DelayLoadFailureHook, InterlockedCompareExchange, LoadLibraryExA, InterlockedExchange, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, GetVersion, RegQueryValueExA, RegOpenKeyExA, CreateThread, SetSystemTime, CreateFileW, GetFileSizeEx, FileTimeToLocalFileTime, FileTimeToSystemTime, CreateEventW, WriteFile, GetCurrentThreadId, WaitForSingleObject, FormatMessageW, ExpandEnvironmentStringsW, InterlockedDecrement, InterlockedIncrement, LocalAlloc, DeleteCriticalSection, LocalFree, InitializeCriticalSection, LeaveCriticalSection, TryEnterCriticalSection, EnterCriticalSection, CreateTimerQueueTimer, DeleteTimerQueueTimer, ChangeTimerQueueTimer, CloseHandle, GetLastError
logoncli.dll
NetLogonSetServiceBits, I_NetlogonGetTrustRid, I_NetlogonComputeClientDigest, DsGetSiteNameW, NetLogonGetTimeServiceParentDomain, DsGetDcNameW, I_NetlogonComputeServerDigest
msvcrt.dll
DllMain
netapi32.dll
I_NetlogonGetTrustRid, NetLogonSetServiceBits, DsRoleFreeMemory, DsRoleGetPrimaryDomainInformation, I_NetlogonComputeServerDigest, NetApiBufferFree, I_NetlogonComputeClientDigest, DsGetDcNameW, NetLogonGetTimeServiceParentDomain, DsGetSiteNameW
ntdll.dll
RtlAcquireResourceShared, RtlReleaseResource, RtlInitializeResource, RtlInitUnicodeString, RtlConvertExclusiveToShared, RtlConvertSharedToExclusive, RtlDeleteResource, RtlFreeHeap, RtlAllocateHeap, RtlImageNtHeader, NtSetSystemTime, NtSetSystemInformation, NtClose, NtWaitForSingleObject, NtOpenEvent, NtCreateEvent, RtlNtStatusToDosError, RtlAcquireResourceExclusive
rpcrt4.dll
RpcBindingFree, RpcBindingFromStringBindingW, RpcStringBindingComposeW, NdrClientCall2, RpcBindingSetAuthInfoW, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcServerInqDefaultPrincNameW, RpcServerRegisterAuthInfoW, RpcStringFreeW, RpcImpersonateClient, RpcServerInqCallAttributesW, RpcRevertToSelf, RpcServerUnregisterIf, NdrServerCall2, RpcMgmtInqServerPrincNameW
secur32.dll
LsaRegisterPolicyChangeNotification, LsaUnregisterPolicyChangeNotification
userenv.dll
RegisterGPNotification, UnregisterGPNotification
ws2_32.dll
WSAEventSelect, WSAIoctl, WSASocketW, FreeAddrInfoW, GetAddrInfoW, freeaddrinfo, getaddrinfo, WSAAddressToStringW
Export table
DllInstall
DllRegisterServer
DllUnregisterServer
fnW32TmI_ScSetServiceBits
fnW32TmRegisterServiceCtrlHandlerEx
fnW32TmSetServiceStatus
SvchostEntry_W32Time
SvchostPushServiceGlobals
TimeProvClose
TimeProvCommand
TimeProvOpen
W32TimeBufferFree
W32TimeDcPromo
W32TimeDeleteConfig
W32TimeGetNetlogonServiceBits
W32TimeLog
W32TimeQueryConfig
W32TimeQueryConfiguration
W32TimeQueryHardwareProviderStatus
W32TimeQueryNtpProviderConfiguration
W32TimeQueryNTPProviderStatus
W32TimeQuerySource
W32TimeQueryStatus
W32TimeSetConfig
W32TimeSyncNow
W32TimeVerifyJoinConfig
W32TimeVerifyUnjoinConfig
W32TmServiceMain
