filenamewinspool.drv
size539648 (0x83c00)
md541c26fde7129dec43e326ccbdc59775e
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
1473072982
259267153
2602671519
10355
257267155
261267155
256267151
27026715112
255267151
258267151

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections7
TimeDateStamp0x745f9161
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion14.15
SizeOfCode0x49400
SizeOfInitializedData0x3b600
SizeOfUninitializedData0
AddressOfEntryPoint0x11390
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion10.0
Reserved10
SizeOfImage0x89000
SizeOfHeaders0x400
CheckSum0x84ccb
Subsystem2
DllCharacteristics0x4160
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x4931d0x49400R-X CODE
.rdata0x4b0000x1e9a00x1ea00R-- IDATA
.data0x6a0000x19cc0x800RW- IDATA
.pdata0x6c0000x45300x4600R-- IDATA
.didat0x710000x3400x400RW- IDATA
.rsrc0x720000x156a00x15800R-- IDATA
.reloc0x880000xf1c0x1000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x65f200x1720
IMPORT0x676400x35c
RESOURCE0x720000x156a0
EXCEPTION0x6c0000x4530
SECURITY00
BASERELOC0x880000xf1c
DEBUG0x57c500x54
ARCHITECTURE00
GLOBALPTR00
TLS0x537d00x28
LOAD_CONFIG0x4b8c00x108
Bound_IAT00
IAT0x53dd00x8a8
Delay_IAT0x650480x220
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x18006035c0x1800603640x18006ac300x18005472000x300000
typenamesizecp
MUI#12400
WEVT_TEMPLATE#1862580
VERSION#19320
module_namehintordfunction_name
msvcrt.dll85_XcptFilter
msvcrt.dll1174memset
msvcrt.dll1172memmove
msvcrt.dll1170memcpy
msvcrt.dll1291wcsncmp
msvcrt.dll916_wcsnicmp
msvcrt.dll1296wcsrchr
msvcrt.dll1281wcschr
msvcrt.dll191_callnewh
msvcrt.dll670_purecall
msvcrt.dll1307wcstoul
msvcrt.dll1014_wsplitpath_s
msvcrt.dll1158malloc
msvcrt.dll1295wcspbrk
msvcrt.dll174_amsg_exit
msvcrt.dll381_initterm
msvcrt.dll486_lock
msvcrt.dll833_unlock
msvcrt.dll762_stricmp
msvcrt.dll1293wcsncpy_s
msvcrt.dll1142iswprint
msvcrt.dll1300wcsstr
msvcrt.dll123__dllonexit
msvcrt.dll979_wmakepath_s
msvcrt.dll87__C_specific_handler
msvcrt.dll906_wcsicmp
msvcrt.dll1171memcpy_s
msvcrt.dll910_wcslwr
msvcrt.dll1244swprintf_s
msvcrt.dll656_onexit
msvcrt.dll91__CxxFrameHandler3
msvcrt.dll1210sqrt
msvcrt.dll873_vsnwprintf
msvcrt.dll1100free
msvcrt.dll1282wcscmp
api-ms-win-core-libraryloader-l1-2-0.dll13FreeLibraryAndExitThread
api-ms-win-core-libraryloader-l1-2-0.dll19GetModuleHandleExW
api-ms-win-core-libraryloader-l1-2-0.dll24LoadLibraryExW
api-ms-win-core-libraryloader-l1-2-0.dll1DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-2-0.dll16GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-0.dll20GetModuleHandleW
api-ms-win-core-libraryloader-l1-2-0.dll15GetModuleFileNameA
api-ms-win-core-libraryloader-l1-2-0.dll28LoadStringW
api-ms-win-core-libraryloader-l1-2-0.dll21GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll12FreeLibrary
api-ms-win-core-synch-l1-1-0.dll35ReleaseMutex
api-ms-win-core-synch-l1-1-0.dll17EnterCriticalSection
api-ms-win-core-synch-l1-1-0.dll10CreateMutexW
api-ms-win-core-synch-l1-1-0.dll39ResetEvent
api-ms-win-core-synch-l1-1-0.dll38ReleaseSemaphore
api-ms-win-core-synch-l1-1-0.dll25InitializeCriticalSectionAndSpinCount
api-ms-win-core-synch-l1-1-0.dll15DeleteCriticalSection
api-ms-win-core-synch-l1-1-0.dll55WaitForSingleObjectEx
api-ms-win-core-synch-l1-1-0.dll6CreateEventW
api-ms-win-core-synch-l1-1-0.dll29LeaveCriticalSection
api-ms-win-core-synch-l1-1-0.dllAcquireSRWLockExclusive
api-ms-win-core-synch-l1-1-0.dll33OpenSemaphoreW
api-ms-win-core-synch-l1-1-0.dll41SetEvent
api-ms-win-core-synch-l1-1-0.dll11CreateSemaphoreExW
api-ms-win-core-synch-l1-1-0.dll9CreateMutexExW
api-ms-win-core-synch-l1-1-0.dll36ReleaseSRWLockExclusive
api-ms-win-core-synch-l1-1-0.dll54WaitForSingleObject
api-ms-win-core-heap-l1-1-0.dll4HeapCreate
api-ms-win-core-heap-l1-1-0.dll2HeapAlloc
api-ms-win-core-heap-l1-1-0.dllGetProcessHeap
api-ms-win-core-heap-l1-1-0.dll5HeapDestroy
api-ms-win-core-heap-l1-1-0.dll6HeapFree
api-ms-win-core-errorhandling-l1-1-0.dll17UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll13SetLastError
api-ms-win-core-errorhandling-l1-1-0.dll5GetLastError
api-ms-win-core-errorhandling-l1-1-0.dll7RaiseException
api-ms-win-core-errorhandling-l1-1-0.dll15SetUnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-0.dll51OpenThreadToken
api-ms-win-core-processthreads-l1-1-0.dll16GetCurrentThread
api-ms-win-core-processthreads-l1-1-0.dll74SetThreadToken
api-ms-win-core-processthreads-l1-1-0.dll13GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-0.dll82TlsSetValue
api-ms-win-core-processthreads-l1-1-0.dll6CreateThread
api-ms-win-core-processthreads-l1-1-0.dll49OpenProcessToken
api-ms-win-core-processthreads-l1-1-0.dll52ProcessIdToSessionId
api-ms-win-core-processthreads-l1-1-0.dll3CreateProcessW
api-ms-win-core-processthreads-l1-1-0.dll17GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-0.dll81TlsGetValue
api-ms-win-core-processthreads-l1-1-0.dll19GetExitCodeProcess
api-ms-win-core-processthreads-l1-1-0.dll2CreateProcessAsUserW
api-ms-win-core-processthreads-l1-1-0.dll79TlsAlloc
api-ms-win-core-processthreads-l1-1-0.dll77TerminateProcess
api-ms-win-core-processthreads-l1-1-0.dll12GetCurrentProcess
api-ms-win-core-processthreads-l1-1-0.dll80TlsFree
api-ms-win-core-localization-l1-2-0.dll9FormatMessageW
api-ms-win-core-debug-l1-1-0.dll4DebugBreak
api-ms-win-core-debug-l1-1-0.dll5IsDebuggerPresent
api-ms-win-core-debug-l1-1-0.dll7OutputDebugStringW
api-ms-win-core-handle-l1-1-0.dllCloseHandle
api-ms-win-core-registry-l1-1-0.dll28RegOpenCurrentUser
api-ms-win-core-registry-l1-1-0.dll3RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll37RegQueryValueExW
api-ms-win-core-registry-l1-1-0.dll30RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dllRegCloseKey
api-ms-win-core-registry-l1-1-0.dll46RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll11RegDeleteValueW
api-ms-win-core-registry-l1-1-0.dll20RegGetValueW
api-ms-win-core-heap-l2-1-0.dll8LocalAlloc
api-ms-win-core-heap-l2-1-0.dllGlobalAlloc
api-ms-win-core-heap-l2-1-0.dll2GlobalFree
api-ms-win-core-heap-l2-1-0.dll10LocalFree
api-ms-win-core-string-l1-1-0.dll6MultiByteToWideChar
api-ms-win-core-string-l1-1-0.dll2CompareStringW
api-ms-win-core-string-l1-1-0.dll7WideCharToMultiByte
api-ms-win-core-sidebyside-l1-1-0.dllActivateActCtx
api-ms-win-core-sidebyside-l1-1-0.dll2CreateActCtxW
api-ms-win-core-sidebyside-l1-1-0.dll3DeactivateActCtx
api-ms-win-core-sidebyside-l1-1-0.dll9ReleaseActCtx
api-ms-win-core-synch-l1-2-0.dll47SleepConditionVariableSRW
api-ms-win-core-synch-l1-2-0.dll57WakeAllConditionVariable
api-ms-win-core-synch-l1-2-0.dll45Sleep
api-ms-win-core-synch-l1-2-0.dll20InitOnceComplete
api-ms-win-core-synch-l1-2-0.dll19InitOnceBeginInitialize
api-ms-win-core-winrt-string-l1-1-0.dll16WindowsGetStringRawBuffer
api-ms-win-core-winrt-string-l1-1-0.dll12WindowsDeleteString
api-ms-win-core-winrt-string-l1-1-0.dll15WindowsGetStringLen
api-ms-win-core-winrt-string-l1-1-0.dll10WindowsCreateString
api-ms-win-core-winrt-string-l1-1-0.dll11WindowsCreateStringReference
api-ms-win-core-memory-l1-1-0.dll36UnmapViewOfFile
api-ms-win-core-memory-l1-1-0.dll5CreateFileMappingW
api-ms-win-core-memory-l1-1-0.dll40VirtualAlloc
api-ms-win-core-memory-l1-1-0.dll16MapViewOfFile
api-ms-win-core-memory-l1-1-0.dll46VirtualFree
api-ms-win-core-file-l1-1-0.dll46GetFileSize
api-ms-win-core-file-l1-1-0.dll85SetFilePointer
api-ms-win-core-file-l1-1-0.dll9DeleteFileW
api-ms-win-core-file-l1-1-0.dll53GetFullPathNameW
api-ms-win-core-file-l1-1-0.dll78SetEndOfFile
api-ms-win-core-file-l1-1-0.dll60GetTempFileNameW
api-ms-win-core-file-l1-1-0.dll3CreateDirectoryW
api-ms-win-core-file-l1-1-0.dll82SetFileAttributesW
api-ms-win-core-file-l1-1-0.dll49GetFileType
api-ms-win-core-file-l1-1-0.dll91WriteFile
api-ms-win-core-file-l1-1-0.dll20FindFirstFileW
api-ms-win-core-file-l1-1-0.dll44GetFileAttributesW
api-ms-win-core-file-l1-1-0.dll6CreateFileW
api-ms-win-core-file-l1-1-0.dll12FindClose
api-ms-win-core-file-l1-1-0.dll73ReadFile
api-ms-win-core-file-l1-1-0.dll26FindNextFileW
api-ms-win-core-file-l1-1-0.dll77RemoveDirectoryW
api-ms-win-core-sysinfo-l1-2-0.dll13GetProductInfo
api-ms-win-core-winrt-l1-1-0.dll7RoUninitialize
api-ms-win-core-winrt-l1-1-0.dll3RoInitialize
api-ms-win-core-winrt-l1-1-0.dll1RoGetActivationFactory
api-ms-win-core-sysinfo-l1-1-0.dll26GetTickCount
api-ms-win-core-sysinfo-l1-1-0.dll15GetSystemDirectoryW
api-ms-win-core-sysinfo-l1-1-0.dll27GetTickCount64
api-ms-win-core-sysinfo-l1-1-0.dll30GetVersionExW
api-ms-win-core-sysinfo-l1-1-0.dll25GetSystemWindowsDirectoryW
api-ms-win-core-sysinfo-l1-1-0.dll22GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-1-0.dll17GetSystemInfo
api-ms-win-core-libraryloader-l1-2-1.dll62LoadLibraryW
api-ms-win-core-libraryloader-l1-2-1.dll61LoadLibraryA
api-ms-win-appmodel-runtime-l1-1-0.dll14GetCurrentPackageFamilyName
api-ms-win-core-string-obsolete-l1-1-0.dll5lstrcmpiW
api-ms-win-core-string-obsolete-l1-1-0.dll3lstrcmpW
api-ms-win-security-base-l1-1-0.dll80MakeSelfRelativeSD
api-ms-win-security-base-l1-1-0.dll65GetSidSubAuthorityCount
api-ms-win-security-base-l1-1-0.dll72InitializeSecurityDescriptor
api-ms-win-security-base-l1-1-0.dll99SetSecurityDescriptorGroup
api-ms-win-security-base-l1-1-0.dll64GetSidSubAuthority
api-ms-win-security-base-l1-1-0.dll102SetSecurityDescriptorSacl
api-ms-win-security-base-l1-1-0.dll59GetSecurityDescriptorOwner
api-ms-win-security-base-l1-1-0.dll57GetSecurityDescriptorGroup
api-ms-win-security-base-l1-1-0.dll100SetSecurityDescriptorOwner
api-ms-win-security-base-l1-1-0.dll56GetSecurityDescriptorDacl
api-ms-win-security-base-l1-1-0.dll98SetSecurityDescriptorDacl
api-ms-win-security-base-l1-1-0.dll61GetSecurityDescriptorSacl
api-ms-win-security-base-l1-1-0.dll30CopySid
api-ms-win-security-base-l1-1-0.dll53GetLengthSid
api-ms-win-security-base-l1-1-0.dll66GetTokenInformation
api-ms-win-security-base-l1-1-0.dll89RevertToSelf
api-ms-win-security-base-l1-1-0.dll58GetSecurityDescriptorLength
api-ms-win-security-base-l1-1-0.dll76IsValidSecurityDescriptor
PROPSYS.dll150PropVariantToStringVectorAlloc
PROPSYS.dll62PSGetPropertyDescriptionListFromString
api-ms-win-core-processenvironment-l1-1-0.dll7GetCurrentDirectoryW
api-ms-win-core-processenvironment-l1-1-0.dll16SearchPathW
api-ms-win-core-processenvironment-l1-1-0.dll18SetCurrentDirectoryW
api-ms-win-core-kernel32-legacy-l1-1-0.dll18DnsHostnameToComputerNameW
api-ms-win-core-kernel32-legacy-l1-1-0.dll34GetComputerNameW
api-ms-win-core-file-l1-2-0.dll62GetTempPathW
api-ms-win-core-file-l2-1-0.dll8MoveFileExW
IPHLPAPI.DLL67GetAdaptersAddresses
api-ms-win-core-threadpool-l1-2-0.dll14CreateThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll36WaitForThreadpoolWorkCallbacks
api-ms-win-core-threadpool-l1-2-0.dll8CloseThreadpoolWork
api-ms-win-core-threadpool-l1-2-0.dll31SubmitThreadpoolWork
api-ms-win-core-registry-l1-1-1.dll44RegSetKeyValueW
api-ms-win-core-registry-l1-1-1.dll7RegDeleteKeyValueW
api-ms-win-core-file-l2-1-2.dll6CopyFileW
api-ms-win-core-rtlsupport-l1-1-0.dll15RtlVirtualUnwind
api-ms-win-core-rtlsupport-l1-1-0.dll2RtlCaptureContext
api-ms-win-core-rtlsupport-l1-1-0.dll9RtlLookupFunctionEntry
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
ntdll.dll1524RtlValidRelativeSecurityDescriptor
ntdll.dll1199RtlIsThreadWithinLoaderCallout
ntdll.dll86EtwUnregisterTraceGuids
ntdll.dll70EtwGetTraceEnableFlags
ntdll.dll72EtwGetTraceLoggerHandle
ntdll.dll71EtwGetTraceEnableLevel
ntdll.dll79EtwRegisterTraceGuidsW
ntdll.dll59EtwEventRegister
ntdll.dll61EtwEventUnregister
ntdll.dll1254RtlNtStatusToDosError
ntdll.dll57EtwEventEnabled
ntdll.dll1717WinSqmIsOptedIn
ntdll.dll1701WinSqmAddToStreamEx
ntdll.dll69EtwEventWriteTransfer
ntdll.dll356NtFsControlFile
ntdll.dll60EtwEventSetInformation
ntdll.dll1086RtlGetVersion
ntdll.dll2044ZwQueryWnfStateData
ntdll.dll84EtwTraceMessage
ntdll.dll62EtwEventWrite
api-ms-win-security-activedirectoryclient-l1-1-0.dll3DsFreeNameResultW
api-ms-win-security-activedirectoryclient-l1-1-0.dll9DsUnBindW
api-ms-win-security-activedirectoryclient-l1-1-0.dllDsBindWithSpnExW
api-ms-win-security-activedirectoryclient-l1-1-0.dll1DsCrackNamesW
KERNEL32.dll869InitializeCriticalSection
bcrypt.dll35BCryptHashData
bcrypt.dll27BCryptFinishHash
bcrypt.dll2BCryptCloseAlgorithmProvider
bcrypt.dll6BCryptCreateHash
bcrypt.dll39BCryptOpenAlgorithmProvider
bcrypt.dll13BCryptDestroyHash
bcrypt.dll33BCryptGetProperty
api-ms-win-core-delayload-l1-1-1.dll1ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0.dllDelayLoadFailureHook
api-ms-win-core-apiquery-l1-1-0.dllApiSetQueryApiSetPresence
ordentry_vafunction_name
1000x298d0
1010x1a0b0ADVANCEDSETUPDIALOG
1020x1a0b0AdvancedSetupDialog
1030x1a650ConvertAnsiDevModeToUnicodeDevmode
1040x1a710ConvertUnicodeDevModeToAnsiDevmode
1050x1a9c0DEVICEMODE
1060x1a9c0DeviceMode
1070x8f80DocumentEvent
1080x3e0b0PerfClose
1090x3e0c0PerfCollect
1100x3e200PerfOpen
1110x238a0QueryColorProfile
1120x23a40QueryRemoteFonts
1130x23b60QuerySpoolMode
1140x24450SetSplwow64AppCompat
1150x246e0SpoolerDevQueryPrintW
1160x24b80StartDocDlgW
1170x254d0AbortPrinter
1180x1b3b0AddFormA
1190x25720AddFormW
1200x1b620AddJobA
1210x258d0AddJobW
1220x1b6b0AddMonitorA
1230x25cb0AddMonitorW
1240x1b880AddPortA
1250x1b930AddPortExA
1260x25ed0AddPortExW
1270x25fd0AddPortW
1280x1bb00AddPrintProcessorA
1290x26030AddPrintProcessorW
1300x1bc30AddPrintProvidorA
1310x26170AddPrintProvidorW
1320x1bd50AddPrinterA
1330x1be60AddPrinterConnection2A
1340x39960AddPrinterConnection2W
1350x1be80AddPrinterConnectionA
1360x39c30AddPrinterConnectionW
1370x1bee0AddPrinterDriverA
1380x1bf10AddPrinterDriverExA
1390x262e0AddPrinterDriverExW
1400x26a80AddPrinterDriverW
1410x26ab0AddPrinterW
1420x1c130AdvancedDocumentPropertiesA
1430x26e00AdvancedDocumentPropertiesW
1440x2ef0ClosePrinter
1450x26e50CloseSpoolFileHandle
1460x26f60CommitSpoolData
1470x1c300ConfigurePortA
1480x270f0ConfigurePortW
1490x27810ConnectToPrinterDlg
1500x3a540CorePrinterDriverInstalledA
1510x3a630CorePrinterDriverInstalledW
1520x3a150CreatePrintAsyncNotifyChannel
1530x27a70CreatePrinterIC
1540x1cc30DEVICECAPABILITIES
1550x1c430DeleteFormA
1560x27c20DeleteFormW
1570x3bfe0DeleteJobNamedProperty
1580x1c4a0DeleteMonitorA
1590x27da0DeleteMonitorW
1600x1c610DeletePortA
1610x27f60DeletePortW
1620x1c6c0DeletePrintProcessorA
1630x27fc0DeletePrintProcessorW
1640x1c7a0DeletePrintProvidorA
1650x280e0DeletePrintProvidorW
1660x281e0DeletePrinter
1670x1c870DeletePrinterConnectionA
1680x39c70DeletePrinterConnectionW
1690x1c8d0DeletePrinterDataA
1700x1c950DeletePrinterDataExA
1710x28360DeletePrinterDataExW
1720x284d0DeletePrinterDataW
1730x1ca00DeletePrinterDriverA
1740x1cad0DeletePrinterDriverExA
1750x28620DeletePrinterDriverExW
1760x3a7d0DeletePrinterDriverPackageA
1770x3a8b0DeletePrinterDriverPackageW
1780x28750DeletePrinterDriverW
1790x28870DeletePrinterIC
1800x1cbb0DeletePrinterKeyA
1810x28960DeletePrinterKeyW
1820x28ab0DevQueryPrint
1830x28bd0DevQueryPrintEx
1840x1cc30DeviceCapabilities
1850x1cc30DeviceCapabilitiesA
1860xb360DeviceCapabilitiesW
1870x2d8a0DevicePropertySheets
1880x1cf10DocumentPropertiesA
1890x9700DocumentPropertiesW
1900x5820DocumentPropertySheets
1910x1de60EXTDEVICEMODE
1920xcf10EndDocPrinter
1930x9930EndPagePrinter
1940x1d080EnumFormsA
1950xa110EnumFormsW
1960x3c170EnumJobNamedProperties
1970x1d150EnumJobsA
1980xb3d0EnumJobsW
1990x1d2b0EnumMonitorsA
2000x28d80EnumMonitorsW
2010x1e170GetDefaultPrinterA
2020x1f130SetDefaultPrinterA
2030x69e0GetDefaultPrinterW
2040x30ca0SetDefaultPrinterW
2050xc070
2060x1b780
2070x25e00
2080x1c570
2090x27ec0
2100x1d3c0
2110x28f20
2120x10450
2130x72f0
2140x10070
2150x29b20
2160x1ef30
2170x34230
2180x10890
2190x231d0
2200x22f20
2210x229f0
2220x2bfe0
2230x2e3f0
2240x298f0
2250x1d480EnumPortsA
2260x45c0
2270x38740
2280x38730
2290x22b30
2300x23060
2310x23310
2320x29040EnumPortsW
2330x1ac50
2340x21c50
2350x1d590EnumPrintProcessorDatatypesA
2360x291e0EnumPrintProcessorDatatypesW
2370x1d6a0EnumPrintProcessorsA
2380x29350EnumPrintProcessorsW
2390x1d7b0EnumPrinterDataA
2400x1d8a0EnumPrinterDataExA
2410x9e50EnumPrinterDataExW
2420x294e0EnumPrinterDataW
2430x1d9b0EnumPrinterDriversA
2440x11e0EnumPrinterDriversW
2450x1dbc0EnumPrinterKeyA
2460x29720EnumPrinterKeyW
2470x1dd00EnumPrintersA
2480x8a00EnumPrintersW
2490x1de60ExtDeviceMode
2500x39240
2510x10810
2520x216e0
2530x10c80
2540x10b90
2550x218a0
2560x10f60
2570x311c0
2580x3dc70
2590x3ddb0
2600x3db90
2610x2b350
2620x2b8b0
2630xb8b0FindClosePrinterChangeNotification
2640xbc00FindFirstPrinterChangeNotification
2650x9bd0FindNextPrinterChangeNotification
2660x29940FlushPrinter
2670x3c430FreePrintNamedPropertyArray
2680x3c500FreePrintPropertyValue
2690x10520FreePrinterNotifyInfo
2700x3aa10GetCorePrinterDriversA
2710x3ac60GetCorePrinterDriversW
2720x1e210GetFormA
2730xbc20GetFormW
2740x1e2f0GetJobA
2750x3c590GetJobNamedPropertyValue
2760x29d80GetJobW
2770x105b0GetPrintExecutionData
2780x2a9e0GetPrintOutputInfo
2790x1e3e0GetPrintProcessorDirectoryA
2800x2ae80GetPrintProcessorDirectoryW
2810x1e4c0GetPrinterA
2820x1e600GetPrinterDataA
2830x1e8d0GetPrinterDataExA
2840x9550GetPrinterDataExW
2850x3730GetPrinterDataW
2860x1be60GetPrinterDriver2A
2870x2b010GetPrinterDriver2W
2880x10160GetPrinterDriverA
2890x1ec20GetPrinterDriverDirectoryA
2900x2b020GetPrinterDriverDirectoryW
2910x3ae40GetPrinterDriverPackagePathA
2920x3b050GetPrinterDriverPackagePathW
2930xa950GetPrinterDriverW
2940xa3a0GetPrinterW
2950x2b200GetSpoolFileHandle
2960x3b210InstallPrinterDriverFromPackageA
2970x3b340InstallPrinterDriverFromPackageW
2980x1ed10IsValidDevmodeA
2990xffe0IsValidDevmodeW
3000x1be60OpenPrinter2A
3010x30b0OpenPrinter2W
3020x1ed50OpenPrinterA
3030x2ae0OpenPrinterW
3040x2bad0PlayGdiScriptOnPrinterIC
3050x1ee60PrinterMessageBoxA
3060x2bbf0PrinterMessageBoxW
3070x2bc00PrinterProperties
3080xa7b0ReadPrinter
3090x10660RegisterForPrintAsyncNotifications
3100x3a390ReportJobProcessingProgress
3110x1f050ResetPrinterA
3120xb660ResetPrinterW
3130x2bc40ScheduleJob
3140xaf00SeekPrinter
3150x1f190SetFormA
3160x2c120SetFormW
3170x1f430SetJobA
3180xc100SetJobNamedProperty
3190x2c2e0SetJobW
3200x1f5a0SetPortA
3210x2c570SetPortW
3220x1f6a0SetPrinterA
3230x1f930SetPrinterDataA
3240x1fa20SetPrinterDataExA
3250x2c6b0SetPrinterDataExW
3260x2c860SetPrinterDataW
3270x2c9f0SetPrinterW
3280x2d0a0SplDriverUnloadComplete
3290x2d0d0SpoolerPrinterEvent
3300x1fb50StartDocDlgA
3310x1fd10StartDocPrinterA
3320x46e0StartDocPrinterW
3330x97f0StartPagePrinter
3340x10a90UnRegisterForPrintAsyncNotifications
3350x3b4c0UploadPrinterDriverPackageA
3360x3b680UploadPrinterDriverPackageW
3370x30930WaitForPrinterChange
3380xff40
3390x21910
3400x24290
3410xd150WritePrinter
3420x2d5d0XcvDataW
3610x9de0
3620x21a70
3630x243d0
3640x21a90
3650x12c30
module_nameWINSPOOL.DRV
flags0
timestamp2031-11-14 10:56:33
version0.0
ordinal_base100
nFunctions266
nNames198
Names(198)0x66370
Functions(266)0x65f48
NameOrdinals(198)0x66688

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Spooler Driver
FileVersion10.0.18362.267 (WinBuild.160101.0800)
InternalNamewinspool.drv
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamewinspool.drv
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.18362.267

VS_FIXEDFILEINFO

FileVersion10.0.18362.267
ProductVersion10.0.18362.267
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType3
FileSubtype1
offsetsizetypecomment
15c115HTM#
15d0534064BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x6ac30