winspool.drv - Windows Spooler Driver

filename	winspool.drv
size	320000 (0x4e200)
md5	9e4b0e7472b4ceba9e17f440b8cb0ab8

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf0

Rich Header

lib id	version	times used
149	30729	4
1	0	276
147	30729	17
146	30729	1
132	30729	89
131	30729	21
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4ce7ba4b
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x34800
SizeOfInitializedData	0x19e00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2988c
BaseOfCode	0x1000
BaseOfData	0x38000
ImageBase	0x6d930000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x51000
SizeOfHeaders	0x400
CheckSum	0x5ce01
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x34715	0x34800	R-X CODE
.data	0x36000	0xef8	0x800	RW- IDATA
.rsrc	0x37000	0x16420	0x16600	R-- IDATA
.reloc	0x4e000	0x27a0	0x2800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x32664	0x15a3
IMPORT	0x342c0	0xb4
RESOURCE	0x37000	0x16420
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x4e000	0x27a0
DEBUG	0x356b4	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x67b0	0x40
Bound_IAT	0x288	0x108
IAT	0x1000	0x364
Delay_IAT	0x33c08	0x1a0
CLR_Header	0	0

show previews

type	name	size
MUI	#1	240
WEVT_TEMPLATE	#1	89718
VERSION	#1	932

module_name	hint	function_name
msvcrt.dll	764	_purecall
msvcrt.dll	115	__CxxFrameHandler3
msvcrt.dll	747	_onexit
msvcrt.dll	578	_lock
msvcrt.dll	141	__dllonexit
msvcrt.dll	934	_unlock
msvcrt.dll	345	_except_handler4_common
msvcrt.dll	257	_amsg_exit
msvcrt.dll	469	_initterm
msvcrt.dll	1190	free
msvcrt.dll	1246	malloc
msvcrt.dll	106	_XcptFilter
msvcrt.dll	1375	wcspbrk
msvcrt.dll	1373	wcsncpy_s
msvcrt.dll	1376	wcsrchr
msvcrt.dll	20	void __cdecl operator delete(void *) ??3@YAXPAX@Z
msvcrt.dll	18	void * __cdecl operator new(unsigned int) ??2@YAPAXI@Z
msvcrt.dll	1371	wcsncmp
msvcrt.dll	1017	_wcsnicmp
msvcrt.dll	1361	wcschr
msvcrt.dll	1114	_wsplitpath_s
msvcrt.dll	1079	_wmakepath_s
msvcrt.dll	974	_vsnwprintf
msvcrt.dll	1007	_wcsicmp
msvcrt.dll	1260	memmove
msvcrt.dll	1258	memcpy
msvcrt.dll	1262	memset
ntdll.dll	1253	RtlValidRelativeSecurityDescriptor
ntdll.dll	1391	WinSqmSetDWORD
ntdll.dll	57	EtwEventWrite
ntdll.dll	81	EtwUnregisterTraceGuids
ntdll.dll	74	EtwRegisterTraceGuidsW
ntdll.dll	67	EtwGetTraceLoggerHandle
ntdll.dll	66	EtwGetTraceEnableLevel
ntdll.dll	65	EtwGetTraceEnableFlags
ntdll.dll	56	EtwEventUnregister
ntdll.dll	53	EtwEventEnabled
ntdll.dll	1389	WinSqmIsOptedIn
ntdll.dll	1373	WinSqmAddToStreamEx
ntdll.dll	55	EtwEventRegister
ntdll.dll	297	NtFsControlFile
ntdll.dll	79	EtwTraceMessage
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	2	RegCreateKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	6	RegDeleteTreeW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	25	RegOpenKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	30	RegQueryValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	8	RegDeleteValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	37	RegSetValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll		RegCloseKey
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	13	RegEnumValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	28	RegQueryInfoKeyW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll	23	RegOpenCurrentUser
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	1	CreateProcessAsUserW
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	11	GetCurrentProcessId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	5	CreateThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	46	TlsGetValue
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	47	TlsSetValue
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	14	GetExitCodeProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	2	CreateProcessW
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	42	TerminateProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	13	GetCurrentThreadId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	12	GetCurrentThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	28	OpenThreadToken
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	39	SetThreadToken
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	29	ProcessIdToSessionId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	10	GetCurrentProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll	26	OpenProcessToken
API-MS-Win-Security-Base-L1-1-0.dll	57	GetSidSubAuthorityCount
API-MS-Win-Security-Base-L1-1-0.dll	56	GetSidSubAuthority
API-MS-Win-Security-Base-L1-1-0.dll	49	GetSecurityDescriptorGroup
API-MS-Win-Security-Base-L1-1-0.dll	74	MakeSelfRelativeSD
API-MS-Win-Security-Base-L1-1-0.dll	50	GetSecurityDescriptorLength
API-MS-Win-Security-Base-L1-1-0.dll	95	SetSecurityDescriptorSacl
API-MS-Win-Security-Base-L1-1-0.dll	53	GetSecurityDescriptorSacl
API-MS-Win-Security-Base-L1-1-0.dll	91	SetSecurityDescriptorDacl
API-MS-Win-Security-Base-L1-1-0.dll	48	GetSecurityDescriptorDacl
API-MS-Win-Security-Base-L1-1-0.dll	93	SetSecurityDescriptorOwner
API-MS-Win-Security-Base-L1-1-0.dll	51	GetSecurityDescriptorOwner
API-MS-Win-Security-Base-L1-1-0.dll	64	InitializeSecurityDescriptor
API-MS-Win-Security-Base-L1-1-0.dll	69	IsValidSecurityDescriptor
API-MS-Win-Security-Base-L1-1-0.dll	26	CopySid
API-MS-Win-Security-Base-L1-1-0.dll	45	GetLengthSid
API-MS-Win-Security-Base-L1-1-0.dll	58	GetTokenInformation
API-MS-Win-Security-Base-L1-1-0.dll	92	SetSecurityDescriptorGroup
GDI32.dll	459	GetDeviceCaps
GDI32.dll	227	DeleteDC
GDI32.dll	50	CreateDCW
USER32.dll	406	GetWindowLongW
USER32.dll	218	EndDialog
USER32.dll	16	BringWindowToTop
USER32.dll	708	SetWindowLongW
USER32.dll	298	GetDlgItemTextW
USER32.dll	533	MessageBoxW
USER32.dll	6	AllowSetForegroundWindow
USER32.dll	300	GetFocus
USER32.dll	166	DestroyWindow
USER32.dll	506	LoadStringW
USER32.dll	172	DialogBoxParamW
USER32.dll	349	GetMessageW
USER32.dll	566	PostMessageW
USER32.dll	302	GetGUIThreadInfo
USER32.dll	356	GetParent
USER32.dll	398	GetWindow
USER32.dll	324	GetLastActivePopup
USER32.dll	216	EnableWindow
USER32.dll	540	MsgWaitForMultipleObjects
USER32.dll	764	TranslateMessage
USER32.dll	175	DispatchMessageW
USER32.dll	563	PeekMessageW
USER32.dll	659	SetForegroundWindow
USER32.dll	658	SetFocus
USER32.dll	250	FindWindowW
USER32.dll	475	IsWindow
USER32.dll	291	GetDesktopWindow
USER32.dll	110	CreateWindowExW
USER32.dll	638	SendNotifyMessageW
USER32.dll	627	SendDlgItemMessageW
KERNEL32.dll	631	GetSystemTimeAsFileTime
KERNEL32.dll	1231	UnhandledExceptionFilter
KERNEL32.dll	1184	SetUnhandledExceptionFilter
KERNEL32.dll	738	InitializeCriticalSection
KERNEL32.dll	1035	ResetEvent
KERNEL32.dll	747	InterlockedExchange
KERNEL32.dll	697	GlobalFree
KERNEL32.dll	690	GlobalAlloc
KERNEL32.dll	226	DnsHostnameToComputerNameW
KERNEL32.dll	641	GetTempFileNameW
KERNEL32.dll	643	GetTempPathW
KERNEL32.dll	1103	SetEndOfFile
KERNEL32.dll	493	GetFileSize
KERNEL32.dll	213	DeleteFileW
KERNEL32.dll	956	ReadFile
KERNEL32.dll	1121	SetFilePointer
KERNEL32.dll	717	HeapDestroy
KERNEL32.dll	714	HeapAlloc
KERNEL32.dll	716	HeapCreate
KERNEL32.dll	718	HeapFree
KERNEL32.dll	100	CompareStringW
KERNEL32.dll	129	CreateDirectoryW
KERNEL32.dll	205	DelayLoadFailureHook
KERNEL32.dll	828	LoadLibraryExA
KERNEL32.dll	1023	RemoveDirectoryW
KERNEL32.dll	324	FindNextFileW
KERNEL32.dll	862	MoveFileExW
KERNEL32.dll	1116	SetFileAttributesW
KERNEL32.dll	398	GetComputerNameW
KERNEL32.dll	625	GetSystemInfo
KERNEL32.dll	853	MapViewOfFile
KERNEL32.dll	1234	UnmapViewOfFile
KERNEL32.dll	140	CreateFileMappingW
KERNEL32.dll	931	QueryPerformanceCounter
KERNEL32.dll	117	CopyFileW
KERNEL32.dll	446	GetCurrentDirectoryW
KERNEL32.dll	1049	SearchPathW
KERNEL32.dll	349	FormatMessageW
KERNEL32.dll	781	IsWow64Process
KERNEL32.dll	221	DisableThreadLibraryCalls
KERNEL32.dll	739	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	208	DeleteCriticalSection
KERNEL32.dll	1354	lstrlenW
KERNEL32.dll	158	CreateMutexW
KERNEL32.dll	634	GetSystemWindowsDirectoryW
KERNEL32.dll	1270	WaitForSingleObjectEx
KERNEL32.dll	1014	ReleaseMutex
KERNEL32.dll	1269	WaitForSingleObject
KERNEL32.dll	354	FreeLibraryAndExitThread
KERNEL32.dll	120	CreateActCtxW
KERNEL32.dll	657	GetTickCount
KERNEL32.dll	1342	lstrcmpW
KERNEL32.dll	827	LoadLibraryA
KERNEL32.dll	546	GetNativeSystemInfo
KERNEL32.dll	1253	VirtualAlloc
KERNEL32.dll	1256	VirtualFree
KERNEL32.dll	830	LoadLibraryW
KERNEL32.dll	1345	lstrcmpiW
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	496	GetFileType
KERNEL32.dll	746	InterlockedDecrement
KERNEL32.dll	312	FindFirstFileW
KERNEL32.dll	750	InterlockedIncrement
KERNEL32.dll	504	GetFullPathNameW
KERNEL32.dll	622	GetSystemDirectoryW
KERNEL32.dll	487	GetFileAttributesW
KERNEL32.dll	1013	ReleaseActCtx
KERNEL32.dll	869	MultiByteToWideChar
KERNEL32.dll	835	LocalAlloc
KERNEL32.dll	839	LocalFree
KERNEL32.dll	1134	SetLastError
KERNEL32.dll	1293	WideCharToMultiByte
KERNEL32.dll	511	GetLastError
KERNEL32.dll	744	InterlockedCompareExchange
KERNEL32.dll	533	GetModuleHandleW
KERNEL32.dll	529	GetModuleFileNameW
KERNEL32.dll	578	GetProcAddress
KERNEL32.dll	674	GetVersionExW
KERNEL32.dll	1313	WriteFile
KERNEL32.dll	824	LeaveCriticalSection
KERNEL32.dll	237	EnterCriticalSection
KERNEL32.dll	1198	Sleep
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	883	OpenEventW
KERNEL32.dll	658	GetTickCount64
KERNEL32.dll	195	DeactivateActCtx
KERNEL32.dll	353	FreeLibrary
KERNEL32.dll	829	LoadLibraryExW
KERNEL32.dll	2	ActivateActCtx
KERNEL32.dll	1109	SetEvent
KERNEL32.dll	133	CreateEventW
KERNEL32.dll	301	FindClose

ord	entry_va	function_name
100	0xfbc4
101	0x1b4b2
102	0x1b59c
103	0x1b64c
104	0x8731	ADVANCEDSETUPDIALOG
105	0x8731	AdvancedSetupDialog
106	0x7422	ConvertAnsiDevModeToUnicodeDevmode
107	0x954d	ConvertUnicodeDevModeToAnsiDevmode
108	0x85c5	DEVICEMODE
109	0x85c5	DeviceMode
110	0x166b6	DocumentEvent
111	0x25e1b	PerfClose
112	0x25cc1	PerfCollect
113	0x25bc9	PerfOpen
114	0x100f6	QueryColorProfile
115	0xf584	QueryRemoteFonts
116	0x10214	QuerySpoolMode
117	0x153d0	SpoolerDevQueryPrintW
118	0x1416c	StartDocDlgW
119	0xc788	AbortPrinter
120	0x8775	AddFormA
121	0xe654	AddFormW
122	0x9d20	AddJobA
123	0x13888	AddJobW
124	0x8a15	AddMonitorA
125	0x13e8c	AddMonitorW
126	0x88bc	AddPortA
127	0x8cd6	AddPortExA
128	0xf98c	AddPortExW
129	0x16014	AddPortW
130	0x7f01	AddPrintProcessorA
131	0x129e4	AddPrintProcessorW
132	0x8b83	AddPrintProvidorA
133	0xf612	AddPrintProvidorW
134	0x7736	AddPrinterA
135	0x7586	AddPrinterConnection2A
136	0x23d24	AddPrinterConnection2W
137	0x77f2	AddPrinterConnectionA
138	0x23534	AddPrinterConnectionW
139	0x7d0b	AddPrinterDriverA
140	0x7b68	AddPrinterDriverExA
141	0x11af0	AddPrinterDriverExW
142	0xbda3	AddPrinterDriverW
143	0x11758	AddPrinterW
144	0xa732	AdvancedDocumentPropertiesA
145	0xe529	AdvancedDocumentPropertiesW
146	0x1cae7	ClosePrinter
147	0xd564	CloseSpoolFileHandle
148	0xd46c	CommitSpoolData
149	0x8910	ConfigurePortA
150	0x1626c	ConfigurePortW
151	0x106c6	ConnectToPrinterDlg
152	0x247f0	CorePrinterDriverInstalledA
153	0x24db4	CorePrinterDriverInstalledW
154	0x24064	CreatePrintAsyncNotifyChannel
155	0xf33f	CreatePrinterIC
156	0xaa78	DEVICECAPABILITIES
157	0x87f0	DeleteFormA
158	0xe780	DeleteFormW
159	0x8a8d	DeleteMonitorA
160	0x13f5c	DeleteMonitorW
161	0x8964	DeletePortA
162	0x164cc	DeletePortW
163	0x8aff	DeletePrintProcessorA
164	0x14014	DeletePrintProcessorW
165	0x8c64	DeletePrintProvidorA
166	0x140cc	DeletePrintProvidorW
167	0x119dc	DeletePrinter
168	0x7824	DeletePrinterConnectionA
169	0x23bb8	DeletePrinterConnectionW
170	0x8030	DeletePrinterDataA
171	0x8066	DeletePrinterDataExA
172	0xdab0	DeletePrinterDataExW
173	0xd9d8	DeletePrinterDataW
174	0x7daa	DeletePrinterDriverA
175	0x7d32	DeletePrinterDriverExA
176	0x1286c	DeletePrinterDriverExW
177	0x24a49	DeletePrinterDriverPackageA
178	0x2503c	DeletePrinterDriverPackageW
179	0x1292c	DeletePrinterDriverW
180	0xf4e4	DeletePrinterIC
181	0x80ba	DeletePrinterKeyA
182	0xdb90	DeletePrinterKeyW
183	0xfa6c	DevQueryPrint
184	0xfb1c	DevQueryPrintEx
185	0xaa78	DeviceCapabilities
186	0xaa78	DeviceCapabilitiesA
187	0x15dac	DeviceCapabilitiesW
188	0x17165	DevicePropertySheets
189	0xa642	DocumentPropertiesA
190	0x15c54	DocumentPropertiesW
191	0x173d3	DocumentPropertySheets
192	0x690a	EXTDEVICEMODE
193	0xcb7c	EndDocPrinter
194	0xc660	EndPagePrinter
195	0xa897	EnumFormsA
196	0xeb10	EnumFormsW
197	0x9674	EnumJobsA
198	0x115b8	EnumJobsW
199	0xa9d0	EnumMonitorsA
200	0xedec	EnumMonitorsW
201	0xae84	GetDefaultPrinterA
202	0x8eba	SetDefaultPrinterA
203	0x1b8a5	GetDefaultPrinterW
204	0x1bd1c	SetDefaultPrinterW
205	0xca18
206	0x7e1c
207	0xbdbd
208	0x7eb0
209	0xbe84
210	0x9af0
211	0xbf2c
212	0xe29c
213	0xe078
214	0xe11c
215	0xe1fc
216	0xaef3
217	0x1f6ca
218	0x1114b
219	0x168b7
220	0x1699c
221	0x16a7c
222	0x1076c
223	0x1a225
224	0x155a0
225	0xa916	EnumPortsA
226	0x22be9
227	0x22bee
228	0x22cbc
229	0x16d6c
230	0x16b5c
231	0x16c8c
232	0xec80	EnumPortsW
233	0x9951
234	0x12485
235	0x9c75	EnumPrintProcessorDatatypesA
236	0xbff4	EnumPrintProcessorDatatypesW
237	0x9b56	EnumPrintProcessorsA
238	0x12aac	EnumPrintProcessorsW
239	0xa37d	EnumPrinterDataA
240	0xa462	EnumPrinterDataExA
241	0xd748	EnumPrinterDataExW
242	0xd624	EnumPrinterDataW
243	0x6df9	EnumPrinterDriversA
244	0x6f8d	EnumPrinterDriversW
245	0xa584	EnumPrinterKeyA
246	0xd8e0	EnumPrinterKeyW
247	0x6bb0	EnumPrintersA
248	0x6ca7	EnumPrintersW
249	0x690a	ExtDeviceMode
250	0x2343e
251	0x24218
252	0x10dd3
253	0x10e94
254	0x10ead
255	0xc3c4
256	0x10ed8
257	0x1b44c	FindClosePrinterChangeNotification
258	0x1af90	FindFirstPrinterChangeNotification
259	0x1afbe	FindNextPrinterChangeNotification
260	0xc540	FlushPrinter
261	0x1ad02	FreePrinterNotifyInfo
262	0x24608	GetCorePrinterDriversA
263	0x24c24	GetCorePrinterDriversW
264	0xa820	GetFormA
265	0xe880	GetFormW
266	0x95d9	GetJobA
267	0x11420	GetJobW
268	0x10ef0	GetPrintExecutionData
269	0x9c00	GetPrintProcessorDirectoryA
270	0x12b8c	GetPrintProcessorDirectoryW
271	0x9743	GetPrinterA
272	0x9d78	GetPrinterDataA
273	0xa026	GetPrinterDataExA
274	0xd278	GetPrinterDataExW
275	0xd069	GetPrinterDataW
276	0x7d25	GetPrinterDriver2A
277	0x1247a	GetPrinterDriver2W
278	0x9840	GetPrinterDriverA
279	0x9a6a	GetPrinterDriverDirectoryA
280	0x1274c	GetPrinterDriverDirectoryW
281	0x248c8	GetPrinterDriverPackagePathA
282	0x24ee4	GetPrinterDriverPackagePathW
283	0x12458	GetPrinterDriverW
284	0xba00	GetPrinterW
285	0xd390	GetSpoolFileHandle
286	0x242ec	InstallPrinterDriverFromPackageA
287	0x24b04	InstallPrinterDriverFromPackageW
288	0x8ea0	IsValidDevmodeA
289	0x10d77	IsValidDevmodeW
290	0x7586	OpenPrinter2A
291	0x1c844	OpenPrinter2W
292	0x74d6	OpenPrinterA
293	0x68f0	OpenPrinterW
294	0xf454	PlayGdiScriptOnPrinterIC
295	0x89b8	PrinterMessageBoxA
296	0xf60c	PrinterMessageBoxW
297	0x1593c	PrinterProperties
298	0xc8f4	ReadPrinter
299	0x23e54	RegisterForPrintAsyncNotifications
300	0x24253	ReportJobProcessingProgress
301	0x7593	ResetPrinterA
302	0x11294	ResetPrinterW
303	0x13b70	ScheduleJob
304	0xc43c	SeekPrinter
305	0x8825	SetFormA
306	0xe9f0	SetFormW
307	0x763e	SetJobA
308	0xb310	SetJobW
309	0x8dfe	SetPortA
310	0x1037a	SetPortW
311	0x7856	SetPrinterA
312	0x80f0	SetPrinterDataA
313	0x8174	SetPrinterDataExA
314	0xdd50	SetPrinterDataExW
315	0xdc68	SetPrinterDataW
316	0xb56c	SetPrinterW
317	0xde48	SplDriverUnloadComplete
318	0x15694	SpoolerPrinterEvent
319	0xad19	StartDocDlgA
320	0x7fb1	StartDocPrinterA
321	0x12c8c	StartDocPrinterW
322	0x13268	StartPagePrinter
323	0x23eea	UnRegisterForPrintAsyncNotifications
324	0x24440	UploadPrinterDriverPackageA
325	0x25144	UploadPrinterDriverPackageW
326	0x1b2b4	WaitForPrinterChange
327	0x1386c	WritePrinter
328	0x10454	XcvDataW

module_name	WINSPOOL.DRV
flags	0
timestamp	2010-11-20 11:00:40
version	0.0
ordinal_base	100
nFunctions	229
nNames	190
Names(190)	0x32a20
Functions(229)	0x3268c
NameOrdinals(190)	0x32d18

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Windows Spooler Driver
FileVersion	6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalName	winspool.drv
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	winspool.drv
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7601.17514

VS_FIXEDFILEINFO

FileVersion	6.1.7601.17514
ProductVersion	6.1.7601.17514
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	3
FileSubtype	1

show previews

offset	size	type	comment
0	320000	DLL	11/20/2010 12:08:43	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi	Support Me on Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x288

winspool.drv-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

winspool.drv
-