filenamespoolsv.exe
size798208 (0xc2e00)
md5fe0cb40f36d3fcdd3a1b312ef72c38d5
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
1473072942
205655011
207655012
2066550124
2036550111
10338
21665501158
202655011
201655011
204655011

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0x5215d570
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion11.0
SizeOfCode0xa5400
SizeOfInitializedData0x1d600
SizeOfUninitializedData0
AddressOfEntryPoint0x52e0c
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.3
ImageVersion6.3
SubsystemVersion6.3
Reserved10
SizeOfImage0xc6000
SizeOfHeaders0x400
CheckSum0xca79e
Subsystem2
DllCharacteristics0x8160
SizeOfStackReserve0x40000
SizeOfStackCommit0xc000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xa52600xa5400R-X CODE
.data0xa70000x25d00x2600RW- IDATA
.pdata0xaa0000x6cb40x6e00R-- IDATA
.idata0xb10000x2caa0x2e00R-- IDATA
.rsrc0xb40000xe2f00xe400R-- IDATA
.reloc0xc30000x2fe80x3000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x110880x1cbb
IMPORT0xb19400x1f4
RESOURCE0xb40000xe2f0
EXCEPTION0xaa0000x6cb4
SECURITY00
BASERELOC0xc30000x2fe8
DEBUG0xa20800x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xa0ce00x94
Bound_IAT00
IAT0xb10000x940
Delay_IAT0xa19640x180
CLR_Header00
typenamesizecp
MUI#12080
ICON#12960
ICON#213840
ICON#34880
ICON#417360
ICON#57440
ICON#622160
ICON#716400
ICON#837520
ICON#911280
ICON#1024400
ICON#1142640
ICON#1296400
ICON#13253840
GROUP_ICON#11880
VERSION#19200
MANIFEST#16980
module_namehintordfunction_name
USER32.dll181DispatchMessageW
USER32.dll624PeekMessageW
USER32.dll839TranslateMessage
USER32.dll600MsgWaitForMultipleObjects
USER32.dll850UnregisterDeviceNotification
USER32.dll658RegisterDeviceNotificationW
USER32.dll706SendNotifyMessageW
USER32.dll854UnregisterPowerSettingNotification
USER32.dll667RegisterPowerSettingNotification
msvcrt.dll211_commode
msvcrt.dll834_unlock
msvcrt.dll1171memcpy
msvcrt.dll124__dllonexit
msvcrt.dll657_onexit
msvcrt.dll296_fmode
msvcrt.dll487_lock
msvcrt.dll92__CxxFrameHandler3
msvcrt.dll773_strnicmp
msvcrt.dll88__C_specific_handler
msvcrt.dll382_initterm
msvcrt.dll145__setusermatherr
msvcrt.dll194_cexit
msvcrt.dll271_exit
msvcrt.dll1075exit
msvcrt.dll143__set_app_type
msvcrt.dll128__getmainargs
msvcrt.dll175_amsg_exit
msvcrt.dll1292wcsncmp
msvcrt.dll1173memmove
msvcrt.dll86_XcptFilter
msvcrt.dll917_wcsnicmp
msvcrt.dll874_vsnwprintf
msvcrt.dll1301wcsstr
msvcrt.dll21void __cdecl operator delete(void * __ptr64)

??3@YAXPEAX@Z

msvcrt.dll671_purecall
msvcrt.dll48void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll1218strchr
msvcrt.dll1282wcschr
msvcrt.dll1260towlower
msvcrt.dll763_stricmp
msvcrt.dll907_wcsicmp
msvcrt.dll19void * __ptr64 __cdecl operator new(unsigned __int64)

??2@YAPEAX_K@Z

msvcrt.dll1261towupper
msvcrt.dll1175memset
ntdll.dll1056RtlIpv4AddressToStringW
ntdll.dll390NtOpenProcessToken
ntdll.dll235NtClose
ntdll.dll538NtSetInformationThread
ntdll.dll398NtOpenThreadToken
ntdll.dll1059RtlIpv4StringToAddressExW
ntdll.dll1067RtlIpv6StringToAddressExW
ntdll.dll54EtwEventEnabled
ntdll.dll1228RtlReportException
ntdll.dll1470TpAllocPool
ntdll.dll1496TpReleaseAlpcCompletion
ntdll.dll1518TpWaitForAlpcCompletion
ntdll.dll1499TpReleaseIoCompletion
ntdll.dll1519TpWaitForIoCompletion
ntdll.dll1502TpReleaseTimer
ntdll.dll1521TpWaitForTimer
ntdll.dll1503TpReleaseWait
ntdll.dll1522TpWaitForWait
ntdll.dll1504TpReleaseWork
ntdll.dll1523TpWaitForWork
ntdll.dll1465TpAllocAlpcCompletion
ntdll.dll1516TpStartAsyncIoOperation
ntdll.dll1468TpAllocIoCompletion
ntdll.dll1511TpSetTimer
ntdll.dll1471TpAllocTimer
ntdll.dll1472TpAllocWait
ntdll.dll1494TpPostWork
ntdll.dll1473TpAllocWork
ntdll.dll1136RtlNtStatusToDosError
ntdll.dll1515TpSimpleTryPost
ntdll.dll1513TpSetWait
ntdll.dll1479TpCallbackMayRunLong
ntdll.dll1501TpReleasePool
ntdll.dll1385RtlVirtualUnwind
ntdll.dll1117RtlLookupFunctionEntry
ntdll.dll699RtlCaptureContext
ntdll.dll1378RtlValidRelativeSecurityDescriptor
ntdll.dll59EtwEventWrite
ntdll.dll460NtQuerySystemInformation
ntdll.dll69EtwGetTraceLoggerHandle
ntdll.dll83EtwUnregisterTraceGuids
ntdll.dll58EtwEventUnregister
ntdll.dll1544WinSqmIsOptedIn
ntdll.dll1547WinSqmSetDWORD
ntdll.dll1528WinSqmAddToStreamEx
ntdll.dll1543WinSqmIncrementDWORD
ntdll.dll76EtwRegisterTraceGuidsW
ntdll.dll81EtwTraceMessage
ntdll.dll56EtwEventRegister
ntdll.dll67EtwGetTraceEnableFlags
ntdll.dll68EtwGetTraceEnableLevel
ntdll.dll1064RtlIpv6AddressToStringW
api-ms-win-core-synch-l1-2-0.dll33ReleaseMutex
api-ms-win-core-synch-l1-2-0.dllAcquireSRWLockExclusive
api-ms-win-core-synch-l1-2-0.dll34ReleaseSRWLockExclusive
api-ms-win-core-synch-l1-2-0.dll22InitializeCriticalSection
api-ms-win-core-synch-l1-2-0.dll10CreateMutexW
api-ms-win-core-synch-l1-2-0.dll1AcquireSRWLockShared
api-ms-win-core-synch-l1-2-0.dll25InitializeSRWLock
api-ms-win-core-synch-l1-2-0.dll39SetEvent
api-ms-win-core-synch-l1-2-0.dll6CreateEventW
api-ms-win-core-synch-l1-2-0.dll29OpenEventW
api-ms-win-core-synch-l1-2-0.dll15EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll35ReleaseSRWLockShared
api-ms-win-core-synch-l1-2-0.dll27LeaveCriticalSection
api-ms-win-core-synch-l1-2-0.dll51WaitForSingleObject
api-ms-win-core-synch-l1-2-0.dll43Sleep
api-ms-win-core-synch-l1-2-0.dll23InitializeCriticalSectionAndSpinCount
api-ms-win-core-libraryloader-l1-2-0.dll18GetModuleHandleW
api-ms-win-core-libraryloader-l1-2-0.dll1DisableThreadLibraryCalls
api-ms-win-core-processthreads-l1-1-2.dll63TerminateProcess
api-ms-win-core-processthreads-l1-1-2.dll11GetCurrentProcess
api-ms-win-core-processthreads-l1-1-2.dll8ExitThread
api-ms-win-core-processthreads-l1-1-2.dll16GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-2.dll65TlsAlloc
api-ms-win-core-processthreads-l1-1-2.dll5CreateThread
api-ms-win-core-processthreads-l1-1-2.dll67TlsGetValue
api-ms-win-core-processthreads-l1-1-2.dll1CreateProcessAsUserW
api-ms-win-core-processthreads-l1-1-2.dll68TlsSetValue
api-ms-win-core-processthreads-l1-1-2.dll49SetPriorityClass
api-ms-win-core-processthreads-l1-1-2.dll66TlsFree
api-ms-win-core-processthreads-l1-1-2.dll60SetThreadToken
api-ms-win-core-processthreads-l1-1-2.dll41OpenProcess
api-ms-win-core-processthreads-l1-1-2.dll12GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-2.dll42OpenProcessToken
api-ms-win-core-processthreads-l1-1-2.dll15GetCurrentThread
api-ms-win-core-processthreads-l1-1-2.dll44OpenThreadToken
api-ms-win-core-processthreads-l1-1-2.dll7ExitProcess
api-ms-win-core-errorhandling-l1-1-1.dll9SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll3GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll4RaiseException
api-ms-win-core-errorhandling-l1-1-1.dll8SetErrorMode
api-ms-win-core-errorhandling-l1-1-1.dll10SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll2GetErrorMode
api-ms-win-core-errorhandling-l1-1-1.dll11UnhandledExceptionFilter
api-ms-win-core-handle-l1-1-0.dllCloseHandle
api-ms-win-core-handle-l1-1-0.dll1DuplicateHandle
api-ms-win-service-core-l1-1-1.dll4SetServiceStatus
api-ms-win-service-core-l1-1-1.dll5StartServiceCtrlDispatcherW
api-ms-win-service-core-l1-1-1.dll3RegisterServiceCtrlHandlerExW
api-ms-win-core-sysinfo-l1-2-1.dll20GetSystemWindowsDirectoryW
api-ms-win-core-sysinfo-l1-2-1.dll17GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-1.dll25GetVersionExW
api-ms-win-core-sysinfo-l1-2-1.dll15GetSystemTime
api-ms-win-core-sysinfo-l1-2-1.dll21GetTickCount
api-ms-win-core-heap-l1-2-0.dll5HeapDestroy
api-ms-win-core-heap-l1-2-0.dllGetProcessHeap
api-ms-win-core-heap-l1-2-0.dll10HeapSetInformation
api-ms-win-core-heap-l1-2-0.dll4HeapCreate
api-ms-win-core-registry-l1-1-0.dll31RegQueryInfoKeyW
api-ms-win-core-registry-l1-1-0.dll16RegGetKeySecurity
api-ms-win-core-registry-l1-1-0.dll7RegDeleteTreeW
api-ms-win-core-registry-l1-1-0.dll5RegDeleteKeyExW
api-ms-win-core-registry-l1-1-0.dllRegCloseKey
api-ms-win-core-registry-l1-1-0.dll3RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll14RegEnumValueW
api-ms-win-core-registry-l1-1-0.dll28RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll18RegGetValueW
api-ms-win-core-registry-l1-1-0.dll38RegSetKeySecurity
api-ms-win-core-registry-l1-1-0.dll26RegOpenCurrentUser
api-ms-win-core-registry-l1-1-0.dll9RegDeleteValueW
api-ms-win-core-registry-l1-1-0.dll33RegQueryValueExW
api-ms-win-core-registry-l1-1-0.dll10RegDisablePredefinedCacheEx
api-ms-win-core-registry-l1-1-0.dll40RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll12RegEnumKeyExW
api-ms-win-core-debug-l1-1-1.dll7OutputDebugStringW
api-ms-win-core-debug-l1-1-1.dll4DebugBreak
api-ms-win-core-debug-l1-1-1.dll5IsDebuggerPresent
RPCRT4.dll367RpcBindingFromStringBindingW
RPCRT4.dll518RpcStringBindingComposeW
RPCRT4.dll46I_RpcExceptionFilter
RPCRT4.dll472RpcServerSubscribeForNotification
RPCRT4.dll476RpcServerUnsubscribeForNotification
RPCRT4.dll141Ndr64AsyncClientCall
RPCRT4.dll157NdrClientCall3
RPCRT4.dll379RpcBindingServerFromClient
RPCRT4.dll365RpcBindingFree
RPCRT4.dll520RpcStringBindingParseW
RPCRT4.dll445RpcObjectSetType
RPCRT4.dll452RpcServerInqBindingHandle
RPCRT4.dll389RpcBindingVectorFree
RPCRT4.dll387RpcBindingToStringBindingW
RPCRT4.dll463RpcServerInterfaceGroupDeactivate
RPCRT4.dll459RpcServerInterfaceGroupActivate
RPCRT4.dll462RpcServerInterfaceGroupCreateW
RPCRT4.dll398RpcEpRegisterW
RPCRT4.dll473RpcServerTestCancel
RPCRT4.dll467RpcServerRegisterAuthInfoW
RPCRT4.dll505RpcSsContextLockExclusive
RPCRT4.dll453RpcServerInqBindings
RPCRT4.dll415RpcImpersonateClient
RPCRT4.dll457RpcServerInqDefaultPrincNameW
RPCRT4.dll468RpcServerRegisterIf
RPCRT4.dll449RpcRevertToSelf
RPCRT4.dll106I_RpcSessionStrictContextHandle
RPCRT4.dll37I_RpcBindingIsClientLocal
RPCRT4.dll448RpcRaiseException
RPCRT4.dll299NdrServerCallAll
RPCRT4.dll522RpcStringFreeW
RPCRT4.dll433RpcMgmtSetServerStackSize
RPCRT4.dll469RpcServerRegisterIf2
RPCRT4.dll357RpcAsyncCompleteCall
RPCRT4.dll450RpcRevertToSelfEx
RPCRT4.dll496RpcSmDestroyClientContext
RPCRT4.dll35I_RpcBindingInqTransportType
RPCRT4.dll355RpcAsyncAbortCall
RPCRT4.dll148NdrAsyncServerCall
RPCRT4.dll298NdrServerCall2
RPCRT4.dll143Ndr64AsyncServerCallAll
api-ms-win-security-base-l1-2-0.dll30CopySid
api-ms-win-security-base-l1-2-0.dll38DuplicateToken
api-ms-win-security-base-l1-2-0.dll11AddAccessDeniedAceEx
api-ms-win-security-base-l1-2-0.dll51GetLengthSid
api-ms-win-security-base-l1-2-0.dll13AddAce
api-ms-win-security-base-l1-2-0.dll54GetSecurityDescriptorDacl
api-ms-win-security-base-l1-2-0.dll87RevertToSelf
api-ms-win-security-base-l1-2-0.dll76IsWellKnownSid
api-ms-win-security-base-l1-2-0.dll35CreateWellKnownSid
api-ms-win-security-base-l1-2-0.dll69InitializeAcl
api-ms-win-security-base-l1-2-0.dll45GetAce
api-ms-win-security-base-l1-2-0.dll96SetSecurityDescriptorDacl
api-ms-win-security-base-l1-2-0.dll70InitializeSecurityDescriptor
api-ms-win-security-base-l1-2-0.dll44FreeSid
api-ms-win-security-base-l1-2-0.dll46GetAclInformation
api-ms-win-security-base-l1-2-0.dll8AddAccessAllowedAceEx
api-ms-win-security-base-l1-2-0.dll101SetTokenInformation
api-ms-win-security-base-l1-2-0.dll67ImpersonateLoggedOnUser
api-ms-win-security-base-l1-2-0.dll62GetSidSubAuthority
api-ms-win-security-base-l1-2-0.dll63GetSidSubAuthorityCount
api-ms-win-security-base-l1-2-0.dll42EqualSid
api-ms-win-security-base-l1-2-0.dll39DuplicateTokenEx
api-ms-win-security-base-l1-2-0.dll64GetTokenInformation
api-ms-win-security-base-l1-2-0.dll27CheckTokenMembership
api-ms-win-security-base-l1-2-0.dll22AllocateAndInitializeSid
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
KERNEL32.dll675GetProcAddress
KERNEL32.dll948LocalFree
KERNEL32.dll1349SetThreadpoolTimer
KERNEL32.dll19AddVectoredExceptionHandler
KERNEL32.dll1186ResetEvent
KERNEL32.dll823HeapAlloc
KERNEL32.dll419FreeLibrary
KERNEL32.dll937LoadLibraryExW
KERNEL32.dll827HeapFree
KERNEL32.dll619GetModuleHandleExW
KERNEL32.dll261DeleteCriticalSection
KERNEL32.dll470GetComputerNameW
KERNEL32.dll1552lstrcmpiW
KERNEL32.dll1079QueueUserWorkItem
KERNEL32.dll1188ResolveDelayLoadedAPI
KERNEL32.dll234CreateThreadpoolTimer
KERNEL32.dll1464WaitForThreadpoolTimerCallbacks
KERNEL32.dll136CloseThreadpoolTimer
KERNEL32.dll761GetTickCount64
KERNEL32.dll938LoadLibraryW
KERNEL32.dll944LocalAlloc
api-ms-win-core-string-l1-1-0.dll2CompareStringW
api-ms-win-core-string-l1-1-0.dll7WideCharToMultiByte
api-ms-win-core-file-l1-2-1.dll8DeleteFileW
api-ms-win-core-file-l1-2-1.dll5CreateFileW
api-ms-win-core-file-l1-2-1.dll63ReadFile
api-ms-win-core-file-l1-2-1.dll52GetTempFileNameW
api-ms-win-core-file-l2-1-1.dll6MoveFileExW
api-ms-win-core-console-l1-1-0.dll10SetConsoleCtrlHandler
DNSAPI.dll95DnsQuery_W
DNSAPI.dll46DnsFree
api-ms-win-power-base-l1-1-0.dll1GetPwrCapabilities
POWRPROF.dll33PowerDeterminePlatformRole
ordentry_vafunction_name
10x8ff64PrvOpenPrinterExW
20x1b80PrvPackStrings
30x90bc4PrvRouterCorePrinterDriverInstalled
40x95390PrvRouterCreatePrintAsyncNotificationChannel
50x90c88PrvRouterDeletePrinterDriverPackage
60x90d14PrvRouterGetCorePrinterDrivers
70x59f8PrvRouterGetPrintClassObject
80x90dc4PrvRouterGetPrinterDriverPackagePath
90xa6f0PrvRouterInstallPrinterDriverFromPackage
100x4b724PrvRouterRegisterForPrintAsyncNotifications
110x954e0PrvRouterUnregisterForPrintAsyncNotifications
120x90ea0PrvRouterUploadPrinterDriverPackage
130x771b4ServerGetPrintClassObject
140x733f8YAbortPrinter
150x73534YAddJob
160x74bfcYDriverUnloadComplete
170x3eb88YEndDocPrinter
180x3e64cYEndPagePrinter
190x75818YFlushPrinter
200x2c90YGetPrinter
210x74fcYGetPrinterDriver2
220xb508YGetPrinterDriverDirectory
230x76280YReadPrinter
240x7651cYSeekPrinter
250x76640YSetJob
260x76740YSetPort
270x8534YSetPrinter
280x768ccYSplReadPrinter
290x42568YStartDocPrinter
300x3e744YStartPagePrinter
310x76aa8YWritePrinter
320x48718GetSpoolerTlsIndexes
330x92118PrvAbortPrinter
340x910ecPrvAddFormW
350x89790PrvAddJobW
360x93024PrvAddMonitorW
370x95004PrvAddPerMachineConnectionW
380x930b0PrvAddPortExW
390x9313cPrvAddPortW
400x91128PrvAddPrintProcessorW
410x911fcPrvAddPrintProvidorW
420x3db50PrvAddPrinterConnectionW
430x91310PrvAddPrinterDriverExW
440x91430PrvAddPrinterDriverW
450x8e38PrvAddPrinterExW
460x90140PrvAddPrinterW
470x86918PrvAdjustPointers
480x86974PrvAdjustPointersInStructuresArray
490x87b00PrvAlignKMPtr
500x1fdcPrvAlignRpcPtr
510x1f00PrvAllocSplStr
520x95598PrvAllowRemoteCalls
530x35b4PrvAppendPrinterNotifyInfoData
540x480c4PrvBuildOtherNamesFromMachineName
550x17f0PrvCacheAddName
560x48accPrvCacheCreateAndAddNode
570x956a4PrvCacheCreateAndAddNodeWithIPAddresses
580x956c8PrvCacheDeleteNode
590x956e0PrvCacheIsNameCluster
600x95780PrvCacheIsNameInNodeList
610x92d0PrvCallDrvDevModeConversion
620x88da0PrvCallRouterFindFirstPrinterChangeNotification
630x1a20PrvCheckLocalCall
640x29f0PrvClosePrinter
650x93228PrvConfigurePortW
660x45c54PrvCreatePrinterIC
670x914acPrvDeleteFormW
680x9331cPrvDeleteMonitorW
690x950b8PrvDeletePerMachineConnectionW
700x93398PrvDeletePortW
710x914e8PrvDeletePrintProcessorW
720x91570PrvDeletePrintProvidorW
730x8800PrvDeletePrinter
740x9514cPrvDeletePrinterConnectionW
750x9015cPrvDeletePrinterDataExW
760x90198PrvDeletePrinterDataW
770x917ccPrvDeletePrinterDriverExW
780x918a0PrvDeletePrinterDriverW
790x45f24PrvDeletePrinterIC
800x901d4PrvDeletePrinterKeyW
810x1190PrvDllAllocSplMem
820xedd0PrvDllAllocSplStr
830x1200PrvDllFreeSplMem
840x1320PrvDllFreeSplStr
850xee4cPrvDllReallocSplMem
860x87b58PrvDllReallocSplStr
870x3ebd4PrvEndDocPrinter
880x3e6acPrvEndPagePrinter
890x9195cPrvEnumFormsW
900x42350PrvEnumJobsW
910x9348cPrvEnumMonitorsW
920xd40cPrvEnumPerMachineConnectionsW
930xa4a4PrvEnumPortsW
940x919acPrvEnumPrintProcessorDatatypesW
950x91a7cPrvEnumPrintProcessorsW
960x90210PrvEnumPrinterDataExW
970x9024cPrvEnumPrinterDataW
980xebf4PrvEnumPrinterDriversW
990x902c8PrvEnumPrinterKeyW
1000x4158PrvEnumPrintersW
1010x5c08PrvFindClosePrinterChangeNotification
1020x92154PrvFlushPrinter
1030x2c30PrvFormatPrinterForRegistryKey
1040x90304PrvFormatRegistryKeyForPrinter
1050x92dc4PrvFreeOtherNames
1060x41ed4PrvGetFormW
1070x91ba0PrvGetJobAttributes
1080x91bd0PrvGetJobAttributesEx
1090x8f698PrvGetJobW
1100x95a1cPrvGetNetworkId
1110x91e28PrvGetPrintProcessorDirectoryW
1120x9120PrvGetPrinterDataExW
1130x90350PrvGetPrinterDataW
1140xb59cPrvGetPrinterDriverDirectoryW
1150x7670PrvGetPrinterDriverExW
1160x33f0PrvGetPrinterDriverW
1170x2e50PrvGetPrinterW
1180xecb8PrvGetServerPolicy
1190x2030PrvGetShrinkedSize
1200x48718PrvGetSpoolerTlsIndexes
1210x1db0PrvImpersonatePrinterClient
1220x47bacPrvInitializeRouter
1230xb170PrvIsNameTheLocalMachineOrAClusterSpooler
1240x46214PrvIsNamedPipeRpcCall
1250x1c80PrvMIDL_user_allocate
1260x1c80PrvMIDL_user_allocate1
1270x1200PrvMIDL_user_free
1280x1200PrvMIDL_user_free1
1290x2bf8PrvMarshallDownStructure
1300x53b0PrvMarshallDownStructuresArray
1310x869fcPrvMarshallUpStructure
1320x86a7cPrvMarshallUpStructuresArray
1330x91f38PrvOldGetPrinterDriverW
1340x4d3cPrvOpenPrinter2W
1350x9038cPrvOpenPrinterPort2W
1360x2980PrvOpenPrinterW
1370x3758PrvPartialReplyPrinterChangeNotification
1380x45e10PrvPlayGdiScriptOnPrinterIC
1390x3db00PrvPrinterHandleRundown
1400x92198PrvPrinterMessageBoxW
1410x874b0PrvProvidorFindClosePrinterChangeNotification
1420x874c8PrvProvidorFindFirstPrinterChangeNotification
1430x921d0PrvReadPrinter
1440xee44PrvReallocSplMem
1450x87ba8PrvReallocSplStr
1460x87570PrvRemoteFindFirstPrinterChangeNotification
1470x88f50PrvReplyClosePrinter
1480x8905cPrvReplyOpenPrinter
1490x3840PrvReplyPrinterChangeNotification
1500x89558PrvReplyPrinterChangeNotificationEx
1510x920f0PrvReportJobProcessingProgress
1520x41e70PrvResetPrinterW
1530x1e60PrvRevertToPrinterSelf
1540x9519cPrvRouterAddPrinterConnection2
1550x1c80PrvRouterAllocBidiMem
1560x92e10PrvRouterAllocBidiResponseContainer
1570x3700PrvRouterAllocPrinterNotifyInfo
1580x672cPrvRouterBroadcastMessage
1590x91fb0PrvRouterFindCompatibleDriver
1600x3ea0PrvRouterFindFirstPrinterChangeNotification
1610x3a80PrvRouterFindNextPrinterChangeNotification
1620x1200PrvRouterFreeBidiMem
1630x92e38PrvRouterFreeBidiResponseContainer
1640x82d0PrvRouterFreePrinterNotifyInfo
1650x9200cPrvRouterInternalGetPrinterDriver
1660x423f0PrvRouterRefreshPrinterChangeNotification
1670x89190PrvRouterReplyPrinter
1680x8fec8PrvRouterSpoolerSetPolicy
1690x8f728PrvScheduleJob
1700x9220cPrvSeekPrinter
1710x7864PrvSendRecvBidiData
1720x92078PrvSetFormW
1730x3eab0PrvSetJobW
1740x936a8PrvSetPortW
1750x90408PrvSetPrinterDataExW
1760x9274PrvSetPrinterDataW
1770x8630PrvSetPrinterW
1780x41ca0PrvSplCloseSpoolFileHandle
1790x3ef48PrvSplCommitSpoolData
1800x90444PrvSplDriverUnloadComplete
1810x10314PrvSplGetClientUserHandle
1820x46110PrvSplGetSpoolFileInfo
1830x5128PrvSplGetUserSidStringFromToken
1840xee9cPrvSplInitializeWinSpoolDrv
1850x92260PrvSplIsSessionZero
1860x1ed0PrvSplIsUpgrade
1870x7d00PrvSplProcessPnPEvent
1880x1068cPrvSplProcessSessionEvent
1890x922e8PrvSplPromptUIInUsersSession
1900xdcecPrvSplQueryUserInfo
1910x923a8PrvSplReadPrinter
1920x88104PrvSplRegisterForDeviceEvents
1930x4c340PrvSplRegisterForSessionEvents
1940x878c0PrvSplShutDownRouter
1950x881f8PrvSplUnregisterForDeviceEvents
1960x87f1cPrvSplUnregisterForSessionEvents
1970x876c4PrvSpoolerFindClosePrinterChangeNotification
1980x876d0PrvSpoolerFindFirstPrinterChangeNotification
1990x87780PrvSpoolerFindNextPrinterChangeNotification
2000x877b0PrvSpoolerFreePrinterNotifyInfo
2010x87af0PrvSpoolerHasInitialized
2020xb8e0PrvSpoolerInit
2030x877bcPrvSpoolerRefreshPrinterChangeNotification
2040x42650PrvStartDocPrinterW
2050x3e7a4PrvStartPagePrinter
2060x87bb0PrvUndoAlignKMPtr
2070x1fa0PrvUndoAlignRpcPtr
2080x86be4PrvUpdateBufferSize
2090x790cPrvUpdatePrinterRegAll
2100x7a20PrvUpdatePrinterRegUser
2110x9074cPrvWaitForPrinterChange
2120x1c54PrvWaitForSpoolerInitialization
2130x92540PrvWritePrinter
2140x920b4PrvXcvDataW
2150x3df70PrvbGetDevModePerUser
2160x8350PrvbSetDevModePerUser
2170x8f6ecRouterLogJobInfoForBranchOffice
2180x70684SplUalCollectData
module_namespoolsv.exe
flags0
timestamp2013-08-22 09:10:08
version0.0
ordinal_base1
nFunctions218
nNames218
Names(218)0x11418
Functions(218)0x110b0
NameOrdinals(218)0x11780

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionSpooler SubSystem App
FileVersion6.3.9600.16384 (winblue_rtm.130821-1623)
InternalNamespoolsv.exe
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamespoolsv.exe
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.3.9600.16384

VS_FIXEDFILEINFO

FileVersion6.3.9600.16384
ProductVersion6.3.9600.16384
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
b983825384PNG(256 x 256)#
bfb6012960BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] ignoring invalid PEdump::BITMAPINFOHEADER