General

Malware Config

Signatures

Files

• 0bb6eadf8a17bd99c76b17265bf6107001a23af1554835bb4e63d5aa352b64b4

  .rar
• 打印共享修复Fix/Fix_PrintSpooler/Fix_PrintSpooler.bat
• 打印共享修复Fix/Fix_PrintSpooler/win32spl.dll

  .dll windows x64

  9b4c47f536113027c96709d675fc48fe

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  msvcrt

  free

  qsort

  _itow_s

  wcstoul

  wcscpy_s

  wcstol

  _get_errno

  _XcptFilter

  _wcstoi64

  _amsg_exit

  _initterm

  _set_errno

  malloc

  wcschr

  _lock

  _unlock

  __dllonexit

  wcsrchr

  _onexit

  sqrt

  memset

  memmove

  memcpy

  memcmp

  wcstok_s

  isdigit

  wcscat_s

  strcpy_s

  strchr

  _wcslwr

  __CxxFrameHandler3

  swprintf_s

  memcpy_s

  _stricmp

  tolower

  _purecall

  _wcsnicmp

  wcsncmp

  _vsnwprintf

  _wtol

  _wcsicmp

  _wopen

  _lseek

  _close

  _write

  _read

  wcsstr

  _errno

  _open

  _callnewh

  __C_specific_handler

  wcscmp

  ntdll

  RtlFreeHeap

  RtlInitUnicodeString

  NtSetInformationToken

  RtlAllocateHeap

  WinSqmIncrementDWORD

  WinSqmAddToStreamEx

  WinSqmSetDWORD

  WinSqmIsOptedIn

  EtwEventWrite

  EtwEventEnabled

  EtwEventUnregister

  EtwEventRegister

  RtlValidRelativeSecurityDescriptor

  RtlIsThreadWithinLoaderCallout

  NtFsControlFile

  RtlInitializeSRWLock

  RtlReleaseSRWLockExclusive

  RtlAcquireSRWLockExclusive

  RtlReleaseSRWLockShared

  RtlAcquireSRWLockShared

  TpAllocPool

  TpSetPoolMinThreads

  TpSetPoolMaxThreads

  TpReleaseAlpcCompletion

  TpWaitForAlpcCompletion

  TpReleaseIoCompletion

  TpReleaseTimer

  TpWaitForTimer

  TpReleaseWait

  TpWaitForWait

  TpReleaseWork

  TpWaitForWork

  TpAllocAlpcCompletion

  TpStartAsyncIoOperation

  TpAllocIoCompletion

  TpSetTimer

  TpAllocTimer

  TpAllocWait

  TpPostWork

  TpAllocWork

  RtlNtStatusToDosError

  RtlInitAnsiString

  RtlxUnicodeStringToOemSize

  RtlUnicodeToOemN

  RtlOemStringToUnicodeString

  NtImpersonateAnonymousToken

  NtSetInformationThread

  NtClose

  NtOpenThreadToken

  NtCreateFile

  TpSimpleTryPost

  TpSetWait

  TpCallbackMayRunLong

  TpReleasePool

  TpWaitForIoCompletion

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  VerSetConditionMask

  EtwUnregisterTraceGuids

  EtwRegisterTraceGuidsW

  EtwGetTraceEnableFlags

  EtwGetTraceEnableLevel

  EtwGetTraceLoggerHandle

  EtwTraceMessage

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  UnhandledExceptionFilter

  GetLastError

  SetUnhandledExceptionFilter

  api-ms-win-core-file-l1-1-0

  GetFileAttributesW

  GetFileSize

  CreateDirectoryW

  GetFullPathNameW

  ReadFile

  CreateFileW

  RemoveDirectoryW

  WriteFile

  SetFileAttributesW

  SetFilePointerEx

  DeleteFileW

  SetFileTime

  LocalFileTimeToFileTime

  FindClose

  FindNextFileW

  FindFirstFileW

  CompareFileTime

  SetEndOfFile

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  FreeLibrary

  GetModuleHandleExW

  GetModuleFileNameA

  GetProcAddress

  DisableThreadLibraryCalls

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-localization-l1-2-0

  GetSystemPreferredUILanguages

  FormatMessageW

  api-ms-win-eventing-provider-l1-1-0

  EventWriteTransfer

  EventRegister

  EventUnregister

  EventSetInformation

  rpcrt4

  RpcSmDestroyClientContext

  RpcAsyncCompleteCall

  Ndr64AsyncClientCall

  MesEncodeIncrementalHandleCreate

  RpcBindingFree

  RpcBindingSetOption

  MesDecodeIncrementalHandleCreate

  MesHandleFree

  I_RpcExceptionFilter

  NdrMesProcEncodeDecode3

  RpcStringFreeW

  RpcAsyncInitializeHandle

  RpcBindingFromStringBindingW

  RpcStringBindingComposeW

  RpcBindingSetObject

  RpcBindingSetAuthInfoExW

  RpcEpResolveBinding

  NdrClientCall3

  api-ms-win-core-registry-l1-1-0

  RegOpenCurrentUser

  RegEnumKeyExW

  RegDeleteValueW

  RegSetValueExW

  RegCreateKeyExW

  RegEnumValueW

  RegDeleteKeyExW

  RegQueryInfoKeyW

  RegGetValueW

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  OpenProcessToken

  OpenThreadToken

  GetCurrentThread

  SetThreadToken

  GetCurrentProcess

  ExitProcess

  GetCurrentThreadId

  api-ms-win-security-base-l1-1-0

  AddAccessDeniedAceEx

  IsTokenRestricted

  GetTokenInformation

  CreateWellKnownSid

  IsValidSecurityDescriptor

  AddAccessAllowedAceEx

  SetSecurityDescriptorGroup

  SetSecurityDescriptorOwner

  RevertToSelf

  InitializeAcl

  GetLengthSid

  CopySid

  IsWellKnownSid

  SetSecurityDescriptorDacl

  SetTokenInformation

  FreeSid

  MakeSelfRelativeSD

  CheckTokenMembership

  InitializeSecurityDescriptor

  DuplicateTokenEx

  AllocateAndInitializeSid

  GetSecurityDescriptorLength

  oleaut32

  SafeArrayGetElement

  SafeArrayPutElement

  SafeArrayGetUBound

  SafeArrayDestroy

  SafeArrayCreateVector

  SafeArrayPtrOfIndex

  VariantInit

  SysFreeString

  SysAllocString

  VariantClear

  LPSAFEARRAY_UserFree

  LPSAFEARRAY_UserUnmarshal

  LPSAFEARRAY_UserFree64

  LPSAFEARRAY_UserMarshal64

  BSTR_UserUnmarshal

  BSTR_UserMarshal

  LPSAFEARRAY_UserUnmarshal64

  LPSAFEARRAY_UserMarshal

  BSTR_UserFree64

  BSTR_UserSize64

  LPSAFEARRAY_UserSize64

  BSTR_UserMarshal64

  LPSAFEARRAY_UserSize

  BSTR_UserFree

  BSTR_UserSize

  LoadRegTypeLi

  SetErrorInfo

  SysAllocStringLen

  GetRecordInfoFromTypeInfo

  LoadTypeLi

  VariantCopyInd

  SysStringLen

  SafeArrayCopyData

  VariantChangeType

  VariantCopy

  BSTR_UserUnmarshal64

  api-ms-win-core-synch-l1-1-0

  CreateSemaphoreExW

  OpenSemaphoreW

  InitializeCriticalSection

  DeleteCriticalSection

  WaitForSingleObjectEx

  SetEvent

  WaitForSingleObject

  ReleaseSRWLockExclusive

  CreateMutexExW

  AcquireSRWLockExclusive

  InitializeCriticalSectionAndSpinCount

  LeaveCriticalSection

  EnterCriticalSection

  CreateEventW

  ReleaseSemaphore

  ReleaseMutex

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-security-lsalookup-l2-1-0

  LookupAccountNameW

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemDirectoryW

  GetSystemInfo

  GetVersionExW

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-synch-l1-2-0

  WakeAllConditionVariable

  Sleep

  SleepConditionVariableSRW

  InitOnceBeginInitialize

  InitOnceComplete

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processtopology-obsolete-l1-1-0

  GetActiveProcessorCount

  api-ms-win-core-string-obsolete-l1-1-0

  lstrcmpiW

  api-ms-win-security-lsalookup-l1-1-0

  LookupAccountSidLocalW

  LookupAccountNameLocalW

  spoolss

  SpoolerFindClosePrinterChangeNotification

  SpoolerRefreshPrinterChangeNotification

  PartialReplyPrinterChangeNotification

  ReplyPrinterChangeNotification

  SplUnregisterForSessionEvents

  SplRegisterForSessionEvents

  RouterCreatePrintAsyncNotificationChannel

  GetServerPolicy

  RouterFreePrinterNotifyInfo

  ReplyPrinterChangeNotificationEx

  AllowRemoteCalls

  CallDrvDevModeConversion

  DllAllocSplMem

  SpoolerFindFirstPrinterChangeNotification

  ClosePrinter

  OpenPrinterW

  ImpersonatePrinterClient

  RevertToPrinterSelf

  DeletePrinterConnectionW

  IsNameTheLocalMachineOrAClusterSpooler

  MIDL_user_allocate1

  CacheIsNameInNodeList

  IsNamedPipeRpcCall

  CallRouterFindFirstPrinterChangeNotification

  AllocSplStr

  EnumPrintersW

  OpenPrinter2W

  AppendPrinterNotifyInfoData

  DllFreeSplMem

  DllFreeSplStr

  RouterAllocPrinterNotifyInfo

  GetPrinterW

  GetPrinterDriverW

  MIDL_user_free1

  localspl

  SplGetJobNamedPropertyValue

  SplReportJobProcessingProgress

  SplGetJob

  SplScheduleJob

  SplAddJob

  SplAbortPrinter

  LocalReadPrinter

  SplWritePrinter

  SplEndDocPrinter

  SplEndPagePrinter

  SplStartPagePrinter

  SplStartDocPrinter

  SplClosePrinter

  SplAddCSRPrinter

  SplEnableCSRPrinterDeviceInterface

  SplDriverEvent

  SplDeletePrinterKey

  SplEnumPrinterData

  SplEnumPrinterDataEx

  SplEnumPrinterKey

  SplGetPrintProcCacheData

  SplSetPrintProcCacheData

  SplGetLocalDevMode

  SplEnumPrintProcCacheData

  SplDeletePrintProcCacheData

  SplGetPrintClassObject

  SplMonitorIsInstalled

  SplGetForm

  SplEnumForms

  LocalEnumForms

  SplCreatePrinterIC

  LocalAddForm

  SplLoadLibraryTheCopyFileModule

  SplCopyFileEvent

  SplPlayGdiScriptOnPrinterIC

  SplDeletePrinterIC

  SplResetPrinter

  SplGetPrinterDriverEx

  SplDeletePrinterWithJobs

  SplGetPrinter

  SplSetPrinter

  SplGetDriverDir

  SplGetJobExtra

  SplSetJobExtra

  SplSetJob

  SplSetJobError

  SplDeleteForm

  SplAddForm

  SplSetForm

  SplEnumJobs

  SplAddPrinterDriverEx

  SplIsLocalDriverAvailable

  SplGetDriverUpdateStatus

  SplSetDriverUpdateStatus

  SplAddPrinter

  SplAddMonitor

  SplGetPrinterDriver

  SplGetPrinterData

  SplGetPrinterDataEx

  SplSetPrinterData

  SplSetPrinterDataEx

  SplDeletePrinterData

  SplCopyNumberOfFiles

  SplEnumPrinterDrivers

  SplIsCompatibleDriver

  SplEnumPrinters

  SplEnumPorts

  SplXcvData

  SplEnumJobNamedProperties

  SplIsDriverInstalled

  SplOpenPrinter

  SplSetJobNamedProperty

  SplDeleteJobNamedProperty

  LocalDeleteForm

  SplCreateSpooler

  SplSetCSRPrinterDevnode

  SplDoesCSRPrinterDevnodeExist

  SplGetPrintClassObject_4CSR

  SplNotifyServerStatus

  SplDeletePrinterDataEx

  SplDeleteSpooler

  SplGetUserPropertyBag

  SplCloseSpooler

  SplRegeneratePrintDeviceCapabilities

  setupapi

  CMP_WaitNoPendingInstallEvents

  SetupDiSetClassInstallParamsW

  SetupDiDestroyDeviceInfoList

  SetupDiGetDevicePropertyW

  SetupDiOpenDeviceInfoW

  SetupDiCallClassInstaller

  SetupDiCreateDeviceInfoListExW

  cfgmgr32

  SwDeviceCreate

  SwDeviceClose

  SwDeviceSetLifetime

  api-ms-win-devices-query-l1-1-0

  DevCreateObjectQueryFromId

  DevCreateObjectQuery

  DevCloseObjectQuery

  api-ms-win-core-kernel32-legacy-l1-1-0

  GetComputerNameW

  DosDateTimeToFileTime

  api-ms-win-core-kernel32-legacy-l1-1-1

  VerifyVersionInfoW

  kernelbase

  LocalAlloc

  LocalReAlloc

  GetIsEdpEnabled

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-timezone-l1-1-0

  GetTimeZoneInformation

  FileTimeToSystemTime

  api-ms-win-core-threadpool-l1-2-0

  SubmitThreadpoolWork

  WaitForThreadpoolWorkCallbacks

  CloseThreadpoolWork

  CreateThreadpoolWork

  SetThreadpoolTimer

  api-ms-win-eventing-classicprovider-l1-1-0

  TraceMessage

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  MultiByteToWideChar

  iphlpapi

  GetAdaptersAddresses

  api-ms-win-core-registry-l1-1-1

  RegDeleteKeyValueW

  RegSetKeyValueW

  api-ms-win-core-file-l2-1-0

  MoveFileExW

  api-ms-win-core-debug-l1-1-0

  DebugBreak

  IsDebuggerPresent

  OutputDebugStringW

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllMain

  InitializePrintMonitor2

  InitializePrintProvidor

  Sections

  .text

  Size: 624KB - Virtual size: 624KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 185KB - Virtual size: 185KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 1024B - Virtual size: 536B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 打印共享修复Fix/LTSC/Fix_PrintSpooler.bat
• 打印共享修复Fix/LTSC/win32spl.dll

  .dll windows x64

  309f431c2ba81c9df4a167d2d9ab73e3

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  msvcrt

  isdigit

  memset

  sqrt

  _onexit

  __dllonexit

  _unlock

  _lock

  _initterm

  _amsg_exit

  _XcptFilter

  _callnewh

  malloc

  free

  qsort

  _itow_s

  wcstoul

  wcscpy_s

  wcstol

  _get_errno

  _wcstoi64

  _set_errno

  wcstok_s

  wcscat_s

  wcschr

  memmove

  tolower

  strcpy_s

  strchr

  _wcslwr

  __CxxFrameHandler3

  memcpy_s

  _wopen

  _purecall

  _wcsnicmp

  wcsncmp

  _vsnwprintf

  _wtol

  _wcsicmp

  _lseek

  _close

  _write

  _read

  _errno

  _open

  memcpy

  wcsrchr

  memcmp

  wcsstr

  __C_specific_handler

  wcscmp

  ntdll

  RtlFreeHeap

  RtlInitUnicodeString

  NtSetInformationToken

  RtlAllocateHeap

  WinSqmIncrementDWORD

  WinSqmAddToStreamEx

  WinSqmSetDWORD

  WinSqmIsOptedIn

  EtwEventWrite

  EtwEventEnabled

  EtwEventUnregister

  EtwEventRegister

  RtlValidRelativeSecurityDescriptor

  NtFsControlFile

  RtlInitializeSRWLock

  RtlReleaseSRWLockExclusive

  RtlAcquireSRWLockExclusive

  RtlReleaseSRWLockShared

  RtlAcquireSRWLockShared

  TpAllocPool

  TpSetPoolMinThreads

  TpSetPoolMaxThreads

  TpReleaseAlpcCompletion

  TpWaitForAlpcCompletion

  TpReleaseIoCompletion

  TpWaitForIoCompletion

  TpReleaseTimer

  TpReleaseWait

  TpWaitForWait

  TpReleaseWork

  TpWaitForWork

  TpAllocAlpcCompletion

  TpStartAsyncIoOperation

  TpAllocIoCompletion

  TpSetTimer

  TpAllocTimer

  TpAllocWait

  TpPostWork

  RtlInitAnsiString

  RtlxUnicodeStringToOemSize

  RtlUnicodeToOemN

  RtlOemStringToUnicodeString

  NtImpersonateAnonymousToken

  NtSetInformationThread

  NtClose

  NtOpenThreadToken

  NtCreateFile

  TpAllocWork

  RtlNtStatusToDosError

  TpSimpleTryPost

  TpSetWait

  TpCallbackMayRunLong

  TpReleasePool

  TpWaitForTimer

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  VerSetConditionMask

  EtwUnregisterTraceGuids

  EtwRegisterTraceGuidsW

  EtwGetTraceEnableFlags

  EtwGetTraceEnableLevel

  EtwGetTraceLoggerHandle

  EtwTraceMessage

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  GetLastError

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  api-ms-win-core-file-l1-1-0

  CompareFileTime

  GetFileAttributesW

  GetFileSize

  CreateDirectoryW

  SetEndOfFile

  ReadFile

  CreateFileW

  WriteFile

  SetFilePointerEx

  DeleteFileW

  FindFirstFileW

  RemoveDirectoryW

  SetFileAttributesW

  SetFileTime

  LocalFileTimeToFileTime

  FindClose

  FindNextFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-libraryloader-l1-2-0

  FreeLibrary

  GetModuleHandleW

  GetModuleHandleExW

  GetModuleFileNameA

  DisableThreadLibraryCalls

  GetProcAddress

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  GetSystemPreferredUILanguages

  api-ms-win-eventing-provider-l1-1-0

  EventSetInformation

  EventRegister

  EventWriteTransfer

  EventUnregister

  rpcrt4

  RpcAsyncInitializeHandle

  MesEncodeIncrementalHandleCreate

  MesDecodeIncrementalHandleCreate

  MesHandleFree

  I_RpcExceptionFilter

  RpcBindingSetAuthInfoExW

  RpcBindingSetObject

  Ndr64AsyncClientCall

  RpcAsyncCompleteCall

  RpcSmDestroyClientContext

  RpcBindingFree

  RpcBindingSetOption

  RpcStringFreeW

  RpcBindingFromStringBindingW

  RpcStringBindingComposeW

  NdrClientCall3

  NdrMesProcEncodeDecode3

  RpcEpResolveBinding

  api-ms-win-core-registry-l1-1-0

  RegQueryInfoKeyW

  RegCreateKeyExW

  RegSetValueExW

  RegCloseKey

  RegQueryValueExW

  RegDeleteValueW

  RegDeleteKeyExW

  RegEnumKeyExW

  RegEnumValueW

  RegOpenKeyExW

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  GetCurrentProcess

  TerminateProcess

  GetCurrentThreadId

  OpenThreadToken

  GetCurrentThread

  ExitProcess

  GetCurrentProcessId

  SetThreadToken

  api-ms-win-security-base-l1-1-0

  SetTokenInformation

  IsWellKnownSid

  RevertToSelf

  CreateWellKnownSid

  GetSecurityDescriptorLength

  AllocateAndInitializeSid

  InitializeAcl

  AddAccessDeniedAceEx

  AddAccessAllowedAceEx

  InitializeSecurityDescriptor

  SetSecurityDescriptorDacl

  IsTokenRestricted

  SetSecurityDescriptorOwner

  GetTokenInformation

  CheckTokenMembership

  IsValidSecurityDescriptor

  SetSecurityDescriptorGroup

  MakeSelfRelativeSD

  FreeSid

  DuplicateTokenEx

  GetLengthSid

  oleaut32

  SafeArrayPutElement

  SafeArrayGetUBound

  SafeArrayDestroy

  SafeArrayCreateVector

  SafeArrayPtrOfIndex

  VariantInit

  SysFreeString

  SysAllocString

  VariantClear

  SafeArrayCopyData

  SysStringLen

  VariantChangeType

  BSTR_UserMarshal64

  LPSAFEARRAY_UserSize64

  BSTR_UserSize64

  BSTR_UserFree64

  LPSAFEARRAY_UserMarshal

  LPSAFEARRAY_UserUnmarshal64

  BSTR_UserMarshal

  BSTR_UserUnmarshal

  LPSAFEARRAY_UserMarshal64

  LPSAFEARRAY_UserFree64

  LPSAFEARRAY_UserUnmarshal

  LPSAFEARRAY_UserFree

  VariantCopy

  BSTR_UserUnmarshal64

  LPSAFEARRAY_UserSize

  BSTR_UserFree

  SafeArrayGetElement

  BSTR_UserSize

  SysAllocStringLen

  LoadRegTypeLi

  VariantCopyInd

  LoadTypeLi

  GetRecordInfoFromTypeInfo

  SetErrorInfo

  api-ms-win-core-synch-l1-1-0

  ReleaseMutex

  CreateMutexExW

  InitializeCriticalSectionAndSpinCount

  EnterCriticalSection

  OpenSemaphoreW

  LeaveCriticalSection

  DeleteCriticalSection

  AcquireSRWLockExclusive

  ReleaseSRWLockExclusive

  InitializeCriticalSection

  WaitForSingleObjectEx

  CreateSemaphoreExW

  SetEvent

  ReleaseSemaphore

  WaitForSingleObject

  CreateEventW

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-security-lsalookup-l2-1-0

  LookupAccountNameW

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetSystemDirectoryW

  GetTickCount

  GetSystemInfo

  GetVersionExW

  api-ms-win-core-synch-l1-2-0

  WakeAllConditionVariable

  SleepConditionVariableSRW

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processtopology-obsolete-l1-1-0

  GetActiveProcessorCount

  api-ms-win-core-string-obsolete-l1-1-0

  lstrcmpiW

  api-ms-win-security-lsalookup-l1-1-0

  LookupAccountSidLocalW

  LookupAccountNameLocalW

  spoolss

  DllFreeSplStr

  SplRegisterForSessionEvents

  GetServerPolicy

  AllowRemoteCalls

  ReplyPrinterChangeNotification

  CallDrvDevModeConversion

  SpoolerRefreshPrinterChangeNotification

  RouterCreatePrintAsyncNotificationChannel

  ReplyPrinterChangeNotificationEx

  SpoolerFindClosePrinterChangeNotification

  SpoolerFindFirstPrinterChangeNotification

  OpenPrinter2W

  AppendPrinterNotifyInfoData

  RouterAllocPrinterNotifyInfo

  RouterFreePrinterNotifyInfo

  PartialReplyPrinterChangeNotification

  DllAllocSplMem

  DllFreeSplMem

  ClosePrinter

  ImpersonatePrinterClient

  AllocSplStr

  DeletePrinterConnectionW

  IsNameTheLocalMachineOrAClusterSpooler

  MIDL_user_free1

  MIDL_user_allocate1

  IsNamedPipeRpcCall

  SplUnregisterForSessionEvents

  CallRouterFindFirstPrinterChangeNotification

  CacheIsNameInNodeList

  RevertToPrinterSelf

  localspl

  LocalReadPrinter

  SplWritePrinter

  SplEndDocPrinter

  SplEndPagePrinter

  SplStartPagePrinter

  SplStartDocPrinter

  SplClosePrinter

  SplAddCSRPrinter

  SplEnableCSRPrinterDeviceInterface

  SplDriverEvent

  SplEnumPrinterData

  SplEnumPrinterDataEx

  SplEnumPrinterKey

  SplGetPrintProcCacheData

  SplSetPrintProcCacheData

  SplGetLocalDevMode

  SplEnumPrintProcCacheData

  SplDeletePrintProcCacheData

  SplGetPrintClassObject

  SplMonitorIsInstalled

  SplGetForm

  SplEnumForms

  LocalEnumForms

  LocalDeleteForm

  SplLoadLibraryTheCopyFileModule

  SplCopyFileEvent

  SplDeletePrinterWithJobs

  SplGetPrinter

  SplSetPrinter

  SplGetDriverDir

  SplAbortPrinter

  SplSetJobExtra

  SplSetJob

  SplSetJobError

  SplDeleteForm

  SplAddForm

  SplSetForm

  SplEnumJobs

  SplAddPrinterDriverEx

  SplIsLocalDriverAvailable

  SplGetDriverUpdateStatus

  SplSetDriverUpdateStatus

  SplAddPrinter

  SplAddMonitor

  SplCopyNumberOfFiles

  SplEnumPrinterDrivers

  SplIsCompatibleDriver

  SplEnumPrinters

  SplEnumPorts

  SplXcvData

  SplAddJob

  SplScheduleJob

  SplGetJob

  SplReportJobProcessingProgress

  SplGetJobNamedPropertyValue

  SplEnumJobNamedProperties

  SplIsDriverInstalled

  SplOpenPrinter

  SplSetJobNamedProperty

  SplDeleteJobNamedProperty

  SplSetCSRPrinterDevnode

  SplDoesCSRPrinterDevnodeExist

  SplCreatePrinterIC

  SplGetUserPropertyBag

  SplCloseSpooler

  SplDeleteSpooler

  SplCreateSpooler

  SplPlayGdiScriptOnPrinterIC

  SplDeletePrinterIC

  SplNotifyServerStatus

  SplGetPrintClassObject_4CSR

  SplResetPrinter

  SplGetPrinterDriverEx

  SplGetPrinterDriver

  SplGetPrinterData

  SplGetPrinterDataEx

  SplSetPrinterData

  SplSetPrinterDataEx

  LocalAddForm

  SplDeletePrinterData

  SplDeletePrinterDataEx

  SplGetJobExtra

  SplDeletePrinterKey

  setupapi

  CMP_WaitNoPendingInstallEvents

  SetupDiCallClassInstaller

  SetupDiSetClassInstallParamsW

  SetupDiDestroyDeviceInfoList

  SetupDiGetDevicePropertyW

  SetupDiOpenDeviceInfoW

  SetupDiCreateDeviceInfoListExW

  cfgmgr32

  DevCreateObjectQuery

  SwDeviceCreate

  DevCreateObjectQueryFromId

  SwDeviceSetLifetime

  DevCloseObjectQuery

  SwDeviceClose

  api-ms-win-core-kernel32-legacy-l1-1-0

  GetComputerNameW

  DosDateTimeToFileTime

  api-ms-win-core-kernel32-legacy-l1-1-1

  VerifyVersionInfoW

  kernelbase

  GetIsEdpEnabled

  LocalReAlloc

  LocalAlloc

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapFree

  GetProcessHeap

  api-ms-win-core-timezone-l1-1-0

  GetTimeZoneInformation

  FileTimeToSystemTime

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolTimer

  api-ms-win-eventing-classicprovider-l1-1-0

  TraceMessage

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  MultiByteToWideChar

  api-ms-win-core-file-l2-1-0

  MoveFileExW

  api-ms-win-core-debug-l1-1-0

  DebugBreak

  IsDebuggerPresent

  OutputDebugStringW

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllMain

  InitializePrintMonitor2

  InitializePrintProvidor

  Sections

  .text

  Size: 589KB - Virtual size: 588KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 181KB - Virtual size: 180KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 1024B - Virtual size: 520B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• 打印共享修复Fix/Win7_X64/Fix_PrintSpooler.bat
• 打印共享修复Fix/Win7_X64/win32spl.dll

  .dll regsvr32 windows x64

  ec6a1c4bd7818dd4fb73466d2b5c7981

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  msvcrt

  wcschr

  _purecall

  wcsstr

  _wtol

  _vsnwprintf

  wcsncmp

  ??2@YAPEAX_K@Z

  __C_specific_handler

  ??3@YAXPEAX@Z

  memcpy

  _wcsicmp

  wcsrchr

  wcstoul

  wcstok_s

  wcscpy_s

  _itow

  qsort

  memcmp

  _XcptFilter

  malloc

  _initterm

  free

  _amsg_exit

  _unlock

  __dllonexit

  _lock

  _onexit

  strchr

  isdigit

  memset

  strcpy_s

  wcscat_s

  _wcslwr

  __CxxFrameHandler3

  memmove

  fwprintf

  swscanf

  _close

  _write

  _lseek

  _read

  _errno

  _open

  _wopen

  _wcsnicmp

  tolower

  sqrt

  ntdll

  EtwEventWrite

  EtwEventUnregister

  EtwEventRegister

  RtlValidRelativeSecurityDescriptor

  NtFsControlFile

  RtlInitializeSRWLock

  RtlReleaseSRWLockExclusive

  RtlAcquireSRWLockExclusive

  RtlReleaseSRWLockShared

  RtlAcquireSRWLockShared

  TpAllocTimer

  TpReleaseIoCompletion

  TpAllocIoCompletion

  TpAllocWork

  TpReleaseTimer

  TpSetPoolMinThreads

  TpSetWait

  TpSetPoolMaxThreads

  TpWaitForIoCompletion

  TpSimpleTryPost

  TpReleaseAlpcCompletion

  TpReleaseWork

  TpCallbackMayRunLong

  RtlNtStatusToDosError

  TpReleaseWait

  TpWaitForTimer

  TpPostWork

  TpSetTimer

  TpWaitForAlpcCompletion

  TpReleasePool

  TpWaitForWait

  TpStartAsyncIoOperation

  TpAllocPool

  TpAllocWait

  TpWaitForWork

  TpAllocAlpcCompletion

  RtlCaptureContext

  RtlInitUnicodeString

  RtlInitAnsiString

  RtlOemStringToUnicodeString

  RtlUnicodeToOemN

  RtlxUnicodeStringToOemSize

  NlsMbOemCodePageTag

  NtSetInformationThread

  NtClose

  NtCreateFile

  NtImpersonateAnonymousToken

  NtOpenThreadToken

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  EtwUnregisterTraceGuids

  EtwRegisterTraceGuidsW

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableLevel

  EtwGetTraceEnableFlags

  EtwTraceMessage

  EtwEventEnabled

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  api-ms-win-core-file-l1-1-0

  GetFileSize

  ReadFile

  WriteFile

  CreateFileW

  GetFullPathNameW

  CompareFileTime

  CreateDirectoryW

  DeleteFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-libraryloader-l1-1-0

  DisableThreadLibraryCalls

  GetProcAddress

  LoadLibraryExA

  FreeLibrary

  GetModuleFileNameW

  api-ms-win-core-localization-l1-1-0

  GetSystemPreferredUILanguages

  api-ms-win-core-misc-l1-1-0

  lstrcmpiW

  lstrlenW

  Sleep

  LocalFree

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  GetCurrentThreadId

  GetCurrentProcessId

  TerminateProcess

  GetCurrentThread

  OpenThreadToken

  SetThreadToken

  OpenProcessToken

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemDirectoryW

  GetSystemTimeAsFileTime

  advapi32

  RegQueryInfoKeyW

  EventWrite

  TraceMessage

  IsValidSecurityDescriptor

  IsTokenRestricted

  RegEnumValueW

  CreateWellKnownSid

  RegGetValueW

  GetTokenInformation

  GetSecurityDescriptorLength

  EnumDependentServicesW

  LookupAccountNameW

  AllocateAndInitializeSid

  FreeSid

  CheckTokenMembership

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  rpcrt4

  MesEncodeIncrementalHandleCreate

  RpcBindingSetOption

  RpcBindingFree

  RpcStringBindingComposeW

  RpcBindingFromStringBindingW

  I_RpcExceptionFilter

  MesDecodeIncrementalHandleCreate

  MesHandleFree

  NdrMesProcEncodeDecode3

  RpcSmDestroyClientContext

  RpcStringFreeW

  NdrClientCall3

  RpcAsyncInitializeHandle

  RpcAsyncCompleteCall

  Ndr64AsyncClientCall

  RpcBindingSetObject

  RpcBindingSetAuthInfoExW

  RpcEpResolveBinding

  oleaut32

  SafeArrayCopyData

  VariantChangeType

  VariantCopy

  BSTR_UserSize

  BSTR_UserMarshal

  BSTR_UserUnmarshal

  BSTR_UserFree

  LPSAFEARRAY_UserSize

  LPSAFEARRAY_UserMarshal

  LPSAFEARRAY_UserUnmarshal

  LPSAFEARRAY_UserFree

  BSTR_UserSize64

  BSTR_UserMarshal64

  BSTR_UserUnmarshal64

  BSTR_UserFree64

  LPSAFEARRAY_UserSize64

  LPSAFEARRAY_UserMarshal64

  LPSAFEARRAY_UserUnmarshal64

  LPSAFEARRAY_UserFree64

  LoadTypeLi

  GetRecordInfoFromTypeInfo

  VariantCopyInd

  LoadRegTypeLi

  SetErrorInfo

  RegisterTypeLi

  UnRegisterTypeLi

  VariantClear

  SysStringLen

  SafeArrayGetElement

  SafeArrayPutElement

  SafeArrayGetUBound

  SafeArrayCreateVector

  SafeArrayPtrOfIndex

  SafeArrayDestroy

  VariantInit

  SysAllocString

  SysFreeString

  spoolss

  SpoolerFindClosePrinterChangeNotification

  ClosePrinter

  SpoolerRefreshPrinterChangeNotification

  AppendPrinterNotifyInfoData

  SpoolerFindFirstPrinterChangeNotification

  ReplyPrinterChangeNotification

  RouterFreePrinterNotifyInfo

  ReplyPrinterChangeNotificationEx

  MIDL_user_free1

  ImpersonatePrinterClient

  RevertToPrinterSelf

  DllAllocSplMem

  AllowRemoteCalls

  CallDrvDevModeConversion

  IsNameTheLocalMachineOrAClusterSpooler

  DllFreeSplMem

  PartialReplyPrinterChangeNotification

  OpenPrinter2W

  SplUnregisterForSessionEvents

  SplRegisterForSessionEvents

  RouterCreatePrintAsyncNotificationChannel

  CacheIsNameInNodeList

  IsNamedPipeRpcCall

  CallRouterFindFirstPrinterChangeNotification

  AllocSplStr

  DllFreeSplStr

  RouterAllocPrinterNotifyInfo

  MIDL_user_allocate1

  localspl

  SplNotifyServerStatus

  SplCreateSpooler

  SplCloseSpooler

  SplDeleteSpooler

  SplAddPrinter

  SplOpenPrinter

  SplClosePrinter

  SplIsDriverInstalled

  SplEnumPorts

  SplEnumPrinters

  SplIsCompatibleDriver

  SplEnumPrinterDrivers

  SplCopyNumberOfFiles

  SplAddMonitor

  SplSetDriverUpdateStatus

  SplGetDriverUpdateStatus

  SplIsLocalDriverAvailable

  SplAddPrinterDriverEx

  SplEnumJobs

  SplSetForm

  SplAddForm

  SplDeleteForm

  SplSetJobError

  SplDriverEvent

  SplGetJob

  SplAddJob

  SplReportJobProcessingProgress

  LocalReadPrinter

  SplAbortPrinter

  SplScheduleJob

  SplStartPagePrinter

  SplEndPagePrinter

  SplEndDocPrinter

  SplWritePrinter

  SplStartDocPrinter

  SplCreatePrinterIC

  SplPlayGdiScriptOnPrinterIC

  SplDeletePrinterIC

  SplEnumPrinterData

  SplEnumPrinterDataEx

  SplEnumPrinterKey

  SplSetPrinterData

  SplSetPrinterDataEx

  SplDeletePrinterData

  SplDeletePrinterDataEx

  SplDeletePrinterKey

  SplResetPrinter

  SplGetPrinterDriverEx

  SplGetPrinterDriver

  SplSetPrintProcCacheData

  SplGetPrintProcCacheData

  SplGetPrinterData

  SplGetPrinterDataEx

  SplGetLocalDevMode

  SplDeletePrintProcCacheData

  SplEnumPrintProcCacheData

  SplMonitorIsInstalled

  SplGetPrintClassObject

  SplGetForm

  SplEnumForms

  LocalSetForm

  LocalAddForm

  LocalDeleteForm

  LocalEnumForms

  SplCopyFileEvent

  SplLoadLibraryTheCopyFileModule

  SplSetJob

  SplSetJobExtra

  SplGetJobExtra

  SplGetDriverDir

  SplSetPrinter

  SplDeletePrinterWithJobs

  SplGetPrintClassObject_4CSR

  SplGetPrinter

  shlwapi

  UrlUnescapeW

  PathMatchSpecW

  kernel32

  WideCharToMultiByte

  GetTimeZoneInformation

  RegEnumKeyExW

  MultiByteToWideChar

  FindFirstFileW

  FindClose

  FindNextFileW

  HeapFree

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  EnterCriticalSection

  DosDateTimeToFileTime

  HeapAlloc

  RegDeleteValueW

  RegCreateKeyExW

  RegDeleteKeyExW

  GetComputerNameW

  SetThreadpoolTimer

  CreateEventW

  SetEvent

  WaitForSingleObject

  FileTimeToSystemTime

  GetActiveProcessorCount

  LeaveCriticalSection

  GetProcessHeap

  LoadLibraryW

  RegSetValueExW

  LocalAlloc

  LocalReAlloc

  WaitForSingleObjectEx

  MoveFileExW

  RemoveDirectoryW

  GetSystemInfo

  GetVersionExW

  LocalFileTimeToFileTime

  SetFileAttributesW

  FileTimeToLocalFileTime

  SetFileTime

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllMain

  DllRegisterServer

  DllUnregisterServer

  InitializePrintMonitor2

  InitializePrintProvidor

  ProviderEntryW

  Sections

  .text

  Size: 530KB - Virtual size: 529KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 154KB - Virtual size: 154KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ