Code:
Dear Scwizzo, thank you for his return, I corrected the code. But do you possess an idea of how to read the files that are generated inside of the spool of the windows with this code? C:\WINDOWS\system32\spool\PRINTERS
#include <windows.h>
#define SHD_SIGNATURE_67 $00004967 //Win2000/XP
typedef struct _SHADOW_FILE_HEADER_67 {
DWORD dwSignature; //SHD_SIGNATURE_67
WORD wStatus;
WORD wUnknown1;
DWORD dwJobID;
DWORD dwPriority;
DWORD dwUnknown2;
SYSTEMTIME stSubmitTime;
DWORD dwUntilTime;
DWORD dwSizeSPL; //Size of SPL File
DWORD dwSizeSecurityInfo; //Size of SecurityInfo
DWORD offSecurityInfo; //Offset of SECURITY_DESCRIPTOR
DWORD dwUnknown3;
DWORD dwUnknown4;
DWORD dwUnknown5;
DWORD offComputername; //Offset of WideChar+0
DWORD dwSPLSize2;
} SHADOW_FILE_HEADER_67, *PSHADOW_FILE_HEADER_67;