Generated by JEB on 2019/02/01

PE: C:\Windows\System32\DevQueryBroker.dll Base=0x180000000 SHA-256=25FBE2A51DCF7DB95AD2707502F8A9661B94FC61DFC405DA5BF23BED1BA123D2
PDB: DevQueryBroker.pdb GUID={C3F89A2D-C566-4AC9-EFFA48DF34BB02EA} Age=1

239 located named symbols:
0x1800066C0: "__cdecl _imp_MesEncodeIncrementalHandleCreate" __imp_MesEncodeIncrementalHandleCreate
0x180006840: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x180004124: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180003F70: "__cdecl FindPESection" _FindPESection
0x1800067F8: "__cdecl _imp_DevCloseObjectQuery" __imp_DevCloseObjectQuery
0x1800030FC: "public: static long __cdecl CBrokerInstance::Create(class CBrokerInstance * __ptr64 * __ptr64)" ?Create@CBrokerInstance@@SAJPEAPEAV1@@Z
0x180007AFC: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180002C38: "public: void __cdecl CQuery::Stop(void) __ptr64" ?Stop@CQuery@@QEAAXXZ
0x180006678: "__cdecl _imp_BrSignalBrokerEvent2" __imp_BrSignalBrokerEvent2
0x180009040: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180007168: "`string'" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180003A44: "__cdecl CRT_INIT" _CRT_INIT
0x180006740: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800066E0: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x180001B70: WppControlCallback
0x1800043A0: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180007198: "`string'" ??_C@_1BO@HKEOLAAM@?$AAD?$AAe?$AAv?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x180002524: "public: void * __ptr64 __cdecl CQuery::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuery@@QEAAPEAXI@Z
0x180003780: "private: static unsigned long __cdecl CBrokerInstance::OnDisableEvent(enum _BR_EVENT_CALL_REASON,struct _BROKER * __ptr64,struct _BROKERED_EVENT * __ptr64,void * __ptr64)" ?OnDisableEvent@CBrokerInstance@@CAKW4_BR_EVENT_CALL_REASON@@PEAU_BROKER@@PEAU_BROKERED_EVENT@@PEAX@Z
0x1800066F0: "__cdecl _imp_NdrMesTypeEncode3" __imp_NdrMesTypeEncode3
0x180007B60: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180006728: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180006910: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x1800042F0: NdrServerCall2
0x180006780: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180007070: CLSID_RuntimeClass_Windows_Devices_Background_DeviceWatcherTriggerDetails
0x1800070D8: "`string'" ??_C@_1DG@BMAFFLKH@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAC?$AA?$CJ?$AA?$AA@
0x180006868: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x180003F56: "__cdecl XcptFilter" _XcptFilter
0x180006918: "__cdecl _xc_a" __xc_a
0x180007AD4: "__cdecl _IMPORT_DESCRIPTOR_BrokerLib" __IMPORT_DESCRIPTOR_BrokerLib
0x180007020: "`string'" ??_C@_17FIMLMPPN@?$AAA?$AAd?$AAd?$AA?$AA@
0x180003F50: "__cdecl callnewh" _callnewh
0x180004373: memcpy
0x180006880: "__cdecl _imp_memset" __imp_memset
0x1800096B8: "unsigned long g_dqbServiceState" ?g_dqbServiceState@@3KA
0x180004115: "__cdecl initterm" _initterm
0x180006818: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180007C00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800096E0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800067A0: "__cdecl _imp_Sleep" __imp_Sleep
0x180006938: "__cdecl _xi_z" __xi_z
0x1800031F0: "private: static unsigned long __cdecl CBrokerInstance::OnCreateEvent(enum _BR_EVENT_CALL_REASON,struct _BROKER * __ptr64,struct _BROKERED_EVENT * __ptr64,struct _BR_EVENT_PARAMETERS * __ptr64,unsigned short const * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,struct _BR_NEW_EVENT_INFORMATION * __ptr64)" ?OnCreateEvent@CBrokerInstance@@CAKW4_BR_EVENT_CALL_REASON@@PEAU_BROKER@@PEAU_BROKERED_EVENT@@PEAU_BR_EVENT_PARAMETERS@@PEBGPEAX55PEAPEAXPEAKPEAU_BR_NEW_EVENT_INFORMATION@@@Z
0x180006708: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800068D8: "__cdecl _imp_wcscmp" __imp_wcscmp
0x180003F3E: "__cdecl _C_specific_handler" __C_specific_handler
0x1800096B0: "unsigned __int64 volatile g_dqbSeviceControlFlags" ?g_dqbSeviceControlFlags@@3_KC
0x1800031E0: MIDL_user_free
0x180007028: "`string'" ??_C@_1O@PBKAOOPF@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x1800095F0: WPP_REGISTRATION_GUIDS
0x180003F4A: malloc
0x180004318: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180007110: "`string'" ??_C@_1FE@HMHGAD@?$AAD?$AAe?$AAv?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?5?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAR?$AAP?$AAC?$AA?5@
0x180009690: "struct _TP_TIMER * __ptr64 __ptr64 g_dqbIdleStopTimer" ?g_dqbIdleStopTimer@@3PEAU_TP_TIMER@@EA
0x180002150: "unsigned long __cdecl DqbControlHandlerEx(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?DqbControlHandlerEx@@YAKKKPEAX0@Z
0x1800095F8: WPP_MAIN_CB
0x180003F5C: "__cdecl amsg_exit" _amsg_exit
0x1800068B8: "__cdecl _imp__callnewh" __imp__callnewh
0x1800070A0: "`string'" ??_C@_1DG@EJPPNHL@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAU?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAC?$AA?$CJ?$AA?$AA@
0x1800067D0: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x180002CD0: "protected: long __cdecl CQuery::CopyParameters(enum _DEV_OBJECT_TYPE,unsigned long,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned long,struct _DEVPROPCOMPKEY const * __ptr64,unsigned long,struct _DEVPROP_FILTER_EXPRESSION const * __ptr64,unsigned long,struct _DEV_QUERY_PARAMETER const * __ptr64,unsigned short const * __ptr64) __ptr64" ?CopyParameters@CQuery@@IEAAJW4_DEV_OBJECT_TYPE@@KKPEAPEBGKPEBU_DEVPROPCOMPKEY@@KPEBU_DEVPROP_FILTER_EXPRESSION@@KPEBU_DEV_QUERY_PARAMETER@@PEBG@Z
0x180001BF0: "int __cdecl ProcessAttach(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?ProcessAttach@@YAHPEAUHINSTANCE__@@KPEAX@Z
0x180006808: "__cdecl _imp_DevCreateObjectQueryEx" __imp_DevCreateObjectQueryEx
0x1800066C8: "__cdecl _imp_MesHandleFree" __imp_MesHandleFree
0x180006870: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x180006788: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180006828: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180006718: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180006838: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180006660: "__cdecl _imp_BrInitializeBrokerInstance2" __imp_BrInitializeBrokerInstance2
0x1800066B8: "__cdecl _imp_MesIncrementalHandleReset" __imp_MesIncrementalHandleReset
0x1800096BC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUyzhvUyzxptilfmwUwvejfvibyilpviUoryUsvokvihUlyquivUznwGEUkivxlnkOlyq@DevQueryBrokerHelpers" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUyzhvUyzxptilfmwUwvejfvibyilpviUoryUsvokvihUlyquivUznwGEUkivxlnkOlyq@DevQueryBrokerHelpers
0x180006758: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800096D0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001D68: DllMain
0x180001000: "void __cdecl RpcSerializationAlloc(void * __ptr64,char * __ptr64 * __ptr64,unsigned int * __ptr64)" ?RpcSerializationAlloc@@YAXPEAXPEAPEADPEAI@Z
0x1800066D0: "__cdecl _imp_RpcExceptionFilter" __imp_RpcExceptionFilter
0x180006898: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800068F8: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180006738: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800010D0: "long __cdecl EncodeEvents(struct _BrokeredQueryContext * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?EncodeEvents@@YAJPEAU_BrokeredQueryContext@@PEAK1PEAPEAE@Z
0x180006710: "__cdecl _imp_GetLastError" __imp_GetLastError
0x1800039CC: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180006680: BrokerLib_NULL_THUNK_DATA
0x180009030: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x1800042F8: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x1800020D0: "void __cdecl DqbIdleStopTimerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?DqbIdleStopTimerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x180006750: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180004010: "__cdecl ValidateImageBase" _ValidateImageBase
0x180006690: "__cdecl _imp_MesDecodeBufferHandleCreate" __imp_MesDecodeBufferHandleCreate
0x1800095E8: "void * __ptr64 __ptr64 g_dqbRpcInterfaceGroup" ?g_dqbRpcInterfaceGroup@@3PEAXEA
0x180007B88: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800068D0: "__cdecl _imp_time" __imp_time
0x180001B44: WPP_SF_
0x180003C80: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x1800042E0: NdrServerCallAll
0x1800068A0: "__cdecl _imp__initterm" __imp__initterm
0x180002760: "protected: static void __cdecl CQuery::Callback(struct HDEVQUERY__ * __ptr64,void * __ptr64,struct _DEV_QUERY_RESULT_ACTION_DATA const * __ptr64)" ?Callback@CQuery@@KAXPEAUHDEVQUERY__@@PEAXPEBU_DEV_QUERY_RESULT_ACTION_DATA@@@Z
0x1800014D0: DqbGetEvents
0x1800020C0: "void __cdecl DqbStopThreadProc(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?DqbStopThreadProc@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x1800067D8: "__cdecl _imp_TrySubmitThreadpoolCallback" __imp_TrySubmitThreadpoolCallback
0x180001090: "void __cdecl RpcSerializationWrite(void * __ptr64,char * __ptr64,unsigned int)" ?RpcSerializationWrite@@YAXPEAXPEADI@Z
0x1800096C0: "__cdecl _onexitend" __onexitend
0x180006908: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180001CE4: "void __cdecl ProcessDetach(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?ProcessDetach@@YAXPEAUHINSTANCE__@@KPEAX@Z
0x180006748: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1800021F0: "void __cdecl ServiceMain(unsigned long,unsigned short * __ptr64 * __ptr64 const)" ?ServiceMain@@YAXKQEAPEAG@Z
0x1800067C8: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180006800: api-ms-win-devices-query-l1-1-0_NULL_THUNK_DATA
0x1800096A8: "long g_bDqbStopping" ?g_bDqbStopping@@3JA
0x1800067C0: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180006928: "__cdecl _xi_a" __xi_a
0x1800067B8: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180002680: WPP_SF_Dq
0x180009010: WPP_GLOBAL_Control
0x180007BEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180007080: WPP_ThisDir_CTLGUID_CtlGuid
0x1800017B4: WPP_SF_D
0x1800096E8: "__cdecl pRawDllMain" _pRawDllMain
0x1800071C8: WPP_cc2a58148228335cb9ae19e3f1ffc216_Traceguids
0x180009698: "struct SERVICE_STATUS_HANDLE__ * __ptr64 __ptr64 g_hDqbStatus" ?g_hDqbStatus@@3PEAUSERVICE_STATUS_HANDLE__@@EA
0x180006810: api-ms-win-devices-query-l1-1-1_NULL_THUNK_DATA
0x180009648: "struct _LIST_ENTRY g_activeQueriesList" ?g_activeQueriesList@@3U_LIST_ENTRY@@A
0x180003A08: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180006778: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180003F20: "__cdecl _security_check_cookie" __security_check_cookie
0x180003700: "private: static unsigned long __cdecl CBrokerInstance::OnEnableEvent(enum _BR_EVENT_CALL_REASON,struct _BROKER * __ptr64,struct _BROKERED_EVENT * __ptr64,void * __ptr64)" ?OnEnableEvent@CBrokerInstance@@CAKW4_BR_EVENT_CALL_REASON@@PEAU_BROKER@@PEAU_BROKERED_EVENT@@PEAX@Z
0x180006920: "__cdecl _xc_z" __xc_z
0x180007B74: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180006760: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180007090: DQB_ClientQuery_RpcEndpointObject
0x1800066B0: "__cdecl _imp_RpcServerInterfaceGroupClose" __imp_RpcServerInterfaceGroupClose
0x180009054: "unsigned long g_dqbCurrentState" ?g_dqbCurrentState@@3KA
0x1800067B0: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800068C8: "__cdecl _imp__aligned_free" __imp__aligned_free
0x180007038: "`string'" ??_C@_1O@KEIBEGCK@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x180006860: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x180009668: "struct _RTL_CRITICAL_SECTION g_csDqbIdleStop" ?g_csDqbIdleStop@@3U_RTL_CRITICAL_SECTION@@A
0x180009660: "unsigned long g_dqbRpcState" ?g_dqbRpcState@@3KA
0x1800067F0: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180006688: "__cdecl _imp_NdrMesTypeDecode3" __imp_NdrMesTypeDecode3
0x180006770: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180006940: "__cdecl _guard_fids_table" __guard_fids_table
0x180009050: "int g_bDqbRpcIdle" ?g_bDqbRpcIdle@@3HA
0x180002480: "public: static void __cdecl CActiveQueries::RemoveBrokeredQueryContext(struct _BrokeredQueryContext * __ptr64)" ?RemoveBrokeredQueryContext@CActiveQueries@@SAXPEAU_BrokeredQueryContext@@@Z
0x1800068E0: msvcrt_NULL_THUNK_DATA
0x180006560: "__cdecl load_config_used" _load_config_used
0x180007B38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x180002B70: "public: static void __cdecl CQuery::FreeQueryEvent(struct _QUERY_EVENT * __ptr64)" ?FreeQueryEvent@CQuery@@SAXPEAU_QUERY_EVENT@@@Z
0x180001824: "long __cdecl InitializeRpc(void)" ?InitializeRpc@@YAJXZ
0x180009620: "struct _RTL_CRITICAL_SECTION g_csActiveQueriesList" ?g_csActiveQueriesList@@3U_RTL_CRITICAL_SECTION@@A
0x1800068A8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180006698: "__cdecl _imp_RpcServerInterfaceGroupDeactivate" __imp_RpcServerInterfaceGroupDeactivate
0x180006730: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800068F0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180006768: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800071B8: WPP_9bceeff7effa383ddc97f31f85fba15b_Traceguids
0x1800037D8: "long __cdecl DecodeDevQueryParamsBlob(unsigned long,void const * __ptr64,enum _DEV_OBJECT_TYPE * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned long * __ptr64,struct _DEVPROPCOMPKEY * __ptr64 * __ptr64,unsigned long * __ptr64,struct _DEVPROP_FILTER_EXPRESSION * __ptr64 * __ptr64,unsigned long * __ptr64,struct _DEV_QUERY_PARAMETER * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?DecodeDevQueryParamsBlob@@YAJKPEBXPEAW4_DEV_OBJECT_TYPE@@PEAK2PEAPEAPEAG2PEAPEAU_DEVPROPCOMPKEY@@2PEAPEAU_DEVPROP_FILTER_EXPRESSION@@2PEAPEAU_DEV_QUERY_PARAMETER@@PEAPEAG@Z
0x180003F44: free
0x1800017F0: "void __cdecl DqbRpcInterfaceGroupIdleCallback(void * __ptr64,void * __ptr64,unsigned long)" ?DqbRpcInterfaceGroupIdleCallback@@YAXPEAX0K@Z
0x1800068E8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x1800031D0: MIDL_user_allocate
0x180004120: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800026CC: "public: long __cdecl CQuery::Start(void) __ptr64" ?Start@CQuery@@QEAAJXZ
0x1800066E8: "__cdecl _imp_NdrMesTypeAlignSize3" __imp_NdrMesTypeAlignSize3
0x180006850: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180007188: WPP_7df64ffed6ed3131a92a8deaec46d217_Traceguids
0x180006668: "__cdecl _imp_BrCreateBrokerInstance2" __imp_BrCreateBrokerInstance2
0x180001D9C: "void __cdecl CheckIdleStop(void)" ?CheckIdleStop@@YAXXZ
0x180006848: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x1800068B0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180006900: ntdll_NULL_THUNK_DATA
0x180006878: "__cdecl _imp_memcpy" __imp_memcpy
0x180006830: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180007B24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800067E8: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x180006820: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180009038: "__cdecl _security_cookie" __security_cookie
0x1800068C0: "__cdecl _imp__aligned_malloc" __imp__aligned_malloc
0x1800067E0: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x180007C28: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-query-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-devices-query-l1-1-1
0x180007C14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-query-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-devices-query-l1-1-0
0x180006720: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180007B4C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x18000287C: "public: long __cdecl CQuery::InsertEvent(struct _DEV_QUERY_RESULT_ACTION_DATA const * __ptr64,int) __ptr64" ?InsertEvent@CQuery@@QEAAJPEBU_DEV_QUERY_RESULT_ACTION_DATA@@H@Z
0x1800096C8: "__cdecl _onexitbegin" __onexitbegin
0x1800096A0: "class CBrokerInstance * __ptr64 __ptr64 g_pDqbInstance" ?g_pDqbInstance@@3PEAVCBrokerInstance@@EA
0x1800037C0: "private: static unsigned long __cdecl CBrokerInstance::OnDeleteEvent(enum _BR_EVENT_CALL_REASON,struct _BROKER * __ptr64,struct _BROKERED_EVENT * __ptr64,void * __ptr64)" ?OnDeleteEvent@CBrokerInstance@@CAKW4_BR_EVENT_CALL_REASON@@PEAU_BROKER@@PEAU_BROKERED_EVENT@@PEAX@Z
0x180006700: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004040: "__cdecl _security_init_cookie" __security_init_cookie
0x180007178: WPP_ae6eccdbe09e341a42f7b31ff9cb65f1_Traceguids
0x180007BC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x180006670: "__cdecl _imp_BrDeleteBrokerInstance" __imp_BrDeleteBrokerInstance
0x180007AE8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x18000437F: wcscmp
0x180006858: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x1800066A0: "__cdecl _imp_RpcServerInterfaceGroupCreateW" __imp_RpcServerInterfaceGroupCreateW
0x180006888: "__cdecl _imp_malloc" __imp_malloc
0x180007B10: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180001E20: "void __cdecl DqbStatusUpdate(struct SERVICE_STATUS_HANDLE__ * __ptr64,unsigned long,unsigned long,unsigned long)" ?DqbStatusUpdate@@YAXPEAUSERVICE_STATUS_HANDLE__@@KKK@Z
0x1800066F8: RPCRT4_NULL_THUNK_DATA
0x1800066A8: "__cdecl _imp_RpcServerInterfaceGroupActivate" __imp_RpcServerInterfaceGroupActivate
0x180004160: "__cdecl _report_gsfailure" __report_gsfailure
0x180006790: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800096D8: "__cdecl _native_startup_state" __native_startup_state
0x180007BD8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800066D8: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x180006890: "__cdecl _imp_free" __imp_free
0x180003FC0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800067A8: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180007B9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x180006798: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180007BB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180004379: memset
0x180007C3C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180001EAC: "void __cdecl DqbServiceStop(void)" ?DqbServiceStop@@YAXXZ
0x180007048: "`string'" ??_C@_1CE@BHOJDDFN@?$AAD?$AAe?$AAv?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAP?$AAa?$AAr?$AAa?$AAm?$AAB?$AAl?$AAo?$AAb?$AA?$AA@

[JEB Decompiler by PNF Software]