Generated by JEB on 2019/08/01

PE: C:\Windows\System32\DevQueryBroker.dll Base=0x180000000 SHA-256=38F4FEA427636CE24D2E16B2F8065AD7B244640CF5A6B8F562F5A64BF8956A8F
PDB: DevQueryBroker.pdb GUID={2A60AFC6-AE26-25F6-26B94AA314925653} Age=1

239 located named symbols:
0x1800066C8: "__cdecl _imp_MesEncodeIncrementalHandleCreate" __imp_MesEncodeIncrementalHandleCreate
0x180006848: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x18000426C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180004090: "__cdecl FindPESection" _FindPESection
0x180006800: "__cdecl _imp_DevCloseObjectQuery" __imp_DevCloseObjectQuery
0x1800031A0: "public: static long __cdecl CBrokerInstance::Create(class CBrokerInstance * __ptr64 * __ptr64)" ?Create@CBrokerInstance@@SAJPEAPEAV1@@Z
0x180007B0C: "__cdecl _IMPORT_DESCRIPTOR_ntdll" __IMPORT_DESCRIPTOR_ntdll
0x180002CD0: "public: void __cdecl CQuery::Stop(void) __ptr64" ?Stop@CQuery@@QEAAXXZ
0x180006680: "__cdecl _imp_BrSignalBrokerEvent2" __imp_BrSignalBrokerEvent2
0x180009040: "__cdecl _security_cookie_complement" __security_cookie_complement
0x180007178: "ncalrpc" ??_C@_1BA@EONDGCCM@?$AAn?$AAc?$AAa?$AAl?$AAr?$AAp?$AAc?$AA?$AA@
0x180003B3C: "__cdecl CRT_INIT" _CRT_INIT
0x180006748: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1800066E8: "__cdecl _imp_NdrServerCallAll" __imp_NdrServerCallAll
0x180001BB0: WppControlCallback
0x180004510: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1800071A8: "DevQueryBroker" ??_C@_1BO@HKEOLAAM@?$AAD?$AAe?$AAv?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?$AA@
0x1800025A4: "public: void * __ptr64 __cdecl CQuery::`scalar deleting destructor'(unsigned int) __ptr64" ??_GCQuery@@QEAAPEAXI@Z
0x180003850: "private: static unsigned long __cdecl CBrokerInstance::OnDisableEvent(enum _BR_EVENT_CALL_REASON,struct _BROKER * __ptr64,struct _BROKERED_EVENT * __ptr64,void * __ptr64)" ?OnDisableEvent@CBrokerInstance@@CAKW4_BR_EVENT_CALL_REASON@@PEAU_BROKER@@PEAU_BROKERED_EVENT@@PEAX@Z
0x1800066F8: "__cdecl _imp_NdrMesTypeEncode3" __imp_NdrMesTypeEncode3
0x180007B70: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-eventing-classicprovider-l1-1-0
0x180006730: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x180006918: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180004450: NdrServerCall2
0x180006788: "__cdecl _imp_InitializeCriticalSection" __imp_InitializeCriticalSection
0x180007080: CLSID_RuntimeClass_Windows_Devices_Background_DeviceWatcherTriggerDetails
0x1800070E8: "D:(A;;GR;;;WD)(A;;GR;;;AC)" ??_C@_1DG@BMAFFLKH@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAW?$AAD?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAC?$AA?$CJ?$AA?$AA@
0x180006870: "__cdecl _imp_RegisterServiceCtrlHandlerExW" __imp_RegisterServiceCtrlHandlerExW
0x180004074: "__cdecl XcptFilter" _XcptFilter
0x180006920: "__cdecl _xc_a" __xc_a
0x180007AE4: "__cdecl _IMPORT_DESCRIPTOR_BrokerLib" __IMPORT_DESCRIPTOR_BrokerLib
0x180007030: "Add" ??_C@_17FIMLMPPN@?$AAA?$AAd?$AAd?$AA?$AA@
0x180004068: "__cdecl callnewh" _callnewh
0x1800044E1: memcpy
0x180006888: "__cdecl _imp_memset" __imp_memset
0x1800096B8: "unsigned long g_dqbServiceState" ?g_dqbServiceState@@3KA
0x18000424F: "__cdecl initterm" _initterm
0x180006820: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x180007C10: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800096E0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1800067A8: "__cdecl _imp_Sleep" __imp_Sleep
0x180006940: "__cdecl _xi_z" __xi_z
0x1800032A0: "private: static unsigned long __cdecl CBrokerInstance::OnCreateEvent(enum _BR_EVENT_CALL_REASON,struct _BROKER * __ptr64,struct _BROKERED_EVENT * __ptr64,struct _BR_EVENT_PARAMETERS * __ptr64,unsigned short const * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64,void * __ptr64 * __ptr64,unsigned long * __ptr64,struct _BR_NEW_EVENT_INFORMATION * __ptr64)" ?OnCreateEvent@CBrokerInstance@@CAKW4_BR_EVENT_CALL_REASON@@PEAU_BROKER@@PEAU_BROKERED_EVENT@@PEAU_BR_EVENT_PARAMETERS@@PEBGPEAX55PEAPEAXPEAKPEAU_BR_NEW_EVENT_INFORMATION@@@Z
0x180006710: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1800068E0: "__cdecl _imp_wcscmp" __imp_wcscmp
0x180004044: "__cdecl _C_specific_handler" __C_specific_handler
0x1800096B0: "unsigned __int64 volatile g_dqbSeviceControlFlags" ?g_dqbSeviceControlFlags@@3_KC
0x180003290: MIDL_user_free
0x180007038: "Update" ??_C@_1O@PBKAOOPF@?$AAU?$AAp?$AAd?$AAa?$AAt?$AAe?$AA?$AA@
0x1800095F0: WPP_REGISTRATION_GUIDS
0x18000405C: malloc
0x180004480: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x180007120: "DevQueryBroker client query RPC " ??_C@_1FE@HMHGAD@?$AAD?$AAe?$AAv?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAB?$AAr?$AAo?$AAk?$AAe?$AAr?$AA?5?$AAc?$AAl?$AAi?$AAe?$AAn?$AAt?$AA?5?$AAq?$AAu?$AAe?$AAr?$AAy?$AA?5?$AAR?$AAP?$AAC?$AA?5@
0x180009690: "struct _TP_TIMER * __ptr64 __ptr64 g_dqbIdleStopTimer" ?g_dqbIdleStopTimer@@3PEAU_TP_TIMER@@EA
0x1800021C0: "unsigned long __cdecl DqbControlHandlerEx(unsigned long,unsigned long,void * __ptr64,void * __ptr64)" ?DqbControlHandlerEx@@YAKKKPEAX0@Z
0x1800095F8: WPP_MAIN_CB
0x180004080: "__cdecl amsg_exit" _amsg_exit
0x1800068C0: "__cdecl _imp__callnewh" __imp__callnewh
0x1800070B0: "D:(A;;GR;;;AU)(A;;GR;;;AC)" ??_C@_1DG@EJPPNHL@?$AAD?$AA?3?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAU?$AA?$CJ?$AA?$CI?$AAA?$AA?$DL?$AA?$DL?$AAG?$AAR?$AA?$DL?$AA?$DL?$AA?$DL?$AAA?$AAC?$AA?$CJ?$AA?$AA@
0x1800067D8: "__cdecl _imp_CloseThreadpoolTimer" __imp_CloseThreadpoolTimer
0x180002D70: "protected: long __cdecl CQuery::CopyParameters(enum _DEV_OBJECT_TYPE,unsigned long,unsigned long,unsigned short const * __ptr64 * __ptr64,unsigned long,struct _DEVPROPCOMPKEY const * __ptr64,unsigned long,struct _DEVPROP_FILTER_EXPRESSION const * __ptr64,unsigned long,struct _DEV_QUERY_PARAMETER const * __ptr64,unsigned short const * __ptr64) __ptr64" ?CopyParameters@CQuery@@IEAAJW4_DEV_OBJECT_TYPE@@KKPEAPEBGKPEBU_DEVPROPCOMPKEY@@KPEBU_DEVPROP_FILTER_EXPRESSION@@KPEBU_DEV_QUERY_PARAMETER@@PEBG@Z
0x180001C38: "int __cdecl ProcessAttach(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?ProcessAttach@@YAHPEAUHINSTANCE__@@KPEAX@Z
0x180006810: "__cdecl _imp_DevCreateObjectQueryEx" __imp_DevCreateObjectQueryEx
0x1800066D0: "__cdecl _imp_MesHandleFree" __imp_MesHandleFree
0x180006878: api-ms-win-service-core-l1-1-0_NULL_THUNK_DATA
0x180006790: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x180006830: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x180006720: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x180006840: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x180006668: "__cdecl _imp_BrInitializeBrokerInstance2" __imp_BrInitializeBrokerInstance2
0x1800066C0: "__cdecl _imp_MesIncrementalHandleReset" __imp_MesIncrementalHandleReset
0x1800096BC: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUyzhvUyzxptilfmwUwvejfvibyilpviUoryUsvokvihUlyquivUznwGEUkivxlnkOlyq@DevQueryBrokerHelpers" __@@_PchSym_@00@KxulyqvxgPillgKxulmvxlivfzkUyzhvUyzxptilfmwUwvejfvibyilpviUoryUsvokvihUlyquivUznwGEUkivxlnkOlyq@DevQueryBrokerHelpers
0x180006760: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800096D0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001DB8: DllMain
0x180001010: "void __cdecl RpcSerializationAlloc(void * __ptr64,char * __ptr64 * __ptr64,unsigned int * __ptr64)" ?RpcSerializationAlloc@@YAXPEAXPEAPEADPEAI@Z
0x1800066D8: "__cdecl _imp_RpcExceptionFilter" __imp_RpcExceptionFilter
0x1800068A0: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x180006900: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180006740: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1800010E8: "long __cdecl EncodeEvents(struct _BrokeredQueryContext * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned char * __ptr64 * __ptr64)" ?EncodeEvents@@YAJPEAU_BrokeredQueryContext@@PEAK1PEAPEAE@Z
0x180006718: "__cdecl _imp_GetLastError" __imp_GetLastError
0x180003AA8: "void * __ptr64 __cdecl operator new(unsigned __int64)" ??2@YAPEAX_K@Z
0x180006688: BrokerLib_NULL_THUNK_DATA
0x180009030: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x18000445C: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x180002140: "void __cdecl DqbIdleStopTimerCallback(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64,struct _TP_TIMER * __ptr64)" ?DqbIdleStopTimerCallback@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAXPEAU_TP_TIMER@@@Z
0x180006758: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180004140: "__cdecl ValidateImageBase" _ValidateImageBase
0x180006698: "__cdecl _imp_MesDecodeBufferHandleCreate" __imp_MesDecodeBufferHandleCreate
0x1800095E8: "void * __ptr64 __ptr64 g_dqbRpcInterfaceGroup" ?g_dqbRpcInterfaceGroup@@3PEAXEA
0x180007B98: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1800068D8: "__cdecl _imp_time" __imp_time
0x180001B84: WPP_SF_
0x180003D80: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180004440: NdrServerCallAll
0x1800068A8: "__cdecl _imp__initterm" __imp__initterm
0x1800027F0: "protected: static void __cdecl CQuery::Callback(struct HDEVQUERY__ * __ptr64,void * __ptr64,struct _DEV_QUERY_RESULT_ACTION_DATA const * __ptr64)" ?Callback@CQuery@@KAXPEAUHDEVQUERY__@@PEAXPEBU_DEV_QUERY_RESULT_ACTION_DATA@@@Z
0x1800014F0: DqbGetEvents
0x180002130: "void __cdecl DqbStopThreadProc(struct _TP_CALLBACK_INSTANCE * __ptr64,void * __ptr64)" ?DqbStopThreadProc@@YAXPEAU_TP_CALLBACK_INSTANCE@@PEAX@Z
0x1800067E0: "__cdecl _imp_TrySubmitThreadpoolCallback" __imp_TrySubmitThreadpoolCallback
0x1800010A0: "void __cdecl RpcSerializationWrite(void * __ptr64,char * __ptr64,unsigned int)" ?RpcSerializationWrite@@YAXPEAXPEADI@Z
0x1800096C0: "__cdecl _onexitend" __onexitend
0x180006910: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180001D30: "void __cdecl ProcessDetach(struct HINSTANCE__ * __ptr64,unsigned long,void * __ptr64)" ?ProcessDetach@@YAXPEAUHINSTANCE__@@KPEAX@Z
0x180006750: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180002260: "void __cdecl ServiceMain(unsigned long,unsigned short * __ptr64 * __ptr64 const)" ?ServiceMain@@YAXKQEAPEAG@Z
0x1800067D0: "__cdecl _imp_CreateThreadpoolTimer" __imp_CreateThreadpoolTimer
0x180006808: api-ms-win-devices-query-l1-1-0_NULL_THUNK_DATA
0x1800096A8: "long g_bDqbStopping" ?g_bDqbStopping@@3JA
0x1800067C8: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180006930: "__cdecl _xi_a" __xi_a
0x1800067C0: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180002708: WPP_SF_Dq
0x180009010: WPP_GLOBAL_Control
0x180007BFC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x180007090: WPP_ThisDir_CTLGUID_CtlGuid
0x1800017D8: WPP_SF_D
0x1800096E8: "__cdecl pRawDllMain" _pRawDllMain
0x1800071D8: WPP_cc2a58148228335cb9ae19e3f1ffc216_Traceguids
0x180009698: "struct SERVICE_STATUS_HANDLE__ * __ptr64 __ptr64 g_hDqbStatus" ?g_hDqbStatus@@3PEAUSERVICE_STATUS_HANDLE__@@EA
0x180006818: api-ms-win-devices-query-l1-1-1_NULL_THUNK_DATA
0x180009648: "struct _LIST_ENTRY g_activeQueriesList" ?g_activeQueriesList@@3U_LIST_ENTRY@@A
0x180003AE8: "void __cdecl operator delete(void * __ptr64)" ??3@YAXPEAX@Z
0x180006780: "__cdecl _imp_DeleteCriticalSection" __imp_DeleteCriticalSection
0x180004020: "__cdecl _security_check_cookie" __security_check_cookie
0x1800037C0: "private: static unsigned long __cdecl CBrokerInstance::OnEnableEvent(enum _BR_EVENT_CALL_REASON,struct _BROKER * __ptr64,struct _BROKERED_EVENT * __ptr64,void * __ptr64)" ?OnEnableEvent@CBrokerInstance@@CAKW4_BR_EVENT_CALL_REASON@@PEAU_BROKER@@PEAU_BROKERED_EVENT@@PEAX@Z
0x180006928: "__cdecl _xc_z" __xc_z
0x180007B84: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x180006768: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1800070A0: DQB_ClientQuery_RpcEndpointObject
0x1800066B8: "__cdecl _imp_RpcServerInterfaceGroupClose" __imp_RpcServerInterfaceGroupClose
0x180009054: "unsigned long g_dqbCurrentState" ?g_dqbCurrentState@@3KA
0x1800067B8: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x1800068D0: "__cdecl _imp__aligned_free" __imp__aligned_free
0x180007048: "Remove" ??_C@_1O@KEIBEGCK@?$AAR?$AAe?$AAm?$AAo?$AAv?$AAe?$AA?$AA@
0x180006868: "__cdecl _imp_SetServiceStatus" __imp_SetServiceStatus
0x180009668: "struct _RTL_CRITICAL_SECTION g_csDqbIdleStop" ?g_csDqbIdleStop@@3U_RTL_CRITICAL_SECTION@@A
0x180009660: "unsigned long g_dqbRpcState" ?g_dqbRpcState@@3KA
0x1800067F8: api-ms-win-core-threadpool-l1-2-0_NULL_THUNK_DATA
0x180006690: "__cdecl _imp_NdrMesTypeDecode3" __imp_NdrMesTypeDecode3
0x180006778: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x180006948: "__cdecl _guard_fids_table" __guard_fids_table
0x180009050: "int g_bDqbRpcIdle" ?g_bDqbRpcIdle@@3HA
0x1800024F8: "public: static void __cdecl CActiveQueries::RemoveBrokeredQueryContext(struct _BrokeredQueryContext * __ptr64)" ?RemoveBrokeredQueryContext@CActiveQueries@@SAXPEAU_BrokeredQueryContext@@@Z
0x1800068E8: msvcrt_NULL_THUNK_DATA
0x180006560: "__cdecl load_config_used" _load_config_used
0x180007B48: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-security-sddl-l1-1-0
0x180002C04: "public: static void __cdecl CQuery::FreeQueryEvent(struct _QUERY_EVENT * __ptr64)" ?FreeQueryEvent@CQuery@@SAXPEAU_QUERY_EVENT@@@Z
0x18000185C: "long __cdecl InitializeRpc(void)" ?InitializeRpc@@YAJXZ
0x180009620: "struct _RTL_CRITICAL_SECTION g_csActiveQueriesList" ?g_csActiveQueriesList@@3U_RTL_CRITICAL_SECTION@@A
0x1800068B0: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1800066A0: "__cdecl _imp_RpcServerInterfaceGroupDeactivate" __imp_RpcServerInterfaceGroupDeactivate
0x180006738: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x1800068F8: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x180006770: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800071C8: WPP_9bceeff7effa383ddc97f31f85fba15b_Traceguids
0x1800038B0: "long __cdecl DecodeDevQueryParamsBlob(unsigned long,void const * __ptr64,enum _DEV_OBJECT_TYPE * __ptr64,unsigned long * __ptr64,unsigned long * __ptr64,unsigned short * __ptr64 * __ptr64 * __ptr64,unsigned long * __ptr64,struct _DEVPROPCOMPKEY * __ptr64 * __ptr64,unsigned long * __ptr64,struct _DEVPROP_FILTER_EXPRESSION * __ptr64 * __ptr64,unsigned long * __ptr64,struct _DEV_QUERY_PARAMETER * __ptr64 * __ptr64,unsigned short * __ptr64 * __ptr64)" ?DecodeDevQueryParamsBlob@@YAJKPEBXPEAW4_DEV_OBJECT_TYPE@@PEAK2PEAPEAPEAG2PEAPEAU_DEVPROPCOMPKEY@@2PEAPEAU_DEVPROP_FILTER_EXPRESSION@@2PEAPEAU_DEV_QUERY_PARAMETER@@PEAPEAG@Z
0x180004050: free
0x180001820: "void __cdecl DqbRpcInterfaceGroupIdleCallback(void * __ptr64,void * __ptr64,unsigned long)" ?DqbRpcInterfaceGroupIdleCallback@@YAXPEAX0K@Z
0x1800068F0: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003270: MIDL_user_allocate
0x180004260: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x18000275C: "public: long __cdecl CQuery::Start(void) __ptr64" ?Start@CQuery@@QEAAJXZ
0x1800066F0: "__cdecl _imp_NdrMesTypeAlignSize3" __imp_NdrMesTypeAlignSize3
0x180006858: "__cdecl _imp_ConvertStringSecurityDescriptorToSecurityDescriptorW" __imp_ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180007198: WPP_7df64ffed6ed3131a92a8deaec46d217_Traceguids
0x180006670: "__cdecl _imp_BrCreateBrokerInstance2" __imp_BrCreateBrokerInstance2
0x180001DF0: "void __cdecl CheckIdleStop(void)" ?CheckIdleStop@@YAXXZ
0x180006850: api-ms-win-eventing-classicprovider-l1-1-0_NULL_THUNK_DATA
0x1800068B8: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180006908: ntdll_NULL_THUNK_DATA
0x180006880: "__cdecl _imp_memcpy" __imp_memcpy
0x180006838: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x180007B34: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-1-0
0x1800067F0: "__cdecl _imp_SetThreadpoolTimer" __imp_SetThreadpoolTimer
0x180006828: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x180009038: "__cdecl _security_cookie" __security_cookie
0x1800068C8: "__cdecl _imp__aligned_malloc" __imp__aligned_malloc
0x1800067E8: "__cdecl _imp_WaitForThreadpoolTimerCallbacks" __imp_WaitForThreadpoolTimerCallbacks
0x180007C38: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-query-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-devices-query-l1-1-1
0x180007C24: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-devices-query-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-devices-query-l1-1-0
0x180006728: "__cdecl _imp_LocalFree" __imp_LocalFree
0x180007B5C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x180002910: "public: long __cdecl CQuery::InsertEvent(struct _DEV_QUERY_RESULT_ACTION_DATA const * __ptr64,int) __ptr64" ?InsertEvent@CQuery@@QEAAJPEBU_DEV_QUERY_RESULT_ACTION_DATA@@H@Z
0x1800096C8: "__cdecl _onexitbegin" __onexitbegin
0x1800096A0: "class CBrokerInstance * __ptr64 __ptr64 g_pDqbInstance" ?g_pDqbInstance@@3PEAVCBrokerInstance@@EA
0x180003890: "private: static unsigned long __cdecl CBrokerInstance::OnDeleteEvent(enum _BR_EVENT_CALL_REASON,struct _BROKER * __ptr64,struct _BROKERED_EVENT * __ptr64,void * __ptr64)" ?OnDeleteEvent@CBrokerInstance@@CAKW4_BR_EVENT_CALL_REASON@@PEAU_BROKER@@PEAU_BROKERED_EVENT@@PEAX@Z
0x180006708: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180004174: "__cdecl _security_init_cookie" __security_init_cookie
0x180007188: WPP_ae6eccdbe09e341a42f7b31ff9cb65f1_Traceguids
0x180007BD4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-service-core-l1-1-0
0x180006678: "__cdecl _imp_BrDeleteBrokerInstance" __imp_BrDeleteBrokerInstance
0x180007AF8: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x1800044F9: wcscmp
0x180006860: api-ms-win-security-sddl-l1-1-0_NULL_THUNK_DATA
0x1800066A8: "__cdecl _imp_RpcServerInterfaceGroupCreateW" __imp_RpcServerInterfaceGroupCreateW
0x180006890: "__cdecl _imp_malloc" __imp_malloc
0x180007B20: "__cdecl _IMPORT_DESCRIPTOR_RPCRT4" __IMPORT_DESCRIPTOR_RPCRT4
0x180001E78: "void __cdecl DqbStatusUpdate(struct SERVICE_STATUS_HANDLE__ * __ptr64,unsigned long,unsigned long,unsigned long)" ?DqbStatusUpdate@@YAXPEAUSERVICE_STATUS_HANDLE__@@KKK@Z
0x180006700: RPCRT4_NULL_THUNK_DATA
0x1800066B0: "__cdecl _imp_RpcServerInterfaceGroupActivate" __imp_RpcServerInterfaceGroupActivate
0x1800042B0: "__cdecl _report_gsfailure" __report_gsfailure
0x180006798: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x1800096D8: "__cdecl _native_startup_state" __native_startup_state
0x180007BE8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x1800066E0: "__cdecl _imp_NdrServerCall2" __imp_NdrServerCall2
0x180006898: "__cdecl _imp_free" __imp_free
0x1800040E0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x1800067B0: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180007BAC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-threadpool-l1-2-0
0x1800067A0: api-ms-win-core-synch-l1-1-0_NULL_THUNK_DATA
0x180007BC0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x1800044ED: memset
0x180007C4C: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR
0x180001F0C: "void __cdecl DqbServiceStop(void)" ?DqbServiceStop@@YAXXZ
0x180007058: "DevQueryParamBlob" ??_C@_1CE@BHOJDDFN@?$AAD?$AAe?$AAv?$AAQ?$AAu?$AAe?$AAr?$AAy?$AAP?$AAa?$AAr?$AAa?$AAm?$AAB?$AAl?$AAo?$AAb?$AA?$AA@

[JEB Decompiler by PNF Software]