Generated by JEB on 2019/08/01

PE: C:\Windows\System32\proquota.exe Base=0x140000000 SHA-256=5CFD021B0E2D250F6396CF7D63FDDF0D126EC3FFE4E99304E63DF6868F0BF491
PDB: proquota.pdb GUID={59618D1F-9411-94BE-38ED79B7BF9A3D93} Age=1

347 located named symbols:
0x140006308: "__cdecl _imp_RegisterClassW" __imp_RegisterClassW
0x140006138: "__cdecl _imp_UnregisterTraceGuids" __imp_UnregisterTraceGuids
0x140006398: "__cdecl _imp_DialogBoxParamW" __imp_DialogBoxParamW
0x140004CA4: "__cdecl _raise_securityfailure" __raise_securityfailure
0x140004F90: "__cdecl FindPESection" _FindPESection
0x1400068D8: "__cdecl _real@43f0000000000000" __real@43f0000000000000
0x140001090: "long __cdecl StringCchCatW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCatW@@YAJPEAG_KPEBG@Z
0x1400061C8: "__cdecl _imp_CompareStringOrdinal" __imp_CompareStringOrdinal
0x1400064F0: "__cdecl _imp___getmainargs" __imp___getmainargs
0x140008020: "__cdecl _security_cookie_complement" __security_cookie_complement
0x140006518: "__cdecl _imp_CoInitialize" __imp_CoInitialize
0x140006770: "ntuser" ??_C@_1O@OFPOMIEL@?$AAn?$AAt?$AAu?$AAs?$AAe?$AAr?$AA?$AA@
0x140006418: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x1400015A8: WinMain
0x1400063C8: "__cdecl _imp_RegisterGPNotification" __imp_RegisterGPNotification
0x140006750: "*.*" ??_C@_17ECHFBE@?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x140001490: WppControlCallback
0x140005220: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x1400062B0: SHELL32_NULL_THUNK_DATA
0x1400067D8: "ExcludeProfileDirs" ??_C@_1CG@PAPEIJEI@?$AAE?$AAx?$AAc?$AAl?$AAu?$AAd?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAD?$AAi?$AAr?$AAs?$AA?$AA@
0x140008620: "__cdecl commode" _commode
0x140006678: "ProfileQuotaMessage" ??_C@_1CI@HNHMPGMN@?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAQ?$AAu?$AAo?$AAt?$AAa?$AAM?$AAe?$AAs?$AAs?$AAa?$AAg?$AAe?$AA?$AA@
0x140006400: api-ms-win-core-heap-l2-1-0_NULL_THUNK_DATA
0x140006168: "__cdecl _imp_GetAce" __imp_GetAce
0x140002BA4: "int __cdecl ReadRegistry(void)" ?ReadRegistry@@YAHXZ
0x140006248: "__cdecl _imp_SetEvent" __imp_SetEvent
0x140001EB0: "void __cdecl QuotaThread(struct HWND__ * __ptr64)" ?QuotaThread@@YAXPEAUHWND__@@@Z
0x140006520: ole32_NULL_THUNK_DATA
0x140006268: "__cdecl _imp_HeapSetInformation" __imp_HeapSetInformation
0x140004E60: "long __cdecl __CxxUnhandledExceptionFilter(struct _EXCEPTION_POINTERS * __ptr64)" ?__CxxUnhandledExceptionFilter@@YAJPEAU_EXCEPTION_POINTERS@@@Z
0x140006530: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x140006764: "." ??_C@_13JOFGPIOO@?$AA?4?$AA?$AA@
0x1400087B8: "unsigned short * __ptr64 __ptr64 g_lpQuotaMessage" ?g_lpQuotaMessage@@3PEAGEA
0x14000862C: "__cdecl fmode" _fmode
0x140003A6C: "int __cdecl EnumerateProfile(struct HWND__ * __ptr64)" ?EnumerateProfile@@YAHPEAUHWND__@@@Z
0x140008034: "unsigned long g_dwMaxProfileSize" ?g_dwMaxProfileSize@@3KA
0x140006730: "WarnUserTimeout" ??_C@_1CA@DDHIFAJA@?$AAW?$AAa?$AAr?$AAn?$AAU?$AAs?$AAe?$AAr?$AAT?$AAi?$AAm?$AAe?$AAo?$AAu?$AAt?$AA?$AA@
0x140006758: "\*.*" ??_C@_19CFMCKEMN@?$AA?2?$AA?$CK?$AA?4?$AA?$CK?$AA?$AA@
0x140006328: "__cdecl _imp_DispatchMessageW" __imp_DispatchMessageW
0x140004EBE: "__cdecl XcptFilter" _XcptFilter
0x140006538: "__cdecl _xc_a" __xc_a
0x1400087E0: "unsigned __int64 g_qwProfileSize" ?g_qwProfileSize@@3_KA
0x1400068D0: "__cdecl _real@3fb999999999999a" __real@3fb999999999999a
0x140006420: "__cdecl _imp_GetStartupInfoW" __imp_GetStartupInfoW
0x1400061F0: "__cdecl _imp_FindClose" __imp_FindClose
0x140006188: COMCTL32_NULL_THUNK_DATA
0x140006870: WPP_ThisDir_CTLGUID_ShellTraceHomeGroupProvider
0x140008638: "int g_bHideSmallItems" ?g_bHideSmallItems@@3HA
0x140006318: "__cdecl _imp_DestroyIcon" __imp_DestroyIcon
0x140008670: "unsigned short * szSizeFormat" ?szSizeFormat@@3PAGA
0x140006358: "__cdecl _imp_MessageBoxW" __imp_MessageBoxW
0x1400064F8: "__cdecl _imp__acmdln" __imp__acmdln
0x140008030: "unsigned long g_dwWarnUserTimeout" ?g_dwWarnUserTimeout@@3KA
0x140006508: "__cdecl _imp_memset" __imp_memset
0x140006228: "__cdecl _imp_CreateEventW" __imp_CreateEventW
0x14000514F: "__cdecl initterm" _initterm
0x140006160: "__cdecl _imp_TraceMessage" __imp_TraceMessage
0x140006F00: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x140008818: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x1400062F8: "__cdecl _imp_SendDlgItemMessageW" __imp_SendDlgItemMessageW
0x140006230: "__cdecl _imp_Sleep" __imp_Sleep
0x140006338: "__cdecl _imp_GetSystemMetrics" __imp_GetSystemMetrics
0x140006568: "__cdecl _xi_z" __xi_z
0x1400063E8: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x1400066E8: "IncludeRegInProQuota" ??_C@_1CK@BELFLLDK@?$AAI?$AAn?$AAc?$AAl?$AAu?$AAd?$AAe?$AAR?$AAe?$AAg?$AAI?$AAn?$AAP?$AAr?$AAo?$AAQ?$AAu?$AAo?$AAt?$AAa?$AA?$AA@
0x1400063D8: USERENV_NULL_THUNK_DATA
0x140004C62: "__cdecl _C_specific_handler" __C_specific_handler
0x1400066A0: "EnableProfileQuota" ??_C@_1CG@HKEPCJLE@?$AAE?$AAn?$AAa?$AAb?$AAl?$AAe?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAQ?$AAu?$AAo?$AAt?$AAa?$AA?$AA@
0x1400086C0: WPP_REGISTRATION_GUIDS
0x1400061D8: "__cdecl _imp_InitializeCriticalSectionAndSpinCount" __imp_InitializeCriticalSectionAndSpinCount
0x140006170: "__cdecl _imp_RegCloseKey" __imp_RegCloseKey
0x14000519C: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x140003A50: "int __cdecl ListViewSortCallback(__int64,__int64,__int64)" ?ListViewSortCallback@@YAH_J00@Z
0x140008700: WPP_MAIN_CB
0x140004F73: "__cdecl amsg_exit" _amsg_exit
0x140003E8C: "unsigned short * __ptr64 __cdecl GetExclusionListFromRegistry(struct HKEY__ * __ptr64)" ?GetExclusionListFromRegistry@@YAPEAGPEAUHKEY__@@@Z
0x140004450: "unsigned short * __ptr64 __cdecl ConvertExclusionList(unsigned short const * __ptr64,unsigned short const * __ptr64)" ?ConvertExclusionList@@YAPEAGPEBG0@Z
0x1400064E8: "__cdecl _imp_exit" __imp_exit
0x1400087F0: "unsigned long g_cbQuotaMessage" ?g_cbQuotaMessage@@3KA
0x140006800: "Software\Microsoft\Windows NT\Cu" ??_C@_1GM@NFOGLLJA@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?5?$AAN?$AAT?$AA?2?$AAC?$AAu@
0x140002EF0: "int __cdecl RecurseDirectory(unsigned short * __ptr64,unsigned int,unsigned short * __ptr64,struct HWND__ * __ptr64,unsigned short const * __ptr64)" ?RecurseDirectory@@YAHPEAGI0PEAUHWND__@@PEBG@Z
0x140006198: "__cdecl _imp_EnterCriticalSection" __imp_EnterCriticalSection
0x140006158: "__cdecl _imp_GetTraceLoggerHandle" __imp_GetTraceLoggerHandle
0x1400063F0: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x140006148: "__cdecl _imp_GetTraceEnableLevel" __imp_GetTraceEnableLevel
0x1400061A8: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x140008808: "__cdecl _native_startup_lock" __native_startup_lock
0x1400087B0: "int g_bWarningTimerRunning" ?g_bWarningTimerRunning@@3HA
0x140006340: "__cdecl _imp_EndDialog" __imp_EndDialog
0x140004EA0: "__cdecl _CxxSetUnhandledExceptionFilter" __CxxSetUnhandledExceptionFilter
0x140001250: WPP_SF_IS
0x140006500: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x140006210: "__cdecl _imp_ResumeThread" __imp_ResumeThread
0x140006450: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x140006410: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x1400062F0: "__cdecl _imp_IsDlgButtonChecked" __imp_IsDlgButtonChecked
0x140006290: KERNEL32_NULL_THUNK_DATA
0x140006388: "__cdecl _imp_GetWindowLongW" __imp_GetWindowLongW
0x140006240: "__cdecl _imp_GetLastError" __imp_GetLastError
0x140005178: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x140006498: "__cdecl _imp__commode" __imp__commode
0x140006890: WPP_ThisDir_CTLGUID_ShellPerfTraceProvider
0x1400064B0: "__cdecl _imp___setusermatherr" __imp___setusermatherr
0x140006E24: "__cdecl _IMPORT_DESCRIPTOR_ADVAPI32" __IMPORT_DESCRIPTOR_ADVAPI32
0x1400065B8: "NULL" ??_C@_19CIJIHAKK@?$AAN?$AAU?$AAL?$AAL?$AA?$AA@
0x140006428: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x1400061F8: "__cdecl _imp_WaitForSingleObject" __imp_WaitForSingleObject
0x1400062E0: "__cdecl _imp_LoadIconW" __imp_LoadIconW
0x1400086E8: "struct HICON__ * __ptr64 __ptr64 hIconStop" ?hIconStop@@3PEAUHICON__@@EA
0x140005040: "__cdecl ValidateImageBase" _ValidateImageBase
0x1400061E8: "__cdecl _imp_GetEnvironmentVariableW" __imp_GetEnvironmentVariableW
0x140001008: "long __cdecl StringCchCopyW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64)" ?StringCchCopyW@@YAJPEAG_KPEBG@Z
0x140006ED8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x1400087D0: "unsigned short * __ptr64 __ptr64 g_pszExcludeList" ?g_pszExcludeList@@3PEAGEA
0x140006370: "__cdecl _imp_PostMessageW" __imp_PostMessageW
0x1400062D0: "__cdecl _imp_GetDlgItem" __imp_GetDlgItem
0x1400065B0: "\" ??_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@
0x1400011E8: WPP_SF_
0x1400086E0: "void * __ptr64 __ptr64 g_hThread" ?g_hThread@@3PEAXEA
0x140006E88: "__cdecl _IMPORT_DESCRIPTOR_USERENV" __IMPORT_DESCRIPTOR_USERENV
0x140006F3C: "__cdecl _IMPORT_DESCRIPTOR_ole32" __IMPORT_DESCRIPTOR_ole32
0x1400061D0: "__cdecl _imp_CompareStringW" __imp_CompareStringW
0x140008628: "__cdecl newmode" _newmode
0x1400064A8: "__cdecl _imp__initterm" __imp__initterm
0x140006488: "__cdecl _imp___set_app_type" __imp___set_app_type
0x140004F80: "__cdecl setargv" _setargv
0x140006190: "__cdecl _imp_SetLastError" __imp_SetLastError
0x1400087E8: "struct HWND__ * __ptr64 __ptr64 g_hQuotaDlg" ?g_hQuotaDlg@@3PEAUHWND__@@EA
0x1400062C0: "__cdecl _imp_CheckDlgButton" __imp_CheckDlgButton
0x1400087D8: "int g_bWarningDisplayed" ?g_bWarningDisplayed@@3HA
0x140006380: "__cdecl _imp_GetMessageW" __imp_GetMessageW
0x1400087F8: "__cdecl _onexitend" __onexitend
0x140006260: "__cdecl _imp_CreateThread" __imp_CreateThread
0x1400064E0: "__cdecl _imp__exit" __imp__exit
0x140006528: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x140006350: "__cdecl _imp_CreateWindowExW" __imp_CreateWindowExW
0x140006280: "__cdecl _imp_FindFirstFileW" __imp_FindFirstFileW
0x140006430: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x1400063C0: USER32_NULL_THUNK_DATA
0x140006378: "__cdecl _imp_DefWindowProcW" __imp_DefWindowProcW
0x140006480: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x140006550: "__cdecl _xi_a" __xi_a
0x140006478: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x140004F80: "__cdecl matherr" _matherr
0x140008640: "struct _RTL_CRITICAL_SECTION g_cs" ?g_cs@@3U_RTL_CRITICAL_SECTION@@A
0x1400063B8: "__cdecl _imp_SetForegroundWindow" __imp_SetForegroundWindow
0x1400061C0: "__cdecl _imp_SetProcessShutdownParameters" __imp_SetProcessShutdownParameters
0x140006780: "Software\Policies\Microsoft\Wind" ??_C@_1FG@FLNEDBHD@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAP?$AAo?$AAl?$AAi?$AAc?$AAi?$AAe?$AAs?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd@
0x140008000: WPP_GLOBAL_Control
0x1400065B4: "" ??_C@_11LOCGONAA@?$AA?$AA@
0x140006E9C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x140001214: WPP_SF_D
0x140001214: WPP_SF_d
0x140006768: ".." ??_C@_15DDHGOCBH@?$AA?4?$AA?4?$AA?$AA@
0x140006368: "__cdecl _imp_GetWindowRect" __imp_GetWindowRect
0x140006F28: "__cdecl _IMPORT_DESCRIPTOR_COMCTL32" __IMPORT_DESCRIPTOR_COMCTL32
0x140008038: "unsigned short * szEventName" ?szEventName@@3PAGA
0x140004C80: "__cdecl _security_check_cookie" __security_check_cookie
0x140006548: "__cdecl _xc_z" __xc_z
0x140006F14: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-heap-l2-1-0
0x140006438: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x1400065D8: "FALSE" ??_C@_1M@HCOOECOK@?$AAF?$AAA?$AAL?$AAS?$AAE?$AA?$AA@
0x1400062A0: "__cdecl _imp_Shell_NotifyIconW" __imp_Shell_NotifyIconW
0x140006490: "__cdecl _imp_?terminate@@YAXXZ" __imp_?terminate@@YAXXZ
0x140006470: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x140006200: "__cdecl _imp_LocalAlloc" __imp_LocalAlloc
0x140006180: "__cdecl _imp_InitCommonControls" __imp_InitCommonControls
0x140006360: "__cdecl _imp_SetWindowPos" __imp_SetWindowPos
0x140006320: "__cdecl _imp_GetParent" __imp_GetParent
0x1400061A0: "__cdecl _imp_FindNextFileW" __imp_FindNextFileW
0x140006468: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x1400086F0: "void * __ptr64 __ptr64 g_hExitEvent" ?g_hExitEvent@@3PEAXEA
0x140006EB0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x140004394: "unsigned short * __ptr64 __cdecl CheckSlash(unsigned short * __ptr64,unsigned int,unsigned int * __ptr64)" ?CheckSlash@@YAPEAGPEAGIPEAI@Z
0x140006448: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x140006570: "__cdecl _guard_fids_table" __guard_fids_table
0x140006510: msvcrt_NULL_THUNK_DATA
0x140006010: "__cdecl load_config_used" _load_config_used
0x1400087C0: "int g_bShowReg" ?g_bShowReg@@3HA
0x1400062C8: "__cdecl _imp_KillTimer" __imp_KillTimer
0x1400062B8: "__cdecl _imp_PostQuitMessage" __imp_PostQuitMessage
0x1400063A8: "__cdecl _imp_ShutdownBlockReasonDestroy" __imp_ShutdownBlockReasonDestroy
0x140006208: "__cdecl _imp_OpenEventW" __imp_OpenEventW
0x140006E4C: "__cdecl _IMPORT_DESCRIPTOR_USER32" __IMPORT_DESCRIPTOR_USER32
0x1400087A8: "struct HICON__ * __ptr64 __ptr64 hIconGood" ?hIconGood@@3PEAUHICON__@@EA
0x1400064D8: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x1400065C8: "TRUE" ??_C@_19ELAAHEEL@?$AAT?$AAR?$AAU?$AAE?$AA?$AA@
0x14000278C: "int __cdecl SetSecurity(void)" ?SetSecurity@@YAHXZ
0x140008668: "struct HWND__ * __ptr64 __ptr64 hwndMain" ?hwndMain@@3PEAUHWND__@@EA
0x1400068E0: "__stdcall _xmm" __xmm@00000000000000000000000000000006
0x140006250: "__cdecl _imp_FindCloseChangeNotification" __imp_FindCloseChangeNotification
0x140006330: "__cdecl _imp_LoadStringW" __imp_LoadStringW
0x140001168: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x140006460: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x140006440: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1400061B8: "__cdecl _imp_WaitForMultipleObjects" __imp_WaitForMultipleObjects
0x140008624: "__cdecl dowildcard" _dowildcard
0x140006458: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x140008630: "struct HINSTANCE__ * __ptr64 __ptr64 hInst" ?hInst@@3PEAUHINSTANCE__@@EA
0x140006220: "__cdecl _imp_FindFirstChangeNotificationW" __imp_FindFirstChangeNotificationW
0x1400068A0: WPP_ThisDir_CTLGUID_UstCommonProvider
0x1400062D8: "__cdecl _imp_GetClientRect" __imp_GetClientRect
0x140005160: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1400061B0: "__cdecl _imp_ExpandEnvironmentStringsW" __imp_ExpandEnvironmentStringsW
0x1400063F8: "__cdecl _imp_LocalReAlloc" __imp_LocalReAlloc
0x140004ECC: RtlpImageNtHeader
0x1400066C8: "MaxProfileSize" ??_C@_1BO@BDGGJECN@?$AAM?$AAa?$AAx?$AAP?$AAr?$AAo?$AAf?$AAi?$AAl?$AAe?$AAS?$AAi?$AAz?$AAe?$AA?$AA@
0x1400065E8: "USERPROFILE" ??_C@_1BI@FAOJLPH@?$AAU?$AAS?$AAE?$AAR?$AAP?$AAR?$AAO?$AAF?$AAI?$AAL?$AAE?$AA?$AA@
0x1400063A0: "__cdecl _imp_GetDesktopWindow" __imp_GetDesktopWindow
0x1400063D0: "__cdecl _imp_UnregisterGPNotification" __imp_UnregisterGPNotification
0x1400087C4: "int g_bWarnUser" ?g_bWarnUser@@3HA
0x140006408: "__cdecl _imp_GetModuleHandleW" __imp_GetModuleHandleW
0x1400062E8: "__cdecl _imp_TranslateMessage" __imp_TranslateMessage
0x14000863C: "int g_bQueryEndSession" ?g_bQueryEndSession@@3HA
0x1400064D0: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x140006348: "__cdecl _imp_SendMessageW" __imp_SendMessageW
0x1400064C0: "__cdecl _imp__ismbblead" __imp__ismbblead
0x140006270: "__cdecl _imp_FindNextChangeNotification" __imp_FindNextChangeNotification
0x140006118: "__cdecl _imp_GetSecurityInfo" __imp_GetSecurityInfo
0x140006150: "__cdecl _imp_GetTraceEnableFlags" __imp_GetTraceEnableFlags
0x1400068B0: WPP_ThisDir_CTLGUID_ShellTraceProvider
0x1400035F0: "__int64 __cdecl QuotaDlgProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?QuotaDlgProc@@YA_JPEAUHWND__@@I_K_J@Z
0x140006140: "__cdecl _imp_RegisterTraceGuidsW" __imp_RegisterTraceGuidsW
0x140008018: "__cdecl _security_cookie" __security_cookie
0x140006120: "__cdecl _imp_RegQueryValueExW" __imp_RegQueryValueExW
0x140003C38: "int __cdecl GetDisplayName(unsigned short const * __ptr64,unsigned short * __ptr64,unsigned short * __ptr64,unsigned long)" ?GetDisplayName@@YAHPEBGPEAG1K@Z
0x1400086F8: "void * __ptr64 __ptr64 g_hQuotaDlgEvent" ?g_hQuotaDlgEvent@@3PEAXEA
0x1400063B0: "__cdecl _imp_SetTimer" __imp_SetTimer
0x140006258: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x140006278: "__cdecl _imp_LocalFree" __imp_LocalFree
0x140008010: "__cdecl _defaultmatherr" __defaultmatherr
0x140006EC4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x140006718: "WarnUser" ??_C@_1BC@FEECOPMH@?$AAW?$AAa?$AAr?$AAn?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
0x140008800: "__cdecl _onexitbegin" __onexitbegin
0x1400064B8: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x1400063E0: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x140004A00: WinMainCRTStartup
0x140006E38: "__cdecl _IMPORT_DESCRIPTOR_KERNEL32" __IMPORT_DESCRIPTOR_KERNEL32
0x140006130: "__cdecl _imp_RegOpenKeyExW" __imp_RegOpenKeyExW
0x140005074: "__cdecl _security_init_cookie" __security_init_cookie
0x140001518: "void __cdecl _DisplayWarningMessage(struct HWND__ * __ptr64)" ?_DisplayWarningMessage@@YAXPEAUHWND__@@@Z
0x1400064C8: "__cdecl _imp__cexit" __imp__cexit
0x140006880: WPP_bb3921478b6d3188bd29f3890825726f_Traceguids
0x140004F28: "__cdecl get_image_app_type" _get_image_app_type
0x14000286C: "int __cdecl ReadQuotaMsg(struct HKEY__ * __ptr64)" ?ReadQuotaMsg@@YAHPEAUHKEY__@@@Z
0x140006E60: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x140006390: "__cdecl _imp_LoadImageW" __imp_LoadImageW
0x140006310: "__cdecl _imp_SetDlgItemTextW" __imp_SetDlgItemTextW
0x140006128: "__cdecl _imp_SetSecurityInfo" __imp_SetSecurityInfo
0x140006178: ADVAPI32_NULL_THUNK_DATA
0x140006238: "__cdecl _imp_GetTickCount64" __imp_GetTickCount64
0x1400062A8: "__cdecl _imp_SHGetFileInfoW" __imp_SHGetFileInfoW
0x140006298: "__cdecl _imp_ExitWindowsDialog" __imp_ExitWindowsDialog
0x140004CE0: "__cdecl _report_gsfailure" __report_gsfailure
0x1400061E0: "__cdecl _imp_LeaveCriticalSection" __imp_LeaveCriticalSection
0x140008810: "__cdecl _native_startup_state" __native_startup_state
0x1400087C8: "unsigned __int64 g_qwProfileSizeTemp" ?g_qwProfileSizeTemp@@3_KA
0x140006600: "Software\Microsoft\Windows\Curre" ??_C@_1HE@KMAPOOMM@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW?$AAi?$AAn?$AAd?$AAo?$AAw?$AAs?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe@
0x140006218: "__cdecl _imp_ExitThread" __imp_ExitThread
0x140006288: "__cdecl _imp_SetThreadPriority" __imp_SetThreadPriority
0x140001B00: "__int64 __cdecl ProQuotaWndProc(struct HWND__ * __ptr64,unsigned int,unsigned __int64,__int64)" ?ProQuotaWndProc@@YA_JPEAUHWND__@@I_K_J@Z
0x140006E74: "__cdecl _IMPORT_DESCRIPTOR_SHELL32" __IMPORT_DESCRIPTOR_SHELL32
0x1400064A0: "__cdecl _imp__fmode" __imp__fmode
0x1400068C0: WPP_fe8b34b7ada83fe985c7ecc7c7dafcd2_Traceguids
0x1400087A0: "struct HICON__ * __ptr64 __ptr64 hIconCaution" ?hIconCaution@@3PEAUHICON__@@EA
0x140006EEC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x140001408: WPP_SF_Sd
0x140004FE0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x14000135C: WPP_SF_SS
0x1400034E8: "void __cdecl CenterWindow(struct HWND__ * __ptr64)" ?CenterWindow@@YAXPEAUHWND__@@@Z
0x140006300: "__cdecl _imp_ShutdownBlockReasonCreate" __imp_ShutdownBlockReasonCreate
0x140008068: "unsigned short * szClassName" ?szClassName@@3PAGA
0x1400012EC: WPP_SF_S
0x1400051FD: memset
0x140006F50: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]