Function at 0x1401561b0
Capabilities:
Inspect section memory permissions

Disassembly:
jmp 0x1401561b0
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0xb0
lea rdi, [rsp + 0x20]
mov ecx, 0x24
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0xc0]
mov rax, qword [0x1405dc580]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov edx, 0xa
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhInitializeStringBuilder
mov eax, dword [rsp + 0xc0]
and eax, 1
test eax, eax
je 0x140156214
lea rdx, str.Local_TID_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 2
test eax, eax
je 0x140156233
lea rdx, str.UUID_initialized_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 4
test eax, eax
je 0x140156252
lea rdx, str.Inside_thread_detach_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 8
test eax, eax
je 0x140156271
lea rdx, str.Channel_thread_initialzed_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x10
test eax, eax
je 0x140156290
lea rdx, str.WOW_Thread_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x20
test eax, eax
je 0x1401562af
lea rdx, str.Thread_Uninitializing_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x40
test eax, eax
je 0x1401562ce
lea rdx, str.OLE1DDE_disabled_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x80
test eax, eax
je 0x1401562ef
lea rdx, str.Single_threaded__STA__
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x100
test eax, eax
je 0x140156310
lea rdx, str.Multi_threaded__MTA__
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x200
test eax, eax
je 0x140156331
lea rdx, str.Impersonating_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x400
test eax, eax
je 0x140156352
lea rdx, str.Eventlogger_disabled_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x800
test eax, eax
je 0x140156373
lea rdx, str.Neutral_threaded__NTA__
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x1000
test eax, eax
je 0x140156394
lea rdx, str.Dispatch_thread_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x2000
test eax, eax
je 0x1401563b5
lea rdx, str.HOSTTHREAD_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x4000
test eax, eax
je 0x1401563d6
lea rdx, str.ALLOWCOINIT_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x8000
test eax, eax
je 0x1401563f7
lea rdx, str.PENDINGUNINIT_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x10000
test eax, eax
je 0x140156418
lea rdx, str.FIRSTMTAINIT_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x20000
test eax, eax
je 0x140156439
lea rdx, str.FIRSTNTAINIT_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x40000
test eax, eax
je 0x14015645a
lea rdx, str.APTIN_INITIALIZING_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x80000
test eax, eax
je 0x14015647b
lea rdx, str.UIMSGS_IN_MODAL_LOOP_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x100000
test eax, eax
je 0x14015649c
lea rdx, str.Marshaling_error_object_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x200000
test eax, eax
je 0x1401564bd
lea rdx, str.WinRT_initialized_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x400000
test eax, eax
je 0x1401564de
lea rdx, str.ApplicationSTA_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x800000
test eax, eax
je 0x1401564ff
lea rdx, str.IN_SHUTDOWN_CALLBACKS_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x1000000
test eax, eax
je 0x140156520
lea rdx, str.POINTER_INPUT_BLOCKED_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x2000000
test eax, eax
je 0x140156541
lea rdx, str.IN_ACTIVATION_FILTER_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x4000000
test eax, eax
je 0x140156562
lea rdx, str.ASTATOASTAEXEMPT_QUIRK_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x8000000
test eax, eax
je 0x140156583
lea rdx, str.ASTATOASTAEXEMPT_PROXY_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x10000000
test eax, eax
je 0x1401565a4
lea rdx, str.ASTATOASTAEXEMPT_INDOUBT_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x20000000
test eax, eax
je 0x1401565c5
lea rdx, str.DETECTED_USER_INITIALIZED_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x40000000
test eax, eax
je 0x1401565e6
lea rdx, str.BRIDGE_STA_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
mov eax, dword [rsp + 0xc0]
and eax, 0x80000000
test eax, eax
je 0x140156607
lea rdx, str.NA_INITIALIZING_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendStringBuilder2
xor r8d, r8d
lea rdx, [0x1403d47ac]
mov rcx, qword [rsp + 0x30]
call fcn.140001f70
movzx eax, al
test eax, eax
je 0x140156631
mov edx, 2
lea rcx, [rsp + 0x28]
call fcn.140003930
mov ecx, dword [rsp + 0xc0]
call fcn.1400013a0
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.14000c6e0
lea r8, [rsp + 0x58]
lea rdx, str.___s_
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhAppendFormatStringBuilder
lea rcx, [rsp + 0x28]
call sym.ProcessHacker.exe_PhFinalStringBuilderString
mov rdi, rax
mov rcx, rsp
lea rdx, [0x1404d4880]
call fcn.140015750
mov rax, rdi
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.14000d430
add rsp, 0xb0
pop rdi
ret