Function at 0x18000b340
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x30
mov ebp, 1
xor r10d, r10d
mov r11d, edx
mov rsi, rcx
mov edi, ebp
lea eax, [rbp + 0x7f]
cmp edx, eax
jg 0x18000b774
je 0x18000b768
cmp edx, 0x1e
jg 0x18000b5da
je 0x18000b5ce
cmp edx, 0x14
jg 0x18000b51f
je 0x18000b4fa
sub edx, 7
je 0x18000b4f2
sub edx, ebp
je 0x18000b4a4
sub edx, ebp
je 0x18000b470
sub edx, ebp
je 0x18000b460
sub edx, 4
je 0x18000b456
sub edx, ebp
je 0x18000b44c
sub edx, ebp
je 0x18000b433
lea ecx, [rbp + 2]
cmp edx, ecx
jne 0x18000bb4f
mov dword [r9], 0x20
mov dword [r9 + 8], 0x21
cmp r8d, 0xc
jne 0x18000b3fa
lea eax, [rbp + 4]
mov dword [r9 + 0xc], 6
mov dword [r9 + 4], eax
jmp 0x18000b429
cmp r8d, 0xd
jne 0x18000b40e
mov dword [r9 + 4], 6
lea eax, [r8 - 8]
jmp 0x18000b425
mov ecx, r8d
call fcn.18000b244
mov dword [r9 + 4], eax
mov ecx, dword [rsi + 0x49b4]
call fcn.18000b244
mov dword [r9 + 0xc], eax
mov edi, 2
jmp 0x18000bbd3
mov dword [r9], 0x43
test r8d, r8d
mov eax, r10d
setne al
mov dword [r9 + 4], eax
jmp 0x18000bbd3
mov ecx, 3
mov dword [r9], ecx
jmp 0x18000b43a
mov edx, 2
mov dword [r9], edx
jmp 0x18000b43a
mov dword [r9], 0x1f
mov dword [r9 + 4], r8d
jmp 0x18000bbd3
mov dword [r9], 0x1e
mov eax, r8d
sub eax, edi
je 0x18000b499
sub eax, edi
je 0x18000b492
cmp eax, edi
je 0x18000b48b
mov ecx, r10d
jmp 0x18000b49b
mov ecx, 3
jmp 0x18000b49b
mov ecx, 2
jmp 0x18000b49b
mov ecx, ebp
mov dword [r9 + 4], ecx
jmp 0x18000bbd3
mov eax, r8d
mov dword [r9], 0x1d
sub eax, edi
je 0x18000b4da
sub eax, edi
je 0x18000b4ce
cmp eax, edi
je 0x18000b4c2
mov word [rsp + 0x48], r10w
jmp 0x18000b4df
mov ecx, 3
mov word [rsp + 0x48], cx
jmp 0x18000b4df
mov edx, 2
mov word [rsp + 0x48], dx
jmp 0x18000b4df
mov word [rsp + 0x48], bp
mov eax, 4
mov word [rsp + 0x4a], ax
mov eax, dword [rsp + 0x48]
jmp 0x18000b443
mov dword [r9], ebp
jmp 0x18000b467
mov eax, dword [rcx + 0x49b0]
sub eax, 0xc
cmp eax, ebp
jbe 0x18000bb56
mov ecx, r8d
mov dword [r9], 0x21
call fcn.18000b244
jmp 0x18000bbcb
mov ecx, r11d
sub ecx, 0x16
je 0x18000b5c2
sub ecx, edi
je 0x18000b5b9
sub ecx, edi
je 0x18000b58f
sub ecx, edi
je 0x18000b57b
sub ecx, edi
je 0x18000b574
sub ecx, edi
je 0x18000b567
sub ecx, edi
je 0x18000b55b
cmp ecx, edi
jne 0x18000bb4f
mov dword [r9], 7
jmp 0x18000b43a
mov dword [r9], 6
jmp 0x18000b43a
mov eax, 5
mov dword [r9], eax
jmp 0x18000b43a
mov eax, 4
jmp 0x18000b56c
mov dword [r9], 0x25
mov ecx, r8d
call fcn.18000b2e4
jmp 0x18000b443
xorps xmm0, xmm0
movzx eax, r8b
mov dword [r9], 0x2a
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x180054e58]
cvtpd2ps xmm0, xmm0
movss dword [r9 + 4], xmm0
jmp 0x18000bbd3
mov dword [r9], 0x24
jmp 0x18000b582
mov dword [r9], 0x23
jmp 0x18000b477
mov dword [r9], 0x42
jmp 0x18000b43a
cmp r11d, 0x35
jg 0x18000b6f6
je 0x18000b6e2
mov ecx, r11d
sub ecx, 0x22
je 0x18000b6d6
sub ecx, edi
je 0x18000b664
sub ecx, edi
je 0x18000b658
sub ecx, edi
je 0x18000b64c
sub ecx, edi
je 0x18000b640
sub ecx, 9
je 0x18000b634
sub ecx, edi
je 0x18000b628
mov eax, 4
cmp ecx, eax
jne 0x18000bb4f
mov dword [r9], 8
jmp 0x18000b43a
mov dword [r9], 0x2e
jmp 0x18000b43a
mov dword [r9], 0x2d
jmp 0x18000b467
mov dword [r9], 0x12
jmp 0x18000b467
mov dword [r9], 0x11
jmp 0x18000b467
mov dword [r9], 0x10
jmp 0x18000b467
mov dword [r9], 0x1c
mov edx, 2
mov dword [rsi + 0x49bc], r8d
test r8d, r8d
jne 0x18000b689
mov eax, dword [rsi + 0x49b8]
mov byte [rsp + 0x4a], bpl
jmp 0x18000b690
mov eax, r8d
mov byte [rsp + 0x4a], dl
test eax, eax
je 0x18000b6c2
sub eax, edi
je 0x18000b6bb
sub eax, edi
je 0x18000b6b4
cmp eax, edi
je 0x18000b6a8
mov word [rsp + 0x48], r10w
jmp 0x18000b6cc
mov ecx, 3
mov word [rsp + 0x48], cx
jmp 0x18000b6cc
mov word [rsp + 0x48], dx
jmp 0x18000b6cc
mov word [rsp + 0x48], bp
jmp 0x18000b6cc
mov eax, 4
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4b], bpl
jmp 0x18000b4e9
mov dword [r9], 0x19
jmp 0x18000b467
mov dword [r9], 0x27
mov ecx, r8d
call fcn.18000b2e4
jmp 0x18000b443
mov ecx, r11d
sub ecx, 0x36
je 0x18000b75f
sub ecx, edi
je 0x18000b756
sub ecx, edi
je 0x18000b74a
sub ecx, edi
je 0x18000b73e
sub ecx, edi
je 0x18000b732
sub ecx, edi
je 0x18000b726
cmp ecx, edi
jne 0x18000bb4f
mov dword [r9], 0x35
jmp 0x18000b467
mov dword [r9], 0xf
jmp 0x18000b467
mov dword [r9], 0xe
jmp 0x18000b467
mov dword [r9], 0xd
jmp 0x18000b467
mov dword [r9], 0x26
jmp 0x18000b582
mov dword [r9], 0x29
jmp 0x18000b6e9
mov dword [r9], 0x28
jmp 0x18000b6e9
mov dword [r9], 0x45
jmp 0x18000b467
mov eax, 0xba
cmp r11d, eax
jg 0x18000b9cf
je 0x18000b9c3
mov eax, 0x9c
cmp r11d, eax
jg 0x18000b878
je 0x18000b86c
mov eax, 0x86
cmp r11d, eax
jg 0x18000b80f
je 0x18000b803
mov ecx, r11d
sub ecx, 0x81
je 0x18000b7f7
sub ecx, edi
je 0x18000b7eb
sub ecx, edi
je 0x18000b7df
sub ecx, edi
je 0x18000b7d3
cmp ecx, edi
jne 0x18000bb4f
mov dword [r9], 0x4a
jmp 0x18000b467
mov dword [r9], 0x49
jmp 0x18000b467
mov dword [r9], 0x48
jmp 0x18000b467
mov dword [r9], 0x47
jmp 0x18000b467
mov dword [r9], 0x46
jmp 0x18000b467
mov dword [r9], 0x4b
jmp 0x18000b467
mov ecx, r11d
sub ecx, 0x87
je 0x18000b860
sub ecx, edi
je 0x18000b854
sub ecx, 0x10
je 0x18000b848
sub ecx, 2
je 0x18000b83c
cmp ecx, edi
jne 0x18000bb4f
mov dword [r9], 0x14
jmp 0x18000b467
mov dword [r9], 0x13
jmp 0x18000b467
mov dword [r9], 0x1b
jmp 0x18000b467
mov dword [r9], 0x44
jmp 0x18000b43a
mov dword [r9], 0x4c
jmp 0x18000b467
mov dword [r9], 0xb
jmp 0x18000b43a
mov eax, 0xae
cmp r11d, eax
jg 0x18000b949
je 0x18000b93d
mov ebx, r11d
sub ebx, 0xa1
je 0x18000b931
sub ebx, edi
je 0x18000b925
mov eax, 4
sub ebx, eax
je 0x18000b919
lea edx, [rax - 2]
sub ebx, edx
je 0x18000b907
lea ecx, [rax - 1]
cmp ebx, ecx
jne 0x18000bb4f
mov ebx, r8d
mov dword [r9], 0x22
sub ebx, edi
je 0x18000b900
sub ebx, edi
je 0x18000b8f9
sub ebx, edi
je 0x18000b8f2
sub ebx, edi
je 0x18000b443
cmp ebx, edi
je 0x18000b8e8
mov eax, r10d
jmp 0x18000b443
mov eax, 5
jmp 0x18000b443
mov eax, ecx
jmp 0x18000b443
mov eax, edx
jmp 0x18000b443
mov eax, ebp
jmp 0x18000b443
mov dword [r9], 0x2f
mov eax, r8d
and eax, 0xf
jmp 0x18000b443
mov dword [r9], 0x15
jmp 0x18000b467
mov dword [r9], 0x56
jmp 0x18000b467
mov dword [r9], 0x55
jmp 0x18000b43a
mov dword [r9], 0x37
jmp 0x18000b43a
mov ecx, r11d
sub ecx, 0xaf
je 0x18000b9b7
sub ecx, edi
je 0x18000b9ab
sub ecx, 5
je 0x18000b976
mov eax, 4
cmp ecx, eax
jne 0x18000bb4f
mov dword [r9], 0x39
jmp 0x18000b43a
mov dword [r9], 0x61
cmp r8d, 0x41415353
je 0x18000b99d
cmp r8d, 0x434f5441
je 0x18000b994
mov edx, r10d
jmp 0x18000b9a2
mov dword [r9 + 4], ebp
jmp 0x18000bbd3
mov edx, 2
mov dword [r9 + 4], edx
jmp 0x18000bbd3
mov dword [r9], 0x59
jmp 0x18000b43a
mov dword [r9], 0x3f
jmp 0x18000b467
mov dword [r9], 0x3b
jmp 0x18000b6e9
mov eax, 0xc7
cmp r11d, eax
jg 0x18000bac9
je 0x18000babd
mov eax, 0xc0
cmp r11d, eax
jg 0x18000ba56
je 0x18000ba4a
mov ecx, r11d
sub ecx, 0xbb
je 0x18000ba3e
sub ecx, edi
je 0x18000ba32
sub ecx, edi
je 0x18000ba26
sub ecx, edi
je 0x18000ba1a
cmp ecx, edi
jne 0x18000bb4f
mov dword [r9], 0x5b
jmp 0x18000b90e
mov dword [r9], 0x5a
jmp 0x18000b90e
mov dword [r9], 0x3a
jmp 0x18000b582
mov dword [r9], 0x3d
jmp 0x18000b6e9
mov dword [r9], 0x3c
jmp 0x18000b6e9
mov dword [r9], 0x5c
jmp 0x18000b90e
sub edx, 0xc1
je 0x18000bab1
sub edx, edi
je 0x18000ba8b
sub edx, edi
je 0x18000ba7f
mov ecx, 3
cmp edx, ecx
jne 0x18000bb4f
mov dword [r9], 0x4d
jmp 0x18000b467
mov dword [r9], 0x40
jmp 0x18000b467
mov dword [r9], 0x41
test r8d, r8d
je 0x18000baa4
movss xmm0, dword [0x180054e54]
jmp 0x18000b5ae
movss xmm0, dword [0x180054780]
jmp 0x18000b5ae
mov dword [r9], 0x38
jmp 0x18000b467
mov dword [r9], 0x4e
jmp 0x18000b467
mov eax, 0xcd
cmp r11d, eax
jg 0x18000bb38
je 0x18000bb2c
mov ecx, r11d
sub ecx, 0xc8
je 0x18000bb20
sub ecx, edi
je 0x18000bb14
sub ecx, edi
je 0x18000bb08
sub ecx, edi
je 0x18000bafc
cmp ecx, edi
jne 0x18000bb4f
mov dword [r9], 0x53
jmp 0x18000b467
mov dword [r9], 0x52
jmp 0x18000b467
mov dword [r9], 0x51
jmp 0x18000b467
mov dword [r9], 0x50
jmp 0x18000b467
mov dword [r9], 0x4f
jmp 0x18000b467
mov dword [r9], 0x54
jmp 0x18000b467
mov ecx, r11d
sub ecx, 0xce
je 0x18000bbbb
sub ecx, edi
je 0x18000bbb2
sub ecx, edi
je 0x18000bb9e
cmp ecx, edi
je 0x18000bb5b
mov dword [r9], r10d
mov dword [r9 + 4], r8d
mov edi, r10d
jmp 0x18000bbcf
mov eax, r8d
mov dword [r9], 0x60
sub eax, edi
je 0x18000b900
sub eax, edi
je 0x18000bb94
sub eax, edi
je 0x18000bb8a
sub eax, edi
je 0x18000bb80
cmp eax, edi
jmp 0x18000b8de
mov eax, 4
jmp 0x18000b443
mov eax, 3
jmp 0x18000b443
mov eax, 2
jmp 0x18000b443
mov dword [r9], 0x5f
mov ecx, r8d
call fcn.18000b244
jmp 0x18000b443
mov dword [r9], 0x5e
jmp 0x18000bba5
test r8d, r8d
mov dword [r9], 0x5d
mov eax, r10d
setne al
mov dword [r9 + 4], eax
test edi, edi
je 0x18000bc00
movsxd rcx, dword [r9]
lea eax, [rcx - 1]
cmp eax, 0x62
jae 0x18000bc31
mov rax, rcx
lea rcx, [0x180057970]
movzx ecx, byte [rax + rcx]
sub ecx, ebp
cmp dword [r9 + 4], ecx
ja 0x18000bc31
add r10d, ebp
add r9, 8
cmp r10d, edi
jb 0x18000bbd3
cmp r11d, 0x14
jne 0x18000bc0d
mov dword [rsi + 0x49b4], r8d
cmp r11d, 0x13
jne 0x18000bc1a
mov dword [rsi + 0x49b0], r8d
mov eax, edi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x30
pop rdi
ret
mov dword [rsp + 0x20], r8d
lea rdx, str.WDDM_Warning:__s:_Invalid_Arguments_State___u__Value___u._n
lea r8, str.ConvertRenderState
mov r9d, r11d
lea rcx, [0x18006eac4]
call fcn.180029630
xor eax, eax
jmp 0x18000bc1c