Function at 0x18000f000
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x30
mov ebp, 1
xor r10d, r10d
mov r11d, edx
mov rsi, rcx
mov edi, ebp
lea eax, [rbp + 0x7f]
cmp edx, eax
jg 0x18000f434
je 0x18000f428
cmp edx, 0x1e
jg 0x18000f29a
je 0x18000f28e
cmp edx, 0x14
jg 0x18000f1df
je 0x18000f1ba
sub edx, 7
je 0x18000f1b2
sub edx, ebp
je 0x18000f164
sub edx, ebp
je 0x18000f130
sub edx, ebp
je 0x18000f120
sub edx, 4
je 0x18000f116
sub edx, ebp
je 0x18000f10c
sub edx, ebp
je 0x18000f0f3
lea ecx, [rbp + 2]
cmp edx, ecx
jne 0x18000f80f
mov dword [r9], 0x20
mov dword [r9 + 8], 0x21
cmp r8d, 0xc
jne 0x18000f0ba
lea eax, [rbp + 4]
mov dword [r9 + 0xc], 6
mov dword [r9 + 4], eax
jmp 0x18000f0e9
cmp r8d, 0xd
jne 0x18000f0ce
mov dword [r9 + 4], 6
lea eax, [r8 - 8]
jmp 0x18000f0e5
mov ecx, r8d
call fcn.18000ef04
mov dword [r9 + 4], eax
mov ecx, dword [rsi + 0x49cc]
call fcn.18000ef04
mov dword [r9 + 0xc], eax
mov edi, 2
jmp 0x18000f893
mov dword [r9], 0x43
test r8d, r8d
mov eax, r10d
setne al
mov dword [r9 + 4], eax
jmp 0x18000f893
mov ecx, 3
mov dword [r9], ecx
jmp 0x18000f0fa
mov edx, 2
mov dword [r9], edx
jmp 0x18000f0fa
mov dword [r9], 0x1f
mov dword [r9 + 4], r8d
jmp 0x18000f893
mov dword [r9], 0x1e
mov eax, r8d
sub eax, edi
je 0x18000f159
sub eax, edi
je 0x18000f152
cmp eax, edi
je 0x18000f14b
mov ecx, r10d
jmp 0x18000f15b
mov ecx, 3
jmp 0x18000f15b
mov ecx, 2
jmp 0x18000f15b
mov ecx, ebp
mov dword [r9 + 4], ecx
jmp 0x18000f893
mov eax, r8d
mov dword [r9], 0x1d
sub eax, edi
je 0x18000f19a
sub eax, edi
je 0x18000f18e
cmp eax, edi
je 0x18000f182
mov word [rsp + 0x48], r10w
jmp 0x18000f19f
mov ecx, 3
mov word [rsp + 0x48], cx
jmp 0x18000f19f
mov edx, 2
mov word [rsp + 0x48], dx
jmp 0x18000f19f
mov word [rsp + 0x48], bp
mov eax, 4
mov word [rsp + 0x4a], ax
mov eax, dword [rsp + 0x48]
jmp 0x18000f103
mov dword [r9], ebp
jmp 0x18000f127
mov eax, dword [rcx + 0x49c8]
sub eax, 0xc
cmp eax, ebp
jbe 0x18000f816
mov ecx, r8d
mov dword [r9], 0x21
call fcn.18000ef04
jmp 0x18000f88b
mov ecx, r11d
sub ecx, 0x16
je 0x18000f282
sub ecx, edi
je 0x18000f279
sub ecx, edi
je 0x18000f24f
sub ecx, edi
je 0x18000f23b
sub ecx, edi
je 0x18000f234
sub ecx, edi
je 0x18000f227
sub ecx, edi
je 0x18000f21b
cmp ecx, edi
jne 0x18000f80f
mov dword [r9], 7
jmp 0x18000f0fa
mov dword [r9], 6
jmp 0x18000f0fa
mov eax, 5
mov dword [r9], eax
jmp 0x18000f0fa
mov eax, 4
jmp 0x18000f22c
mov dword [r9], 0x25
mov ecx, r8d
call fcn.18000efa4
jmp 0x18000f103
xorps xmm0, xmm0
movzx eax, r8b
mov dword [r9], 0x2a
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x180059fa8]
cvtpd2ps xmm0, xmm0
movss dword [r9 + 4], xmm0
jmp 0x18000f893
mov dword [r9], 0x24
jmp 0x18000f242
mov dword [r9], 0x23
jmp 0x18000f137
mov dword [r9], 0x42
jmp 0x18000f0fa
cmp r11d, 0x35
jg 0x18000f3b6
je 0x18000f3a2
mov ecx, r11d
sub ecx, 0x22
je 0x18000f396
sub ecx, edi
je 0x18000f324
sub ecx, edi
je 0x18000f318
sub ecx, edi
je 0x18000f30c
sub ecx, edi
je 0x18000f300
sub ecx, 9
je 0x18000f2f4
sub ecx, edi
je 0x18000f2e8
mov eax, 4
cmp ecx, eax
jne 0x18000f80f
mov dword [r9], 8
jmp 0x18000f0fa
mov dword [r9], 0x2e
jmp 0x18000f0fa
mov dword [r9], 0x2d
jmp 0x18000f127
mov dword [r9], 0x12
jmp 0x18000f127
mov dword [r9], 0x11
jmp 0x18000f127
mov dword [r9], 0x10
jmp 0x18000f127
mov dword [r9], 0x1c
mov edx, 2
mov dword [rsi + 0x49d4], r8d
test r8d, r8d
jne 0x18000f349
mov eax, dword [rsi + 0x49d0]
mov byte [rsp + 0x4a], bpl
jmp 0x18000f350
mov eax, r8d
mov byte [rsp + 0x4a], dl
test eax, eax
je 0x18000f382
sub eax, edi
je 0x18000f37b
sub eax, edi
je 0x18000f374
cmp eax, edi
je 0x18000f368
mov word [rsp + 0x48], r10w
jmp 0x18000f38c
mov ecx, 3
mov word [rsp + 0x48], cx
jmp 0x18000f38c
mov word [rsp + 0x48], dx
jmp 0x18000f38c
mov word [rsp + 0x48], bp
jmp 0x18000f38c
mov eax, 4
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4b], bpl
jmp 0x18000f1a9
mov dword [r9], 0x19
jmp 0x18000f127
mov dword [r9], 0x27
mov ecx, r8d
call fcn.18000efa4
jmp 0x18000f103
mov ecx, r11d
sub ecx, 0x36
je 0x18000f41f
sub ecx, edi
je 0x18000f416
sub ecx, edi
je 0x18000f40a
sub ecx, edi
je 0x18000f3fe
sub ecx, edi
je 0x18000f3f2
sub ecx, edi
je 0x18000f3e6
cmp ecx, edi
jne 0x18000f80f
mov dword [r9], 0x35
jmp 0x18000f127
mov dword [r9], 0xf
jmp 0x18000f127
mov dword [r9], 0xe
jmp 0x18000f127
mov dword [r9], 0xd
jmp 0x18000f127
mov dword [r9], 0x26
jmp 0x18000f242
mov dword [r9], 0x29
jmp 0x18000f3a9
mov dword [r9], 0x28
jmp 0x18000f3a9
mov dword [r9], 0x45
jmp 0x18000f127
mov eax, 0xba
cmp r11d, eax
jg 0x18000f68f
je 0x18000f683
mov eax, 0x9c
cmp r11d, eax
jg 0x18000f538
je 0x18000f52c
mov eax, 0x86
cmp r11d, eax
jg 0x18000f4cf
je 0x18000f4c3
mov ecx, r11d
sub ecx, 0x81
je 0x18000f4b7
sub ecx, edi
je 0x18000f4ab
sub ecx, edi
je 0x18000f49f
sub ecx, edi
je 0x18000f493
cmp ecx, edi
jne 0x18000f80f
mov dword [r9], 0x4a
jmp 0x18000f127
mov dword [r9], 0x49
jmp 0x18000f127
mov dword [r9], 0x48
jmp 0x18000f127
mov dword [r9], 0x47
jmp 0x18000f127
mov dword [r9], 0x46
jmp 0x18000f127
mov dword [r9], 0x4b
jmp 0x18000f127
mov ecx, r11d
sub ecx, 0x87
je 0x18000f520
sub ecx, edi
je 0x18000f514
sub ecx, 0x10
je 0x18000f508
sub ecx, 2
je 0x18000f4fc
cmp ecx, edi
jne 0x18000f80f
mov dword [r9], 0x14
jmp 0x18000f127
mov dword [r9], 0x13
jmp 0x18000f127
mov dword [r9], 0x1b
jmp 0x18000f127
mov dword [r9], 0x44
jmp 0x18000f0fa
mov dword [r9], 0x4c
jmp 0x18000f127
mov dword [r9], 0xb
jmp 0x18000f0fa
mov eax, 0xae
cmp r11d, eax
jg 0x18000f609
je 0x18000f5fd
mov ebx, r11d
sub ebx, 0xa1
je 0x18000f5f1
sub ebx, edi
je 0x18000f5e5
mov eax, 4
sub ebx, eax
je 0x18000f5d9
lea edx, [rax - 2]
sub ebx, edx
je 0x18000f5c7
lea ecx, [rax - 1]
cmp ebx, ecx
jne 0x18000f80f
mov ebx, r8d
mov dword [r9], 0x22
sub ebx, edi
je 0x18000f5c0
sub ebx, edi
je 0x18000f5b9
sub ebx, edi
je 0x18000f5b2
sub ebx, edi
je 0x18000f103
cmp ebx, edi
je 0x18000f5a8
mov eax, r10d
jmp 0x18000f103
mov eax, 5
jmp 0x18000f103
mov eax, ecx
jmp 0x18000f103
mov eax, edx
jmp 0x18000f103
mov eax, ebp
jmp 0x18000f103
mov dword [r9], 0x2f
mov eax, r8d
and eax, 0xf
jmp 0x18000f103
mov dword [r9], 0x15
jmp 0x18000f127
mov dword [r9], 0x56
jmp 0x18000f127
mov dword [r9], 0x55
jmp 0x18000f0fa
mov dword [r9], 0x37
jmp 0x18000f0fa
mov ecx, r11d
sub ecx, 0xaf
je 0x18000f677
sub ecx, edi
je 0x18000f66b
sub ecx, 5
je 0x18000f636
mov eax, 4
cmp ecx, eax
jne 0x18000f80f
mov dword [r9], 0x39
jmp 0x18000f0fa
mov dword [r9], 0x61
cmp r8d, 0x41415353
je 0x18000f65d
cmp r8d, 0x434f5441
je 0x18000f654
mov edx, r10d
jmp 0x18000f662
mov dword [r9 + 4], ebp
jmp 0x18000f893
mov edx, 2
mov dword [r9 + 4], edx
jmp 0x18000f893
mov dword [r9], 0x59
jmp 0x18000f0fa
mov dword [r9], 0x3f
jmp 0x18000f127
mov dword [r9], 0x3b
jmp 0x18000f3a9
mov eax, 0xc7
cmp r11d, eax
jg 0x18000f789
je 0x18000f77d
mov eax, 0xc0
cmp r11d, eax
jg 0x18000f716
je 0x18000f70a
mov ecx, r11d
sub ecx, 0xbb
je 0x18000f6fe
sub ecx, edi
je 0x18000f6f2
sub ecx, edi
je 0x18000f6e6
sub ecx, edi
je 0x18000f6da
cmp ecx, edi
jne 0x18000f80f
mov dword [r9], 0x5b
jmp 0x18000f5ce
mov dword [r9], 0x5a
jmp 0x18000f5ce
mov dword [r9], 0x3a
jmp 0x18000f242
mov dword [r9], 0x3d
jmp 0x18000f3a9
mov dword [r9], 0x3c
jmp 0x18000f3a9
mov dword [r9], 0x5c
jmp 0x18000f5ce
sub edx, 0xc1
je 0x18000f771
sub edx, edi
je 0x18000f74b
sub edx, edi
je 0x18000f73f
mov ecx, 3
cmp edx, ecx
jne 0x18000f80f
mov dword [r9], 0x4d
jmp 0x18000f127
mov dword [r9], 0x40
jmp 0x18000f127
mov dword [r9], 0x41
test r8d, r8d
je 0x18000f764
movss xmm0, dword [0x180059fa4]
jmp 0x18000f26e
movss xmm0, dword [0x1800598d0]
jmp 0x18000f26e
mov dword [r9], 0x38
jmp 0x18000f127
mov dword [r9], 0x4e
jmp 0x18000f127
mov eax, 0xcd
cmp r11d, eax
jg 0x18000f7f8
je 0x18000f7ec
mov ecx, r11d
sub ecx, 0xc8
je 0x18000f7e0
sub ecx, edi
je 0x18000f7d4
sub ecx, edi
je 0x18000f7c8
sub ecx, edi
je 0x18000f7bc
cmp ecx, edi
jne 0x18000f80f
mov dword [r9], 0x53
jmp 0x18000f127
mov dword [r9], 0x52
jmp 0x18000f127
mov dword [r9], 0x51
jmp 0x18000f127
mov dword [r9], 0x50
jmp 0x18000f127
mov dword [r9], 0x4f
jmp 0x18000f127
mov dword [r9], 0x54
jmp 0x18000f127
mov ecx, r11d
sub ecx, 0xce
je 0x18000f87b
sub ecx, edi
je 0x18000f872
sub ecx, edi
je 0x18000f85e
cmp ecx, edi
je 0x18000f81b
mov dword [r9], r10d
mov dword [r9 + 4], r8d
mov edi, r10d
jmp 0x18000f88f
mov eax, r8d
mov dword [r9], 0x60
sub eax, edi
je 0x18000f5c0
sub eax, edi
je 0x18000f854
sub eax, edi
je 0x18000f84a
sub eax, edi
je 0x18000f840
cmp eax, edi
jmp 0x18000f59e
mov eax, 4
jmp 0x18000f103
mov eax, 3
jmp 0x18000f103
mov eax, 2
jmp 0x18000f103
mov dword [r9], 0x5f
mov ecx, r8d
call fcn.18000ef04
jmp 0x18000f103
mov dword [r9], 0x5e
jmp 0x18000f865
test r8d, r8d
mov dword [r9], 0x5d
mov eax, r10d
setne al
mov dword [r9 + 4], eax
test edi, edi
je 0x18000f8c0
movsxd rcx, dword [r9]
lea eax, [rcx - 1]
cmp eax, 0x62
jae 0x18000f8f1
mov rax, rcx
lea rcx, [0x18005cc20]
movzx ecx, byte [rax + rcx]
sub ecx, ebp
cmp dword [r9 + 4], ecx
ja 0x18000f8f1
add r10d, ebp
add r9, 8
cmp r10d, edi
jb 0x18000f893
cmp r11d, 0x14
jne 0x18000f8cd
mov dword [rsi + 0x49cc], r8d
cmp r11d, 0x13
jne 0x18000f8da
mov dword [rsi + 0x49c8], r8d
mov eax, edi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x30
pop rdi
ret
mov dword [rsp + 0x20], r8d
lea rdx, str.WDDM_Warning:__s:_Invalid_Arguments_State___u__Value___u._n
lea r8, str.ConvertRenderState
mov r9d, r11d
lea rcx, [0x180074ac4]
call fcn.18002db40
xor eax, eax
jmp 0x18000f8dc