Function at 0x18000b6f4
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x30
mov ebp, 1
xor r10d, r10d
mov r11d, edx
mov rsi, rcx
mov edi, ebp
lea eax, [rbp + 0x7f]
cmp edx, eax
jg 0x18000bb28
je 0x18000bb1c
cmp edx, 0x1e
jg 0x18000b98e
je 0x18000b982
cmp edx, 0x14
jg 0x18000b8d3
je 0x18000b8ae
sub edx, 7
je 0x18000b8a6
sub edx, ebp
je 0x18000b858
sub edx, ebp
je 0x18000b824
sub edx, ebp
je 0x18000b814
sub edx, 4
je 0x18000b80a
sub edx, ebp
je 0x18000b800
sub edx, ebp
je 0x18000b7e7
lea ecx, [rbp + 2]
cmp edx, ecx
jne 0x18000bf03
mov dword [r9], 0x20
mov dword [r9 + 8], 0x21
cmp r8d, 0xc
jne 0x18000b7ae
lea eax, [rbp + 4]
mov dword [r9 + 0xc], 6
mov dword [r9 + 4], eax
jmp 0x18000b7dd
cmp r8d, 0xd
jne 0x18000b7c2
mov dword [r9 + 4], 6
lea eax, [r8 - 8]
jmp 0x18000b7d9
mov ecx, r8d
call fcn.18000b5f8
mov dword [r9 + 4], eax
mov ecx, dword [rsi + 0x49b4]
call fcn.18000b5f8
mov dword [r9 + 0xc], eax
mov edi, 2
jmp 0x18000bf87
mov dword [r9], 0x43
test r8d, r8d
mov eax, r10d
setne al
mov dword [r9 + 4], eax
jmp 0x18000bf87
mov ecx, 3
mov dword [r9], ecx
jmp 0x18000b7ee
mov edx, 2
mov dword [r9], edx
jmp 0x18000b7ee
mov dword [r9], 0x1f
mov dword [r9 + 4], r8d
jmp 0x18000bf87
mov dword [r9], 0x1e
mov eax, r8d
sub eax, edi
je 0x18000b84d
sub eax, edi
je 0x18000b846
cmp eax, edi
je 0x18000b83f
mov ecx, r10d
jmp 0x18000b84f
mov ecx, 3
jmp 0x18000b84f
mov ecx, 2
jmp 0x18000b84f
mov ecx, ebp
mov dword [r9 + 4], ecx
jmp 0x18000bf87
mov eax, r8d
mov dword [r9], 0x1d
sub eax, edi
je 0x18000b88e
sub eax, edi
je 0x18000b882
cmp eax, edi
je 0x18000b876
mov word [rsp + 0x48], r10w
jmp 0x18000b893
mov ecx, 3
mov word [rsp + 0x48], cx
jmp 0x18000b893
mov edx, 2
mov word [rsp + 0x48], dx
jmp 0x18000b893
mov word [rsp + 0x48], bp
mov eax, 4
mov word [rsp + 0x4a], ax
mov eax, dword [rsp + 0x48]
jmp 0x18000b7f7
mov dword [r9], ebp
jmp 0x18000b81b
mov eax, dword [rcx + 0x49b0]
sub eax, 0xc
cmp eax, ebp
jbe 0x18000bf0a
mov ecx, r8d
mov dword [r9], 0x21
call fcn.18000b5f8
jmp 0x18000bf7f
mov ecx, r11d
sub ecx, 0x16
je 0x18000b976
sub ecx, edi
je 0x18000b96d
sub ecx, edi
je 0x18000b943
sub ecx, edi
je 0x18000b92f
sub ecx, edi
je 0x18000b928
sub ecx, edi
je 0x18000b91b
sub ecx, edi
je 0x18000b90f
cmp ecx, edi
jne 0x18000bf03
mov dword [r9], 7
jmp 0x18000b7ee
mov dword [r9], 6
jmp 0x18000b7ee
mov eax, 5
mov dword [r9], eax
jmp 0x18000b7ee
mov eax, 4
jmp 0x18000b920
mov dword [r9], 0x25
mov ecx, r8d
call fcn.18000b698
jmp 0x18000b7f7
xorps xmm0, xmm0
movzx eax, r8b
mov dword [r9], 0x2a
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x180053db8]
cvtpd2ps xmm0, xmm0
movss dword [r9 + 4], xmm0
jmp 0x18000bf87
mov dword [r9], 0x24
jmp 0x18000b936
mov dword [r9], 0x23
jmp 0x18000b82b
mov dword [r9], 0x42
jmp 0x18000b7ee
cmp r11d, 0x35
jg 0x18000baaa
je 0x18000ba96
mov ecx, r11d
sub ecx, 0x22
je 0x18000ba8a
sub ecx, edi
je 0x18000ba18
sub ecx, edi
je 0x18000ba0c
sub ecx, edi
je 0x18000ba00
sub ecx, edi
je 0x18000b9f4
sub ecx, 9
je 0x18000b9e8
sub ecx, edi
je 0x18000b9dc
mov eax, 4
cmp ecx, eax
jne 0x18000bf03
mov dword [r9], 8
jmp 0x18000b7ee
mov dword [r9], 0x2e
jmp 0x18000b7ee
mov dword [r9], 0x2d
jmp 0x18000b81b
mov dword [r9], 0x12
jmp 0x18000b81b
mov dword [r9], 0x11
jmp 0x18000b81b
mov dword [r9], 0x10
jmp 0x18000b81b
mov dword [r9], 0x1c
mov edx, 2
mov dword [rsi + 0x49bc], r8d
test r8d, r8d
jne 0x18000ba3d
mov eax, dword [rsi + 0x49b8]
mov byte [rsp + 0x4a], bpl
jmp 0x18000ba44
mov eax, r8d
mov byte [rsp + 0x4a], dl
test eax, eax
je 0x18000ba76
sub eax, edi
je 0x18000ba6f
sub eax, edi
je 0x18000ba68
cmp eax, edi
je 0x18000ba5c
mov word [rsp + 0x48], r10w
jmp 0x18000ba80
mov ecx, 3
mov word [rsp + 0x48], cx
jmp 0x18000ba80
mov word [rsp + 0x48], dx
jmp 0x18000ba80
mov word [rsp + 0x48], bp
jmp 0x18000ba80
mov eax, 4
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4b], bpl
jmp 0x18000b89d
mov dword [r9], 0x19
jmp 0x18000b81b
mov dword [r9], 0x27
mov ecx, r8d
call fcn.18000b698
jmp 0x18000b7f7
mov ecx, r11d
sub ecx, 0x36
je 0x18000bb13
sub ecx, edi
je 0x18000bb0a
sub ecx, edi
je 0x18000bafe
sub ecx, edi
je 0x18000baf2
sub ecx, edi
je 0x18000bae6
sub ecx, edi
je 0x18000bada
cmp ecx, edi
jne 0x18000bf03
mov dword [r9], 0x35
jmp 0x18000b81b
mov dword [r9], 0xf
jmp 0x18000b81b
mov dword [r9], 0xe
jmp 0x18000b81b
mov dword [r9], 0xd
jmp 0x18000b81b
mov dword [r9], 0x26
jmp 0x18000b936
mov dword [r9], 0x29
jmp 0x18000ba9d
mov dword [r9], 0x28
jmp 0x18000ba9d
mov dword [r9], 0x45
jmp 0x18000b81b
mov eax, 0xba
cmp r11d, eax
jg 0x18000bd83
je 0x18000bd77
mov eax, 0x9c
cmp r11d, eax
jg 0x18000bc2c
je 0x18000bc20
mov eax, 0x86
cmp r11d, eax
jg 0x18000bbc3
je 0x18000bbb7
mov ecx, r11d
sub ecx, 0x81
je 0x18000bbab
sub ecx, edi
je 0x18000bb9f
sub ecx, edi
je 0x18000bb93
sub ecx, edi
je 0x18000bb87
cmp ecx, edi
jne 0x18000bf03
mov dword [r9], 0x4a
jmp 0x18000b81b
mov dword [r9], 0x49
jmp 0x18000b81b
mov dword [r9], 0x48
jmp 0x18000b81b
mov dword [r9], 0x47
jmp 0x18000b81b
mov dword [r9], 0x46
jmp 0x18000b81b
mov dword [r9], 0x4b
jmp 0x18000b81b
mov ecx, r11d
sub ecx, 0x87
je 0x18000bc14
sub ecx, edi
je 0x18000bc08
sub ecx, 0x10
je 0x18000bbfc
sub ecx, 2
je 0x18000bbf0
cmp ecx, edi
jne 0x18000bf03
mov dword [r9], 0x14
jmp 0x18000b81b
mov dword [r9], 0x13
jmp 0x18000b81b
mov dword [r9], 0x1b
jmp 0x18000b81b
mov dword [r9], 0x44
jmp 0x18000b7ee
mov dword [r9], 0x4c
jmp 0x18000b81b
mov dword [r9], 0xb
jmp 0x18000b7ee
mov eax, 0xae
cmp r11d, eax
jg 0x18000bcfd
je 0x18000bcf1
mov ebx, r11d
sub ebx, 0xa1
je 0x18000bce5
sub ebx, edi
je 0x18000bcd9
mov eax, 4
sub ebx, eax
je 0x18000bccd
lea edx, [rax - 2]
sub ebx, edx
je 0x18000bcbb
lea ecx, [rax - 1]
cmp ebx, ecx
jne 0x18000bf03
mov ebx, r8d
mov dword [r9], 0x22
sub ebx, edi
je 0x18000bcb4
sub ebx, edi
je 0x18000bcad
sub ebx, edi
je 0x18000bca6
sub ebx, edi
je 0x18000b7f7
cmp ebx, edi
je 0x18000bc9c
mov eax, r10d
jmp 0x18000b7f7
mov eax, 5
jmp 0x18000b7f7
mov eax, ecx
jmp 0x18000b7f7
mov eax, edx
jmp 0x18000b7f7
mov eax, ebp
jmp 0x18000b7f7
mov dword [r9], 0x2f
mov eax, r8d
and eax, 0xf
jmp 0x18000b7f7
mov dword [r9], 0x15
jmp 0x18000b81b
mov dword [r9], 0x56
jmp 0x18000b81b
mov dword [r9], 0x55
jmp 0x18000b7ee
mov dword [r9], 0x37
jmp 0x18000b7ee
mov ecx, r11d
sub ecx, 0xaf
je 0x18000bd6b
sub ecx, edi
je 0x18000bd5f
sub ecx, 5
je 0x18000bd2a
mov eax, 4
cmp ecx, eax
jne 0x18000bf03
mov dword [r9], 0x39
jmp 0x18000b7ee
mov dword [r9], 0x61
cmp r8d, 0x41415353
je 0x18000bd51
cmp r8d, 0x434f5441
je 0x18000bd48
mov edx, r10d
jmp 0x18000bd56
mov dword [r9 + 4], ebp
jmp 0x18000bf87
mov edx, 2
mov dword [r9 + 4], edx
jmp 0x18000bf87
mov dword [r9], 0x59
jmp 0x18000b7ee
mov dword [r9], 0x3f
jmp 0x18000b81b
mov dword [r9], 0x3b
jmp 0x18000ba9d
mov eax, 0xc7
cmp r11d, eax
jg 0x18000be7d
je 0x18000be71
mov eax, 0xc0
cmp r11d, eax
jg 0x18000be0a
je 0x18000bdfe
mov ecx, r11d
sub ecx, 0xbb
je 0x18000bdf2
sub ecx, edi
je 0x18000bde6
sub ecx, edi
je 0x18000bdda
sub ecx, edi
je 0x18000bdce
cmp ecx, edi
jne 0x18000bf03
mov dword [r9], 0x5b
jmp 0x18000bcc2
mov dword [r9], 0x5a
jmp 0x18000bcc2
mov dword [r9], 0x3a
jmp 0x18000b936
mov dword [r9], 0x3d
jmp 0x18000ba9d
mov dword [r9], 0x3c
jmp 0x18000ba9d
mov dword [r9], 0x5c
jmp 0x18000bcc2
sub edx, 0xc1
je 0x18000be65
sub edx, edi
je 0x18000be3f
sub edx, edi
je 0x18000be33
mov ecx, 3
cmp edx, ecx
jne 0x18000bf03
mov dword [r9], 0x4d
jmp 0x18000b81b
mov dword [r9], 0x40
jmp 0x18000b81b
mov dword [r9], 0x41
test r8d, r8d
je 0x18000be58
movss xmm0, dword [0x180053db4]
jmp 0x18000b962
movss xmm0, dword [0x1800536e0]
jmp 0x18000b962
mov dword [r9], 0x38
jmp 0x18000b81b
mov dword [r9], 0x4e
jmp 0x18000b81b
mov eax, 0xcd
cmp r11d, eax
jg 0x18000beec
je 0x18000bee0
mov ecx, r11d
sub ecx, 0xc8
je 0x18000bed4
sub ecx, edi
je 0x18000bec8
sub ecx, edi
je 0x18000bebc
sub ecx, edi
je 0x18000beb0
cmp ecx, edi
jne 0x18000bf03
mov dword [r9], 0x53
jmp 0x18000b81b
mov dword [r9], 0x52
jmp 0x18000b81b
mov dword [r9], 0x51
jmp 0x18000b81b
mov dword [r9], 0x50
jmp 0x18000b81b
mov dword [r9], 0x4f
jmp 0x18000b81b
mov dword [r9], 0x54
jmp 0x18000b81b
mov ecx, r11d
sub ecx, 0xce
je 0x18000bf6f
sub ecx, edi
je 0x18000bf66
sub ecx, edi
je 0x18000bf52
cmp ecx, edi
je 0x18000bf0f
mov dword [r9], r10d
mov dword [r9 + 4], r8d
mov edi, r10d
jmp 0x18000bf83
mov eax, r8d
mov dword [r9], 0x60
sub eax, edi
je 0x18000bcb4
sub eax, edi
je 0x18000bf48
sub eax, edi
je 0x18000bf3e
sub eax, edi
je 0x18000bf34
cmp eax, edi
jmp 0x18000bc92
mov eax, 4
jmp 0x18000b7f7
mov eax, 3
jmp 0x18000b7f7
mov eax, 2
jmp 0x18000b7f7
mov dword [r9], 0x5f
mov ecx, r8d
call fcn.18000b5f8
jmp 0x18000b7f7
mov dword [r9], 0x5e
jmp 0x18000bf59
test r8d, r8d
mov dword [r9], 0x5d
mov eax, r10d
setne al
mov dword [r9 + 4], eax
test edi, edi
je 0x18000bfb4
movsxd rcx, dword [r9]
lea eax, [rcx - 1]
cmp eax, 0x62
jae 0x18000bfe5
mov rax, rcx
lea rcx, [0x180056440]
movzx ecx, byte [rax + rcx]
sub ecx, ebp
cmp dword [r9 + 4], ecx
ja 0x18000bfe5
add r10d, ebp
add r9, 8
cmp r10d, edi
jb 0x18000bf87
cmp r11d, 0x14
jne 0x18000bfc1
mov dword [rsi + 0x49b4], r8d
cmp r11d, 0x13
jne 0x18000bfce
mov dword [rsi + 0x49b0], r8d
mov eax, edi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x30
pop rdi
ret
mov dword [rsp + 0x20], r8d
lea rdx, str.WDDM_Warning:__s:_Invalid_Arguments_State___u__Value___u._n
lea r8, str.ConvertRenderState
mov r9d, r11d
lea rcx, [0x18006eae4]
call fcn.180027900
xor eax, eax
jmp 0x18000bfd0