; 
; FMOD::Channel::getLoopCount from 0x18009fe80 to 0x18009ff55 (213 bytes)
; 
; 3 xrefs:
; > FMOD_Channel_GetLoopCount @ 0x1800c55b9
; > <???> @ 0x180194348
; > <???> @ 0x1801fadc4
; 
; This function is hookable on this platform!
; 
; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA
; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings
; 

mov     [rsp+arg_10], rbx                                              ; +0x0, 0x18009fe80
mov     [rsp+arg_18], rsi                                              ; +0x5, 0x18009fe85
push    rdi                                                            ; +0xa, 0x18009fe8a
sub     rsp, 150h                                                      ; +0xb, 0x18009fe8b
mov     rax, cs:__security_cookie                                      ; +0x12, 0x18009fe92
xor     rax, rsp                                                       ; +0x19, 0x18009fe99
mov     [rsp+158h+var_18], rax                                         ; +0x1c, 0x18009fe9c
xor     eax, eax                                                       ; +0x24, 0x18009fea4
mov     rdi, rdx                                                       ; +0x26, 0x18009fea6
mov     rsi, rcx                                                       ; +0x29, 0x18009fea9
test    rdx, rdx                                                       ; +0x2c, 0x18009feac
jz      short loc_18009FEB3                                            ; +0x2f, 0x18009feaf
mov     [rdx], eax                                                     ; +0x31, 0x18009feb1
lea     r8, [rsp+158h+var_128]                                         ; +0x33, 0x18009feb3
mov     [rsp+158h+var_128], rax                                        ; +0x38, 0x18009feb8
lea     rdx, [rsp+158h+var_120]                                        ; +0x3d, 0x18009febd
call    ?validate@ChannelI@FMOD@@SA?AW4FMOD_RESULT@@PEAVChannel@2@PEAPEAV12@PEAVSystemLockScope@2@@Z; FMOD::ChannelI::validate(FMOD::Channel *,FMOD::ChannelI * *,FMOD::SystemLockScope *) ; +0x42, 0x18009fec2
mov     ebx, eax                                                       ; +0x47, 0x18009fec7
test    eax, eax                                                       ; +0x49, 0x18009fec9
jnz     short loc_18009FEE0                                            ; +0x4b, 0x18009fecb
mov     rcx, [rsp+158h+var_120]                                        ; +0x4d, 0x18009fecd
mov     rdx, rdi                                                       ; +0x52, 0x18009fed2
call    sub_1800CD980                                                  ; +0x55, 0x18009fed5
mov     ebx, eax                                                       ; +0x5a, 0x18009feda
test    eax, eax                                                       ; +0x5c, 0x18009fedc
jz      short loc_18009FF1F                                            ; +0x5e, 0x18009fede
mov     rax, cs:off_1801AED20                                          ; +0x60, 0x18009fee0
test    byte ptr [rax+10h], 80h                                        ; +0x67, 0x18009fee7
jz      short loc_18009FF1F                                            ; +0x6b, 0x18009feeb
mov     r8, rdi                                                        ; +0x6d, 0x18009feed
lea     rcx, [rsp+158h+var_118]                                        ; +0x70, 0x18009fef0
mov     edx, 100h                                                      ; +0x75, 0x18009fef5
call    sub_1800F3020                                                  ; +0x7a, 0x18009fefa
lea     rax, [rsp+158h+var_118]                                        ; +0x7f, 0x18009feff
mov     r8, rsi                                                        ; +0x84, 0x18009ff04
lea     r9, aChannelGetloop; "Channel::getLoopCount"                   ; +0x87, 0x18009ff07
mov     [rsp+158h+var_138], rax                                        ; +0x8e, 0x18009ff0e
mov     edx, 2                                                         ; +0x93, 0x18009ff13
mov     ecx, ebx                                                       ; +0x98, 0x18009ff18
call    sub_1800B20E0                                                  ; +0x9a, 0x18009ff1a
mov     rcx, [rsp+158h+var_128]                                        ; +0x9f, 0x18009ff1f
test    rcx, rcx                                                       ; +0xa4, 0x18009ff24
jz      short loc_18009FF2E                                            ; +0xa7, 0x18009ff27
call    sub_180102320                                                  ; +0xa9, 0x18009ff29
mov     eax, ebx                                                       ; +0xae, 0x18009ff2e
mov     rcx, [rsp+158h+var_18]                                         ; +0xb0, 0x18009ff30
xor     rcx, rsp; StackCookie                                          ; +0xb8, 0x18009ff38
call    __security_check_cookie                                        ; +0xbb, 0x18009ff3b
lea     r11, [rsp+158h+var_8]                                          ; +0xc0, 0x18009ff40
mov     rbx, [r11+20h]                                                 ; +0xc8, 0x18009ff48
mov     rsi, [r11+28h]                                                 ; +0xcc, 0x18009ff4c
mov     rsp, r11                                                       ; +0xd0, 0x18009ff50
pop     rdi                                                            ; +0xd3, 0x18009ff53
retn                                                                   ; +0xd4, 0x18009ff54