{"type": "func", "start": 6442467792, "end": 6442468493, "name": "sub_1800041D0", "pseudocode": "// \n// sub_1800041D0 from 0x1800041d0 to 0x18000448d (701 bytes)\n// \n// 2 xrefs:\n// > sub_180003D30 @ 0x180003dbf\n// > @ 0x1801f6264\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\nint *__fastcall sub_1800041D0(\n _DWORD *a1,\n int a2,\n int a3,\n int *a4,\n int *a5,\n int *a6,\n int *a7,\n int *a8,\n int *a9,\n _DWORD *a10,\n int *a11)\n{\n int v12; // r11d\n int *v13; // r10\n int v14; // eax\n int v15; // ebx\n int v16; // edi\n int v17; // esi\n int v18; // edi\n int v19; // ebx\n int v20; // r10d\n int v21; // r9d\n int v22; // r8d\n int v23; // ecx\n int v24; // ecx\n int v25; // eax\n int v26; // eax\n int v27; // r8d\n int *result; // rax\n int v29; // r9d\n int v30; // ecx\n int v31; // ecx\n int v32; // eax\n int v33; // eax\n int v34; // ecx\n int v35; // ecx\n int v36; // r11d\n int v37; // eax\n int v38; // esi\n int v39; // ecx\n int v40; // r9d\n int v41; // r8d\n int v42; // r9d\n int v43; // ecx\n int v44; // ecx\n int v45; // eax\n int v46; // ecx\n int v47; // ecx\n int v48; // eax\n int v49; // eax\n int v50; // r11d\n int v51; // ecx\n int v52; // ecx\n int v53; // ecx\n int v54; // eax\n int v55; // eax\n int v56; // r8d\n\n v12 = a3;\n v13 = *(int **)(*(_QWORD *)a1 + 32LL);\n v14 = a1[10];\n v15 = *v13;\n v16 = *v13;\n LODWORD(v13) = v13[1];\n v17 = (int)v13 >> 1;\n v18 = v16 >> 1;\n v19 = v15 >> 2;\n v20 = (int)v13 >> 2;\n if ( a1[9] )\n {\n if ( v14 )\n {\n v21 = v17 - a2;\n if ( a2 <= v20 )\n v21 = a2;\n v22 = 0;\n *a4 = 0;\n *a7 = 0;\n if ( a2 <= v20 )\n {\n v24 = v12;\n v25 = 0;\n if ( v20 < v12 )\n v24 = v20;\n if ( a2 > 0 )\n v25 = a2;\n v23 = v24 - v25;\n }\n else\n {\n v23 = 0;\n }\n *a5 = v23;\n if ( v12 >= v20 )\n {\n v26 = a2;\n v27 = v12;\n if ( v20 > a2 )\n v26 = v20;\n if ( v17 < v12 )\n v27 = v17;\n v22 = v27 - v26;\n }\n *a6 = v22;\n result = a8;\n *a8 = v20 - v21;\n *a9 = v21;\n *a10 = v17 - a2;\n }\n else\n {\n v29 = v20 - v19;\n *a7 = 0;\n if ( a2 <= v20 - v19 )\n {\n v31 = v20 - v19;\n v32 = a2;\n if ( a3 < v29 )\n v31 = a3;\n if ( a2 < 0 )\n v32 = 0;\n v30 = v31 - v32;\n }\n else\n {\n v30 = 0;\n }\n *a4 = v30;\n if ( a3 < v29 || a2 > v20 )\n {\n v35 = 0;\n }\n else\n {\n v33 = v20 - v19;\n v34 = a3;\n if ( a2 > v29 )\n v33 = a2;\n if ( v20 < a3 )\n v34 = v20;\n v35 = v34 - v33;\n }\n *a5 = v35;\n if ( a3 >= v20 )\n {\n if ( v20 + v19 < a3 )\n v12 = v20 + v19;\n v37 = v20;\n if ( a2 > v20 )\n v37 = a2;\n v36 = v12 - v37;\n }\n else\n {\n v36 = 0;\n }\n v38 = v17 - a2;\n if ( a2 <= v20 )\n v38 = a2;\n *a6 = v36;\n result = a8;\n *a8 = v20 - v38;\n v39 = a2 + v19 - v20;\n if ( v39 <= v19 )\n {\n v40 = 0;\n if ( v39 >= 0 )\n v40 = a2 + v19 - v20;\n }\n else\n {\n v40 = v18 + v29 - a2;\n }\n *a9 = v40;\n a2 = 0;\n if ( v39 >= 0 )\n a2 = v39;\n *a10 = v18 - a2;\n }\n }\n else\n {\n v41 = 0;\n *a4 = 0;\n v42 = v18 - a2;\n if ( v14 )\n {\n if ( a2 <= v19 )\n v42 = a2;\n if ( v12 >= v18 )\n {\n v44 = v12;\n if ( v20 + v19 < v12 )\n v44 = v20 + v19;\n v45 = v18;\n if ( a2 > v18 )\n v45 = a2;\n v43 = v44 - v45;\n }\n else\n {\n v43 = 0;\n }\n *a7 = v43;\n if ( a2 <= v19 )\n {\n v47 = v12;\n v48 = 0;\n if ( v19 < v12 )\n v47 = v19;\n if ( a2 > 0 )\n v48 = a2;\n v46 = v47 - v48;\n }\n else\n {\n v46 = 0;\n }\n *a5 = v46;\n if ( a2 > v18 || v12 < v19 )\n {\n v50 = 0;\n }\n else\n {\n v49 = v19;\n if ( a2 > v19 )\n v49 = a2;\n if ( v18 < v12 )\n v12 = v18;\n v50 = v12 - v49;\n }\n v51 = v19 - v42;\n v42 = v20 + v42 - v19;\n *a6 = v50;\n result = a8;\n *a8 = v51;\n }\n else\n {\n if ( a2 <= v19 )\n v42 = a2;\n *a7 = 0;\n if ( a2 <= v19 )\n {\n v53 = v12;\n v54 = 0;\n if ( v19 < v12 )\n v53 = v19;\n if ( a2 > 0 )\n v54 = a2;\n v52 = v53 - v54;\n }\n else\n {\n v52 = 0;\n }\n *a5 = v52;\n if ( v12 >= v19 )\n {\n v55 = v19;\n v56 = v12;\n if ( a2 > v19 )\n v55 = a2;\n if ( v18 < v12 )\n v56 = v18;\n v41 = v56 - v55;\n }\n *a6 = v41;\n result = a8;\n *a8 = v19 - v42;\n }\n *a9 = v42;\n *a10 = v18 - a2;\n }\n *a11 = a2;\n return result;\n}", "assembly": "; \n; sub_1800041D0 from 0x1800041d0 to 0x18000448d (701 bytes)\n; \n; 2 xrefs:\n; > sub_180003D30 @ 0x180003dbf\n; > @ 0x1801f6264\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov [rsp+arg_0], rbx ; +0x0, 0x1800041d0\nmov [rsp+arg_8], rbp ; +0x5, 0x1800041d5\nmov [rsp+arg_10], rsi ; +0xa, 0x1800041da\nmov [rsp+arg_18], rdi ; +0xf, 0x1800041df\npush r12 ; +0x14, 0x1800041e4\npush r14 ; +0x16, 0x1800041e6\npush r15 ; +0x18, 0x1800041e8\nmov rax, [rcx] ; +0x1a, 0x1800041ea\nmov r14, r9 ; +0x1d, 0x1800041ed\nmov r15, [rsp+18h+arg_40] ; +0x20, 0x1800041f0\nmov r11d, r8d ; +0x25, 0x1800041f5\nmov rbp, [rsp+18h+arg_48] ; +0x28, 0x1800041f8\nmov r12, [rsp+18h+arg_50] ; +0x2d, 0x1800041fd\nmov r10, [rax+20h] ; +0x32, 0x180004202\nmov eax, [rcx+28h] ; +0x36, 0x180004206\nmov ebx, [r10] ; +0x39, 0x180004209\nmov edi, ebx ; +0x3c, 0x18000420c\nmov r10d, [r10+4] ; +0x3e, 0x18000420e\nmov esi, r10d ; +0x42, 0x180004212\nsar esi, 1 ; +0x45, 0x180004215\nsar edi, 1 ; +0x47, 0x180004217\nsar ebx, 2 ; +0x49, 0x180004219\nsar r10d, 2 ; +0x4c, 0x18000421c\ncmp dword ptr [rcx+24h], 0 ; +0x50, 0x180004220\njz loc_18000436E ; +0x54, 0x180004224\ntest eax, eax ; +0x5a, 0x18000422a\nmov rax, [rsp+18h+arg_30] ; +0x5c, 0x18000422c\njz short loc_1800042A8 ; +0x61, 0x180004231\nmov edi, esi ; +0x63, 0x180004233\nsub edi, edx ; +0x65, 0x180004235\ncmp edx, r10d ; +0x67, 0x180004237\nmov r9d, edi ; +0x6a, 0x18000423a\ncmovle r9d, edx ; +0x6d, 0x18000423d\nxor r8d, r8d ; +0x71, 0x180004241\nmov [r14], r8d ; +0x74, 0x180004244\nmov [rax], r8d ; +0x77, 0x180004247\ncmp edx, r10d ; +0x7a, 0x18000424a\njle short loc_180004254 ; +0x7d, 0x18000424d\nmov ecx, r8d ; +0x7f, 0x18000424f\njmp short loc_180004268 ; +0x82, 0x180004252\ncmp r10d, r11d ; +0x84, 0x180004254\nmov ecx, r11d ; +0x87, 0x180004257\nmov eax, r8d ; +0x8a, 0x18000425a\ncmovl ecx, r10d ; +0x8d, 0x18000425d\ntest edx, edx ; +0x91, 0x180004261\ncmovg eax, edx ; +0x93, 0x180004263\nsub ecx, eax ; +0x96, 0x180004266\nmov rax, [rsp+18h+arg_20] ; +0x98, 0x180004268\nmov [rax], ecx ; +0x9d, 0x18000426d\ncmp r11d, r10d ; +0x9f, 0x18000426f\njl short loc_18000428A ; +0xa2, 0x180004272\ncmp r10d, edx ; +0xa4, 0x180004274\nmov eax, edx ; +0xa7, 0x180004277\nmov r8d, r11d ; +0xa9, 0x180004279\ncmovg eax, r10d ; +0xac, 0x18000427c\ncmp esi, r11d ; +0xb0, 0x180004280\ncmovl r8d, esi ; +0xb3, 0x180004283\nsub r8d, eax ; +0xb7, 0x180004287\nmov rax, [rsp+18h+arg_28] ; +0xba, 0x18000428a\nsub r10d, r9d ; +0xbf, 0x18000428f\nmov [rax], r8d ; +0xc2, 0x180004292\nmov rax, [rsp+18h+arg_38] ; +0xc5, 0x180004295\nmov [rax], r10d ; +0xca, 0x18000429a\nmov [r15], r9d ; +0xcd, 0x18000429d\nmov [rbp+0], edi ; +0xd0, 0x1800042a0\njmp loc_18000446E ; +0xd3, 0x1800042a3\nxor r8d, r8d ; +0xd8, 0x1800042a8\nmov r9d, r10d ; +0xdb, 0x1800042ab\nsub r9d, ebx ; +0xde, 0x1800042ae\nmov [rax], r8d ; +0xe1, 0x1800042b1\ncmp edx, r9d ; +0xe4, 0x1800042b4\njle short loc_1800042BE ; +0xe7, 0x1800042b7\nmov ecx, r8d ; +0xe9, 0x1800042b9\njmp short loc_1800042D2 ; +0xec, 0x1800042bc\ncmp r11d, r9d ; +0xee, 0x1800042be\nmov ecx, r9d ; +0xf1, 0x1800042c1\nmov eax, edx ; +0xf4, 0x1800042c4\ncmovl ecx, r11d ; +0xf6, 0x1800042c6\ntest edx, edx ; +0xfa, 0x1800042ca\ncmovs eax, r8d ; +0xfc, 0x1800042cc\nsub ecx, eax ; +0x100, 0x1800042d0\nmov [r14], ecx ; +0x102, 0x1800042d2\ncmp r11d, r9d ; +0x105, 0x1800042d5\njl short loc_1800042F6 ; +0x108, 0x1800042d8\ncmp edx, r10d ; +0x10a, 0x1800042da\njg short loc_1800042F6 ; +0x10d, 0x1800042dd\ncmp edx, r9d ; +0x10f, 0x1800042df\nmov eax, r9d ; +0x112, 0x1800042e2\nmov ecx, r11d ; +0x115, 0x1800042e5\ncmovg eax, edx ; +0x118, 0x1800042e8\ncmp r10d, r11d ; +0x11b, 0x1800042eb\ncmovl ecx, r10d ; +0x11e, 0x1800042ee\nsub ecx, eax ; +0x122, 0x1800042f2\njmp short loc_1800042F9 ; +0x124, 0x1800042f4\nmov ecx, r8d ; +0x126, 0x1800042f6\nmov rax, [rsp+18h+arg_20] ; +0x129, 0x1800042f9\nmov [rax], ecx ; +0x12e, 0x1800042fe\ncmp r11d, r10d ; +0x130, 0x180004300\njge short loc_18000430A ; +0x133, 0x180004303\nmov r11d, r8d ; +0x135, 0x180004305\njmp short loc_180004321 ; +0x138, 0x180004308\nlea eax, [r10+rbx] ; +0x13a, 0x18000430a\ncmp eax, r11d ; +0x13e, 0x18000430e\ncmovl r11d, eax ; +0x141, 0x180004311\ncmp edx, r10d ; +0x145, 0x180004315\nmov eax, r10d ; +0x148, 0x180004318\ncmovg eax, edx ; +0x14b, 0x18000431b\nsub r11d, eax ; +0x14e, 0x18000431e\nmov rax, [rsp+18h+arg_28] ; +0x151, 0x180004321\nsub esi, edx ; +0x156, 0x180004326\ncmp edx, r10d ; +0x158, 0x180004328\nmov ecx, r10d ; +0x15b, 0x18000432b\ncmovle esi, edx ; +0x15e, 0x18000432e\nsub ecx, esi ; +0x161, 0x180004331\nmov [rax], r11d ; +0x163, 0x180004333\nmov rax, [rsp+18h+arg_38] ; +0x166, 0x180004336\nmov [rax], ecx ; +0x16b, 0x18000433b\nmov ecx, ebx ; +0x16d, 0x18000433d\nsub ecx, r10d ; +0x16f, 0x18000433f\nadd ecx, edx ; +0x172, 0x180004342\ncmp ecx, ebx ; +0x174, 0x180004344\njle short loc_180004350 ; +0x176, 0x180004346\nsub r9d, edx ; +0x178, 0x180004348\nadd r9d, edi ; +0x17b, 0x18000434b\njmp short loc_180004359 ; +0x17e, 0x18000434e\ntest ecx, ecx ; +0x180, 0x180004350\nmov r9d, r8d ; +0x182, 0x180004352\ncmovns r9d, ecx ; +0x185, 0x180004355\ntest ecx, ecx ; +0x189, 0x180004359\nmov [r15], r9d ; +0x18b, 0x18000435b\nmov edx, r8d ; +0x18e, 0x18000435e\ncmovns edx, ecx ; +0x191, 0x180004361\nsub edi, edx ; +0x194, 0x180004364\nmov [rbp+0], edi ; +0x196, 0x180004366\njmp loc_18000446E ; +0x199, 0x180004369\nxor r8d, r8d ; +0x19e, 0x18000436e\nmov esi, edi ; +0x1a1, 0x180004371\nsub esi, edx ; +0x1a3, 0x180004373\nmov [r9], r8d ; +0x1a5, 0x180004375\nmov r9d, esi ; +0x1a8, 0x180004378\ntest eax, eax ; +0x1ab, 0x18000437b\njz loc_18000440E ; +0x1ad, 0x18000437d\ncmp edx, ebx ; +0x1b3, 0x180004383\ncmovle r9d, edx ; +0x1b5, 0x180004385\ncmp r11d, edi ; +0x1b9, 0x180004389\njge short loc_180004393 ; +0x1bc, 0x18000438c\nmov ecx, r8d ; +0x1be, 0x18000438e\njmp short loc_1800043A9 ; +0x1c1, 0x180004391\nlea eax, [r10+rbx] ; +0x1c3, 0x180004393\nmov ecx, r11d ; +0x1c7, 0x180004397\ncmp eax, r11d ; +0x1ca, 0x18000439a\ncmovl ecx, eax ; +0x1cd, 0x18000439d\ncmp edx, edi ; +0x1d0, 0x1800043a0\nmov eax, edi ; +0x1d2, 0x1800043a2\ncmovg eax, edx ; +0x1d4, 0x1800043a4\nsub ecx, eax ; +0x1d7, 0x1800043a7\nmov rax, [rsp+18h+arg_30] ; +0x1d9, 0x1800043a9\nmov [rax], ecx ; +0x1de, 0x1800043ae\ncmp edx, ebx ; +0x1e0, 0x1800043b0\njle short loc_1800043B9 ; +0x1e2, 0x1800043b2\nmov ecx, r8d ; +0x1e4, 0x1800043b4\njmp short loc_1800043CC ; +0x1e7, 0x1800043b7\ncmp ebx, r11d ; +0x1e9, 0x1800043b9\nmov ecx, r11d ; +0x1ec, 0x1800043bc\nmov eax, r8d ; +0x1ef, 0x1800043bf\ncmovl ecx, ebx ; +0x1f2, 0x1800043c2\ntest edx, edx ; +0x1f5, 0x1800043c5\ncmovg eax, edx ; +0x1f7, 0x1800043c7\nsub ecx, eax ; +0x1fa, 0x1800043ca\nmov rax, [rsp+18h+arg_20] ; +0x1fc, 0x1800043cc\nmov [rax], ecx ; +0x201, 0x1800043d1\ncmp edx, edi ; +0x203, 0x1800043d3\njg short loc_1800043EF ; +0x205, 0x1800043d5\ncmp r11d, ebx ; +0x207, 0x1800043d7\njl short loc_1800043EF ; +0x20a, 0x1800043da\ncmp edx, ebx ; +0x20c, 0x1800043dc\nmov eax, ebx ; +0x20e, 0x1800043de\ncmovg eax, edx ; +0x210, 0x1800043e0\ncmp edi, r11d ; +0x213, 0x1800043e3\ncmovl r11d, edi ; +0x216, 0x1800043e6\nsub r11d, eax ; +0x21a, 0x1800043ea\njmp short loc_1800043F2 ; +0x21d, 0x1800043ed\nmov r11d, r8d ; +0x21f, 0x1800043ef\nmov rax, [rsp+18h+arg_28] ; +0x222, 0x1800043f2\nmov ecx, ebx ; +0x227, 0x1800043f7\nsub ecx, r9d ; +0x229, 0x1800043f9\nsub r9d, ebx ; +0x22c, 0x1800043fc\nadd r9d, r10d ; +0x22f, 0x1800043ff\nmov [rax], r11d ; +0x232, 0x180004402\nmov rax, [rsp+18h+arg_38] ; +0x235, 0x180004405\nmov [rax], ecx ; +0x23a, 0x18000440a\njmp short loc_180004468 ; +0x23c, 0x18000440c\nmov rax, [rsp+18h+arg_30] ; +0x23e, 0x18000440e\ncmp edx, ebx ; +0x243, 0x180004413\ncmovle r9d, edx ; +0x245, 0x180004415\nmov [rax], r8d ; +0x249, 0x180004419\njle short loc_180004423 ; +0x24c, 0x18000441c\nmov ecx, r8d ; +0x24e, 0x18000441e\njmp short loc_180004436 ; +0x251, 0x180004421\ncmp ebx, r11d ; +0x253, 0x180004423\nmov ecx, r11d ; +0x256, 0x180004426\nmov eax, r8d ; +0x259, 0x180004429\ncmovl ecx, ebx ; +0x25c, 0x18000442c\ntest edx, edx ; +0x25f, 0x18000442f\ncmovg eax, edx ; +0x261, 0x180004431\nsub ecx, eax ; +0x264, 0x180004434\nmov rax, [rsp+18h+arg_20] ; +0x266, 0x180004436\nmov [rax], ecx ; +0x26b, 0x18000443b\ncmp r11d, ebx ; +0x26d, 0x18000443d\njl short loc_180004456 ; +0x270, 0x180004440\ncmp edx, ebx ; +0x272, 0x180004442\nmov eax, ebx ; +0x274, 0x180004444\nmov r8d, r11d ; +0x276, 0x180004446\ncmovg eax, edx ; +0x279, 0x180004449\ncmp edi, r11d ; +0x27c, 0x18000444c\ncmovl r8d, edi ; +0x27f, 0x18000444f\nsub r8d, eax ; +0x283, 0x180004453\nmov rax, [rsp+18h+arg_28] ; +0x286, 0x180004456\nsub ebx, r9d ; +0x28b, 0x18000445b\nmov [rax], r8d ; +0x28e, 0x18000445e\nmov rax, [rsp+18h+arg_38] ; +0x291, 0x180004461\nmov [rax], ebx ; +0x296, 0x180004466\nmov [r15], r9d ; +0x298, 0x180004468\nmov [rbp+0], esi ; +0x29b, 0x18000446b\nmov [r12], edx ; +0x29e, 0x18000446e\nmov rbx, [rsp+18h+arg_0] ; +0x2a2, 0x180004472\nmov rbp, [rsp+18h+arg_8] ; +0x2a7, 0x180004477\nmov rsi, [rsp+18h+arg_10] ; +0x2ac, 0x18000447c\nmov rdi, [rsp+18h+arg_18] ; +0x2b1, 0x180004481\npop r15 ; +0x2b6, 0x180004486\npop r14 ; +0x2b8, 0x180004488\npop r12 ; +0x2ba, 0x18000448a\nretn ; +0x2bc, 0x18000448c", "xrefs": ["sub_180003D30 @ 0x180003dbf", " @ 0x1801f6264"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}