{"type": "func", "start": 6442482864, "end": 6442483204, "name": "sub_180007CB0", "pseudocode": "// \n// sub_180007CB0 from 0x180007cb0 to 0x180007e04 (340 bytes)\n// \n// 2 xrefs:\n// > sub_180007A70 @ 0x180007bee\n// > <???> @ 0x1801f63b4\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 __fastcall sub_180007CB0(__int64 a1, __int64 a2)\n{\n  unsigned int v4; // esi\n  int v5; // edi\n  int v6; // eax\n  int v7; // r8d\n  __int64 v8; // r9\n  __int64 v9; // r10\n  int v10; // eax\n  int v11; // edx\n  unsigned int v12; // ecx\n  __int64 v13; // rax\n  int v14; // r8d\n  __int64 v15; // rdx\n  int v16; // ecx\n  int v17; // r8d\n  __int64 v18; // rax\n  __int64 result; // rax\n  __int64 v20; // r9\n  __int64 v21; // rcx\n\n  v4 = 0;\n  if ( (unsigned int)sub_180001340(a2, 1) )\n    v5 = sub_180001340(a2, 4) + 1;\n  else\n    v5 = 1;\n  if ( (unsigned int)sub_180001340(a2, 1) )\n  {\n    v6 = sub_180001340(a2, 8) + 1;\n    v4 = (2 * v6 + 3) & 0xFFFFFFFC;\n    if ( v6 > 0 )\n    {\n      v7 = *(_DWORD *)(a2 + 16);\n      v8 = *(_QWORD *)a2;\n      v9 = (unsigned int)v6;\n      do\n      {\n        v10 = *(_DWORD *)(a1 + 4);\n        v11 = 0;\n        v12 = v10 - 1;\n        if ( !v10 )\n          v12 = 0;\n        for ( ; v12; v12 >>= 1 )\n          ++v11;\n        v13 = (__int64)(v7 + 2 * v11) >> 3;\n        v7 = ((_BYTE)v7 + 2 * (_BYTE)v11) & 7;\n        v8 += v13;\n        *(_DWORD *)(a2 + 16) = v7;\n        *(_QWORD *)a2 = v8;\n        --v9;\n      }\n      while ( v9 );\n    }\n  }\n  v14 = (*(_BYTE *)(a2 + 16) + 2) & 7;\n  v15 = *(_QWORD *)a2 + ((__int64)(*(_DWORD *)(a2 + 16) + 2) >> 3);\n  *(_DWORD *)(a2 + 16) = v14;\n  *(_QWORD *)a2 = v15;\n  if ( v5 <= 1 )\n  {\n    result = (v4 + 2 * v5 + 3) & 0xFFFFFFFC;\n    if ( v5 <= 0 )\n      return result;\n  }\n  else\n  {\n    v16 = *(_DWORD *)(a1 + 4);\n    v17 = v14 + 4 * v16;\n    v18 = v17;\n    v14 = v17 & 7;\n    *(_QWORD *)a2 = v15 + (v18 >> 3);\n    result = (((v4 + v16 + 3) & 0xFFFFFFFC) + 2 * v5 + 3) & 0xFFFFFFFC;\n  }\n  v20 = (unsigned int)v5;\n  do\n  {\n    v21 = (__int64)(v14 + 24) >> 3;\n    v14 = ((_BYTE)v14 + 24) & 7;\n    *(_QWORD *)a2 += v21;\n    --v20;\n  }\n  while ( v20 );\n  *(_DWORD *)(a2 + 16) = v14;\n  return result;\n}", "assembly": "; \n; sub_180007CB0 from 0x180007cb0 to 0x180007e04 (340 bytes)\n; \n; 2 xrefs:\n; > sub_180007A70 @ 0x180007bee\n; > <???> @ 0x1801f63b4\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov     [rsp+arg_0], rbx                                               ; +0x0, 0x180007cb0\nmov     [rsp+arg_8], rbp                                               ; +0x5, 0x180007cb5\nmov     [rsp+arg_10], rsi                                              ; +0xa, 0x180007cba\npush    rdi                                                            ; +0xf, 0x180007cbf\nsub     rsp, 20h                                                       ; +0x10, 0x180007cc0\nmov     rbx, rdx                                                       ; +0x14, 0x180007cc4\nmov     rbp, rcx                                                       ; +0x17, 0x180007cc7\nxor     esi, esi                                                       ; +0x1a, 0x180007cca\nmov     rcx, rbx                                                       ; +0x1c, 0x180007ccc\nlea     edx, [rsi+1]                                                   ; +0x1f, 0x180007ccf\ncall    sub_180001340                                                  ; +0x22, 0x180007cd2\ntest    eax, eax                                                       ; +0x27, 0x180007cd7\njz      short loc_180007CEB                                            ; +0x29, 0x180007cd9\nlea     edx, [rsi+4]                                                   ; +0x2b, 0x180007cdb\nmov     rcx, rbx                                                       ; +0x2e, 0x180007cde\ncall    sub_180001340                                                  ; +0x31, 0x180007ce1\nlea     edi, [rax+1]                                                   ; +0x36, 0x180007ce6\njmp     short loc_180007CF0                                            ; +0x39, 0x180007ce9\nmov     edi, 1                                                         ; +0x3b, 0x180007ceb\nmov     edx, 1                                                         ; +0x40, 0x180007cf0\nmov     rcx, rbx                                                       ; +0x45, 0x180007cf5\ncall    sub_180001340                                                  ; +0x48, 0x180007cf8\ntest    eax, eax                                                       ; +0x4d, 0x180007cfd\njz      short loc_180007D68                                            ; +0x4f, 0x180007cff\nmov     edx, 8                                                         ; +0x51, 0x180007d01\nmov     rcx, rbx                                                       ; +0x56, 0x180007d06\ncall    sub_180001340                                                  ; +0x59, 0x180007d09\ninc     eax                                                            ; +0x5e, 0x180007d0e\nlea     esi, ds:3[rax*2]                                               ; +0x60, 0x180007d10\nand     esi, 0FFFFFFFCh                                                ; +0x67, 0x180007d17\ntest    eax, eax                                                       ; +0x6a, 0x180007d1a\njle     short loc_180007D68                                            ; +0x6c, 0x180007d1c\nmov     r8d, [rbx+10h]                                                 ; +0x6e, 0x180007d1e\nmov     r9, [rbx]                                                      ; +0x72, 0x180007d22\nmov     r10d, eax                                                      ; +0x75, 0x180007d25\nnop     dword ptr [rax+rax+00000000h]                                  ; +0x78, 0x180007d28\nmov     eax, [rbp+4]                                                   ; +0x80, 0x180007d30\nxor     edx, edx                                                       ; +0x83, 0x180007d33\ntest    eax, eax                                                       ; +0x85, 0x180007d35\nlea     ecx, [rax-1]                                                   ; +0x87, 0x180007d37\ncmovz   ecx, eax                                                       ; +0x8a, 0x180007d3a\ntest    ecx, ecx                                                       ; +0x8d, 0x180007d3d\njz      short loc_180007D47                                            ; +0x8f, 0x180007d3f\ninc     edx                                                            ; +0x91, 0x180007d41\nshr     ecx, 1                                                         ; +0x93, 0x180007d43\njnz     short loc_180007D41                                            ; +0x95, 0x180007d45\nlea     eax, [r8+rdx*2]                                                ; +0x97, 0x180007d47\nmov     r8d, eax                                                       ; +0x9b, 0x180007d4b\ncdqe                                                                   ; +0x9e, 0x180007d4e\nsar     rax, 3                                                         ; +0xa0, 0x180007d50\nand     r8d, 7                                                         ; +0xa4, 0x180007d54\nadd     r9, rax                                                        ; +0xa8, 0x180007d58\nmov     [rbx+10h], r8d                                                 ; +0xab, 0x180007d5b\nmov     [rbx], r9                                                      ; +0xaf, 0x180007d5f\nsub     r10, 1                                                         ; +0xb2, 0x180007d62\njnz     short loc_180007D30                                            ; +0xb6, 0x180007d66\nmov     eax, [rbx+10h]                                                 ; +0xb8, 0x180007d68\nadd     eax, 2                                                         ; +0xbb, 0x180007d6b\nmovsxd  rdx, eax                                                       ; +0xbe, 0x180007d6e\nmov     r8d, eax                                                       ; +0xc1, 0x180007d71\nsar     rdx, 3                                                         ; +0xc4, 0x180007d74\nand     r8d, 7                                                         ; +0xc8, 0x180007d78\nadd     rdx, [rbx]                                                     ; +0xcc, 0x180007d7c\nmov     [rbx+10h], r8d                                                 ; +0xcf, 0x180007d7f\nmov     [rbx], rdx                                                     ; +0xd3, 0x180007d83\ncmp     edi, 1                                                         ; +0xd6, 0x180007d86\njle     short loc_180007DB6                                            ; +0xd9, 0x180007d89\nmov     ecx, [rbp+4]                                                   ; +0xdb, 0x180007d8b\nlea     r8d, [r8+rcx*4]                                                ; +0xde, 0x180007d8e\nmovsxd  rax, r8d                                                       ; +0xe2, 0x180007d92\nand     r8d, 7                                                         ; +0xe5, 0x180007d95\nsar     rax, 3                                                         ; +0xe9, 0x180007d99\nadd     rax, rdx                                                       ; +0xed, 0x180007d9d\nmov     [rbx], rax                                                     ; +0xf0, 0x180007da0\nlea     eax, [rcx+3]                                                   ; +0xf3, 0x180007da3\nadd     eax, esi                                                       ; +0xf6, 0x180007da6\nand     eax, 0FFFFFFFCh                                                ; +0xf8, 0x180007da8\nlea     eax, [rax+rdi*2]                                               ; +0xfb, 0x180007dab\nadd     eax, 3                                                         ; +0xfe, 0x180007dae\nand     eax, 0FFFFFFFCh                                                ; +0x101, 0x180007db1\njmp     short loc_180007DC6                                            ; +0x104, 0x180007db4\nlea     eax, ds:3[rdi*2]                                               ; +0x106, 0x180007db6\nadd     eax, esi                                                       ; +0x10d, 0x180007dbd\nand     eax, 0FFFFFFFCh                                                ; +0x10f, 0x180007dbf\ntest    edi, edi                                                       ; +0x112, 0x180007dc2\njle     short loc_180007DEF                                            ; +0x114, 0x180007dc4\nmov     r9d, edi                                                       ; +0x116, 0x180007dc6\nnop     dword ptr [rax+00000000h]                                      ; +0x119, 0x180007dc9\nlea     edx, [r8+18h]                                                  ; +0x120, 0x180007dd0\nmovsxd  rcx, edx                                                       ; +0x124, 0x180007dd4\nmov     r8d, edx                                                       ; +0x127, 0x180007dd7\nsar     rcx, 3                                                         ; +0x12a, 0x180007dda\nand     r8d, 7                                                         ; +0x12e, 0x180007dde\nadd     [rbx], rcx                                                     ; +0x132, 0x180007de2\nsub     r9, 1                                                          ; +0x135, 0x180007de5\njnz     short loc_180007DD0                                            ; +0x139, 0x180007de9\nmov     [rbx+10h], r8d                                                 ; +0x13b, 0x180007deb\nmov     rbx, [rsp+28h+arg_0]                                           ; +0x13f, 0x180007def\nmov     rbp, [rsp+28h+arg_8]                                           ; +0x144, 0x180007df4\nmov     rsi, [rsp+28h+arg_10]                                          ; +0x149, 0x180007df9\nadd     rsp, 20h                                                       ; +0x14e, 0x180007dfe\npop     rdi                                                            ; +0x152, 0x180007e02\nretn                                                                   ; +0x153, 0x180007e03", "xrefs": ["sub_180007A70 @ 0x180007bee", "<???> @ 0x1801f63b4"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}