; 
; cocos2d::extension::CCControlButton::getTitleColorForState from 0x180006540 to 0x1800065af (111 bytes)
; 
; 4 xrefs:
; > <???> @ 0x1800241a8
; > <???> @ 0x180027ff0
; > <???> @ 0x18002fdf8
; > <???> @ 0x180049648
; 
; This function is hookable on this platform!
; 
; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA
; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings
; 

mov     [rsp+arg_0], rbx                                               ; +0x0, 0x180006540
push    rdi                                                            ; +0x5, 0x180006545
sub     rsp, 20h                                                       ; +0x6, 0x180006546
movzx   eax, cs:word_18002349C                                         ; +0xa, 0x18000654a
mov     rdi, rcx                                                       ; +0x11, 0x180006551
mov     rcx, [rcx+218h]                                                ; +0x14, 0x180006554
mov     rbx, rdx                                                       ; +0x1b, 0x18000655b
mov     [rdx], ax                                                      ; +0x1e, 0x18000655e
movzx   eax, cs:byte_18002349E                                         ; +0x21, 0x180006561
mov     [rdx+2], al                                                    ; +0x28, 0x180006568
test    rcx, rcx                                                       ; +0x2b, 0x18000656b
jz      short loc_1800065A1                                            ; +0x2e, 0x18000656e
mov     edx, r8d                                                       ; +0x30, 0x180006570
call    cs:?objectForKey@CCDictionary@cocos2d@@QEAAPEAVCCObject@2@_J@Z; cocos2d::CCDictionary::objectForKey(__int64) ; +0x33, 0x180006573
test    rax, rax                                                       ; +0x39, 0x180006579
jnz     short loc_180006593                                            ; +0x3c, 0x18000657c
mov     rcx, [rdi+218h]                                                ; +0x3e, 0x18000657e
lea     edx, [rax+1]                                                   ; +0x45, 0x180006585
call    cs:?objectForKey@CCDictionary@cocos2d@@QEAAPEAVCCObject@2@_J@Z; cocos2d::CCDictionary::objectForKey(__int64) ; +0x48, 0x180006588
test    rax, rax                                                       ; +0x4e, 0x18000658e
jz      short loc_1800065A1                                            ; +0x51, 0x180006591
movzx   ecx, word ptr [rax+38h]                                        ; +0x53, 0x180006593
movzx   eax, byte ptr [rax+3Ah]                                        ; +0x57, 0x180006597
mov     [rbx], cx                                                      ; +0x5b, 0x18000659b
mov     [rbx+2], al                                                    ; +0x5e, 0x18000659e
mov     rax, rbx                                                       ; +0x61, 0x1800065a1
mov     rbx, [rsp+28h+arg_0]                                           ; +0x64, 0x1800065a4
add     rsp, 20h                                                       ; +0x69, 0x1800065a9
pop     rdi                                                            ; +0x6d, 0x1800065ad
retn                                                                   ; +0x6e, 0x1800065ae