; 
; cocos2d::extension::CCControlButton::getTitleForState from 0x1800063f0 to 0x1800064cb (219 bytes)
; 
; 5 xrefs:
; > <???> @ 0x180024198
; > <???> @ 0x180027fe0
; > <???> @ 0x18002fdf8
; > <???> @ 0x180049624
; > <???> @ 0x180049630
; 
; This function is hookable on this platform!
; 
; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA
; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings
; 

push    rbx                                                            ; +0x0, 0x1800063f0
sub     rsp, 50h                                                       ; +0x2, 0x1800063f2
mov     rax, cs:__security_cookie                                      ; +0x6, 0x1800063f6
xor     rax, rsp                                                       ; +0xd, 0x1800063fd
mov     [rsp+58h+var_18], rax                                          ; +0x10, 0x180006400
mov     rbx, rcx                                                       ; +0x15, 0x180006405
mov     rcx, [rcx+210h]                                                ; +0x18, 0x180006408
test    rcx, rcx                                                       ; +0x1f, 0x18000640f
jz      short loc_180006448                                            ; +0x22, 0x180006412
mov     edx, edx                                                       ; +0x24, 0x180006414
call    cs:?objectForKey@CCDictionary@cocos2d@@QEAAPEAVCCObject@2@_J@Z; cocos2d::CCDictionary::objectForKey(__int64) ; +0x26, 0x180006416
test    rax, rax                                                       ; +0x2c, 0x18000641c
jnz     loc_1800064B8                                                  ; +0x2f, 0x18000641f
lea     edx, [rax+1]                                                   ; +0x35, 0x180006425
mov     rcx, [rbx+210h]                                                ; +0x38, 0x180006428
call    cs:?objectForKey@CCDictionary@cocos2d@@QEAAPEAVCCObject@2@_J@Z; cocos2d::CCDictionary::objectForKey(__int64) ; +0x3f, 0x18000642f
mov     rcx, [rsp+58h+var_18]                                          ; +0x45, 0x180006435
xor     rcx, rsp; StackCookie                                          ; +0x4a, 0x18000643a
call    __security_check_cookie                                        ; +0x4d, 0x18000643d
add     rsp, 50h                                                       ; +0x52, 0x180006442
pop     rbx                                                            ; +0x56, 0x180006446
retn                                                                   ; +0x57, 0x180006447
xorps   xmm0, xmm0                                                     ; +0x58, 0x180006448
movups  xmmword ptr [rsp+58h+Block], xmm0                              ; +0x5b, 0x18000644b
mov     [rsp+58h+var_28], 0                                            ; +0x60, 0x180006450
mov     [rsp+58h+var_20], 0Fh                                          ; +0x69, 0x180006459
mov     byte ptr [rsp+58h+Block], 0                                    ; +0x72, 0x180006462
lea     rcx, [rsp+58h+Block]                                           ; +0x77, 0x180006467
call    cs:?create@CCString@cocos2d@@SAPEAV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z; cocos2d::CCString::create(std::string const &) ; +0x7c, 0x18000646c
mov     rbx, rax                                                       ; +0x82, 0x180006472
mov     rdx, [rsp+58h+var_20]                                          ; +0x85, 0x180006475
cmp     rdx, 0Fh                                                       ; +0x8a, 0x18000647a
jbe     short loc_1800064B5                                            ; +0x8e, 0x18000647e
inc     rdx                                                            ; +0x90, 0x180006480
mov     rcx, [rsp+58h+Block]; Block                                    ; +0x93, 0x180006483
mov     rax, rcx                                                       ; +0x98, 0x180006488
cmp     rdx, 1000h                                                     ; +0x9b, 0x18000648b
jb      short loc_1800064B0                                            ; +0xa2, 0x180006492
add     rdx, 27h ; '''                                                 ; +0xa4, 0x180006494
mov     rcx, [rcx-8]                                                   ; +0xa8, 0x180006498
sub     rax, rcx                                                       ; +0xac, 0x18000649c
add     rax, 0FFFFFFFFFFFFFFF8h                                        ; +0xaf, 0x18000649f
cmp     rax, 1Fh                                                       ; +0xb3, 0x1800064a3
jbe     short loc_1800064B0                                            ; +0xb7, 0x1800064a7
call    cs:_invalid_parameter_noinfo_noreturn                          ; +0xb9, 0x1800064a9
align 10h                                                              ; +0xbf, 0x1800064af
call    j_j_free                                                       ; +0xc0, 0x1800064b0
mov     rax, rbx                                                       ; +0xc5, 0x1800064b5
mov     rcx, [rsp+58h+var_18]                                          ; +0xc8, 0x1800064b8
xor     rcx, rsp; StackCookie                                          ; +0xcd, 0x1800064bd
call    __security_check_cookie                                        ; +0xd0, 0x1800064c0
add     rsp, 50h                                                       ; +0xd5, 0x1800064c5
pop     rbx                                                            ; +0xd9, 0x1800064c9
retn                                                                   ; +0xda, 0x1800064ca