{"type": "func", "start": 6442476528, "end": 6442476747, "name": "cocos2d::extension::CCControlButton::getTitleForState", "pseudocode": "// \n// cocos2d::extension::CCControlButton::getTitleForState from 0x1800063f0 to 0x1800064cb (219 bytes)\n// \n// 5 xrefs:\n// > <???> @ 0x180024198\n// > <???> @ 0x180027fe0\n// > <???> @ 0x18002fdf8\n// > <???> @ 0x180049624\n// > <???> @ 0x180049630\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n// Hidden C++ exception states: #wind=1\nstruct cocos2d::CCString *__fastcall cocos2d::extension::CCControlButton::getTitleForState(\n        cocos2d::extension::CCControlButton *this,\n        unsigned int a2)\n{\n  cocos2d::CCDictionary *v3; // rcx\n  struct cocos2d::CCString *result; // rax\n  __int64 v5; // rbx\n  void *v6; // rcx\n  void *Block[2]; // [rsp+20h] [rbp-38h] BYREF\n  __int64 v8; // [rsp+30h] [rbp-28h]\n  unsigned __int64 v9; // [rsp+38h] [rbp-20h]\n\n  v3 = *((cocos2d::CCDictionary **)this + 66);\n  if ( v3 )\n  {\n    result = cocos2d::CCDictionary::objectForKey(v3, a2);\n    if ( !result )\n      return cocos2d::CCDictionary::objectForKey(*((cocos2d::CCDictionary **)this + 66), 1);\n  }\n  else\n  {\n    *(_OWORD *)Block = 0;\n    v8 = 0;\n    v9 = 15;\n    LOBYTE(Block[0]) = 0;\n    v5 = cocos2d::CCString::create(Block);\n    if ( v9 > 0xF )\n    {\n      v6 = Block[0];\n      if ( v9 + 1 >= 0x1000 )\n      {\n        v6 = *((void **)Block[0] - 1);\n        if ( (unsigned __int64)((char *)Block[0] - (char *)v6 - 8) > 0x1F )\n          invalid_parameter_noinfo_noreturn();\n      }\n      j_j_free(v6);\n    }\n    return (struct cocos2d::CCString *)v5;\n  }\n  return result;\n}", "assembly": "; \n; cocos2d::extension::CCControlButton::getTitleForState from 0x1800063f0 to 0x1800064cb (219 bytes)\n; \n; 5 xrefs:\n; > <???> @ 0x180024198\n; > <???> @ 0x180027fe0\n; > <???> @ 0x18002fdf8\n; > <???> @ 0x180049624\n; > <???> @ 0x180049630\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\npush    rbx                                                            ; +0x0, 0x1800063f0\nsub     rsp, 50h                                                       ; +0x2, 0x1800063f2\nmov     rax, cs:__security_cookie                                      ; +0x6, 0x1800063f6\nxor     rax, rsp                                                       ; +0xd, 0x1800063fd\nmov     [rsp+58h+var_18], rax                                          ; +0x10, 0x180006400\nmov     rbx, rcx                                                       ; +0x15, 0x180006405\nmov     rcx, [rcx+210h]                                                ; +0x18, 0x180006408\ntest    rcx, rcx                                                       ; +0x1f, 0x18000640f\njz      short loc_180006448                                            ; +0x22, 0x180006412\nmov     edx, edx                                                       ; +0x24, 0x180006414\ncall    cs:?objectForKey@CCDictionary@cocos2d@@QEAAPEAVCCObject@2@_J@Z; cocos2d::CCDictionary::objectForKey(__int64) ; +0x26, 0x180006416\ntest    rax, rax                                                       ; +0x2c, 0x18000641c\njnz     loc_1800064B8                                                  ; +0x2f, 0x18000641f\nlea     edx, [rax+1]                                                   ; +0x35, 0x180006425\nmov     rcx, [rbx+210h]                                                ; +0x38, 0x180006428\ncall    cs:?objectForKey@CCDictionary@cocos2d@@QEAAPEAVCCObject@2@_J@Z; cocos2d::CCDictionary::objectForKey(__int64) ; +0x3f, 0x18000642f\nmov     rcx, [rsp+58h+var_18]                                          ; +0x45, 0x180006435\nxor     rcx, rsp; StackCookie                                          ; +0x4a, 0x18000643a\ncall    __security_check_cookie                                        ; +0x4d, 0x18000643d\nadd     rsp, 50h                                                       ; +0x52, 0x180006442\npop     rbx                                                            ; +0x56, 0x180006446\nretn                                                                   ; +0x57, 0x180006447\nxorps   xmm0, xmm0                                                     ; +0x58, 0x180006448\nmovups  xmmword ptr [rsp+58h+Block], xmm0                              ; +0x5b, 0x18000644b\nmov     [rsp+58h+var_28], 0                                            ; +0x60, 0x180006450\nmov     [rsp+58h+var_20], 0Fh                                          ; +0x69, 0x180006459\nmov     byte ptr [rsp+58h+Block], 0                                    ; +0x72, 0x180006462\nlea     rcx, [rsp+58h+Block]                                           ; +0x77, 0x180006467\ncall    cs:?create@CCString@cocos2d@@SAPEAV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z; cocos2d::CCString::create(std::string const &) ; +0x7c, 0x18000646c\nmov     rbx, rax                                                       ; +0x82, 0x180006472\nmov     rdx, [rsp+58h+var_20]                                          ; +0x85, 0x180006475\ncmp     rdx, 0Fh                                                       ; +0x8a, 0x18000647a\njbe     short loc_1800064B5                                            ; +0x8e, 0x18000647e\ninc     rdx                                                            ; +0x90, 0x180006480\nmov     rcx, [rsp+58h+Block]; Block                                    ; +0x93, 0x180006483\nmov     rax, rcx                                                       ; +0x98, 0x180006488\ncmp     rdx, 1000h                                                     ; +0x9b, 0x18000648b\njb      short loc_1800064B0                                            ; +0xa2, 0x180006492\nadd     rdx, 27h ; '''                                                 ; +0xa4, 0x180006494\nmov     rcx, [rcx-8]                                                   ; +0xa8, 0x180006498\nsub     rax, rcx                                                       ; +0xac, 0x18000649c\nadd     rax, 0FFFFFFFFFFFFFFF8h                                        ; +0xaf, 0x18000649f\ncmp     rax, 1Fh                                                       ; +0xb3, 0x1800064a3\njbe     short loc_1800064B0                                            ; +0xb7, 0x1800064a7\ncall    cs:_invalid_parameter_noinfo_noreturn                          ; +0xb9, 0x1800064a9\nalign 10h                                                              ; +0xbf, 0x1800064af\ncall    j_j_free                                                       ; +0xc0, 0x1800064b0\nmov     rax, rbx                                                       ; +0xc5, 0x1800064b5\nmov     rcx, [rsp+58h+var_18]                                          ; +0xc8, 0x1800064b8\nxor     rcx, rsp; StackCookie                                          ; +0xcd, 0x1800064bd\ncall    __security_check_cookie                                        ; +0xd0, 0x1800064c0\nadd     rsp, 50h                                                       ; +0xd5, 0x1800064c5\npop     rbx                                                            ; +0xd9, 0x1800064c9\nretn                                                                   ; +0xda, 0x1800064ca", "xrefs": ["<???> @ 0x180024198", "<???> @ 0x180027fe0", "<???> @ 0x18002fdf8", "<???> @ 0x180049624", "<???> @ 0x180049630"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}