{"type": "func", "start": 6442501744, "end": 6442502579, "name": "sub_18000C670", "pseudocode": "// \n// sub_18000C670 from 0x18000c670 to 0x18000c9b3 (835 bytes)\n// \n// 7 xrefs:\n// > sub_18000C110 @ 0x18000c439\n// > sub_18000C4A0 @ 0x18000c4c1\n// > cocos2d::extension::CCControlSwitch::setOn @ 0x18000cecd\n// > cocos2d::extension::CCControlSwitch::setOn @ 0x18000cf8e\n// > cocos2d::extension::CCControlSwitch::ccTouchBegan @ 0x18000d0bc\n// > cocos2d::extension::CCControlSwitch::ccTouchMoved @ 0x18000d18e\n// > @ 0x180049d5c\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\nvoid __fastcall sub_18000C670(__int64 a1)\n{\n __int64 *v2; // rcx\n __int64 v3; // rbx\n float v4; // xmm6_4\n float *v5; // rax\n __int64 v6; // rax\n __int64 *v7; // rcx\n __int64 v8; // rbx\n float v9; // xmm7_4\n float v10; // xmm6_4\n float v11; // xmm6_4\n __int64 v12; // rax\n __int64 v13; // rbx\n float v14; // xmm6_4\n float *v15; // rax\n __int64 v16; // rax\n __int64 *v17; // rdi\n __int64 v18; // rdi\n float v19; // xmm6_4\n float *v20; // rbx\n float *v21; // rax\n __int64 v22; // rax\n __int64 *v23; // rbx\n __int64 v24; // rbx\n float v25; // xmm7_4\n float v26; // xmm6_4\n float v27; // xmm6_4\n __int64 v28; // rax\n float v29; // xmm6_4\n float *v30; // rax\n cocos2d::CCRenderTexture *v31; // rbx\n __int64 v32; // rcx\n __int64 v33; // rcx\n __int64 v34; // rax\n __int64 v35; // rdi\n __int64 v36; // rax\n char v37; // [rsp+60h] [rbp+8h] BYREF\n char v38; // [rsp+68h] [rbp+10h] BYREF\n\n v2 = *(__int64 **)(a1 + 640);\n v3 = *v2;\n v4 = *(float *)((*(__int64 (__fastcall **)(__int64 *))(*v2 + 304))(v2) + 4);\n v5 = (float *)(*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 640) + 304LL))(*(_QWORD *)(a1 + 640));\n cocos2d::CCPoint::CCPoint((cocos2d::CCPoint *)&v37, (float)(*v5 * 0.5) + *(float *)(a1 + 608), v4 * 0.5);\n (*(void (__fastcall **)(_QWORD, __int64))(v3 + 184))(*(_QWORD *)(a1 + 640), v6);\n v7 = *(__int64 **)(a1 + 648);\n v8 = *v7;\n v9 = *(float *)((*(__int64 (__fastcall **)(__int64 *))(*v7 + 304))(v7) + 4);\n v10 = *(float *)(*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 648) + 304LL))(*(_QWORD *)(a1 + 648));\n v11 = (float)((float)(v10 * 0.5)\n + *(float *)(*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 640) + 304LL))(*(_QWORD *)(a1 + 640)))\n + *(float *)(a1 + 608);\n cocos2d::CCPoint::CCPoint((cocos2d::CCPoint *)&v37, v11, v9 * 0.5);\n (*(void (__fastcall **)(_QWORD, __int64))(v8 + 184))(*(_QWORD *)(a1 + 648), v12);\n v13 = **(_QWORD **)(a1 + 656);\n v14 = *(float *)((*(__int64 (__fastcall **)(_QWORD, char *))(**(_QWORD **)(a1 + 624) + 136LL))(\n *(_QWORD *)(a1 + 624),\n &v37)\n + 4);\n v15 = (float *)(*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 640) + 304LL))(*(_QWORD *)(a1 + 640));\n cocos2d::CCPoint::CCPoint((cocos2d::CCPoint *)&v38, *(float *)(a1 + 608) + *v15, v14 * 0.5);\n (*(void (__fastcall **)(_QWORD, __int64))(v13 + 184))(*(_QWORD *)(a1 + 656), v16);\n v17 = *(__int64 **)(a1 + 664);\n if ( v17 )\n {\n v18 = *v17;\n v19 = *(float *)((*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 640) + 304LL))(*(_QWORD *)(a1 + 640)) + 4);\n v20 = (float *)(*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 640) + 200LL))(*(_QWORD *)(a1 + 640));\n v21 = (float *)(*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 656) + 304LL))(*(_QWORD *)(a1 + 656));\n cocos2d::CCPoint::CCPoint((cocos2d::CCPoint *)&v37, *v20 - (float)(*v21 / 6.0), v19 * 0.5);\n (*(void (__fastcall **)(_QWORD, __int64))(v18 + 184))(*(_QWORD *)(a1 + 664), v22);\n }\n v23 = *(__int64 **)(a1 + 672);\n if ( v23 )\n {\n v24 = *v23;\n v25 = *(float *)((*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 648) + 304LL))(*(_QWORD *)(a1 + 648)) + 4);\n v26 = *(float *)(*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 656) + 304LL))(*(_QWORD *)(a1 + 656));\n v27 = (float)(v26 / 6.0)\n + *(float *)(*(__int64 (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 648) + 200LL))(*(_QWORD *)(a1 + 648));\n cocos2d::CCPoint::CCPoint((cocos2d::CCPoint *)&v37, v27, v25 * 0.5);\n (*(void (__fastcall **)(_QWORD, __int64))(v24 + 184))(*(_QWORD *)(a1 + 672), v28);\n }\n v29 = *(float *)((*(__int64 (__fastcall **)(_QWORD, char *))(**(_QWORD **)(a1 + 624) + 136LL))(\n *(_QWORD *)(a1 + 624),\n &v37)\n + 4);\n v30 = (float *)(*(__int64 (__fastcall **)(_QWORD, char *))(**(_QWORD **)(a1 + 624) + 136LL))(\n *(_QWORD *)(a1 + 624),\n &v38);\n v31 = cocos2d::CCRenderTexture::create((int)*v30, (int)v29);\n cocos2d::CCRenderTexture::begin(v31);\n (*(void (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 640) + 728LL))(*(_QWORD *)(a1 + 640));\n (*(void (__fastcall **)(_QWORD))(**(_QWORD **)(a1 + 648) + 728LL))(*(_QWORD *)(a1 + 648));\n v32 = *(_QWORD *)(a1 + 664);\n if ( v32 )\n (*(void (__fastcall **)(__int64))(*(_QWORD *)v32 + 728LL))(v32);\n v33 = *(_QWORD *)(a1 + 672);\n if ( v33 )\n (*(void (__fastcall **)(__int64))(*(_QWORD *)v33 + 728LL))(v33);\n cocos2d::CCRenderTexture::end(v31);\n v34 = (*(__int64 (__fastcall **)(cocos2d::CCRenderTexture *))(*(_QWORD *)v31 + 872LL))(v31);\n v35 = *(_QWORD *)(a1 + 344);\n v36 = (*(__int64 (__fastcall **)(__int64))(*(_QWORD *)(v34 + 344) + 16LL))(v34 + 344);\n (*(void (__fastcall **)(__int64, __int64))(v35 + 24))(a1 + 344, v36);\n cocos2d::CCSprite::setFlipY((cocos2d::CCSprite *)a1, 1);\n}", "assembly": "; \n; sub_18000C670 from 0x18000c670 to 0x18000c9b3 (835 bytes)\n; \n; 7 xrefs:\n; > sub_18000C110 @ 0x18000c439\n; > sub_18000C4A0 @ 0x18000c4c1\n; > cocos2d::extension::CCControlSwitch::setOn @ 0x18000cecd\n; > cocos2d::extension::CCControlSwitch::setOn @ 0x18000cf8e\n; > cocos2d::extension::CCControlSwitch::ccTouchBegan @ 0x18000d0bc\n; > cocos2d::extension::CCControlSwitch::ccTouchMoved @ 0x18000d18e\n; > @ 0x180049d5c\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmov [rsp+arg_10], rbx ; +0x0, 0x18000c670\nmov [rsp+arg_18], rsi ; +0x5, 0x18000c675\npush rdi ; +0xa, 0x18000c67a\nsub rsp, 50h ; +0xb, 0x18000c67b\nmovaps [rsp+58h+var_18], xmm6 ; +0xf, 0x18000c67f\nmov rsi, rcx ; +0x14, 0x18000c684\nmov rcx, [rcx+280h] ; +0x17, 0x18000c687\nmovaps [rsp+58h+var_28], xmm7 ; +0x1e, 0x18000c68e\nmovaps [rsp+58h+var_38], xmm8 ; +0x23, 0x18000c693\nmov rbx, [rcx] ; +0x29, 0x18000c699\ncall qword ptr [rbx+130h] ; +0x2c, 0x18000c69c\nmov rcx, [rsi+280h] ; +0x32, 0x18000c6a2\nmovss xmm6, dword ptr [rax+4] ; +0x39, 0x18000c6a9\nmov rax, [rcx] ; +0x3e, 0x18000c6ae\ncall qword ptr [rax+130h] ; +0x41, 0x18000c6b1\nmovss xmm8, cs:dword_180029510 ; +0x47, 0x18000c6b7\nlea rcx, [rsp+58h+arg_0] ; +0x50, 0x18000c6c0\nmulss xmm6, xmm8 ; +0x55, 0x18000c6c5\nmovss xmm1, dword ptr [rax] ; +0x5a, 0x18000c6ca\nmulss xmm1, xmm8 ; +0x5e, 0x18000c6ce\nmovaps xmm2, xmm6 ; +0x63, 0x18000c6d3\naddss xmm1, dword ptr [rsi+260h] ; +0x66, 0x18000c6d6\ncall cs:??0CCPoint@cocos2d@@QEAA@MM@Z; cocos2d::CCPoint::CCPoint(float,float) ; +0x6e, 0x18000c6de\nmov rcx, [rsi+280h] ; +0x74, 0x18000c6e4\nmov rdx, rax ; +0x7b, 0x18000c6eb\ncall qword ptr [rbx+0B8h] ; +0x7e, 0x18000c6ee\nmov rcx, [rsi+288h] ; +0x84, 0x18000c6f4\nmov rbx, [rcx] ; +0x8b, 0x18000c6fb\ncall qword ptr [rbx+130h] ; +0x8e, 0x18000c6fe\nmov rcx, [rsi+288h] ; +0x94, 0x18000c704\nmovss xmm7, dword ptr [rax+4] ; +0x9b, 0x18000c70b\nmov rax, [rcx] ; +0xa0, 0x18000c710\ncall qword ptr [rax+130h] ; +0xa3, 0x18000c713\nmov rcx, [rsi+280h] ; +0xa9, 0x18000c719\nmovss xmm6, dword ptr [rax] ; +0xb0, 0x18000c720\nmov rax, [rcx] ; +0xb4, 0x18000c724\ncall qword ptr [rax+130h] ; +0xb7, 0x18000c727\nmulss xmm6, xmm8 ; +0xbd, 0x18000c72d\nlea rcx, [rsp+58h+arg_0] ; +0xc2, 0x18000c732\nmulss xmm7, xmm8 ; +0xc7, 0x18000c737\naddss xmm6, dword ptr [rax] ; +0xcc, 0x18000c73c\nmovaps xmm2, xmm7 ; +0xd0, 0x18000c740\naddss xmm6, dword ptr [rsi+260h] ; +0xd3, 0x18000c743\nmovaps xmm1, xmm6 ; +0xdb, 0x18000c74b\ncall cs:??0CCPoint@cocos2d@@QEAA@MM@Z; cocos2d::CCPoint::CCPoint(float,float) ; +0xde, 0x18000c74e\nmov rcx, [rsi+288h] ; +0xe4, 0x18000c754\nmov rdx, rax ; +0xeb, 0x18000c75b\ncall qword ptr [rbx+0B8h] ; +0xee, 0x18000c75e\nmov rax, [rsi+290h] ; +0xf4, 0x18000c764\nlea rdx, [rsp+58h+arg_0] ; +0xfb, 0x18000c76b\nmov rcx, [rsi+270h] ; +0x100, 0x18000c770\nmov rbx, [rax] ; +0x107, 0x18000c777\nmov rax, [rcx] ; +0x10a, 0x18000c77a\ncall qword ptr [rax+88h] ; +0x10d, 0x18000c77d\nmov rcx, [rsi+280h] ; +0x113, 0x18000c783\nmovss xmm6, dword ptr [rax+4] ; +0x11a, 0x18000c78a\nmov rax, [rcx] ; +0x11f, 0x18000c78f\ncall qword ptr [rax+130h] ; +0x122, 0x18000c792\nmovss xmm1, dword ptr [rsi+260h] ; +0x128, 0x18000c798\nlea rcx, [rsp+58h+arg_8] ; +0x130, 0x18000c7a0\nmulss xmm6, xmm8 ; +0x135, 0x18000c7a5\naddss xmm1, dword ptr [rax] ; +0x13a, 0x18000c7aa\nmovaps xmm2, xmm6 ; +0x13e, 0x18000c7ae\ncall cs:??0CCPoint@cocos2d@@QEAA@MM@Z; cocos2d::CCPoint::CCPoint(float,float) ; +0x141, 0x18000c7b1\nmov rcx, [rsi+290h] ; +0x147, 0x18000c7b7\nmov rdx, rax ; +0x14e, 0x18000c7be\ncall qword ptr [rbx+0B8h] ; +0x151, 0x18000c7c1\nmov rdi, [rsi+298h] ; +0x157, 0x18000c7c7\ntest rdi, rdi ; +0x15e, 0x18000c7ce\njz short loc_18000C845 ; +0x161, 0x18000c7d1\nmov rcx, [rsi+280h] ; +0x163, 0x18000c7d3\nmov rdi, [rdi] ; +0x16a, 0x18000c7da\nmov rax, [rcx] ; +0x16d, 0x18000c7dd\ncall qword ptr [rax+130h] ; +0x170, 0x18000c7e0\nmov rcx, [rsi+280h] ; +0x176, 0x18000c7e6\nmovss xmm6, dword ptr [rax+4] ; +0x17d, 0x18000c7ed\nmov rax, [rcx] ; +0x182, 0x18000c7f2\ncall qword ptr [rax+0C8h] ; +0x185, 0x18000c7f5\nmov rcx, [rsi+290h] ; +0x18b, 0x18000c7fb\nmov rbx, rax ; +0x192, 0x18000c802\nmov rdx, [rcx] ; +0x195, 0x18000c805\ncall qword ptr [rdx+130h] ; +0x198, 0x18000c808\nmovss xmm1, dword ptr [rbx] ; +0x19e, 0x18000c80e\nlea rcx, [rsp+58h+arg_0] ; +0x1a2, 0x18000c812\nmulss xmm6, xmm8 ; +0x1a7, 0x18000c817\nmovss xmm0, dword ptr [rax] ; +0x1ac, 0x18000c81c\ndivss xmm0, cs:dword_180029584 ; +0x1b0, 0x18000c820\nmovaps xmm2, xmm6 ; +0x1b8, 0x18000c828\nsubss xmm1, xmm0 ; +0x1bb, 0x18000c82b\ncall cs:??0CCPoint@cocos2d@@QEAA@MM@Z; cocos2d::CCPoint::CCPoint(float,float) ; +0x1bf, 0x18000c82f\nmov rcx, [rsi+298h] ; +0x1c5, 0x18000c835\nmov rdx, rax ; +0x1cc, 0x18000c83c\ncall qword ptr [rdi+0B8h] ; +0x1cf, 0x18000c83f\nmov rbx, [rsi+2A0h] ; +0x1d5, 0x18000c845\ntest rbx, rbx ; +0x1dc, 0x18000c84c\njz short loc_18000C8BF ; +0x1df, 0x18000c84f\nmov rcx, [rsi+288h] ; +0x1e1, 0x18000c851\nmov rbx, [rbx] ; +0x1e8, 0x18000c858\nmov rax, [rcx] ; +0x1eb, 0x18000c85b\ncall qword ptr [rax+130h] ; +0x1ee, 0x18000c85e\nmov rcx, [rsi+290h] ; +0x1f4, 0x18000c864\nmovss xmm7, dword ptr [rax+4] ; +0x1fb, 0x18000c86b\nmov rax, [rcx] ; +0x200, 0x18000c870\ncall qword ptr [rax+130h] ; +0x203, 0x18000c873\nmov rcx, [rsi+288h] ; +0x209, 0x18000c879\nmovss xmm6, dword ptr [rax] ; +0x210, 0x18000c880\nmov rax, [rcx] ; +0x214, 0x18000c884\ncall qword ptr [rax+0C8h] ; +0x217, 0x18000c887\ndivss xmm6, cs:dword_180029584 ; +0x21d, 0x18000c88d\nlea rcx, [rsp+58h+arg_0] ; +0x225, 0x18000c895\nmulss xmm7, xmm8 ; +0x22a, 0x18000c89a\naddss xmm6, dword ptr [rax] ; +0x22f, 0x18000c89f\nmovaps xmm2, xmm7 ; +0x233, 0x18000c8a3\nmovaps xmm1, xmm6 ; +0x236, 0x18000c8a6\ncall cs:??0CCPoint@cocos2d@@QEAA@MM@Z; cocos2d::CCPoint::CCPoint(float,float) ; +0x239, 0x18000c8a9\nmov rcx, [rsi+2A0h] ; +0x23f, 0x18000c8af\nmov rdx, rax ; +0x246, 0x18000c8b6\ncall qword ptr [rbx+0B8h] ; +0x249, 0x18000c8b9\nmov rcx, [rsi+270h] ; +0x24f, 0x18000c8bf\nlea rdx, [rsp+58h+arg_0] ; +0x256, 0x18000c8c6\nmov rax, [rcx] ; +0x25b, 0x18000c8cb\ncall qword ptr [rax+88h] ; +0x25e, 0x18000c8ce\nmov rcx, [rsi+270h] ; +0x264, 0x18000c8d4\nlea rdx, [rsp+58h+arg_8] ; +0x26b, 0x18000c8db\nmovss xmm6, dword ptr [rax+4] ; +0x270, 0x18000c8e0\nmov rax, [rcx] ; +0x275, 0x18000c8e5\ncall qword ptr [rax+88h] ; +0x278, 0x18000c8e8\ncvttss2si edx, xmm6 ; +0x27e, 0x18000c8ee\ncvttss2si ecx, dword ptr [rax] ; +0x282, 0x18000c8f2\ncall cs:?create@CCRenderTexture@cocos2d@@SAPEAV12@HH@Z; cocos2d::CCRenderTexture::create(int,int) ; +0x286, 0x18000c8f6\nmov rcx, rax ; +0x28c, 0x18000c8fc\nmov rbx, rax ; +0x28f, 0x18000c8ff\ncall cs:?begin@CCRenderTexture@cocos2d@@QEAAXXZ; cocos2d::CCRenderTexture::begin(void) ; +0x292, 0x18000c902\nmov rcx, [rsi+280h] ; +0x298, 0x18000c908\nmov rdx, [rcx] ; +0x29f, 0x18000c90f\ncall qword ptr [rdx+2D8h] ; +0x2a2, 0x18000c912\nmov rcx, [rsi+288h] ; +0x2a8, 0x18000c918\nmov rdx, [rcx] ; +0x2af, 0x18000c91f\ncall qword ptr [rdx+2D8h] ; +0x2b2, 0x18000c922\nmov rcx, [rsi+298h] ; +0x2b8, 0x18000c928\ntest rcx, rcx ; +0x2bf, 0x18000c92f\njz short loc_18000C93D ; +0x2c2, 0x18000c932\nmov rax, [rcx] ; +0x2c4, 0x18000c934\ncall qword ptr [rax+2D8h] ; +0x2c7, 0x18000c937\nmov rcx, [rsi+2A0h] ; +0x2cd, 0x18000c93d\ntest rcx, rcx ; +0x2d4, 0x18000c944\njz short loc_18000C952 ; +0x2d7, 0x18000c947\nmov rax, [rcx] ; +0x2d9, 0x18000c949\ncall qword ptr [rax+2D8h] ; +0x2dc, 0x18000c94c\nmov rcx, rbx ; +0x2e2, 0x18000c952\ncall cs:?end@CCRenderTexture@cocos2d@@QEAAXXZ; cocos2d::CCRenderTexture::end(void) ; +0x2e5, 0x18000c955\nmov rax, [rbx] ; +0x2eb, 0x18000c95b\nmov rcx, rbx ; +0x2ee, 0x18000c95e\ncall qword ptr [rax+368h] ; +0x2f1, 0x18000c961\nmov rdi, [rsi+158h] ; +0x2f7, 0x18000c967\nlea rcx, [rax+158h] ; +0x2fe, 0x18000c96e\nmov rax, [rcx] ; +0x305, 0x18000c975\ncall qword ptr [rax+10h] ; +0x308, 0x18000c978\nmov rdx, rax ; +0x30b, 0x18000c97b\nlea rcx, [rsi+158h] ; +0x30e, 0x18000c97e\ncall qword ptr [rdi+18h] ; +0x315, 0x18000c985\nmov dl, 1 ; +0x318, 0x18000c988\nmov rcx, rsi ; +0x31a, 0x18000c98a\nmov rbx, [rsp+58h+arg_10] ; +0x31d, 0x18000c98d\nmov rsi, [rsp+58h+arg_18] ; +0x322, 0x18000c992\nmovaps xmm6, [rsp+58h+var_18] ; +0x327, 0x18000c997\nmovaps xmm7, [rsp+58h+var_28] ; +0x32c, 0x18000c99c\nmovaps xmm8, [rsp+58h+var_38] ; +0x331, 0x18000c9a1\nadd rsp, 50h ; +0x337, 0x18000c9a7\npop rdi ; +0x33b, 0x18000c9ab\njmp cs:?setFlipY@CCSprite@cocos2d@@QEAAX_N@Z; cocos2d::CCSprite::setFlipY(bool) ; +0x33c, 0x18000c9ac", "xrefs": ["sub_18000C110 @ 0x18000c439", "sub_18000C4A0 @ 0x18000c4c1", "cocos2d::extension::CCControlSwitch::setOn @ 0x18000cecd", "cocos2d::extension::CCControlSwitch::setOn @ 0x18000cf8e", "cocos2d::extension::CCControlSwitch::ccTouchBegan @ 0x18000d0bc", "cocos2d::extension::CCControlSwitch::ccTouchMoved @ 0x18000d18e", " @ 0x180049d5c"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}