Function at 0x100800f0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x7c
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x1008a9c0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov eax, dword [0x1012d364]
vmovsd xmm0, qword [eax + 0x10]
vmovups xmmword [ebp - 0x88], xmm0
mov ecx, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov ecx, dword [edi + 0xa30]
mov dword [ebp - 0x38], ecx
movzx ecx, byte [edi + 0x68]
mov byte [ebp - 0x40], cl
mov ecx, dword [edi + 0x2670]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [0x10132c48]
test cl, 1
je 0x100805e4
mov esi, dword [0x10132c44]
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x20], esi
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + edi]
mov dword [ebp - 0x2c], ecx
mov ebx, edx
mov esi, edx
and ebx, 4
mov ecx, ebx
shr ecx, 2
mov edx, dword [edi + 0xa28]
mov dword [ebp - 0x48], edx
mov edx, dword [0x1012d320]
mov byte [edx + 0x1b3], cl
vmovss xmm0, dword [ebp + 0x10]
vmovss dword [eax + 0x10], xmm0
vmovss xmm0, dword [eax + 0x20]
vmovss dword [eax + 0x14], xmm0
mov eax, esi
test al, 8
mov dword [ebp - 0x24], ebx
je 0x100801db
mov eax, dword [0x10132c48]
test al, 1
je 0x1008064d
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 4]
or dword [eax + edi], 8
and byte [edi + 0xa28], 0xf5
mov dword [edi + 0xa30], 0
test ebx, ebx
je 0x100801ed
mov dword [edi + 0x2670], 0
or byte [edi + 0x68], 2
mov eax, dword [ebp + 0x14]
test al, 2
je 0x100801fe
mov dword [edi + 0xa68], 0
test al, 1
je 0x10080231
mov dword [edi + 0x2690], 0
mov dword [edi + 0x2928], 0xff7fffff
mov dword [edi + 0x26ac], 0
mov dword [edi + 0x26b0], 0
mov dword [ebp - 0x10], 0xffffffff
mov esi, dword [0x1012d320]
mov ecx, dword [esi + 0xdc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x10], 0xffffffff
call eax
xor ebx, ebx
test eax, eax
setne bl
mov ecx, dword [esi + 0xdc]
mov eax, dword [ecx]
push 0
call dword [eax + 0x40]
mov eax, dword [0x1012d320]
mov byte [eax + 0x1b2], 1
mov eax, dword [ebp + 0x14]
and eax, 0x10
shl eax, 5
or eax, 0xffd00
lea ecx, [edi + 4]
mov edx, dword [edi + 4]
sub esp, 0x10
vmovss xmm0, dword [ebp + 0x10]
vmovss dword [esp + 0xc], xmm0
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0x80
call dword [edx + 0x34]
mov byte [ebp - 0x34], al
mov eax, dword [0x1012d320]
mov byte [eax + 0x1b2], 0
mov ecx, dword [esi + 0xdc]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x40]
mov eax, dword [ebp + 0x14]
test al, 8
mov ecx, dword [ebp - 0x24]
je 0x100802f8
mov eax, dword [0x10132c48]
test al, 1
je 0x100806a8
mov edi, dword [0x10132c44]
mov eax, dword [edi + 4]
mov edi, dword [ebp + 8]
mov edx, dword [ebp - 0x2c]
mov dword [eax + edi], edx
mov eax, dword [ebp - 0x48]
mov dword [edi + 0xa28], eax
mov eax, dword [ebp - 0x38]
mov dword [edi + 0xa30], eax
test ecx, ecx
jne 0x10080319
mov eax, dword [0x1012d364]
vmovups xmm0, xmmword [ebp - 0x88]
vmovlps qword [eax + 0x10], xmm0
mov ecx, dword [ebp - 0x28]
mov dword [eax + 4], ecx
jmp 0x10080add
mov eax, dword [ebp - 0x3c]
mov dword [edi + 0x2670], eax
movzx eax, byte [ebp - 0x40]
mov byte [edi + 0x68], al
mov eax, dword [0x1012d364]
vmovups xmm0, xmmword [ebp - 0x88]
vmovlps qword [eax + 0x10], xmm0
mov ecx, dword [ebp - 0x28]
mov dword [eax + 4], ecx
mov eax, dword [edi + 0x2950]
test eax, eax
je 0x10080add
mov edx, dword [eax]
test edx, edx
je 0x10080add
mov eax, dword [0x10132ba0]
test al, 1
je 0x100807e6
mov edi, dword [0x10132b9c]
add edx, dword [edx + 0xb0]
je 0x10080add
mov eax, dword [edi + 4]
mov ecx, dword [ebp + 8]
mov eax, dword [eax + ecx]
lea ecx, [eax + eax*2]
mov eax, dword [edx + ecx*4 + 4]
test eax, eax
jle 0x10080add
lea ecx, [edx + ecx*4]
xor ebx, ebx
mov esi, 0x24
vxorps xmm1, xmm1, xmm1
mov dword [ebp - 0x44], ecx
jmp 0x100803bc
inc ebx
add esi, 0x44
cmp ebx, eax
jge 0x10080add
mov edi, dword [ecx + 8]
add edi, ecx
je 0x100803b0
vmovss xmm0, dword [edi + esi + 0xc]
vucomiss xmm0, xmm1
jae 0x100803b0
vxorps xmm0, xmm0, xmm0
vmovups ymmword [ebp - 0x68], ymm0
vmovups ymmword [ebp - 0x78], ymm0
mov eax, dword [0x1012d320]
mov eax, dword [eax + 0xd4]
lea ecx, [edi + esi]
mov dword [ebp - 0x10], 0xffffffff
lea edx, [ebp - 0x78]
vzeroupper
call eax
mov eax, dword [edi + esi - 0x24]
cmp eax, 0x80
jae 0x10080648
lea eax, [eax + eax*2]
shl eax, 4
vmovss xmm0, dword [ebp - 0x78]
vmovss xmm5, dword [ebp - 0x68]
mov ecx, dword [ebp + 0xc]
vmovss xmm2, dword [ecx + eax + 4]
vmovss xmm4, dword [ecx + eax + 8]
vmulss xmm1, xmm2, xmm5
vfmadd231ss xmm1, xmm0, dword [ecx + eax]
vmovaps xmm6, xmm0
vmovss xmm0, dword [ebp - 0x58]
vmovss dword [ebp - 0x48], xmm0
vfmadd231ss xmm1, xmm4, xmm0
vmovss dword [ecx + eax], xmm1
vmovss xmm0, dword [ebp - 0x74]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm3, dword [ebp - 0x64]
vmovss dword [ebp - 0x30], xmm3
vmulss xmm3, xmm2, xmm3
vfmadd231ss xmm3, xmm1, xmm0
vmovss xmm0, dword [ebp - 0x54]
vmovss dword [ebp - 0x28], xmm0
vfmadd231ss xmm3, xmm4, xmm0
vmovss dword [ecx + eax + 4], xmm3
vmovss xmm2, dword [ebp - 0x70]
vmovss dword [ebp - 0x88], xmm2
vmovss xmm0, dword [ebp - 0x60]
vmovss dword [ebp - 0x20], xmm0
vmulss xmm0, xmm3, xmm0
vfmadd231ss xmm0, xmm1, xmm2
vmovss xmm2, dword [ebp - 0x50]
vmovss dword [ebp - 0x40], xmm2
vfmadd231ss xmm0, xmm2, xmm4
vmovss dword [ecx + eax + 8], xmm0
vmovss xmm2, dword [ebp - 0x5c]
vmovss dword [ebp - 0x3c], xmm2
vmulss xmm4, xmm3, xmm2
vmovss xmm2, dword [ebp - 0x6c]
vmovss dword [ebp - 0x38], xmm2
vfmadd231ss xmm4, xmm2, xmm1
vmovss xmm1, dword [ebp - 0x4c]
vmovss dword [ebp - 0x2c], xmm1
vfmadd231ss xmm4, xmm1, xmm0
vaddss xmm0, xmm4, dword [ecx + eax + 0xc]
vmovss dword [ecx + eax + 0xc], xmm0
vmovss xmm4, dword [ecx + eax + 0x14]
vmulss xmm0, xmm5, xmm4
vmovaps xmm3, xmm6
vfmadd231ss xmm0, xmm6, dword [ecx + eax + 0x10]
vmovss xmm2, dword [ecx + eax + 0x18]
vmovss xmm6, dword [ebp - 0x48]
vfmadd231ss xmm0, xmm2, xmm6
vmovss xmm7, dword [ebp - 0x30]
vmulss xmm4, xmm7, xmm4
vfmadd231ss xmm4, xmm0, dword [ebp - 0x24]
vfmadd231ss xmm4, xmm2, dword [ebp - 0x28]
vmulss xmm1, xmm4, dword [ebp - 0x20]
vfmadd231ss xmm1, xmm0, dword [ebp - 0x88]
vfmadd231ss xmm1, xmm2, dword [ebp - 0x40]
vmovss dword [ecx + eax + 0x10], xmm0
vmovss dword [ecx + eax + 0x14], xmm4
vmulss xmm2, xmm4, dword [ebp - 0x3c]
vfmadd231ss xmm2, xmm0, dword [ebp - 0x38]
vmovss dword [ecx + eax + 0x18], xmm1
vfmadd231ss xmm2, xmm1, dword [ebp - 0x2c]
vaddss xmm0, xmm2, dword [ecx + eax + 0x1c]
vmovss dword [ecx + eax + 0x1c], xmm0
vmovss xmm1, dword [ecx + eax + 0x24]
vmulss xmm0, xmm5, xmm1
vfmadd231ss xmm0, xmm3, dword [ecx + eax + 0x20]
vmovss xmm2, dword [ecx + eax + 0x28]
vfmadd231ss xmm0, xmm2, xmm6
vmulss xmm1, xmm7, xmm1
vfmadd231ss xmm1, xmm0, dword [ebp - 0x24]
vfmadd231ss xmm1, xmm2, dword [ebp - 0x28]
vmulss xmm4, xmm1, dword [ebp - 0x20]
vfmadd231ss xmm4, xmm0, dword [ebp - 0x88]
vfmadd231ss xmm4, xmm2, dword [ebp - 0x40]
vmulss xmm2, xmm1, dword [ebp - 0x3c]
vfmadd231ss xmm2, xmm0, dword [ebp - 0x38]
vmovss dword [ecx + eax + 0x20], xmm0
vmovss dword [ecx + eax + 0x24], xmm1
vfmadd231ss xmm2, xmm4, dword [ebp - 0x2c]
vmovss dword [ecx + eax + 0x28], xmm4
vaddss xmm0, xmm2, dword [ecx + eax + 0x2c]
vmovss dword [ecx + eax + 0x2c], xmm0
mov ecx, dword [ebp - 0x44]
mov eax, dword [ecx + 4]
vxorps xmm1, xmm1, xmm1
jmp 0x100803b0
or ecx, 1
mov dword [0x10132c48], ecx
mov eax, dword [0x1012d324]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x20], ecx
push str.m_fEffects
call fcn.100083b0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x64], 0x10
jb 0x1008061e
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 0
je 0x10080703
mov ecx, dword [ebp - 0x24]
mov eax, ecx
and eax, 3
mov dword [ebp - 0x2c], eax
cmp ecx, 4
jae 0x1008070a
mov ecx, 0x811c9dc5
xor edx, edx
jmp 0x10080754
call fcn.1007cfb0
or eax, 1
mov dword [0x10132c48], eax
mov eax, dword [0x1012d324]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 2
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x20], ecx
push str.m_fEffects
call fcn.100083b0
mov edi, dword [ebp - 0x68]
cmp dword [ebp - 0x64], 0x10
jb 0x10080683
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x20], eax
test edi, edi
je 0x10080847
mov eax, edi
and eax, 3
mov dword [ebp - 0x34], eax
cmp edi, 4
jae 0x10080858
mov ecx, 0x811c9dc5
xor edx, edx
jmp 0x100808a1
or eax, 1
mov dword [0x10132c48], eax
mov eax, dword [0x1012d324]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 4
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x20], ecx
push str.m_fEffects
call fcn.100083b0
mov esi, dword [ebp - 0x68]
cmp dword [ebp - 0x64], 0x10
jb 0x100806de
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x20], eax
test esi, esi
je 0x1008084e
mov eax, esi
and eax, 3
mov dword [ebp - 0x30], eax
cmp esi, 4
jae 0x10080930
mov ecx, 0x811c9dc5
xor edx, edx
jmp 0x10080979
mov ecx, 0x811c9dc5
jmp 0x10080771
mov esi, dword [ebp - 0x24]
and esi, 0xfffffffc
mov ecx, 0x811c9dc5
xor edx, edx
mov eax, dword [ebp - 0x20]
movzx ebx, byte [eax + edx]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 1]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 2]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 3]
xor ebx, ecx
imul ecx, ebx, 0x1000193
add edx, 4
cmp esi, edx
jne 0x1008071a
cmp dword [ebp - 0x2c], 0
je 0x10080771
add edx, dword [ebp - 0x20]
xor esi, esi
movzx ebx, byte [edx + esi]
xor ebx, ecx
imul ecx, ebx, 0x1000193
inc esi
cmp dword [ebp - 0x2c], esi
jne 0x1008075f
mov edx, dword [ebp - 0x34]
and ecx, dword [edx + 0x18]
mov eax, dword [edx + 0xc]
mov esi, dword [eax + ecx*8 + 4]
cmp esi, dword [edx + 4]
je 0x10080af4
mov edi, esi
add ecx, ecx
mov ebx, dword [eax + ecx*4]
mov esi, edi
mov eax, dword [ebp - 0x24]
cmp eax, dword [edi + 0x18]
jne 0x100807bb
cmp dword [esi + 0x1c], 0x10
jb 0x100807a3
mov eax, dword [edi + 8]
jmp 0x100807a6
lea eax, [edi + 8]
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x20]
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
mov esi, edi
je 0x100807c8
cmp esi, ebx
je 0x10080af4
mov edi, dword [edi + 4]
jmp 0x1008078e
add esi, 0x20
lea ecx, [ebp - 0x78]
call fcn.100029d0
mov dword [0x10132c44], esi
mov eax, dword [0x1012d364]
mov edi, dword [ebp + 8]
jmp 0x10080166
mov dword [ebp - 0x20], edx
or eax, 1
mov dword [0x10132ba0], eax
mov eax, dword [0x1012d324]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 6
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x24], ecx
push str.CBaseAnimating__m_nHitboxSet
call fcn.100083b0
mov esi, dword [ebp - 0x68]
cmp dword [ebp - 0x64], 0x10
jb 0x10080822
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x24], eax
test esi, esi
je 0x10080a00
mov eax, esi
and eax, 3
mov dword [ebp - 0x28], eax
cmp esi, 4
jae 0x10080a07
mov ecx, 0x811c9dc5
xor edx, edx
jmp 0x10080a50
mov ecx, 0x811c9dc5
jmp 0x100808be
mov ecx, 0x811c9dc5
jmp 0x10080996
mov esi, edi
and esi, 0xfffffffc
mov ecx, 0x811c9dc5
xor edx, edx
mov eax, dword [ebp - 0x20]
movzx ebx, byte [eax + edx]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 1]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 2]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 3]
xor ebx, ecx
imul ecx, ebx, 0x1000193
add edx, 4
cmp esi, edx
jne 0x10080867
cmp dword [ebp - 0x34], 0
je 0x100808be
add edx, dword [ebp - 0x20]
xor esi, esi
movzx ebx, byte [edx + esi]
xor ebx, ecx
imul ecx, ebx, 0x1000193
inc esi
cmp dword [ebp - 0x34], esi
jne 0x100808ac
mov edx, dword [ebp - 0x30]
and ecx, dword [edx + 0x18]
mov eax, dword [edx + 0xc]
mov ebx, dword [eax + ecx*8 + 4]
cmp ebx, dword [edx + 4]
je 0x10080b08
mov esi, ebx
add ecx, ecx
mov ebx, dword [eax + ecx*4]
cmp edi, dword [esi + 0x18]
jne 0x100808ff
cmp dword [esi + 0x1c], 0x10
jb 0x100808eb
mov eax, dword [esi + 8]
jmp 0x100808ee
lea eax, [esi + 8]
push edi
push eax
push dword [ebp - 0x20]
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
je 0x10080911
cmp esi, ebx
je 0x10080b08
mov esi, dword [esi + 4]
cmp edi, dword [esi + 0x18]
je 0x100808e0
jmp 0x100808ff
add esi, 0x20
lea ecx, [ebp - 0x78]
call fcn.100029d0
mov dword [ebp - 0x20], esi
mov dword [0x10132c44], esi
mov edi, dword [ebp + 8]
mov ebx, dword [ebp - 0x24]
jmp 0x100801c0
mov edi, esi
and edi, 0xfffffffc
mov ecx, 0x811c9dc5
xor edx, edx
mov eax, dword [ebp - 0x20]
movzx ebx, byte [eax + edx]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 1]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 2]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 3]
xor ebx, ecx
imul ecx, ebx, 0x1000193
add edx, 4
cmp edi, edx
jne 0x1008093f
cmp dword [ebp - 0x30], 0
je 0x10080996
add edx, dword [ebp - 0x20]
xor edi, edi
movzx ebx, byte [edx + edi]
xor ebx, ecx
imul ecx, ebx, 0x1000193
inc edi
cmp dword [ebp - 0x30], edi
jne 0x10080984
mov edx, dword [ebp - 0x44]
and ecx, dword [edx + 0x18]
mov eax, dword [edx + 0xc]
mov edi, dword [eax + ecx*8 + 4]
cmp edi, dword [edx + 4]
je 0x10080b1c
add ecx, ecx
mov ebx, dword [eax + ecx*4]
cmp esi, dword [edi + 0x18]
jne 0x100809d5
cmp dword [edi + 0x1c], 0x10
jb 0x100809c1
mov eax, dword [edi + 8]
jmp 0x100809c4
lea eax, [edi + 8]
push esi
push eax
push dword [ebp - 0x20]
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
je 0x100809e7
cmp edi, ebx
je 0x10080b1c
mov edi, dword [edi + 4]
cmp esi, dword [edi + 0x18]
je 0x100809b6
jmp 0x100809d5
add edi, 0x20
lea ecx, [ebp - 0x78]
call fcn.100029d0
mov dword [0x10132c44], edi
mov ecx, dword [ebp - 0x24]
jmp 0x100802da
mov ecx, 0x811c9dc5
jmp 0x10080a6d
mov edi, esi
and edi, 0xfffffffc
mov ecx, 0x811c9dc5
xor edx, edx
mov eax, dword [ebp - 0x24]
movzx ebx, byte [eax + edx]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 1]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 2]
xor ebx, ecx
imul ecx, ebx, 0x1000193
movzx ebx, byte [eax + edx + 3]
xor ebx, ecx
imul ecx, ebx, 0x1000193
add edx, 4
cmp edi, edx
jne 0x10080a16
cmp dword [ebp - 0x28], 0
je 0x10080a6d
add edx, dword [ebp - 0x24]
xor edi, edi
movzx ebx, byte [edx + edi]
xor ebx, ecx
imul ecx, ebx, 0x1000193
inc edi
cmp dword [ebp - 0x28], edi
jne 0x10080a5b
mov edx, dword [ebp - 0x88]
and ecx, dword [edx + 0x18]
mov eax, dword [edx + 0xc]
mov edi, dword [eax + ecx*8 + 4]
cmp edi, dword [edx + 4]
je 0x10080b30
add ecx, ecx
mov ebx, dword [eax + ecx*4]
cmp esi, dword [edi + 0x18]
jne 0x10080aaf
cmp dword [edi + 0x1c], 0x10
jb 0x10080a9b
mov eax, dword [edi + 8]
jmp 0x10080a9e
lea eax, [edi + 8]
push esi
push eax
push dword [ebp - 0x24]
call sub.VCRUNTIME140.dll_memcmp
add esp, 0xc
test eax, eax
je 0x10080abd
cmp edi, ebx
je 0x10080b30
mov edi, dword [edi + 4]
cmp esi, dword [edi + 0x18]
je 0x10080a90
jmp 0x10080aaf
add edi, 0x20
lea ecx, [ebp - 0x78]
call fcn.100029d0
mov dword [0x10132b9c], edi
mov edx, dword [ebp - 0x20]
add edx, dword [edx + 0xb0]
jne 0x10080378
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
movzx eax, byte [ebp - 0x34]
add esp, 0x7c
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
mov dword [ebp - 0x10], 1
push 0x1011ed9d
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const__
add esp, 4
mov dword [ebp - 0x10], 3
push 0x1011ed9d
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const__
add esp, 4
mov dword [ebp - 0x10], 5
push 0x1011ed9d
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const__
add esp, 4
mov dword [ebp - 0x10], 7
push 0x1011ed9d
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const__
add esp, 4
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
add ebp, 0xc
lea ecx, [ebp - 0x78]
call fcn.100029d0
add esp, 0x10
pop ebp
ret