Function at 0x43c1c0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7967a0
mov eax, dword fs:[0]
push eax
sub esp, 0x174
mov eax, dword [0x831184]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
movaps xmm0, xmmword [0x7e5260]
push ecx
lea ecx, [ebp - 0x64]
mov word [ebp - 0x5c], 0x101
mov byte [ebp - 0x5a], 0
mov dword [ebp - 0x58], 2
mov word [ebp - 0x54], 0
movups xmmword [ebp - 0x50], xmm0
call fcn.0043f7c0
push 1
sub esp, 0x28
mov byte [ebp - 4], 1
mov eax, esp
mov dword [eax + 0x24], 0
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0043d0c0
add esp, 0x34
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x60]
test esi, esi
je 0x43c271
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x43c271
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x43c271
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov byte [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x2c], 0xc3dfdfc8
mov dword [ebp - 0x28], 0xb0c1dbdf
nop dword [eax]
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x2c], al
inc ecx
mov eax, dword [ebp - 0x30]
cmp ecx, eax
jb 0x43c290
mov byte [ebp + eax - 0x2c], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x2c]
push eax
call fcn.00435a30
cmp byte [eax], 4
jne 0x43c972
mov al, byte [eax + 8]
xor ecx, ecx
mov byte [ebp - 0x5c], al
mov eax, 8
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xc3dfdfc8
mov dword [ebp - 0x2c], 0xdececdde
mov byte [ebp - 0x28], 0xb1
mov word [ebp - 0x27], cx
mov byte [ebp - 0x25], cl
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c2e2
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
cmp byte [eax], 4
jne 0x43c9c2
mov al, byte [eax + 8]
xor ecx, ecx
mov byte [ebp - 0x5b], al
mov eax, 9
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xc3dfdfc8
mov dword [ebp - 0x2c], 0xd1cac2ce
mov dword [ebp - 0x28], 0xb2df
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c330
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
cmp byte [eax], 4
jne 0x43ca12
mov al, byte [eax + 8]
xor ecx, ecx
mov byte [ebp - 0x5a], al
mov eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xdecadfd8
mov dword [ebp - 0x2c], 0xd9dbc0cc
mov dword [ebp - 0x28], 0xb3d7df
nop
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c380
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
movaps xmm0, xmmword [0x7e5b20]
mov edx, eax
mov dword [ebp - 0x38], 0xf
xor ecx, ecx
movups xmmword [ebp - 0x34], xmm0
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x34], al
inc ecx
mov eax, dword [ebp - 0x38]
cmp ecx, eax
jb 0x43c3b6
mov byte [ebp + eax - 0x34], 0
mov ecx, edx
lea eax, [ebp - 0x34]
push eax
call fcn.00435a30
mov ecx, eax
mov dl, byte [ecx]
movzx eax, dl
sub eax, 5
je 0x43c40d
sub eax, 1
je 0x43c400
sub eax, 1
jne 0x43ca62
lea eax, [ecx + 8]
xor ecx, ecx
cmp dl, 7
cmovne eax, ecx
cvttsd2si eax, qword [eax]
jmp 0x43c429
lea eax, [ecx + 8]
xor ecx, ecx
cmp dl, 6
cmovne eax, ecx
jmp 0x43c427
cmp dl, 5
je 0x43c41b
cmp dl, 6
je 0x43c41b
xor dl, dl
jmp 0x43c41d
mov dl, 1
lea eax, [ecx + 8]
xor ecx, ecx
test dl, dl
cmove eax, ecx
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
xor ecx, ecx
mov eax, 9
mov dword [ebp - 0x30], 0xc9c3c9da
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0xd5c3dbc9
mov dword [ebp - 0x28], 0xb2c3
nop dword [eax + eax]
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c450
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
push 0x7d8514
mov ecx, eax
call fcn.00435a30
cmp byte [eax], 4
jne 0x43cab0
mov al, byte [eax + 8]
xor ecx, ecx
mov byte [ebp - 0x54], al
mov eax, 9
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xc9c3c9da
mov dword [ebp - 0x2c], 0xd5c3dbc9
mov dword [ebp - 0x28], 0xb2c3
nop word [eax + eax]
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c4b0
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
mov esi, eax
mov dword [ebp - 0x2c], 0xc9dbd3dd
xor eax, eax
mov byte [ebp - 0x28], 0xad
mov edx, 4
mov word [ebp - 0x27], ax
mov dword [ebp - 0x30], edx
xor ecx, ecx
mov byte [ebp - 0x25], al
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x2c], al
inc ecx
mov edx, dword [ebp - 0x30]
cmp ecx, edx
jb 0x43c4f0
lea eax, [ebp - 0x2c]
mov byte [ebp + edx - 0x2c], 0
push eax
mov ecx, esi
call fcn.00435a30
mov edx, eax
mov cl, byte [edx]
movzx eax, cl
add eax, 0xfffffffc
cmp eax, 3
ja case.default.0x43c522
jmp dword [eax*4 + 0x43cc90]
lea eax, [edx + 8]
xor edx, edx
cmp cl, 6
cmovne eax, edx
mov eax, dword [eax]
jmp 0x43c581
cmp cl, 5
je 0x43c552
cmp cl, 6
je 0x43c552
lea eax, [edx + 8]
xor cl, cl
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x43c581
lea eax, [edx + 8]
mov cl, 1
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x43c581
lea eax, [edx + 8]
xor edx, edx
cmp cl, 7
cmovne eax, edx
cvttsd2si eax, qword [eax]
jmp 0x43c581
lea eax, [edx + 8]
xor edx, edx
cmp cl, 4
cmovne eax, edx
movzx eax, byte [eax]
mov dword [ebp - 0x50], eax
xor ecx, ecx
mov eax, 9
mov dword [ebp - 0x30], 0xc9c3c9da
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0xd5c3dbc9
mov dword [ebp - 0x28], 0xb2c3
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c5a3
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
mov esi, eax
mov dword [ebp - 0x2c], 0xdedec5c1
xor eax, eax
mov byte [ebp - 0x28], 0xad
mov edx, 4
mov word [ebp - 0x27], ax
mov dword [ebp - 0x30], edx
xor ecx, ecx
mov byte [ebp - 0x25], al
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x2c], al
inc ecx
mov edx, dword [ebp - 0x30]
cmp ecx, edx
jb 0x43c5e3
lea eax, [ebp - 0x2c]
mov byte [ebp + edx - 0x2c], 0
push eax
mov ecx, esi
call fcn.00435a30
mov edx, eax
mov cl, byte [edx]
movzx eax, cl
add eax, 0xfffffffc
cmp eax, 3
ja case.default.0x43c615
jmp dword [eax*4 + 0x43cca0]
lea eax, [edx + 8]
xor edx, edx
cmp cl, 6
cmovne eax, edx
mov eax, dword [eax]
jmp 0x43c674
cmp cl, 5
je 0x43c645
cmp cl, 6
je 0x43c645
lea eax, [edx + 8]
xor cl, cl
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x43c674
lea eax, [edx + 8]
mov cl, 1
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x43c674
lea eax, [edx + 8]
xor edx, edx
cmp cl, 7
cmovne eax, edx
cvttsd2si eax, qword [eax]
jmp 0x43c674
lea eax, [edx + 8]
xor edx, edx
cmp cl, 4
cmovne eax, edx
movzx eax, byte [eax]
mov dword [ebp - 0x4c], eax
xor ecx, ecx
mov eax, 9
mov dword [ebp - 0x30], 0xc9c3c9da
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0xd5c3dbc9
mov dword [ebp - 0x28], 0xb2c3
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c696
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
mov edx, 6
mov dword [ebp - 0x2c], 0xd9c5c3c4
mov esi, eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x28], 0xafcbd9
xor ecx, ecx
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x2c], al
inc ecx
mov edx, dword [ebp - 0x30]
cmp ecx, edx
jb 0x43c6d0
lea eax, [ebp - 0x2c]
mov byte [ebp + edx - 0x2c], 0
push eax
mov ecx, esi
call fcn.00435a30
mov edx, eax
mov cl, byte [edx]
movzx eax, cl
add eax, 0xfffffffc
cmp eax, 3
ja case.default.0x43c702
jmp dword [eax*4 + 0x43ccb0]
lea eax, [edx + 8]
xor edx, edx
cmp cl, 6
cmovne eax, edx
mov eax, dword [eax]
jmp 0x43c761
cmp cl, 5
je 0x43c732
cmp cl, 6
je 0x43c732
lea eax, [edx + 8]
xor cl, cl
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x43c761
lea eax, [edx + 8]
mov cl, 1
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x43c761
lea eax, [edx + 8]
xor edx, edx
cmp cl, 7
cmovne eax, edx
cvttsd2si eax, qword [eax]
jmp 0x43c761
lea eax, [edx + 8]
xor edx, edx
cmp cl, 4
cmovne eax, edx
movzx eax, byte [eax]
mov dword [ebp - 0x48], eax
xor ecx, ecx
mov eax, 9
mov dword [ebp - 0x30], 0xc9c3c9da
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0xd5c3dbc9
mov dword [ebp - 0x28], 0xb2c3
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c783
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
mov edx, 0xa
mov dword [ebp - 0x30], 0xdedec5c1
mov esi, eax
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x2c], 0xd9ddcbfd
xor ecx, ecx
mov dword [ebp - 0x28], 0xb3d6de
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov edx, dword [ebp - 0x34]
cmp ecx, edx
jb 0x43c7c4
lea eax, [ebp - 0x30]
mov byte [ebp + edx - 0x30], 0
push eax
mov ecx, esi
call fcn.00435a30
mov edx, eax
mov cl, byte [edx]
movzx eax, cl
add eax, 0xfffffffc
cmp eax, 3
ja case.default.0x43c7f6
jmp dword [eax*4 + 0x43ccc0]
lea eax, [edx + 8]
xor edx, edx
cmp cl, 6
cmovne eax, edx
mov esi, dword [eax]
jmp 0x43c855
cmp cl, 5
je 0x43c826
cmp cl, 6
je 0x43c826
lea eax, [edx + 8]
xor cl, cl
xor edx, edx
test cl, cl
cmove eax, edx
mov esi, dword [eax]
jmp 0x43c855
lea eax, [edx + 8]
mov cl, 1
xor edx, edx
test cl, cl
cmove eax, edx
mov esi, dword [eax]
jmp 0x43c855
lea eax, [edx + 8]
xor edx, edx
cmp cl, 7
cmovne eax, edx
cvttsd2si esi, qword [eax]
jmp 0x43c855
lea eax, [edx + 8]
xor edx, edx
cmp cl, 4
cmovne eax, edx
movzx esi, byte [eax]
mov eax, 9
mov dword [ebp - 0x30], 0xc9c3c9da
mov dword [ebp - 0x34], eax
xor ecx, ecx
mov dword [ebp - 0x2c], 0xd5c3dbc9
mov dword [ebp - 0x28], 0xb2c3
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
jb 0x43c874
mov byte [ebp + eax - 0x30], 0
lea ecx, [ebp - 0x24]
lea eax, [ebp - 0x30]
push eax
call fcn.00435a30
mov edx, 9
mov dword [ebp - 0x30], 0xc3dfdfc8
mov edi, eax
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x2c], 0xd1cac2ce
xor ecx, ecx
mov dword [ebp - 0x28], 0xb2df
lea eax, [ecx - 0x57]
xor byte [ebp + ecx - 0x30], al
inc ecx
mov edx, dword [ebp - 0x34]
cmp ecx, edx
jb 0x43c8b5
lea eax, [ebp - 0x30]
mov byte [ebp + edx - 0x30], 0
push eax
mov ecx, edi
call fcn.00435a30
cmp byte [eax], 4
jne 0x43cb00
mov al, byte [eax + 8]
lea ecx, [ebp - 0x24]
mov byte [ebp - 0x53], al
call fcn.00434940
mov eax, dword [ebp + 8]
movups xmm0, xmmword [ebp - 0x5c]
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x4c]
movq qword [eax + 0x10], xmm0
mov dword [eax + 0x18], esi
jmp 0x43c956
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0076eb7e
mov esp, ebp
pop ebp
ret
mov ecx, eax
call fcn.00435660
push eax
lea ecx, [ebp - 0x3c]
call fcn.00406b50
push eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push str.type_must_be_boolean__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 6
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0x84]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, eax
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 7
push str.type_must_be_boolean__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 8
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0xa0]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, eax
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 9
push str.type_must_be_boolean__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 0xa
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0xbc]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xb
push str.type_must_be_number__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0xc
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0xd8]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, eax
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xd
push str.type_must_be_boolean__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 0xe
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0xf4]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, eax
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x17
push str.type_must_be_boolean__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 0x18
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0x110]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, edx
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x15
push str.type_must_be_number__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x16
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0x12c]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, edx
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x13
push str.type_must_be_number__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0x14
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0x148]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, edx
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x11
push str.type_must_be_number__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0x12
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0x164]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
mov ecx, edx
call fcn.00435660
push eax
lea ecx, [ebp - 0x58]
call fcn.00406b50
push eax
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0xf
push str.type_must_be_number__but_is
push eax
call fcn.0041ef20
add esp, 0xc
push eax
punpckhbw mm5, qword [ebx + edx*4 - 0x17afff83]
mov ebp, 0x83fffe22
les ecx, [eax + edx*2]
lea eax, [ebp - 0x180]
mov byte [ebp - 4], 0x10
push 0x12e
push eax
call fcn.0042f470
add esp, 0xc
lea eax, [ebp - 0x180]
push 0x826ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
jae 0x43cc57
inc ebx
add byte [eax], bh
lds eax, [ebx]
sub ebp, eax
inc ebx
add byte [edx - 0x3b], ah
inc ebx
add byte [esi - 0x3a], ah
inc ebx
add byte [ebx], ch
mov byte [ebx], 0x1c
mov byte [ebx], 0x55
mov byte [ebx], 0x53
mov dword [ebx], case.0x43c702.5
or edi, eax
inc ebx
add byte [edx - 0x39], al
inc ebx
add byte [edi - 0x38], al
inc ebx
add byte [eax + ecx*8], cl
inc ebx
add ch, bh
mov dword [ebx], case.0x43c7f6.7