call 1 1: pop eax find_r2: inc eax cmp [eax], 0x1122334455667788 jne find_r2 mov r2,eax