Function at 0x403740
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header
Reference sql statements
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5221bb
mov eax, dword fs:[0]
push eax
mov eax, 0x101e4
call fcn.004f6280
mov eax, dword [0x56a260]
xor eax, esp
mov dword [esp + 0x101e0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x56a260]
xor eax, esp
push eax
lea eax, [esp + 0x101f8]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1020c]
mov esi, dword [esp + 0x10208]
mov edi, edx
lea edx, [esp + 0x1ac]
xor ebx, ebx
push edx
mov dword [esp + 0x44], edi
mov dword [esp + 0xa4], esi
mov dword [esp + 0x5c], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 0x2c], ebx
call fcn.00406cd0
push esi
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x10204], ebx
call fcn.0043aa00
test eax, eax
jne 0x403873
lea eax, [esp + 0x28]
push eax
mov ecx, esi
call fcn.0040f7a0
push 0x14
lea ecx, [esp + 0x1c]
push ecx
mov ecx, eax
mov byte [esp + 0x10208], 1
call fcn.0040e7e0
push 0x547ad8
push eax
lea edx, [esp + 0x34]
push edx
mov byte [esp + 0x1020c], 2
call fcn.0040bf20
add esp, 0xc
push ebx
mov byte [esp + 0x10204], 3
mov eax, dword [eax]
push ebx
push eax
call fcn.004db332
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x40383f
sub eax, 8
push eax
mov dword [esp + 0x30], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x40385b
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x406c65
sub eax, 8
mov dword [esp + 0x28], eax
jmp 0x406c5c
mov esi, dword [edi + 0x1c]
cmp dword [edi + 0x18], esi
lea eax, [edi + 0x14]
mov dword [esp + 0x2c], eax
jbe 0x403887
call fcn.004f2608
mov eax, dword [esp + 0x2c]
mov ebp, dword [eax + 4]
cmp ebp, dword [eax + 8]
jbe 0x403898
call fcn.004f2608
mov eax, dword [esp + 0x2c]
push esi
push eax
push ebp
push eax
lea ecx, [esp + 0x140]
push ecx
push eax
call fcn.0040cab0
push ebx
lea ecx, [esp + 0x6c]
mov dword [esp + 0x6c], ebx
call fcn.00402700
cmp eax, 1
jne 0x4038c8
mov edx, dword [esp + 0x68]
mov dword [edx - 4], ebx
mov byte [esp + 0x10200], 4
push ebx
lea ecx, [esp + 0x80]
mov dword [esp + 0x80], ebx
call fcn.00402700
cmp eax, 1
jne 0x4038f0
mov eax, dword [esp + 0x7c]
mov dword [eax - 4], ebx
mov byte [esp + 0x10200], 5
push ebx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], ebx
call fcn.00402700
cmp eax, 1
mov esi, dword [esp + 0x78]
jne 0x403912
mov dword [esi - 4], ebx
push 0x547aec
lea ecx, [esp + 0xf4]
mov byte [esp + 0x10204], 6
call fcn.00401f50
lea ecx, [esp + 0xf0]
push ecx
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x10204], 7
call fcn.0043aea0
mov ebp, eax
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0xf0]
cmp eax, ebx
mov dword [esp + 0x44], ebp
je 0x40397a
sub eax, 8
push eax
mov dword [esp + 0xf4], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xf0], ebx
cmp ebp, ebx
je 0x406c21
push str.PaperID
lea ecx, [esp + 0x24]
call fcn.00401f50
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, ebp
mov byte [esp + 0x10208], 8
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x10204], 9
call fcn.00401fe0
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x4039d7
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x4039f7
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
lea esi, [edi + 0x30]
lea ecx, [esp + 0x68]
push esi
push ecx
call fcn.0040c120
add esp, 8
test al, al
je 0x403aa8
mov edx, dword [esi]
mov esi, dword [esp + 0x68]
push edx
push esi
lea eax, [esp + 0x30]
push 0x547b14
push eax
call fcn.0040f1d0
add esp, 0x10
push ebx
mov byte [esp + 0x10204], 0xa
mov eax, dword [eax]
push ebx
push eax
call fcn.004db332
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x403a54
sub eax, 8
push eax
mov dword [esp + 0x2c], eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x78]
cmp eax, ebx
je 0x403a68
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x7c]
cmp eax, ebx
je 0x403a7c
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
cmp esi, ebx
je 0x403a8c
lea eax, [esi - 8]
push eax
call fcn.004d37ab
add esp, 4
lea esi, [esp + 0x1ac]
mov dword [esp + 0x10200], 0xffffffff
call fcn.00406d80
jmp 0x406ca1
push str.ExamCount
lea ecx, [esp + 0x24]
call fcn.00401f50
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, ebp
mov byte [esp + 0x10208], 0xb
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x10204], 0xc
call fcn.00401fe0
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x403b00
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x403b20
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
push str.GroupCount
lea ecx, [esp + 0x24]
call fcn.00401f50
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebp
mov byte [esp + 0x10208], 0xd
call fcn.0043a4c0
mov eax, dword [eax]
push eax
call fcn.004f24b7
mov esi, eax
mov eax, dword [esp + 0x1c]
add esp, 4
cmp eax, ebx
mov dword [esp + 0xb0], esi
je 0x403b77
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x403b97
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
cmp esi, ebx
jle 0x403ba6
mov edx, dword [esp + 0x2c]
push esi
push edx
call fcn.0040c2c0
push str.ExamTime
lea ecx, [esp + 0x24]
call fcn.00401f50
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebp
mov byte [esp + 0x10208], 0xe
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x10204], 0xf
call fcn.00401fe0
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x403bfb
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x403c1b
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
push 1
push 0x3a
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x84]
call fcn.0040ea70
mov esi, eax
push ebx
push 0x3a
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0x1020c], 0x10
call fcn.0040eba0
mov esi, dword [esi]
push esi
mov ebp, eax
call fcn.004f24b7
mov ebp, dword [ebp]
add esp, 4
push ebp
mov esi, eax
call fcn.004f24b7
mov ecx, esi
shl ecx, 4
sub ecx, esi
lea eax, [eax + ecx*4]
mov dword [edi + 0x6c], eax
mov dword [edi + 0x70], eax
mov eax, dword [esp + 0x1c]
add esp, 4
cmp eax, ebx
je 0x403c95
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0x28]
cmp eax, ebx
je 0x403cb5
sub eax, 8
push eax
mov dword [esp + 0x2c], eax
call fcn.004d37ab
add esp, 4
push str.PaperName
lea ecx, [esp + 0x24]
call fcn.00401f50
lea edx, [esp + 0x20]
mov byte [esp + 0x10200], 0x11
mov esi, dword [esp + 0x44]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.0043a4c0
push eax
lea ecx, [edi + 0x74]
mov byte [esp + 0x10204], 0x12
call fcn.00401fe0
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x403d0d
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x403d2d
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
push str.FreeMove
lea ecx, [esp + 0x24]
call fcn.00401f50
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
mov byte [esp + 0x10208], 0x13
call fcn.0043a4c0
push str.false
push eax
call fcn.0040c0d0
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [edi + 0x7c], eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x403d87
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x403da7
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
push str.BookMark
lea ecx, [esp + 0x24]
call fcn.00401f50
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
mov byte [esp + 0x10208], 0x14
call fcn.0043a4c0
push str.false
push eax
call fcn.0040c0d0
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [edi + 0x80], eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x403e04
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
mov byte [esp + 0x10200], 6
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x403e24
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
push str.127.0.0.1
lea ecx, [esp + 0x74]
call fcn.00401f50
lea ecx, [esp + 0x148]
mov byte [esp + 0x10200], 0x15
call fcn.00430e40
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x74]
mov byte [esp + 0x10204], 0x16
call fcn.0040ee40
push ebx
mov byte [esp + 0x10204], 0x17
mov ecx, dword [edi + 0x78]
mov eax, dword [eax]
push 1
push ecx
push eax
lea ecx, [esp + 0x158]
call fcn.00431670
test eax, eax
mov byte [esp + 0x10200], 0x16
mov eax, dword [esp + 0x28]
sete byte [esp + 0x17]
cmp eax, ebx
je 0x403ea1
sub eax, 8
push eax
mov dword [esp + 0x2c], eax
call fcn.004d37ab
add esp, 4
cmp byte [esp + 0x17], bl
je 0x403f5b
push str._::1_
lea ecx, [esp + 0x74]
call fcn.00402060
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x74]
call fcn.0040ee40
push ebx
mov byte [esp + 0x10204], 0x18
mov ecx, dword [edi + 0x78]
mov eax, dword [eax]
push 1
push ecx
push eax
lea ecx, [esp + 0x158]
call fcn.00431670
test eax, eax
mov byte [esp + 0x10200], 0x16
mov eax, dword [esp + 0x28]
sete byte [esp + 0x17]
cmp eax, ebx
je 0x403f0c
sub eax, 8
push eax
mov dword [esp + 0x2c], eax
call fcn.004d37ab
add esp, 4
cmp byte [esp + 0x17], bl
je 0x403f5b
push ebx
push ebx
push str.Localhost_connect
call fcn.004db332
lea ecx, [esp + 0x148]
mov byte [esp + 0x10200], 0x15
call fcn.00431600
lea ecx, [esp + 0x70]
call fcn.004023a0
lea ecx, [esp + 0x78]
call fcn.004023a0
lea ecx, [esp + 0x7c]
call fcn.004023a0
lea ecx, [esp + 0x68]
call fcn.004023a0
jmp 0x403a8c
push ebx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x3c], ebx
call fcn.00402700
cmp eax, 1
jne 0x403f75
mov edx, dword [esp + 0x38]
mov dword [edx - 4], ebx
mov byte [esp + 0x10200], 0x19
push ebx
lea ecx, [esp + 0x88]
mov dword [esp + 0x88], ebx
call fcn.00402700
cmp eax, 1
jne 0x403fa0
mov eax, dword [esp + 0x84]
mov dword [eax - 4], ebx
mov byte [esp + 0x10200], 0x1a
push ebx
lea ecx, [esp + 0x84]
mov dword [esp + 0x84], ebx
call fcn.00402700
cmp eax, 1
jne 0x403fcb
mov ecx, dword [esp + 0x80]
mov dword [ecx - 4], ebx
mov byte [esp + 0x10200], 0x1b
push ebx
lea ecx, [esp + 0x90]
mov dword [esp + 0x90], ebx
call fcn.00402700
cmp eax, 1
jne 0x403ff6
mov edx, dword [esp + 0x8c]
mov dword [edx - 4], ebx
mov byte [esp + 0x10200], 0x1c
push ebx
lea ecx, [esp + 0x40]
mov dword [esp + 0x40], ebx
call fcn.00402700
cmp eax, 1
jne 0x404018
mov eax, dword [esp + 0x3c]
mov dword [eax - 4], ebx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x10200], 0x1d
call fcn.0040c3d0
push str.Queston
lea ecx, [esp + 0x10c]
mov byte [esp + 0x10204], 0x1e
call fcn.00401f50
lea ecx, [esp + 0x108]
push ecx
mov ecx, esi
mov byte [esp + 0x10204], 0x1f
call fcn.0043a010
mov ebp, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x108]
cmp eax, ebx
mov dword [esp + 0x28], ebp
je 0x40408c
sub eax, 8
push eax
mov dword [esp + 0x10c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x108], ebx
cmp ebp, ebx
je 0x404bb8
jmp 0x4040a4
mov ebp, dword [esp + 0x28]
mov edi, dword [esp + 0x70]
push 0x547c54
lea ecx, [esp + 0x104]
call fcn.00401f50
lea edx, [esp + 0x100]
push edx
lea eax, [esp + 0xd8]
push eax
mov ecx, ebp
mov byte [esp + 0x10208], 0x20
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x10204], 0x21
call fcn.00401fe0
mov eax, dword [esp + 0xd4]
cmp eax, ebx
je 0x40410f
sub eax, 8
push eax
mov dword [esp + 0xd8], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xd4], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x100]
cmp eax, ebx
je 0x40413c
sub eax, 8
push eax
mov dword [esp + 0x104], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x100], ebx
push str.Type
lea ecx, [esp + 0xfc]
call fcn.00401f50
lea ecx, [esp + 0xf8]
push ecx
lea edx, [esp + 0xd0]
push edx
mov ecx, ebp
mov byte [esp + 0x10208], 0x22
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x84]
mov byte [esp + 0x10204], 0x23
call fcn.00401fe0
mov eax, dword [esp + 0xcc]
cmp eax, ebx
je 0x4041a6
sub eax, 8
push eax
mov dword [esp + 0xd0], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xcc], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xf8]
cmp eax, ebx
je 0x4041d3
sub eax, 8
push eax
mov dword [esp + 0xfc], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xf8], ebx
push str.Once
lea ecx, [esp + 0x34]
call fcn.00401f50
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0xe4]
push ecx
mov ecx, ebp
mov byte [esp + 0x10208], 0x24
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x90]
mov byte [esp + 0x10204], 0x25
call fcn.00401fe0
mov eax, dword [esp + 0xe0]
cmp eax, ebx
je 0x404237
sub eax, 8
push eax
mov dword [esp + 0xe4], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xe0], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x40425b
sub eax, 8
push eax
mov dword [esp + 0x34], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x30], ebx
lea edx, [esp + 0xd8]
push edx
mov ecx, ebp
call fcn.0043a3a0
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x10204], 0x26
call fcn.00401fe0
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xd8]
cmp eax, ebx
je 0x4042a9
sub eax, 8
push eax
mov dword [esp + 0xdc], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xd8], ebx
mov esi, dword [esp + 0x40]
mov eax, dword [esi + 0x78]
push eax
push edi
lea ecx, [esp + 0xd0]
push str._http:___s:_d_ImageFiles_
push ecx
call fcn.0040f1d0
add esp, 0x10
mov byte [esp + 0x10200], 0x27
mov eax, dword [eax]
push eax
push str._ImageFiles_
lea ecx, [esp + 0x44]
call fcn.0040ed00
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xc8]
cmp eax, ebx
je 0x40430d
sub eax, 8
push eax
mov dword [esp + 0xcc], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xc8], ebx
mov edx, dword [esi + 0x78]
push edx
push edi
lea eax, [esp + 0xcc]
push str.http:___s:_d_ImageFiles_
push eax
call fcn.0040f1d0
add esp, 0x10
mov byte [esp + 0x10200], 0x28
mov eax, dword [eax]
push eax
push str.ImageFiles_
lea ecx, [esp + 0x44]
call fcn.0040ed00
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xc4]
cmp eax, ebx
je 0x40436d
sub eax, 8
push eax
mov dword [esp + 0xc8], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xc4], ebx
mov esi, dword [esp + 0xa8]
mov ecx, dword [esi]
push ecx
lea edx, [esp + 0xc4]
push str.__sExamDataMediaFiles_
push edx
call fcn.0040f1d0
add esp, 0xc
mov byte [esp + 0x10200], 0x29
mov eax, dword [eax]
push eax
push str._MediaFiles_
lea ecx, [esp + 0x44]
call fcn.0040ed00
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xc0]
cmp eax, ebx
je 0x4043d2
sub eax, 8
push eax
mov dword [esp + 0xc4], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xc0], ebx
mov eax, dword [esi]
push eax
lea ecx, [esp + 0xe0]
push str._sExamDataMediaFiles_
push ecx
call fcn.0040f1d0
add esp, 0xc
mov byte [esp + 0x10200], 0x2a
mov eax, dword [eax]
push eax
push str.MediaFiles_
lea ecx, [esp + 0x44]
call fcn.0040ed00
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xdc]
cmp eax, ebx
je 0x404430
sub eax, 8
push eax
mov dword [esp + 0xe0], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xdc], ebx
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x54]
call fcn.0040c400
mov ecx, eax
call fcn.00401fe0
push str._TYPE
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0xec]
push edx
call fcn.0040bf20
add esp, 0xc
lea ecx, [esp + 0x80]
push ecx
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x10208], 0x2b
call fcn.0040c400
mov ecx, eax
call fcn.00401fe0
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xe4]
cmp eax, ebx
je 0x4044b2
sub eax, 8
push eax
mov dword [esp + 0xe8], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xe4], ebx
push str._ONCE
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0xc0]
push eax
call fcn.0040bf20
add esp, 0xc
lea ecx, [esp + 0x8c]
push ecx
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x10208], 0x2c
call fcn.0040c400
mov ecx, eax
call fcn.00401fe0
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xb8]
cmp eax, ebx
je 0x40451a
sub eax, 8
push eax
mov dword [esp + 0xbc], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xb8], ebx
push str.Answer
lea ecx, [esp + 0x78]
mov dword [esp + 0x94], ebx
call fcn.00401f50
lea edx, [esp + 0x74]
push edx
mov ecx, ebp
mov byte [esp + 0x10204], 0x2d
call fcn.0043a010
mov edi, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x74]
cmp eax, ebx
je 0x404569
sub eax, 8
push eax
mov dword [esp + 0x78], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x74], ebx
cmp edi, ebx
je 0x404a89
mov ebp, dword [esp + 0xa8]
xor ecx, ecx
mov eax, 7
mov edx, 2
mul edx
seto cl
mov dword [esp + 0x1c], ebx
neg ecx
or ecx, eax
push ecx
call fcn.004d37a6
add eax, 8
mov dword [esp + 0x20], eax
mov dword [eax - 8], 3
mov eax, dword [esp + 0x20]
add esp, 4
push 0x547c54
mov word [eax + 4], bx
mov ecx, dword [esp + 0x20]
push 3
push ecx
call fcn.004f2e08
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx - 4], 2
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0xd4]
push ecx
mov ecx, edi
mov byte [esp + 0x10208], 0x2e
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x88]
mov byte [esp + 0x10204], 0x2f
call fcn.00401fe0
mov eax, dword [esp + 0xd0]
cmp eax, ebx
je 0x404625
sub eax, 8
push eax
mov dword [esp + 0xd4], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xd0], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x404645
sub eax, 8
push eax
mov dword [esp + 0x20], eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x84]
mov ecx, 0x547dd4
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x404677
cmp dx, bx
je 0x404673
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x404677
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x404651
xor eax, eax
jmp 0x40467c
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x40468b
mov dword [esp + 0x90], 1
lea edx, [esp + 0xbc]
push edx
mov ecx, edi
call fcn.0043a3a0
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x10204], 0x30
call fcn.00401fe0
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xbc]
cmp eax, ebx
je 0x4046d9
sub eax, 8
push eax
mov dword [esp + 0xc0], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xbc], ebx
mov esi, dword [esp + 0x40]
mov eax, dword [esi + 0x78]
mov ecx, dword [esp + 0x70]
push eax
push ecx
lea edx, [esp + 0xac]
push str._http:___s:_d_ImageFiles_
push edx
call fcn.0040f1d0
add esp, 0x10
mov byte [esp + 0x10200], 0x31
mov eax, dword [eax]
push eax
push str._ImageFiles_
lea ecx, [esp + 0x44]
call fcn.0040ed00
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xa4]
cmp eax, ebx
je 0x404741
sub eax, 8
push eax
mov dword [esp + 0xa8], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xa4], ebx
mov eax, dword [esi + 0x78]
mov ecx, dword [esp + 0x70]
push eax
push ecx
lea edx, [esp + 0x90]
push str.http:___s:_d_ImageFiles_
push edx
call fcn.0040f1d0
add esp, 0x10
mov byte [esp + 0x10200], 0x32
mov eax, dword [eax]
push eax
push str.ImageFiles_
lea ecx, [esp + 0x44]
call fcn.0040ed00
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x88]
cmp eax, ebx
je 0x4047a5
sub eax, 8
push eax
mov dword [esp + 0x8c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x88], ebx
mov eax, dword [ebp]
push eax
lea ecx, [esp + 0xec]
push str.__sExamDataMediaFiles_
push ecx
call fcn.0040f1d0
add esp, 0xc
mov byte [esp + 0x10200], 0x33
mov eax, dword [eax]
push eax
push str._MediaFiles_
lea ecx, [esp + 0x44]
call fcn.0040ed00
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0xe8]
cmp eax, ebx
je 0x404804
sub eax, 8
push eax
mov dword [esp + 0xec], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0xe8], ebx
mov edx, dword [ebp]
push edx
lea eax, [esp + 0xa0]
push str._sExamDataMediaFiles_
push eax
call fcn.0040f1d0
add esp, 0xc
mov byte [esp + 0x10200], 0x34
mov eax, dword [eax]
push eax
push str.MediaFiles_
lea ecx, [esp + 0x44]
call fcn.0040ed00
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x9c]
cmp eax, ebx
je 0x404863
sub eax, 8
push eax
mov dword [esp + 0xa0], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x9c], ebx
push 0x5f
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x64]
push edx
call fcn.0040be50
add esp, 0xc
lea ecx, [esp + 0x84]
push ecx
push eax
lea edx, [esp + 0xa0]
push edx
mov byte [esp + 0x1020c], 0x35
call fcn.0040bfd0
add esp, 0xc
lea ecx, [esp + 0x3c]
push ecx
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x10208], 0x36
call fcn.0040c400
mov ecx, eax
call fcn.00401fe0
mov eax, dword [esp + 0x98]
cmp eax, ebx
je 0x4048db
sub eax, 8
push eax
mov dword [esp + 0x9c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x98], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x5c]
cmp eax, ebx
je 0x4048ff
sub eax, 8
push eax
mov dword [esp + 0x60], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x5c], ebx
xor ecx, ecx
mov eax, 0xb
mov edx, 2
mul edx
seto cl
mov dword [esp + 0x24], ebx
neg ecx
or ecx, eax
push ecx
call fcn.004d37a6
add eax, 8
mov dword [esp + 0x28], eax
mov dword [eax - 8], 7
mov eax, dword [esp + 0x28]
add esp, 4
push str.Answer
mov word [eax + 0xc], bx
mov ecx, dword [esp + 0x28]
push 7
push ecx
call fcn.004f2e08
mov edx, dword [esp + 0x30]
add esp, 0xc
mov dword [edx - 4], 6
lea eax, [esp + 0x24]
push eax
mov ecx, edi
mov byte [esp + 0x10204], 0x37
call fcn.00439fa0
mov edi, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x404990
sub eax, 8
push eax
mov dword [esp + 0x28], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x24], ebx
cmp edi, ebx
jne 0x404578
cmp dword [esp + 0x90], ebx
je 0x404a89
mov esi, dword [esp + 0x80]
mov ecx, 0x547dd8
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4049d9
cmp dx, bx
je 0x4049d5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4049d9
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4049b3
xor eax, eax
jmp 0x4049de
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jge 0x404a89
push esi
call fcn.004f24b7
add esp, 4
cmp eax, 4
jge 0x404a89
add eax, 4
push eax
lea ecx, [esp + 0x68]
push 0x549e3c
push ecx
call fcn.0040f1d0
add esp, 0xc
mov esi, eax
push str._TYPE
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x68]
push eax
mov byte [esp + 0x1020c], 0x38
call fcn.0040bf20
add esp, 0xc
push esi
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x10208], 0x39
call fcn.0040c400
mov ecx, eax
call fcn.00401fe0
mov eax, dword [esp + 0x60]
cmp eax, ebx
je 0x404a65
sub eax, 8
push eax
mov dword [esp + 0x64], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x60], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x64]
cmp eax, ebx
je 0x404a89
sub eax, 8
push eax
mov dword [esp + 0x68], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x64], ebx
push 0x547ddc
lea ecx, [esp + 0x24]
call fcn.00401f50
mov byte [esp + 0x10200], 0x3a
mov edi, dword [esp + 0x28]
lea ecx, [esp + 0x20]
push ecx
mov ecx, edi
call fcn.0043a010
mov esi, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x404ad5
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x20], ebx
cmp esi, ebx
je 0x404b64
lea edx, [esp + 0x48]
push edx
mov ecx, esi
call fcn.0043a3a0
mov esi, eax
push str._SCRIPT
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x74]
push ecx
mov byte [esp + 0x1020c], 0x3b
call fcn.0040bf20
add esp, 0xc
push esi
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x10208], 0x3c
call fcn.0040c400
mov ecx, eax
call fcn.00401fe0
mov eax, dword [esp + 0x6c]
cmp eax, ebx
je 0x404b40
sub eax, 8
push eax
mov dword [esp + 0x70], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x48]
cmp eax, ebx
je 0x404b64
sub eax, 8
push eax
mov dword [esp + 0x4c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x48], ebx
push str.Queston
lea ecx, [esp + 0x1c]
call fcn.00401f50
lea edx, [esp + 0x18]
push edx
mov ecx, edi
mov byte [esp + 0x10204], 0x3d
call fcn.00439fa0
mov esi, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0x28], esi
je 0x404bb0
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
cmp esi, ebx
jne 0x4040a0
cmp dword [esp + 0xb0], ebx
jle 0x404faa
push str.Group
lea ecx, [esp + 0x94]
call fcn.00401f50
lea eax, [esp + 0x90]
mov byte [esp + 0x10200], 0x3e
mov ecx, dword [esp + 0x44]
push eax
call fcn.0043a010
mov ebp, eax
lea ecx, [esp + 0x90]
mov dword [esp + 0x5c], ebp
mov byte [esp + 0x10200], 0x1e
call fcn.004023a0
cmp ebp, ebx
je 0x404faa
jmp 0x404c17
mov ebp, dword [esp + 0x5c]
push 0x547c54
lea ecx, [esp + 0x1c]
call fcn.00401f50
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x2c]
push edx
mov ecx, ebp
mov byte [esp + 0x10208], 0x3f
call fcn.0043a4c0
mov eax, dword [eax]
push eax
call fcn.004f24b7
mov esi, eax
mov eax, dword [esp + 0x2c]
add esp, 4
cmp eax, ebx
mov dword [esp + 0xb0], esi
je 0x404c6e
sub eax, 8
push eax
mov dword [esp + 0x2c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x28], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x404c92
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
lea eax, [esp + 0x48]
push eax
mov ecx, ebp
call fcn.0043a3a0
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x10204], 0x40
call fcn.00401fe0
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x48]
cmp eax, ebx
je 0x404cd4
sub eax, 8
push eax
mov dword [esp + 0x4c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x48], ebx
mov edi, dword [esp + 0x2c]
mov ecx, dword [edi + 4]
add esi, 0xffffffff
cmp ecx, ebx
je 0x404cee
mov eax, dword [edi + 8]
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x404cf3
call fcn.004f2608
mov edx, dword [edi + 4]
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [edx + esi*4]
call fcn.00401fe0
push str.Queston
lea ecx, [esp + 0x24]
call fcn.00401f50
lea eax, [esp + 0x20]
push eax
mov ecx, ebp
mov byte [esp + 0x10204], 0x41
call fcn.0043a010
mov esi, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x404d4b
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x20], ebx
cmp esi, ebx
je 0x404f54
mov ebp, 3
xor ecx, ecx
mov eax, 7
mov edx, 2
mul edx
seto cl
mov dword [esp + 0x1c], ebx
neg ecx
or ecx, eax
push ecx
call fcn.004d37a6
add eax, 8
mov dword [esp + 0x20], eax
mov dword [eax - 8], ebp
mov eax, dword [esp + 0x20]
add esp, 4
push 0x547c54
mov word [eax + 4], bx
mov ecx, dword [esp + 0x20]
push ebp
push ecx
call fcn.004f2e08
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx - 4], 2
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x70]
push ecx
mov ecx, esi
mov byte [esp + 0x10208], 0x42
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x10204], 0x43
call fcn.00401fe0
mov eax, dword [esp + 0x6c]
cmp eax, ebx
je 0x404df1
sub eax, 8
push eax
mov dword [esp + 0x70], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x404e11
sub eax, 8
push eax
mov dword [esp + 0x20], eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x404ebb
cmp dword [eax - 4], ebx
jle 0x404ebb
mov edx, dword [esp + 0xb0]
push edx
lea eax, [esp + 0x64]
push 0x549e3c
push eax
call fcn.0040f1d0
add esp, 0xc
mov edi, eax
push str._GNO
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x6c]
push edx
mov byte [esp + 0x1020c], 0x44
call fcn.0040bf20
add esp, 0xc
push edi
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x10208], 0x45
call fcn.0040c400
mov ecx, eax
call fcn.00401fe0
mov eax, dword [esp + 0x64]
cmp eax, ebx
je 0x404e97
sub eax, 8
push eax
mov dword [esp + 0x68], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x64], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x60]
cmp eax, ebx
je 0x404ebb
sub eax, 8
push eax
mov dword [esp + 0x64], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x60], ebx
xor ecx, ecx
mov eax, 0xc
mov edx, 2
mul edx
seto cl
mov dword [esp + 0x24], ebx
neg ecx
or ecx, eax
push ecx
call fcn.004d37a6
add eax, 8
mov dword [esp + 0x28], eax
mov dword [eax - 8], 8
mov eax, dword [esp + 0x28]
add esp, 4
push str.Queston
mov word [eax + 0xe], bx
mov ecx, dword [esp + 0x28]
push 8
push ecx
call fcn.004f2e08
mov edx, dword [esp + 0x30]
add esp, 0xc
mov dword [edx - 4], 7
lea eax, [esp + 0x24]
push eax
mov ecx, esi
mov byte [esp + 0x10204], 0x46
call fcn.00439fa0
mov esi, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x404f4c
sub eax, 8
push eax
mov dword [esp + 0x28], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x24], ebx
cmp esi, ebx
jne 0x404d58
push str.Group
lea ecx, [esp + 0x78]
call fcn.00401f50
lea ecx, [esp + 0x74]
mov byte [esp + 0x10200], 0x47
push ecx
mov ecx, dword [esp + 0x60]
call fcn.00439fa0
mov esi, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x74]
cmp eax, ebx
mov dword [esp + 0x5c], esi
je 0x404fa2
sub eax, 8
push eax
mov dword [esp + 0x78], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x74], ebx
cmp esi, ebx
jne 0x404c13
push str.Multi
lea ecx, [esp + 0x30]
call fcn.00401f50
lea edx, [esp + 0x2c]
mov byte [esp + 0x10200], 0x48
mov ecx, dword [esp + 0x44]
push edx
call fcn.0043a010
mov esi, eax
mov dword [esp + 0x5c], eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x404ff8
sub eax, 8
push eax
mov dword [esp + 0x30], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x2c], ebx
cmp esi, ebx
je 0x40537f
jmp 0x405006
mov esi, dword [esp + 0x5c]
push 0x547c54
lea ecx, [esp + 0x1c]
call fcn.00401f50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
push ecx
mov ecx, esi
mov byte [esp + 0x10208], 0x49
call fcn.0043a4c0
mov eax, dword [eax]
push eax
call fcn.004f24b7
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x2c]
add esp, 4
cmp eax, ebx
je 0x40505b
sub eax, 8
push eax
mov dword [esp + 0x2c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x28], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x40507f
sub eax, 8
push eax
mov dword [esp + 0x1c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x18], ebx
push str.Queston
lea ecx, [esp + 0x24]
call fcn.00401f50
lea edx, [esp + 0x20]
push edx
mov ecx, esi
mov byte [esp + 0x10204], 0x4a
call fcn.0043a010
mov ebp, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x4050c7
sub eax, 8
push eax
mov dword [esp + 0x24], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x20], ebx
cmp ebp, ebx
je 0x405329
mov edi, 3
xor ecx, ecx
mov eax, 7
mov edx, 2
mul edx
seto cl
mov dword [esp + 0x1c], ebx
neg ecx
or ecx, eax
push ecx
call fcn.004d37a6
add eax, 8
mov dword [esp + 0x20], eax
mov dword [eax - 8], edi
mov eax, dword [esp + 0x20]
add esp, 4
push 0x547c54
mov word [eax + 4], bx
mov ecx, dword [esp + 0x20]
push edi
push ecx
call fcn.004f2e08
mov edx, dword [esp + 0x28]
add esp, 0xc
mov dword [edx - 4], 2
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x4c]
push ecx
mov ecx, ebp
mov byte [esp + 0x10208], 0x4b
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x10204], 0x4c
call fcn.00401fe0
mov eax, dword [esp + 0x48]
cmp eax, ebx
je 0x40516d
sub eax, 8
push eax
mov dword [esp + 0x4c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x48], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x40518d
sub eax, 8
push eax
mov dword [esp + 0x20], eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x405290
cmp dword [eax - 4], ebx
jle 0x405290
mov edx, dword [esp + 0xb0]
push edx
lea eax, [esp + 0x68]
push 0x549e3c
push eax
call fcn.0040f1d0
add esp, 0xc
mov esi, eax
push str._MULT
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x74]
push edx
mov byte [esp + 0x1020c], 0x4d
call fcn.0040bf20
add esp, 0xc
push esi
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x10208], 0x4e
call fcn.0040c400
mov ecx, eax
call fcn.00401fe0
mov eax, dword [esp + 0x6c]
cmp eax, ebx
je 0x405213
sub eax, 8
push eax
mov dword [esp + 0x70], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x64]
cmp eax, ebx
je 0x405237
sub eax, 8
push eax
mov dword [esp + 0x68], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x64], ebx
push str._ONCE
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x68]
push ecx
call fcn.0040bf20
add esp, 0xc
push str.true
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x10208], 0x4f
call fcn.0040c400
mov ecx, eax
call fcn.00402060
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x60]
cmp eax, ebx
je 0x405290
sub eax, 8
push eax
mov dword [esp + 0x64], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x60], ebx
xor ecx, ecx
mov eax, 0xc
mov edx, 2
mul edx
seto cl
mov dword [esp + 0x24], ebx
neg ecx
or ecx, eax
push ecx
call fcn.004d37a6
add eax, 8
mov dword [esp + 0x28], eax
mov dword [eax - 8], 8
mov eax, dword [esp + 0x28]
add esp, 4
push str.Queston
mov word [eax + 0xe], bx
mov ecx, dword [esp + 0x28]
push 8
push ecx
call fcn.004f2e08
mov edx, dword [esp + 0x30]
add esp, 0xc
mov dword [edx - 4], 7
lea eax, [esp + 0x24]
push eax
mov ecx, ebp
mov byte [esp + 0x10204], 0x50
call fcn.00439fa0
mov ebp, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x405321
sub eax, 8
push eax
mov dword [esp + 0x28], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x24], ebx
cmp ebp, ebx
jne 0x4050d4
push str.Multi
lea ecx, [esp + 0x78]
call fcn.00401f50
lea ecx, [esp + 0x74]
mov byte [esp + 0x10200], 0x51
push ecx
mov ecx, dword [esp + 0x60]
call fcn.00439fa0
mov esi, eax
mov byte [esp + 0x10200], 0x1e
mov eax, dword [esp + 0x74]
cmp eax, ebx
mov dword [esp + 0x5c], esi
je 0x405377
sub eax, 8
push eax
mov dword [esp + 0x78], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x74], ebx
cmp esi, ebx
jne 0x405002
mov edx, dword [esp + 0x7c]
push edx
call fcn.004f24b7
mov edi, dword [esp + 0x44]
add esp, 4
cmp eax, ebx
mov dword [edi + 0x64], eax
jg 0x40546a
mov ecx, dword [esp + 0xa0]
lea eax, [esp + 0x90]
push eax
call fcn.0040f7a0
push 0x14
lea ecx, [esp + 0xb4]
push ecx
mov ecx, eax
mov byte [esp + 0x10208], 0x52
call fcn.0040e7e0
mov byte [esp + 0x10200], 0x53
mov edx, dword [eax]
push edx
lea eax, [esp + 0xa4]
push 0x547e38
push eax
call fcn.0040f1d0
add esp, 0xc
push ebx
mov byte [esp + 0x10204], 0x54
mov eax, dword [eax]
push ebx
push eax
call fcn.004db332
lea ecx, [esp + 0xa0]
call fcn.004023a0
lea ecx, [esp + 0xb0]
call fcn.004023a0
lea ecx, [esp + 0x90]
call fcn.004023a0
lea ecx, [esp + 0x4c]
mov byte [esp + 0x10200], 0x1d
call fcn.0040cda0
lea ecx, [esp + 0x3c]
call fcn.004023a0
lea ecx, [esp + 0x8c]
call fcn.004023a0
lea ecx, [esp + 0x80]
call fcn.004023a0
lea ecx, [esp + 0x84]
call fcn.004023a0
lea ecx, [esp + 0x38]
call fcn.004023a0
jmp 0x403f1e
lea esi, [edi + 4]
call fcn.0040c240
mov ebp, dword [edi + 0x64]
sub esp, 0x7c
mov ecx, esp
mov dword [esp + 0x11c], esp
push ecx
call fcn.00402a40
mov ecx, ebp
mov edx, esi
call fcn.0040c7a0
lea ecx, [esp + 0x1ac]
call fcn.0043a360
lea ecx, [esp + 0x24]
call fcn.00401fb0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x10200], 0x55
call fcn.00401fb0
push fcn.004023a0
push fcn.00401fb0
push 8
push 4
lea edx, [esp + 0x120]
push edx
mov byte [esp + 0x10214], 0x56
call fcn.004f3341
mov byte [esp + 0x10200], 0x57
mov ebp, dword [esp + 0x58]
mov eax, dword [ebp]
cmp eax, ebx
je 0x4060fb
cmp dword [eax - 4], ebx
jle 0x4060fb
push ebp
lea ecx, [esp + 0x1b0]
call fcn.0043aa00
test eax, eax
jne 0x4055b4
lea eax, [esp + 0xb0]
push eax
mov ecx, ebp
call fcn.0040f7a0
push 0x14
lea ecx, [esp + 0xa4]
push ecx
mov ecx, eax
mov byte [esp + 0x10208], 0x58
call fcn.0040e7e0
push str....
push eax
lea edx, [esp + 0x60]
push edx
mov byte [esp + 0x1020c], 0x59
call fcn.0040bf20
add esp, 0xc
push ebx
mov byte [esp + 0x10204], 0x5a
mov eax, dword [eax]
push ebx
push eax
call fcn.004db332
lea ecx, [esp + 0x58]
call fcn.004023a0
lea ecx, [esp + 0xa0]
call fcn.004023a0
lea ecx, [esp + 0xb0]
call fcn.004023a0
push fcn.004023a0
push 8
push 4
lea eax, [esp + 0x11c]
push eax
mov byte [esp + 0x10210], 0x56
call fcn.004f2a5e
lea ecx, [esp + 0x1c]
call fcn.004023a0
lea ecx, [esp + 0x24]
jmp 0x405419
push str.ExamMix
lea ecx, [esp + 0x94]
call fcn.00401f50
lea ecx, [esp + 0x90]
push ecx
lea ecx, [esp + 0x1b0]
mov byte [esp + 0x10204], 0x5b
call fcn.0043aea0
mov ebp, eax
lea ecx, [esp + 0x90]
mov dword [esp + 0x44], ebp
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
cmp ebp, ebx
je 0x4060dc
push str.PaperID
lea ecx, [esp + 0xac]
call fcn.00401f50
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x5c]
push eax
mov ecx, ebp
mov byte [esp + 0x10208], 0x5c
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x10204], 0x5d
call fcn.00401fe0
lea ecx, [esp + 0x58]
call fcn.004023a0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
lea ebp, [edi + 0x30]
lea ecx, [esp + 0x68]
push ebp
push ecx
call fcn.0040c120
add esp, 8
test al, al
je 0x4056c0
mov edx, dword [ebp]
mov eax, dword [esp + 0x68]
push edx
push eax
lea ecx, [esp + 0x60]
push 0x547ea4
push ecx
call fcn.0040f1d0
add esp, 0x10
mov byte [esp + 0x10200], 0x5e
mov eax, dword [eax]
push ebx
push ebx
push eax
call fcn.004db332
lea ecx, [esp + 0x58]
call fcn.004023a0
push fcn.004023a0
push 8
push 4
lea edx, [esp + 0x11c]
push edx
jmp 0x405595
push str.SEAT
lea ecx, [esp + 0xac]
call fcn.00401f50
lea eax, [esp + 0xa8]
mov byte [esp + 0x10200], 0x60
mov ecx, dword [esp + 0x44]
push eax
call fcn.0043a010
lea ecx, [esp + 0xa8]
mov ebp, eax
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
cmp ebp, ebx
mov edi, dword [esp + 0x10210]
je 0x4057af
nop
push 0x547c54
lea ecx, [esp + 0x94]
call fcn.00401f50
lea ecx, [esp + 0x90]
push ecx
lea edx, [esp + 0x5c]
push edx
mov ecx, ebp
mov byte [esp + 0x10208], 0x61
call fcn.0043a4c0
mov eax, dword [eax]
push eax
call fcn.004f24b7
add esp, 4
cmp eax, edi
lea ecx, [esp + 0x58]
sete byte [esp + 0x17]
call fcn.004023a0
lea ecx, [esp + 0x90]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
cmp byte [esp + 0x17], bl
jne 0x4057cf
push str.SEAT
lea ecx, [esp + 0x2c]
call fcn.00401f50
lea eax, [esp + 0x28]
push eax
mov ecx, ebp
mov byte [esp + 0x10204], 0x62
call fcn.00439fa0
lea ecx, [esp + 0x28]
mov ebp, eax
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
cmp ebp, ebx
jne 0x405710
push edi
lea ecx, [esp + 0x5c]
push 0x547f28
push ecx
call fcn.0040f1d0
add esp, 0xc
mov byte [esp + 0x10200], 0x63
jmp 0x405697
push str.Queston
lea ecx, [esp + 0x94]
call fcn.00401f50
lea eax, [esp + 0x90]
push eax
mov ecx, ebp
mov byte [esp + 0x10204], 0x64
call fcn.0043a010
lea ecx, [esp + 0x90]
mov ebp, eax
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
cmp ebp, ebx
je 0x40677c
mov edi, dword [esp + 0x40]
lea esp, [esp]
push 0x547c54
lea ecx, [esp + 0xac]
call fcn.00401f50
lea ecx, [esp + 0xa8]
push ecx
lea edx, [esp + 0x5c]
push edx
mov ecx, ebp
mov byte [esp + 0x10208], 0x65
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x10204], 0x66
call fcn.00401fe0
lea ecx, [esp + 0x58]
call fcn.004023a0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f48
lea ecx, [esp + 0x2c]
call fcn.00401f50
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0xa4]
push ecx
mov ecx, ebp
mov byte [esp + 0x10208], 0x67
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x10204], 0x68
call fcn.00401fe0
lea ecx, [esp + 0xa0]
call fcn.004023a0
lea ecx, [esp + 0x28]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f4c
lea ecx, [esp + 0x4c]
call fcn.00401f50
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0xb4]
push eax
mov ecx, ebp
mov byte [esp + 0x10208], 0x69
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x114]
mov byte [esp + 0x10204], 0x6a
call fcn.00401fe0
lea ecx, [esp + 0xb0]
call fcn.004023a0
lea ecx, [esp + 0x48]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f54
lea ecx, [esp + 0x70]
call fcn.00401f50
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0xc0]
push edx
mov ecx, ebp
mov byte [esp + 0x10208], 0x6b
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x118]
mov byte [esp + 0x10204], 0x6c
call fcn.00401fe0
lea ecx, [esp + 0xbc]
call fcn.004023a0
lea ecx, [esp + 0x6c]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f5c
lea ecx, [esp + 0x68]
call fcn.00401f50
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xd4]
push ecx
mov ecx, ebp
mov byte [esp + 0x10208], 0x6d
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x11c]
mov byte [esp + 0x10204], 0x6e
call fcn.00401fe0
lea ecx, [esp + 0xd0]
call fcn.004023a0
lea ecx, [esp + 0x64]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f64
lea ecx, [esp + 0x64]
call fcn.00401f50
lea edx, [esp + 0x60]
push edx
lea eax, [esp + 0xbc]
push eax
mov ecx, ebp
mov byte [esp + 0x10208], 0x6f
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x120]
mov byte [esp + 0x10204], 0x70
call fcn.00401fe0
lea ecx, [esp + 0xb8]
call fcn.004023a0
lea ecx, [esp + 0x60]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f6c
lea ecx, [esp + 0x60]
call fcn.00401f50
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0xe8]
push edx
mov ecx, ebp
mov byte [esp + 0x10208], 0x71
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x124]
mov byte [esp + 0x10204], 0x72
call fcn.00401fe0
lea ecx, [esp + 0xe4]
call fcn.004023a0
lea ecx, [esp + 0x5c]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f74
lea ecx, [esp + 0x9c]
call fcn.00401f50
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0xe0]
push ecx
mov ecx, ebp
mov byte [esp + 0x10208], 0x73
call fcn.0043a4c0
mov byte [esp + 0x10200], 0x74
push eax
lea ecx, [esp + 0x128]
call fcn.00401fe0
lea ecx, [esp + 0xdc]
call fcn.004023a0
lea ecx, [esp + 0x98]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f7c
lea ecx, [esp + 0xa0]
call fcn.00401f50
lea edx, [esp + 0x9c]
push edx
lea eax, [esp + 0xc4]
push eax
mov ecx, ebp
mov byte [esp + 0x10208], 0x75
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x12c]
mov byte [esp + 0x10204], 0x76
call fcn.00401fe0
lea ecx, [esp + 0xc0]
call fcn.004023a0
lea ecx, [esp + 0x9c]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
push 0x547f84
lea ecx, [esp + 0xec]
call fcn.00401f50
lea ecx, [esp + 0xe8]
push ecx
lea edx, [esp + 0xc8]
push edx
mov ecx, ebp
mov byte [esp + 0x10208], 0x77
call fcn.0043a4c0
push eax
lea ecx, [esp + 0x130]
mov byte [esp + 0x10204], 0x78
call fcn.00401fe0
lea ecx, [esp + 0xc4]
call fcn.004023a0
lea ecx, [esp + 0xe8]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
mov eax, dword [esp + 0x24]
push eax
call fcn.004f24b7
add esp, 4
cmp eax, 1
jl 0x406091
cmp eax, dword [edi + 0x64]
jg 0x406091
lea ecx, [esp + 0x1c]
lea edi, [eax - 1]
push ecx
call fcn.0040c200
mov ecx, eax
add ecx, 4
call fcn.00401fe0
push str._TYPE
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0xd0]
push eax
call fcn.0040bf20
add esp, 0xc
push eax
lea ecx, [esp + 0x1a0]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040c560
mov edx, dword [eax]
mov eax, dword [eax + 4]
lea ecx, [esp + 0xc8]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
call fcn.004023a0
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0xf8]
mov dword [esp + 0xfc], ecx
lea edx, [esp + 0x4c]
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0xfc], edx
call fcn.0040c620
test al, al
je 0x405c92
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
push eax
call fcn.0040c200
mov ecx, eax
add ecx, 8
call fcn.00401fe0
push str._ONCE
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0xe0]
push edx
call fcn.0040bf20
add esp, 0xc
push eax
lea eax, [esp + 0x1a8]
push eax
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0xd8]
mov dword [esp + 0x34], edx
call fcn.004023a0
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x100]
mov dword [esp + 0x100], ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x108], eax
call fcn.0040c620
test al, al
je 0x405d38
push str.true
lea ecx, [esp + 0x34]
call fcn.0040c5f0
add eax, 4
push eax
call fcn.0040c080
add esp, 8
neg al
sbb eax, eax
neg eax
mov dword [esp + 0x88], eax
call fcn.0040c200
mov ecx, dword [esp + 0x88]
mov dword [eax + 0xc], ecx
push str._GNO
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0xe8]
push eax
call fcn.0040bf20
add esp, 0xc
push eax
lea ecx, [esp + 0x198]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040c560
mov edx, dword [eax]
mov eax, dword [eax + 4]
lea ecx, [esp + 0xe0]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
call fcn.004023a0
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0x108]
mov dword [esp + 0x10c], ecx
lea edx, [esp + 0x4c]
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x10c], edx
call fcn.0040c620
test al, al
je 0x405dd4
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
mov eax, dword [eax]
push eax
call fcn.004f24b7
add esp, 4
mov dword [esp + 0x88], eax
call fcn.0040c200
mov ecx, dword [esp + 0x88]
mov dword [eax], ecx
push str._SCRIPT
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0xd4]
push eax
call fcn.0040bf20
add esp, 0xc
push eax
lea ecx, [esp + 0x180]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040c560
mov edx, dword [eax]
mov eax, dword [eax + 4]
lea ecx, [esp + 0xcc]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
call fcn.004023a0
mov ecx, dword [esp + 0x50]
lea eax, [esp + 0xf0]
mov dword [esp + 0xf4], ecx
lea edx, [esp + 0x4c]
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0xf4], edx
call fcn.0040c620
test al, al
je 0x405e60
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
push eax
call fcn.0040c200
mov ecx, eax
add ecx, 0x18
call fcn.00401fe0
push str._MULT
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0xdc]
push edx
call fcn.0040bf20
add esp, 0xc
push eax
lea eax, [esp + 0x190]
push eax
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0xd4]
mov dword [esp + 0x34], edx
call fcn.004023a0
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x138]
mov dword [esp + 0x138], ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x140], eax
call fcn.0040c620
test al, al
je 0x405efd
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
mov eax, dword [eax]
push eax
call fcn.004f24b7
add esp, 4
mov dword [esp + 0x88], eax
call fcn.0040c200
mov ecx, dword [esp + 0x88]
mov dword [eax + 0x70], ecx
call fcn.0040c200
lea edx, [esp + 0x1c]
mov dword [eax + 0x10], ebx
push edx
lea eax, [esp + 0x188]
push eax
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], edx
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x140]
mov dword [esp + 0x140], ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x148], eax
call fcn.0040c620
test al, al
je 0x405f6f
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
push eax
call fcn.0040c200
mov ecx, eax
add ecx, 0x14
call fcn.00401fe0
lea eax, [esp + 0x4c]
mov dword [esp + 0x130], eax
lea ecx, [esp + 0x110]
mov eax, 0x1c
mov edx, ecx
sub eax, edx
mov dword [esp + 0x2c], eax
mov eax, 0x3c
sub eax, ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x74], eax
mov dword [esp + 0x88], 8
jmp 0x405fb0
mov edx, dword [esp + 0x44]
push edx
call fcn.0040c200
mov ecx, eax
add ecx, dword [esp + 0x30]
add ecx, dword [esp + 0x48]
call fcn.00401fe0
push 0x5f
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.0040be50
add esp, 0xc
mov byte [esp + 0x10200], 0x79
mov edx, dword [esp + 0x44]
push edx
push eax
lea eax, [esp + 0x20]
push eax
call fcn.0040bfd0
add esp, 0xc
push eax
lea ecx, [esp + 0x178]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040c560
mov edx, dword [eax]
mov eax, dword [eax + 4]
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
call fcn.004023a0
lea ecx, [esp + 0x20]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
mov ecx, dword [esp + 0x50]
lea edx, [esp + 0x130]
mov dword [esp + 0x134], ecx
push edx
lea ecx, [esp + 0x34]
call fcn.0040c620
test al, al
je 0x406072
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
push eax
call fcn.0040c200
mov ecx, eax
add ecx, dword [esp + 0x78]
add ecx, dword [esp + 0x48]
call fcn.00401fe0
add dword [esp + 0x44], 4
sub dword [esp + 0x88], 1
jne 0x405fb0
call fcn.0040c200
mov edi, dword [esp + 0x40]
mov dword [eax + 0x60], ebx
push str.Queston
lea ecx, [esp + 0xa8]
call fcn.00401f50
lea eax, [esp + 0xa4]
push eax
mov ecx, ebp
mov byte [esp + 0x10204], 0x7a
call fcn.00439fa0
lea ecx, [esp + 0xa4]
mov ebp, eax
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
cmp ebp, ebx
jne 0x405820
jmp 0x406780
lea ecx, [esp + 0x58]
push str.Mix
push ecx
call fcn.0040f1d0
add esp, 8
mov byte [esp + 0x10200], 0x5f
jmp 0x405697
xor eax, eax
cmp dword [edi + 0x64], ebx
jle 0x40677c
add eax, 1
push eax
mov dword [esp + 0xa4], eax
lea eax, [esp + 0x28]
push 0x549e3c
push eax
call fcn.00402230
add esp, 0xc
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x20]
call fcn.00401fe0
push str.1234678
lea ecx, [esp + 0x114]
call fcn.00402060
push 0x547f90
lea ecx, [esp + 0x118]
call fcn.00402060
push 0x547f94
lea ecx, [esp + 0x11c]
call fcn.00402060
push 0x547f98
lea ecx, [esp + 0x120]
call fcn.00402060
push 0x547dd4
lea ecx, [esp + 0x124]
call fcn.00402060
push 0x547f9c
lea ecx, [esp + 0x128]
call fcn.00402060
push 0x547fa0
lea ecx, [esp + 0x12c]
call fcn.00402060
push 0x547fa4
lea ecx, [esp + 0x130]
call fcn.00402060
mov edx, dword [esp + 0x24]
push edx
call fcn.004f24b7
lea edi, [eax - 1]
add esp, 4
lea eax, [esp + 0x1c]
push eax
call fcn.0040c200
mov ecx, eax
add ecx, 4
call fcn.00401fe0
push str._TYPE
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x30]
push edx
call fcn.0040bf20
add esp, 0xc
push eax
lea eax, [esp + 0x178]
push eax
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ebp, dword [eax]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x28]
cmp eax, ebx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ecx
je 0x40622f
sub eax, 8
push eax
mov dword [esp + 0x2c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x28], ebx
cmp ebp, ebx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x134], edx
je 0x406246
lea eax, [esp + 0x4c]
cmp ebp, eax
je 0x40624b
call fcn.004f2608
mov ecx, dword [esp + 0x134]
cmp dword [esp + 0x34], ecx
je 0x406274
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
push eax
call fcn.0040c200
mov ecx, eax
add ecx, 8
call fcn.00401fe0
push str._ONCE
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x50]
push eax
call fcn.0040bf20
add esp, 0xc
push eax
lea ecx, [esp + 0x188]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ebp, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x48]
cmp eax, ebx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], edx
je 0x4062c6
sub eax, 8
push eax
mov dword [esp + 0x4c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x48], ebx
cmp ebp, ebx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x144], eax
je 0x4062dd
lea ecx, [esp + 0x4c]
cmp ebp, ecx
je 0x4062e2
call fcn.004f2608
mov edx, dword [esp + 0x144]
cmp dword [esp + 0x34], edx
je 0x406319
push str.true
lea ecx, [esp + 0x34]
call fcn.0040c5f0
add eax, 4
push eax
call fcn.0040c080
add esp, 8
neg al
sbb eax, eax
neg eax
mov ebp, eax
call fcn.0040c200
mov dword [eax + 0xc], ebp
push str._GNO
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x74]
push ecx
call fcn.0040bf20
add esp, 0xc
push eax
lea edx, [esp + 0x190]
push edx
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ebp, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x6c]
cmp eax, ebx
mov dword [esp + 0x30], ebp
je 0x40636b
sub eax, 8
push eax
mov dword [esp + 0x70], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x6c], ebx
cmp ebp, ebx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x13c], ecx
je 0x406382
lea edx, [esp + 0x4c]
cmp ebp, edx
je 0x406387
call fcn.004f2608
mov eax, dword [esp + 0x13c]
cmp dword [esp + 0x34], eax
je 0x4063b4
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
mov eax, dword [eax]
push eax
call fcn.004f24b7
add esp, 4
mov ebp, eax
call fcn.0040c200
mov dword [eax], ebp
push str._SCRIPT
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x6c]
push edx
call fcn.0040bf20
add esp, 0xc
push eax
lea eax, [esp + 0x180]
push eax
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ebp, dword [eax]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x64]
cmp eax, ebx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], ecx
je 0x406406
sub eax, 8
push eax
mov dword [esp + 0x68], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x64], ebx
cmp ebp, ebx
mov edx, dword [esp + 0x50]
mov dword [esp + 0xb4], edx
je 0x40641d
lea eax, [esp + 0x4c]
cmp ebp, eax
je 0x406422
call fcn.004f2608
mov ecx, dword [esp + 0xb4]
cmp dword [esp + 0x34], ecx
je 0x40644b
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
push eax
call fcn.0040c200
mov ecx, eax
add ecx, 0x18
call fcn.00401fe0
push str._MULT
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x68]
push eax
call fcn.0040bf20
add esp, 0xc
push eax
lea ecx, [esp + 0x198]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ebp, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [esp + 0x60]
cmp eax, ebx
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], edx
je 0x40649d
sub eax, 8
push eax
mov dword [esp + 0x64], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x60], ebx
cmp ebp, ebx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x94], eax
je 0x4064b4
lea ecx, [esp + 0x4c]
cmp ebp, ecx
je 0x4064b9
call fcn.004f2608
mov edx, dword [esp + 0x94]
cmp dword [esp + 0x34], edx
je 0x4064e7
lea ecx, [esp + 0x30]
call fcn.0040c5f0
add eax, 4
mov eax, dword [eax]
push eax
call fcn.004f24b7
add esp, 4
mov ebp, eax
call fcn.0040c200
mov dword [eax + 0x70], ebp
call fcn.0040c200
mov dword [eax + 0x10], ebx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1a8]
push ecx
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ecx, dword [eax]
cmp ecx, ebx
mov ebp, dword [eax + 4]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ebp
mov dword [esp + 0xac], edx
je 0x406529
lea eax, [esp + 0x4c]
cmp ecx, eax
je 0x40652e
call fcn.004f2608
cmp ebp, dword [esp + 0xac]
je 0x4065a0
lea ecx, [esp + 0x30]
call fcn.0040c5f0
mov ecx, eax
lea edx, [esp + 0x58]
add ecx, 4
push edx
call fcn.00403520
add esp, 4
push eax
mov byte [esp + 0x10204], 0x7b
call fcn.0040c200
mov ecx, eax
add ecx, 0x78
call fcn.00401fe0
lea ecx, [esp + 0x58]
mov byte [esp + 0x10200], 0x57
call fcn.004023a0
lea ecx, [esp + 0x30]
call fcn.0040c5f0
mov ebx, eax
add ebx, 4
call fcn.0040b790
push eax
call fcn.0040c200
mov ecx, eax
add ecx, 0x14
call fcn.00401fe0
xor ebx, ebx
lea eax, [esp + 0x110]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x9c], eax
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x4065d5
mov ecx, dword [esi + 8]
sub ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4065da
call fcn.004f2608
mov edx, dword [esi + 4]
mov ebp, dword [esp + 0x9c]
mov ecx, edi
shl ecx, 5
sub ecx, edi
add ecx, dword [esp + 0x2c]
push ebp
lea ecx, [edx + ecx*4 + 0x1c]
call fcn.00401fe0
push 0x5f
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0xa0]
push ecx
call fcn.0040be50
add esp, 0xc
push ebp
push eax
lea edx, [esp + 0x64]
push edx
mov byte [esp + 0x1020c], 0x7c
call fcn.0040bfd0
add esp, 0xc
push eax
lea eax, [esp + 0x1a0]
push eax
lea ecx, [esp + 0x54]
call fcn.0040c560
mov ecx, dword [eax + 4]
mov ebp, dword [eax]
mov eax, dword [esp + 0x5c]
cmp eax, ebx
mov dword [esp + 0x34], ecx
je 0x40665e
sub eax, 8
push eax
mov dword [esp + 0x60], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x5c], ebx
mov byte [esp + 0x10200], 0x57
mov eax, dword [esp + 0x98]
cmp eax, ebx
je 0x40668b
sub eax, 8
push eax
mov dword [esp + 0x9c], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x98], ebx
cmp ebp, ebx
mov edx, dword [esp + 0x50]
mov dword [esp + 0xec], edx
je 0x4066a2
lea eax, [esp + 0x4c]
cmp ebp, eax
je 0x4066a7
call fcn.004f2608
mov ecx, dword [esp + 0x34]
cmp ecx, dword [esp + 0xec]
je 0x406712
cmp ebp, ebx
jne 0x4066bd
call fcn.004f2608
mov edx, dword [esp + 0x34]
cmp edx, dword [ebp + 4]
jne 0x4066cb
call fcn.004f2608
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x4066ee
mov ecx, dword [esi + 8]
sub ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x4066f3
call fcn.004f2608
mov eax, dword [esp + 0x34]
mov edx, dword [esi + 4]
mov ecx, edi
shl ecx, 5
sub ecx, edi
add ecx, dword [esp + 0x2c]
add eax, 0x10
push eax
lea ecx, [edx + ecx*4 + 0x3c]
call fcn.00401fe0
mov eax, dword [esp + 0x2c]
add dword [esp + 0x9c], 4
add eax, 1
cmp eax, 8
mov dword [esp + 0x2c], eax
jl 0x4065b2
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x406751
mov ecx, dword [esi + 8]
sub ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x406756
call fcn.004f2608
mov ecx, dword [esi + 4]
mov edx, dword [esp + 0x40]
mov eax, edi
shl eax, 5
sub eax, edi
mov dword [ecx + eax*4 + 0x60], ebx
mov eax, dword [esp + 0xa0]
cmp eax, dword [edx + 0x64]
jl 0x406106
mov edi, edx
jmp 0x406780
mov edi, dword [esp + 0x40]
lea ecx, [esp + 0x160]
call fcn.00434f90
mov byte [esp + 0x10200], 0x7d
push ebx
lea ecx, [esp + 0x44]
mov dword [esp + 0x44], ebx
call fcn.00402700
cmp eax, 1
jne 0x4067ae
mov eax, dword [esp + 0x40]
mov dword [eax - 4], ebx
mov byte [esp + 0x10200], 0x7e
push ebx
lea ecx, [esp + 0x48]
mov dword [esp + 0x48], ebx
call fcn.00402700
cmp eax, 1
jne 0x4067d0
mov ecx, dword [esp + 0x44]
mov dword [ecx - 4], ebx
mov byte [esp + 0x10200], 0x7f
mov edx, dword [edi + 0x5c]
mov eax, dword [edi + 0x50]
mov ecx, dword [edi + 0x4c]
push edx
mov edx, dword [edi + 0x48]
push eax
mov eax, dword [edi + 0x44]
push ecx
mov ecx, dword [edi + 0x40]
push edx
mov edx, dword [edi + 0x3c]
push eax
mov eax, dword [edi + 0x38]
push ecx
push edx
push eax
lea ecx, [esp + 0x64]
push 0x547fa8
push ecx
mov ebp, 0x7f
call fcn.00402230
mov esi, dword [esp + 0x6c]
push esi
lea edx, [esp + 0x6c]
push str.SELECT_REMAIN_TIME_FROM_AnswerTable_WHERE__s
push edx
call fcn.00402230
add esp, 0x34
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x44]
call fcn.0040eef0
lea ecx, [esp + 0x160]
push ecx
push eax
mov byte [esp + 0x10208], 0x80
push edi
mov dword [esp + 0x34], 1
call fcn.004081a0
test eax, eax
je 0x40686c
lea ecx, [esp + 0x160]
call fcn.004354a0
test eax, eax
mov byte [esp + 0x17], 1
jg 0x406870
mov byte [esp + 0x17], bl
mov dword [esp + 0x10200], ebp
mov eax, dword [esp + 0x90]
cmp eax, ebx
je 0x406895
sub eax, 8
push eax
mov dword [esp + 0x94], eax
call fcn.004d37ab
add esp, 4
cmp byte [esp + 0x17], bl
je 0x4068c2
push ebx
lea ecx, [esp + 0x164]
call fcn.00435770
push ebx
push str.REMAIN_TIME
lea ecx, [esp + 0x168]
call fcn.00435ba0
mov dword [edi + 0x70], eax
jmp 0x4069cf
mov edx, dword [esp + 0x10214]
mov eax, dword [edi + 0x64]
mov ecx, dword [edi + 0x34]
push edx
mov edx, dword [edi + 0x30]
push eax
mov eax, dword [edi + 0x58]
push ecx
mov ecx, dword [edi + 0x54]
push edx
mov edx, dword [edi + 0x70]
push eax
mov eax, dword [edi + 0x5c]
push ecx
mov ecx, dword [edi + 0x50]
push edx
mov edx, dword [edi + 0x4c]
push eax
mov eax, dword [edi + 0x48]
push ecx
mov ecx, dword [edi + 0x44]
push edx
mov edx, dword [edi + 0x40]
push eax
mov eax, dword [edi + 0x3c]
push ecx
mov ecx, dword [edi + 0x38]
push edx
push eax
push ecx
lea edx, [esp + 0x7c]
push str.INSERT_INTO_AnswerTable__EXAM_ID_EXAM_YEAR_EXAM_NOT_EXAM_DATE_EXAM_TERM_EXAM_ROOM_ID_USER_NO_SEAT_NO_REMAIN_TIME_USER_NAME_USER_ID_PAPER_ID_PAPER_SET_EXAM_COUNT_SUBTITLE__VALUES___s__s__s__s__s__s__s__s__d__s__s__s__s__d__d_
push edx
call fcn.00402230
add esp, 0x44
lea ecx, [esp + 0x2c]
call fcn.00401fb0
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x10204], 0x81
call fcn.0040eef0
lea ecx, [esp + 0x2c]
push ecx
push ebx
push eax
push edi
mov byte [esp + 0x10210], 0x82
call fcn.004080a0
test eax, eax
mov byte [esp + 0x10200], 0x81
mov eax, dword [esp + 0x90]
sete byte [esp + 0x17]
cmp eax, ebx
je 0x406978
sub eax, 8
push eax
mov dword [esp + 0x94], eax
call fcn.004d37ab
add esp, 4
cmp byte [esp + 0x17], bl
je 0x4069be
mov edx, dword [esp + 0x2c]
push ebx
push ebx
push edx
call fcn.004db332
lea ecx, [esp + 0x2c]
call fcn.004023a0
lea ecx, [esp + 0x44]
call fcn.004023a0
lea ecx, [esp + 0x40]
call fcn.004023a0
lea ecx, [esp + 0x160]
mov byte [esp + 0x10200], 0x57
call fcn.00435090
jmp 0x405584
lea ecx, [esp + 0x2c]
mov byte [esp + 0x10200], 0x7f
call fcn.004023a0
push esi
lea ecx, [esp + 0x44]
push str.SELECT_EXAM_ID_FROM_MarkInfoTable_WHERE__s
push ecx
call fcn.00402230
add esp, 0xc
lea edx, [esp + 0x58]
push edx
lea ecx, [esp + 0x44]
call fcn.0040eef0
lea ecx, [esp + 0x160]
push ecx
push eax
mov byte [esp + 0x10208], 0x83
push edi
mov dword [esp + 0x34], 2
call fcn.004081a0
test eax, eax
je 0x406a28
lea ecx, [esp + 0x160]
call fcn.004354a0
test eax, eax
mov byte [esp + 0x17], 1
je 0x406a2c
mov byte [esp + 0x17], bl
lea ecx, [esp + 0x58]
mov dword [esp + 0x10200], ebp
call fcn.004023a0
cmp byte [esp + 0x17], bl
je 0x406ad7
mov edx, dword [edi + 0x5c]
mov eax, dword [edi + 0x50]
mov ecx, dword [edi + 0x4c]
push edx
mov edx, dword [edi + 0x48]
push eax
mov eax, dword [edi + 0x44]
push ecx
mov ecx, dword [edi + 0x40]
push edx
mov edx, dword [edi + 0x3c]
push eax
mov eax, dword [edi + 0x38]
push ecx
push edx
push eax
lea ecx, [esp + 0x60]
push str.INSERT_INTO_MarkInfoTable__EXAM_ID_EXAM_YEAR_EXAM_NOT_EXAM_DATE_EXAM_TERM_EXAM_ROOM_ID_USER_NO_SEAT_NO__VALUES___s__s__s__s__s__s__s__s_
push ecx
call fcn.00402230
add esp, 0x28
lea ecx, [esp + 0x2c]
call fcn.00401fb0
lea edx, [esp + 0x48]
push edx
lea ecx, [esp + 0x44]
mov byte [esp + 0x10204], 0x84
call fcn.0040eef0
lea ecx, [esp + 0x2c]
push ecx
push ebx
push eax
push edi
mov byte [esp + 0x10210], 0x85
call fcn.004080a0
test eax, eax
lea ecx, [esp + 0x48]
sete byte [esp + 0x17]
mov byte [esp + 0x10200], 0x84
call fcn.004023a0
cmp byte [esp + 0x17], bl
jne 0x40697e
lea ecx, [esp + 0x2c]
call fcn.004023a0
cmp esi, ebx
je 0x406ae7
lea eax, [esi - 8]
push eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x40]
cmp eax, ebx
je 0x406afb
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
lea ecx, [esp + 0x160]
mov byte [esp + 0x10200], 0x57
call fcn.00435090
push fcn.004023a0
push 8
push 4
lea ecx, [esp + 0x11c]
push ecx
mov byte [esp + 0x10210], 0x56
call fcn.004f2a5e
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x406b41
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x406b55
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
lea ecx, [esp + 0x4c]
mov byte [esp + 0x10200], 0x1d
call fcn.0040cda0
mov eax, dword [esp + 0x3c]
cmp eax, ebx
je 0x406b7a
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x8c]
cmp eax, ebx
je 0x406b91
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x80]
cmp eax, ebx
je 0x406ba8
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x84]
cmp eax, ebx
je 0x406bbf
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
lea ecx, [esp + 0x38]
call fcn.004023a0
lea ecx, [esp + 0x148]
mov byte [esp + 0x10200], 0x15
call fcn.00431600
lea ecx, [esp + 0x70]
call fcn.004023a0
lea ecx, [esp + 0x78]
call fcn.004023a0
lea ecx, [esp + 0x7c]
call fcn.004023a0
lea ecx, [esp + 0x68]
call fcn.004023a0
lea esi, [esp + 0x1ac]
mov dword [esp + 0x10200], 0xffffffff
call fcn.00406d80
mov eax, 1
jmp 0x406ca3
push ebx
push ebx
push str.ExamQueston
call fcn.004db332
cmp esi, ebx
je 0x406c3d
lea eax, [esi - 8]
push eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x7c]
cmp eax, ebx
je 0x406c51
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
mov eax, dword [esp + 0x68]
cmp eax, ebx
je 0x406c65
add eax, 0xfffffff8
push eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x10200], 0xffffffff
mov eax, dword [esp + 0x101f0]
cmp eax, ebx
je 0x406c95
sub eax, 8
push eax
mov dword [esp + 0x101f4], eax
call fcn.004d37ab
add esp, 4
mov dword [esp + 0x101f0], ebx
lea ecx, [esp + 0x1dc]
call fcn.0040cb30
xor eax, eax
mov ecx, dword [esp + 0x101f8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x101e0]
xor ecx, esp
call fcn.004f2ac1
add esp, 0x101f0
ret 0x10