Function at 0x49bce0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f4108
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa58
push ebx
push esi
xor esi, esi
mov dword [ebp - 0x10], ecx
push edi
mov dword [ebp - 0x3c], esi
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], esi
mov dword [ebp - 0x34], vtable.CArray_class_ATL::CStringT_char__class_ATL::StrTraitATL_char__class_ATL::ChTraitsCRT_char_____class_ATL::CStringT_char__class_ATL::StrTraitATL_char__class_ATL::ChTraitsCRT_char____const__.0
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], esi
mov byte [ebp - 4], 1
mov ebx, dword [ebp + 8]
mov ecx, ebx
push str.CHANGE_Survey
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49bf0a
mov eax, dword [ebp - 0x10]
mov esi, dword [eax + 0x10c]
cmp dword [esi + 0x2ad7c], 0
jbe 0x49d857
mov esi, dword [esi + 0x2ad74]
test esi, esi
je 0x49be10
mov edi, dword [esi + 8]
mov esi, dword [esi]
test edi, edi
je 0x49be10
mov eax, dword [edi + 0x30]
push dword [eax]
lea eax, [ebp - 0x14]
push 0x4fd994
push eax
call fcn.004063e0
mov ebx, dword [ebp - 0x2c]
add esp, 0xc
test ebx, ebx
js 0x49cf35
push ecx
lea eax, [ebx + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ebx*4]
call fcn.00401680
mov ecx, dword [edi + 0x30]
movzx eax, word [ecx + 0x14]
push eax
movzx eax, byte [ecx + 0x16]
push eax
push dword [ecx + 4]
lea eax, [ebp - 0x14]
push str._s_Q_d:_02d
push eax
call fcn.004063e0
mov edi, dword [ebp - 0x2c]
add esp, 0x14
test edi, edi
js 0x49cf35
push ecx
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + edi*4]
call fcn.00401680
jmp 0x49bd71
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push dword [esi + 0x1dc]
push 0x4fd994
push eax
call fcn.004063e0
add esp, 0xc
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 2
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49be62
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49be6e
push 0
push 0x4fd088
call fcn.00401820
sub esp, 8
mov byte [ebp - 4], 3
lea eax, [ebp + 8]
lea ecx, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00401140
mov byte [ebp - 4], 5
or ebx, 0xffffffff
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49bead
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
mov edi, dword [ebp - 0x14]
cmp eax, 1
jne 0x49befa
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d891
push eax
push edi
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49befa
push dword [ebp - 0x1fc]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
add esp, 4
mov dword [esi + 0x1dc], eax
mov ecx, esi
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_TSA
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49c113
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x10c]
mov ecx, dword [eax + 0x2ad74]
test ecx, ecx
je 0x49bf37
mov ecx, dword [ecx + 8]
jmp 0x49bf39
xor ecx, ecx
test ecx, ecx
je 0x49d857
mov ecx, dword [ecx]
or ebx, 0xffffffff
test ecx, ecx
je 0x49c031
mov eax, dword [ecx + 8]
mov ecx, dword [ecx]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x40], eax
test eax, eax
je 0x49c031
mov ecx, dword [eax + 0x88]
sub ecx, 0x10
call fcn.00401750
add eax, 0x10
or esi, 1
mov dword [ebp + 8], eax
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
test eax, eax
js 0x49cf35
push ecx
inc eax
lea ecx, [ebp - 0x34]
push eax
call fcn.00420c40
mov ecx, dword [ebp - 0x18]
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ecx*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49bfc5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x3c]
push eax
call fcn.004e0320
mov dword [ebp + 8], eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
test eax, eax
js 0x49cf35
push ecx
lea ecx, [eax + 1]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00420c40
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
push dword [ebp + 8]
lea ecx, [eax + ecx*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
mov ecx, dword [ebp - 0x20]
test eax, eax
jg 0x49bf46
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x20]
jmp 0x49bf46
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 8
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49c069
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49c075
push 0
push 0x4fd088
call fcn.00401820
mov esi, dword [ebp - 0x10]
lea ecx, [ebp + 8]
sub esp, 8
mov byte [ebp - 4], 9
lea eax, [esi + 0x1e4]
push ecx
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x2a4]
call fcn.00401140
mov byte [ebp - 4], 0xb
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c0b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
cmp eax, 1
jne 0x49c103
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d891
push eax
push dword [esi + 0x1e4]
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49c103
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [esi + 0x1e4]
call fcn.00401680
mov ecx, esi
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_Demographic
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49c348
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x10c]
mov eax, dword [eax + 0x2ad74]
test eax, eax
je 0x49d857
mov eax, dword [eax + 8]
test eax, eax
je 0x49d857
mov eax, dword [eax]
test eax, eax
je 0x49d857
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x49d857
add ecx, 0x10
je 0x49d857
mov ecx, dword [ecx]
or ebx, 0xffffffff
nop dword [eax]
test ecx, ecx
je 0x49c266
mov eax, dword [ecx + 8]
mov ecx, dword [ecx]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x40], eax
test eax, eax
je 0x49c266
mov eax, dword [eax + 0x5a54]
mov ecx, dword [eax + 0x2ad54]
sub ecx, 0x10
call fcn.00401750
add eax, 0x10
or esi, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
test eax, eax
js 0x49cf35
push ecx
inc eax
lea ecx, [ebp - 0x34]
push eax
call fcn.00420c40
mov ecx, dword [ebp - 0x18]
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ecx*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c1f5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ecx + 0x5a54]
call fcn.004c3640
or esi, 2
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x2c]
mov dword [ebp + 8], eax
test eax, eax
js 0x49cf35
push ecx
inc eax
lea ecx, [ebp - 0x34]
push eax
call fcn.00420c40
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ecx*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
mov ecx, dword [ebp - 0x38]
test eax, eax
jg 0x49c170
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x38]
jmp 0x49c170
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 0xe
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49c29e
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49c2aa
push 0
push 0x4fd088
call fcn.00401820
mov esi, dword [ebp - 0x10]
lea ecx, [ebp + 8]
sub esp, 8
mov byte [ebp - 4], 0xf
lea eax, [esi + 0x1e8]
push ecx
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x2a4]
call fcn.00401140
mov byte [ebp - 4], 0x11
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c2ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
cmp eax, 1
jne 0x49c338
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d891
push eax
push dword [esi + 0x1e8]
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49c338
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [esi + 0x1e8]
call fcn.00401680
mov ecx, esi
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_Report
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49c559
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x10c]
mov eax, dword [eax + 0x2ad74]
test eax, eax
je 0x49d857
mov eax, dword [eax + 8]
test eax, eax
je 0x49d857
mov eax, dword [eax]
test eax, eax
je 0x49d857
mov eax, dword [eax + 8]
test eax, eax
je 0x49d857
mov eax, dword [eax + 0x10]
test eax, eax
je 0x49d857
mov esi, dword [eax + 8]
test esi, esi
je 0x49d857
mov esi, dword [esi]
or ebx, 0xffffffff
nop
test esi, esi
je 0x49c462
mov edi, dword [esi + 8]
mov esi, dword [esi]
test edi, edi
je 0x49c462
push dword [edi]
lea eax, [ebp - 0x14]
push 0x4fd994
push eax
call fcn.004063e0
mov eax, dword [ebp - 0x2c]
add esp, 0xc
mov dword [ebp + 8], eax
test eax, eax
js 0x49cf35
push ecx
inc eax
lea ecx, [ebp - 0x34]
push eax
call fcn.00420c40
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ecx*4]
call fcn.00401680
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.004d9170
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x12
mov edi, dword [ebp - 0x2c]
test edi, edi
js 0x49cf35
push ecx
lea ecx, [edi + 1]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00420c40
mov eax, dword [ebp - 0x30]
push dword [ebp + 8]
lea ecx, [eax + edi*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c3b0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x49c3b0
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push dword [esi + 0x1e0]
push 0x4fd994
push eax
call fcn.004063e0
add esp, 0xc
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 0x13
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49c4b4
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49c4c0
push 0
push 0x4fd088
call fcn.00401820
sub esp, 8
mov byte [ebp - 4], 0x14
lea eax, [ebp + 8]
lea ecx, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00401140
mov byte [ebp - 4], 0x16
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c4fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
mov edi, dword [ebp - 0x14]
cmp eax, 1
jne 0x49c549
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d891
push eax
push edi
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49c549
push dword [ebp - 0x1fc]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
add esp, 4
mov dword [esi + 0x1e0], eax
mov ecx, esi
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_Programme
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49c8a5
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x10c]
mov eax, dword [eax + 0x2ad74]
test eax, eax
je 0x49d857
mov eax, dword [eax + 8]
test eax, eax
je 0x49d857
mov eax, dword [eax]
test eax, eax
je 0x49d857
mov eax, dword [eax + 8]
test eax, eax
je 0x49d857
add eax, 0x10
je 0x49d857
mov ecx, dword [eax]
test ecx, ecx
je 0x49d857
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x40], ecx
test ecx, ecx
je 0x49d857
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ecx + 0x15ac], eax
jbe 0x49c7ca
xor edx, edx
mov dword [ebp - 0x20], edx
cmp eax, dword [ecx + 0x15ac]
jae 0x49d89b
mov eax, dword [ecx + 0x15a8]
add eax, edx
mov dword [ebp - 0x3c], eax
je 0x49c7ab
mov ecx, dword [eax + 0x388]
sub ecx, 0x10
call fcn.00401750
add eax, 0x10
or esi, 8
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x17
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
js 0x49cf35
push ecx
lea eax, [ebx + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ebx*4]
call fcn.00401680
mov byte [ebp - 4], 1
or ebx, 0xffffffff
mov edx, dword [ebp - 0x38]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c65c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp - 0x1c]
push eax
add ecx, 0xe4
call fcn.004bfba0
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x38c]
sub ecx, 0x10
call fcn.00401750
or esi, 0x10
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], esi
lea ecx, [eax + 0x10]
mov dword [ebp - 0x44], ecx
mov byte [ebp - 4], 0x1a
mov ecx, dword [eax]
test ecx, ecx
je 0x49c6aa
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x49c6c0
call fcn.00401bb0
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp + 8]
mov dword [ebp + 8], eax
or esi, 0x20
mov eax, dword [ebp - 0x38]
push 4
push 0x50d0e4
mov dword [ebp - 0x3c], esi
push dword [eax + 4]
lea edx, [eax + 0x10]
call fcn.004061b0
push dword [ebp - 0x58]
lea edx, [ebp + 8]
lea ecx, [ebp - 0x4c]
call fcn.00405e90
add esp, 0x10
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x50], eax
test eax, eax
js 0x49cf35
push ecx
lea ecx, [eax + 1]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00420c40
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x50]
push dword [ebp - 0x58]
lea ecx, [eax + ecx*4]
call fcn.00401680
mov byte [ebp - 4], 0x1a
mov eax, ebx
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c74b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x19
and esi, 0xffffffdf
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c76c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov eax, ebx
mov edx, dword [ebp - 0x38]
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c787
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c7a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
add edx, 0x398
inc eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x18], eax
cmp eax, dword [ecx + 0x15ac]
jb 0x49c5e8
mov ebx, dword [ebp - 0x10]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 0x1c
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49c802
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49c80e
push 0
push 0x4fd088
call fcn.00401820
sub esp, 8
mov byte [ebp - 4], 0x1d
lea eax, [ebp + 8]
lea esi, [ebx + 0x1ec]
lea ecx, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x34]
push eax
push esi
call fcn.00401140
mov byte [ebp - 4], 0x1f
or ebx, 0xffffffff
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49c850
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
cmp eax, 1
jne 0x49c895
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d891
push eax
push dword [esi]
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49c895
lea eax, [ebp - 0x1fc]
mov ecx, esi
push eax
call fcn.00401680
mov ecx, dword [ebp - 0x10]
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_Spot
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49ca8e
mov esi, dword [ebp - 0x10]
mov eax, dword [esi + 0x10c]
mov eax, dword [eax + 0x2ad74]
test eax, eax
je 0x49d857
mov eax, dword [eax + 8]
test eax, eax
je 0x49d857
mov eax, dword [eax]
test eax, eax
je 0x49d857
mov eax, dword [eax + 8]
test eax, eax
je 0x49d857
add eax, 0x10
je 0x49d857
mov ecx, dword [eax]
test ecx, ecx
je 0x49d857
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x4c], ecx
test ecx, ecx
je 0x49d857
xor eax, eax
mov dword [ebp + 8], eax
cmp dword [ecx + 0x15bc], eax
jbe 0x49c9ac
xor edx, edx
mov dword [ebp - 0x18], edx
cmp eax, dword [ecx + 0x15bc]
jae 0x49d89b
mov ebx, dword [ecx + 0x15b8]
add ebx, edx
je 0x49c99a
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
test eax, eax
js 0x49cf35
push ecx
inc eax
lea ecx, [ebp - 0x34]
push eax
call fcn.00420c40
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
push ebx
lea ecx, [eax + ecx*4]
call fcn.00401680
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
test eax, eax
js 0x49cf35
push ecx
inc eax
lea ecx, [ebp - 0x34]
push eax
call fcn.00420c40
mov ecx, dword [ebp - 0x1c]
lea eax, [ebx + 4]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ecx*4]
call fcn.00401680
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x18]
inc eax
add edx, 0x28
mov dword [ebp + 8], eax
mov dword [ebp - 0x18], edx
cmp eax, dword [ecx + 0x15bc]
jb 0x49c934
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d8a5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 0x20
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49c9e4
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49c9f0
push 0
push 0x4fd088
call fcn.00401820
sub esp, 8
mov byte [ebp - 4], 0x21
lea ecx, [ebp + 8]
lea eax, [esi + 0x1f0]
push ecx
lea ecx, [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x2a4]
call fcn.00401140
mov byte [ebp - 4], 0x23
or ebx, 0xffffffff
mov edx, dword [ebp + 8]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ca32
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
cmp eax, 1
jne 0x49ca7e
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d8af
push eax
push dword [esi + 0x1f0]
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49ca7e
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [esi + 0x1f0]
call fcn.00401680
mov ecx, esi
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_Figure
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49ccb1
mov esi, dword [ebp - 0x10]
xor edi, edi
or ebx, 0xffffffff
nop dword [eax + eax]
mov edx, dword [esi + 0x110]
test edx, edx
je 0x49cbb3
mov eax, 1
mov ecx, edi
shl eax, cl
test dword [edx + 0x14], eax
je 0x49cbb3
push eax
lea eax, [ebp - 0x14]
push 0x4fd994
push eax
call fcn.004063e0
mov esi, dword [ebp - 0x2c]
add esp, 0xc
test esi, esi
js 0x49cf35
push ecx
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + esi*4]
call fcn.00401680
mov esi, dword [edi*4 + 0x4fb100]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d8b9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x24
test esi, esi
je 0x49cb5b
test esi, 0xffff0000
jne 0x49cb48
movzx eax, si
lea ecx, [ebp + 8]
push eax
call fcn.004062a0
jmp 0x49cb67
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x49cb50
sub ecx, edx
jmp 0x49cb5d
xor ecx, ecx
push ecx
push esi
lea ecx, [ebp + 8]
call fcn.00401820
mov byte [ebp - 4], 0x25
mov esi, dword [ebp - 0x2c]
test esi, esi
js 0x49cf35
push ecx
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + esi*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49cbb0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x10]
inc edi
cmp edi, 0x1d
jl 0x49cab0
push dword [esi + 0x1f8]
lea eax, [ebp - 0x14]
push 0x4fd994
push eax
call fcn.004063e0
add esp, 0xc
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d8b9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 0x26
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49cc0c
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49cc18
push 0
push 0x4fd088
call fcn.00401820
sub esp, 8
mov byte [ebp - 4], 0x27
lea eax, [ebp + 8]
lea ecx, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00401140
mov byte [ebp - 4], 0x29
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49cc54
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
mov edi, dword [ebp - 0x14]
cmp eax, 1
jne 0x49cca1
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d8c3
push eax
push edi
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49cca1
push dword [ebp - 0x1fc]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
add esp, 4
mov dword [esi + 0x1f8], eax
mov ecx, esi
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_DAY
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49ced1
mov esi, dword [ebp - 0x10]
xor edi, edi
or ebx, 0xffffffff
nop
mov eax, dword [esi + 0x110]
test eax, eax
je 0x49cdd3
movsx eax, word [eax + 0x18]
mov edx, 1
mov ecx, edi
shl edx, cl
test edx, eax
je 0x49cdd3
push edx
lea eax, [ebp - 0x14]
push 0x4fd994
push eax
call fcn.004063e0
mov esi, dword [ebp - 0x2c]
add esp, 0xc
test esi, esi
js 0x49cf35
push ecx
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + esi*4]
call fcn.00401680
mov esi, dword [edi*4 + 0x4fb174]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d8cd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x2a
test esi, esi
je 0x49cd7b
test esi, 0xffff0000
jne 0x49cd6b
movzx eax, si
lea ecx, [ebp + 8]
push eax
call fcn.004062a0
jmp 0x49cd87
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x49cd70
sub ecx, edx
jmp 0x49cd7d
xor ecx, ecx
push ecx
push esi
lea ecx, [ebp + 8]
call fcn.00401820
mov byte [ebp - 4], 0x2b
mov esi, dword [ebp - 0x2c]
test esi, esi
js 0x49cf35
push ecx
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + esi*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49cdd0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x10]
inc edi
cmp edi, 9
jl 0x49ccd0
push dword [esi + 0x1fc]
lea eax, [ebp - 0x14]
push 0x4fd994
push eax
call fcn.004063e0
add esp, 0xc
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d8cd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 0x2c
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49ce2c
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49ce38
push 0
push 0x4fd088
call fcn.00401820
sub esp, 8
mov byte [ebp - 4], 0x2d
lea eax, [ebp + 8]
lea ecx, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00401140
mov byte [ebp - 4], 0x2f
mov eax, ebx
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49ce74
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
mov edi, dword [ebp - 0x14]
cmp eax, 1
jne 0x49cec1
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d8d7
push eax
push edi
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49cec1
push dword [ebp - 0x1fc]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
add esp, 4
mov dword [esi + 0x1fc], eax
mov ecx, esi
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_SORT
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49d221
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fc9ec
mov byte [ebp - 4], 0x30
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49cf1e
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49cf2a
push 1
push 0x4fc9ec
call fcn.00401820
mov byte [ebp - 4], 0x31
mov esi, dword [ebp - 0x2c]
test esi, esi
jns 0x49cf3b
call dword [sym.imp.mfc140.dll_Ordinal_2381]
push ecx
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + esi*4]
call fcn.00401680
mov byte [ebp - 4], 1
or edi, 0xffffffff
mov edx, dword [ebp + 8]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49cf78
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, str.Default_Order
mov byte [ebp - 4], 0x32
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49cfb0
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49cfbc
push 0xd
push str.Default_Order
call fcn.00401820
mov byte [ebp - 4], 0x33
mov esi, dword [ebp - 0x2c]
test esi, esi
jns 0x49cfcd
call dword [sym.imp.mfc140.dll_Ordinal_2381]
push ecx
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + esi*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49d007
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, 1
nop dword [eax]
test esi, esi
jne 0x49d018
xor eax, eax
jmp 0x49d022
lea ecx, [esi - 1]
mov eax, 1
shl eax, cl
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebx + 0x110]
test ecx, ecx
je 0x49d123
test dword [ecx + 0x10], eax
je 0x49d123
push eax
lea eax, [ebp - 0x14]
push 0x4fd994
push eax
call fcn.004063e0
mov ebx, dword [ebp - 0x2c]
add esp, 0xc
test ebx, ebx
js 0x49cf35
push ecx
lea eax, [ebx + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ebx*4]
call fcn.00401680
mov ebx, dword [esi*4 + 0x4fb098]
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x34
test ebx, ebx
je 0x49d0cb
test ebx, 0xffff0000
jne 0x49d0b4
movzx eax, bx
lea ecx, [ebp + 8]
push eax
call fcn.004062a0
jmp 0x49d0d7
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x49d0c0
sub ecx, edx
jmp 0x49d0cd
xor ecx, ecx
push ecx
push ebx
lea ecx, [ebp + 8]
call fcn.00401820
mov byte [ebp - 4], 0x35
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
js 0x49cf35
push ecx
lea eax, [ebx + 1]
push eax
lea ecx, [ebp - 0x34]
call fcn.00420c40
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [eax + ebx*4]
call fcn.00401680
mov byte [ebp - 4], 1
mov eax, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49d120
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x10]
inc esi
cmp esi, 0x19
jl 0x49d010
push dword [ebx + 0x1f4]
lea eax, [ebp - 0x14]
push 0x4fd994
push eax
call fcn.004063e0
add esp, 0xc
call fcn.00401bb0
mov ecx, eax
test ecx, ecx
je 0x49d891
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
mov eax, 0x4fd088
mov byte [ebp - 4], 0x36
lea ecx, [ebp + 8]
test eax, 0xffff0000
jne 0x49d17c
movzx eax, ax
push eax
call fcn.004062a0
jmp 0x49d188
push 0
push 0x4fd088
call fcn.00401820
sub esp, 8
mov byte [ebp - 4], 0x37
lea eax, [ebp + 8]
lea ecx, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00401140
mov byte [ebp - 4], 0x39
mov eax, edi
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49d1c4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x2a4]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
mov edi, dword [ebp - 0x14]
cmp eax, 1
jne 0x49d211
mov eax, dword [ebp - 0x1fc]
test eax, eax
je 0x49d8e1
push eax
push edi
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
add esp, 8
test eax, eax
je 0x49d211
push dword [ebp - 0x1fc]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
add esp, 4
mov dword [ebx + 0x1f4], eax
mov ecx, ebx
call fcn.00496a50
lea ecx, [ebp - 0x2a4]
call fcn.004012a0
jmp 0x49d857
push str.CHANGE_SORT_Name
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
je 0x49d857
push str.CHANGE_SORT_Reach
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
je 0x49d857
push str.CHANGE_SORT_Hours
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
je 0x49d857
push str.CHANGE_Demographic
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
je 0x49d857
push str.CHANGE_REPORT_Survey
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
je 0x49d857
push str.CHANGE_REPORT_Report
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49d2a8
mov ecx, dword [ebp - 0x10]
call fcn.0049f300
jmp 0x49d857
push str.CHANGE_REPORT_MultipleReport
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49d2c6
mov ecx, dword [ebp - 0x10]
call fcn.0049f920
jmp 0x49d857
push str.CHANGE_REPORT_Programme
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49d63e
mov dword [ebp + 8], eax
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 0x3b
mov eax, dword [eax + 0x10c]
mov ecx, dword [eax + 8]
sub ecx, 0x10
call fcn.00401750
lea esi, [eax + 0x10]
mov dword [ebp - 0x1c], esi
push 1
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp + 8]
call fcn.004baa70
or ebx, 0xffffffff
mov byte [ebp - 4], 0x3b
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49d32c
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push str.__prog
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp + 8]
call fcn.004baec0
push 0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0x54]
call fcn.004ba8e0
push ecx
push 1
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0x3e
call fcn.00441470
push str.time
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0x48]
call fcn.004b93a0
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x40
call dword [sym.imp.mfc140.dll_Ordinal_1514]
mov byte [ebp - 4], 0x3f
mov eax, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49d3a2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x21c]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
cmp eax, 1
jne 0x49d57d
lea ecx, [ebp - 0x554]
call fcn.004bf9b0
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x64]
lea ecx, [ecx - 0x10]
call fcn.00401750
lea esi, [eax + 0x10]
mov dword [ebp - 0x1c], esi
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [ebp - 0x554]
call fcn.004bfac0
mov byte [ebp - 4], 0x41
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x49d405
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
xor edi, edi
mov esi, dword [ebp - 0x54]
xor eax, eax
test esi, esi
je 0x49d430
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x18]
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x20]
test eax, eax
jns 0x49d42d
push 0x50f9d8
push esi
push eax
call fcn.004e2c00
mov eax, dword [ebp - 0x18]
cmp edi, eax
jge 0x49d51e
push edi
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x54]
call fcn.004ba8e0
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov esi, dword [eax]
cmp ecx, esi
je 0x49d473
mov byte [ebp - 4], 0x43
test esi, esi
je 0x49d462
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x48], esi
mov byte [ebp - 4], 0x44
test ecx, ecx
je 0x49d473
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x44]
mov esi, dword [esi + 4]
cmp ecx, esi
je 0x49d4a2
mov byte [ebp - 4], 0x45
test esi, esi
je 0x49d491
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0x46
test ecx, ecx
je 0x49d4a2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x49d4b3
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x5c]
test ecx, ecx
je 0x49d4c4
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x48]
push dword [ebp - 0x64]
push str.time
call fcn.004b9820
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x554]
call fcn.004bfba0
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x48]
push dword [eax]
push str.name
call fcn.004b9820
mov byte [ebp - 4], 0x41
mov eax, ebx
mov edx, dword [ebp - 0x4c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49d518
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
inc edi
jmp 0x49d407
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 8]
call fcn.004bbab0
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x4a
call dword [sym.imp.mfc140.dll_Ordinal_272]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x4b
call fcn.0049d8f0
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov byte [ebp - 4], 0x41
mov eax, ebx
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
mov edi, dword [ebp - 0x14]
test eax, eax
jg 0x49d572
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x554]
call fcn.004bfa30
lea ecx, [ebp - 0x64]
mov dword [ebp - method.CdlgProgrammeGrid.1.virtual_0], vtable.CdlgProgrammeGrid.1.0
mov dword [ebp - method.CdlgMappingCriteria.virtual_0], vtable.CdlgProgrammeGrid.0
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x74]
push eax
call esi
lea eax, [ebp - 0x84]
push eax
call esi
lea eax, [ebp - 0x94]
push eax
call esi
lea eax, [ebp - 0xa4]
push eax
call esi
lea ecx, [ebp - 0x21c]
call dword [sym.imp.mfc140.dll_Ordinal_1108]
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x44]
test ecx, ecx
je 0x49d5de
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x49d5ef
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x49d600
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x4f
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x49d611
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov byte [ebp - 4], 0x50
mov eax, dword [ebp + 8]
test eax, eax
je 0x49d627
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x52
test eax, eax
je 0x49d857
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x49d857
push str.CHANGE_REFRESH
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49d6bc
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x10c]
mov ecx, dword [eax + 8]
sub ecx, 0x10
call fcn.00401750
add eax, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_272]
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x54
push eax
mov ecx, ebx
call fcn.0049d8f0
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov byte [ebp - 4], 1
or ebx, 0xffffffff
mov edx, dword [ebp - 0x18]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x49d857
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x49d857
push 0
push str.CHANGE_ANALYSISTO_
mov ecx, ebx
call dword [sym.imp.mfc140.dll_Ordinal_4656]
cmp eax, 0xffffffff
je 0x49d857
push 0x12
lea eax, [ebp + 8]
mov ecx, ebx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8717]
push str.EXECUTIVE_SUMMARY
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x55
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
jne 0x49d746
push 0x4fd088
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x56
push eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa64]
call fcn.00422b10
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x58
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0xa64]
call dword [sym.imp.mfc140.dll_Ordinal_4084]
lea ecx, [ebp - 0xa64]
call fcn.00422f50
jmp 0x49d84e
push 6
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push str.REPORT
mov ecx, eax
mov byte [ebp - 4], 0x59
call dword [sym.imp.mfc140.dll_Ordinal_2992]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x55
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
test esi, esi
jne 0x49d7c0
push 0x53d62c
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_272]
push str.Reports_
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x5a
call dword [sym.imp.mfc140.dll_Ordinal_1696]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1692]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x20]
push eax
call fcn.004a1ac0
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x49d84e
mov ebx, dword [ebp - 0x10]
xor esi, esi
mov dword [ebx + 0x110], 0
mov eax, dword [0x53d2f8]
test eax, eax
je 0x49d84e
xor ecx, ecx
mov dword [ebp - 0x18], ecx
cmp esi, eax
jae 0x49d89b
mov eax, dword [0x53d2f4]
push dword [ecx + eax]
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_2992]
test eax, eax
je 0x49d80f
mov ecx, dword [ebp - 0x18]
inc esi
mov eax, dword [0x53d2f8]
add ecx, 0x1c
mov dword [ebp - 0x18], ecx
cmp esi, eax
jb 0x49d7e5
jmp 0x49d84e
cmp esi, dword [0x53d2f8]
jae 0x49d89b
mov eax, dword [0x53d2f4]
lea ecx, [esi*8]
sub ecx, esi
shl ecx, 2
add eax, ecx
mov dword [ebx + 0x110], eax
cmp esi, dword [0x53d2f8]
jae 0x49d89b
mov eax, dword [0x53d2f4]
add eax, 8
add eax, ecx
mov ecx, ebx
push eax
call fcn.0049d8f0
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x34]
call fcn.00420a70
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x49d87e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
push 0x80004005
call fcn.00401f30
push 0x80070057
call fcn.00401f30
push 0x80004005
call fcn.00401f30
push 0x80004005
call fcn.00401f30
push 0x80004005
call fcn.00401f30
push 0x80004005
call fcn.00401f30
push 0x80004005
call fcn.00401f30
push 0x80004005
call fcn.00401f30
push 0x80004005
call fcn.00401f30
int3