Function at 0x406a70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4094f3
push eax
mov dword fs:[0], esp
mov eax, dword [esp + 0x10]
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
xor edi, edi
mov esi, ecx
cmp eax, edi
jne 0x406a9f
xor al, al
jmp 0x406f7a
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov dword [esp + 0x64], edi
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0x64], 1
call sub.MFC42.DLL_CString::CString
push str.http:__ads4.think_adz.com_
lea ecx, [esp + 0x44]
mov byte [esp + 0x68], 2
call sub.MFC42.DLL_CString::CString_1
mov dword [esp + 0x48], 0x40a5c4
mov dword [esp + 0x4c], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], edi
lea eax, [esp + 0x30]
mov ecx, esi
push eax
mov byte [esp + 0x68], 4
call fcn.00406270
lea ecx, [esp + 0x30]
call fcn.004082ac
mov eax, dword [esi + 0x11c]
neg eax
sbb eax, eax
cmp eax, edi
je 0x406c47
jmp 0x406b20
mov eax, dword [esp + 0x30]
cmp eax, 0xffffffff
mov ebx, eax
jne 0x406b47
mov edx, dword [esi + 0x118]
xor eax, eax
test edx, edx
jbe 0x406b47
mov ecx, dword [esi + 0x114]
mov ebx, dword [ecx]
test ebx, ebx
jne 0x406b47
inc eax
add ecx, 4
cmp eax, edx
jb 0x406b39
mov edi, dword [ebx]
test edi, edi
jne 0x406b72
mov eax, dword [ebx + 4]
mov edx, dword [esi + 0x118]
inc eax
cmp eax, edx
jae 0x406b72
mov ecx, dword [esi + 0x114]
lea ecx, [ecx + eax*4]
mov edi, dword [ecx]
test edi, edi
jne 0x406b72
inc eax
add ecx, 4
cmp eax, edx
jb 0x406b64
lea edx, [ebx + 8]
lea ecx, [esp + 0x14]
push edx
mov dword [esp + 0x34], edi
call fcn.004083c0
mov ebx, dword [ebx + 0xc]
push 0xc
call sub.MFC42.DLL_operatornew
mov ebp, eax
add esp, 4
mov dword [esp + 0x44], ebp
test ebp, ebp
mov byte [esp + 0x64], 5
je 0x406ba9
lea ecx, [ebp + 8]
call sub.MFC42.DLL_CString::CString
jmp 0x406bab
xor ebp, ebp
push 6
lea eax, [esp + 0x38]
push 0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x70], 4
mov dword [0x40cc44], ebp
call sub.MFC42.DLL_CString::Mid_1
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCRT.dll_atol]
mov ecx, dword [0x40cc44]
add esp, 4
mov dword [ecx], eax
lea ecx, [esp + 0x34]
call fcn.004082ac
lea edx, [esp + 0x38]
push 6
push edx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::Mid
push eax
mov eax, dword [0x40cc44]
mov byte [esp + 0x68], 6
lea ecx, [eax + 8]
call fcn.004083c0
lea ecx, [esp + 0x38]
mov byte [esp + 0x64], 4
call fcn.004082ac
mov ecx, dword [0x40cc44]
push 0xffffffffffffffff
mov dword [ecx + 4], ebx
mov eax, dword [esp + 0x54]
mov ebp, dword [0x40cc44]
mov ebx, eax
inc eax
lea ecx, [esp + 0x4c]
push eax
call fcn.00407fe0
mov edx, dword [esp + 0x4c]
test edi, edi
mov dword [edx + ebx*4], ebp
jne 0x406b1c
mov eax, dword [esi + 0x114]
test eax, eax
je 0x406c86
mov eax, dword [esi + 0x118]
xor ebx, ebx
test eax, eax
jbe 0x406c86
mov eax, dword [esi + 0x114]
mov edi, dword [eax + ebx*4]
test edi, edi
je 0x406c7b
lea ecx, [edi + 8]
push 1
push ecx
call sub.MFC42.DLL_DestructElements
mov edi, dword [edi]
test edi, edi
jne 0x406c6a
mov eax, dword [esi + 0x118]
inc ebx
cmp ebx, eax
jb 0x406c5d
mov eax, dword [esi + 0x114]
push eax
call sub.MFC42.DLL_operatordelete
mov ecx, dword [esi + 0x124]
xor ebx, ebx
add esp, 4
mov dword [esi + 0x114], ebx
mov dword [esi + 0x11c], ebx
mov dword [esi + 0x120], ebx
call sub.MFC42.DLL_CPlex::FreeDataChain
lea ecx, [esp + 0x2c]
mov dword [esi + 0x124], ebx
call sub.MFC42.DLL_CString::CString
push 0x40cc48
lea ecx, [esp + 0x14]
mov byte [esp + 0x68], 7
call sub.MFC42.DLL_CString::CString_1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x64], 8
call sub.MFC42.DLL_CString::CString
push ecx
mov byte [esp + 0x68], 9
mov ecx, esp
mov dword [esp + 0x48], esp
push str._5_kcc__acr__mibloe_7_cifmo_pio.3qfb.ysdvjkee.wxv_nnc_ydb_kohhu_4tca0.:qsti
call sub.MFC42.DLL_CString::CString_1
lea edx, [esp + 0x2c]
mov ecx, esi
push edx
call fcn.00403f50
push ecx
mov byte [esp + 0x68], 0xa
mov ecx, esp
mov dword [esp + 0x48], esp
push str.osb_pntdurii.mpb.ca.jnjgt_rtt.__otug
call sub.MFC42.DLL_CString::CString_1
lea eax, [esp + 0x28]
mov ecx, esi
push eax
call fcn.00403f50
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x4c]
push 0x406100
push 4
push ecx
push edx
mov byte [esp + 0x74], 0xb
call dword [sym.imp.MSVCRT.dll_qsort]
mov eax, dword [esp + 0x60]
add esp, 0x10
xor ebp, ebp
cmp eax, ebx
jle 0x406e16
mov ecx, dword [esp + 0x4c]
lea eax, [ebx*4]
inc ebx
mov eax, dword [eax + ecx]
test eax, eax
mov dword [0x40cc44], eax
je 0x406e0c
mov edx, dword [eax + 4]
mov ecx, dword [eax + 8]
push edx
mov edx, dword [eax]
push ecx
push edx
lea eax, [esp + 0x2c]
push str._06d_s__d
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0x14
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::operator
mov eax, dword [0x40c020]
mov edx, ebp
inc ebp
cmp edx, eax
jge 0x406df1
mov eax, dword [0x40cc44]
cmp dword [eax], 0
jne 0x406deb
push 0x40c964
lea ecx, [eax + 8]
call sub.MFC42.DLL_CString::Find
cmp eax, 0xffffffff
jne 0x406deb
cmp ebp, 1
jle 0x406dd7
push 0x40c544
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::operator_1
mov eax, dword [0x40cc44]
lea ecx, [esp + 0x10]
add eax, 8
push eax
call sub.MFC42.DLL_CString::operator
jmp 0x406df1
mov ebp, dword [0x40c020]
mov edi, dword [0x40cc44]
test edi, edi
je 0x406e0c
lea ecx, [edi + 8]
call fcn.004082ac
push edi
call sub.MFC42.DLL_operatordelete
add esp, 4
cmp ebx, dword [esp + 0x50]
jl 0x406d55
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x50]
call fcn.00407fe0
mov edi, dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x10]
push eax
push ecx
lea edx, [esp + 0x24]
push edi
push edx
call sub.MFC42.DLL_CString::Format
mov bl, byte [esp + 0x7c]
add esp, 0x10
test bl, 1
je 0x406e98
push 0x40cc48
lea ecx, [esp + 0x70]
call sub.MFC42.DLL_CString::CString_1
lea eax, [esp + 0x3c]
lea edi, [esi + 0xb4]
push 1
push eax
lea ecx, [esp + 0x74]
push edi
lea edx, [esp + 0x28]
push ecx
push edx
mov ecx, esi
mov byte [esp + 0x78], 0xc
call fcn.00403230
lea ecx, [esp + 0x6c]
mov ebp, eax
mov byte [esp + 0x64], 0xb
call fcn.004082ac
test ebp, ebp
je 0x406e98
push edi
mov ecx, esi
call fcn.00406f90
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x2c]
push eax
push str.hist_s
push ecx
call sub.MFC42.DLL_CString::Format
add esp, 0xc
test bl, 2
je 0x406ed3
lea edx, [esp + 0x3c]
push 0
lea eax, [esi + 0xb4]
push edx
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x30]
push ecx
push edx
mov ecx, esi
call fcn.00403230
lea ecx, [esp + 0x24]
mov byte [esp + 0x64], 0xa
call fcn.004082ac
lea ecx, [esp + 0x28]
mov byte [esp + 0x64], 9
call fcn.004082ac
lea ecx, [esp + 0x1c]
mov byte [esp + 0x64], 8
call fcn.004082ac
lea ecx, [esp + 0x10]
mov byte [esp + 0x64], 7
call fcn.004082ac
lea ecx, [esp + 0x2c]
mov byte [esp + 0x64], 4
call fcn.004082ac
mov dword [esp + 0x48], 0x40a5c4
mov eax, dword [esp + 0x4c]
mov byte [esp + 0x64], 0xd
test eax, eax
je 0x406f37
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], 0x40a454
mov byte [esp + 0x64], 2
call fcn.004082ac
lea ecx, [esp + 0x20]
mov byte [esp + 0x64], 1
call fcn.004082ac
lea ecx, [esp + 0x14]
mov byte [esp + 0x64], 0
call fcn.004082ac
lea ecx, [esp + 0x18]
mov dword [esp + 0x64], 0xffffffff
call fcn.004082ac
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x58
ret 4