Function at 0x471044
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x5327b6
mov eax, dword fs:[0]
push eax
sub esp, 0x134
mov eax, dword [0x591700]
xor eax, esp
mov dword [esp + 0x130], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x591700]
xor eax, esp
push eax
lea eax, [esp + 0x148]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [esp + 0x158]
lea ebp, [esi + 0x1c]
mov ebx, dword [esp + 0x15c]
sub esp, 0x18
mov ecx, esp
push ebp
call fcn.0044f86d
lea ecx, [esp + 0xd0]
call fcn.0048308f
add esp, 0x18
and dword [esp + 0x150], 0
lea ecx, [esp + 0x88]
mov dl, 1
call fcn.0046846d
lea edx, [esi + 0xf4]
mov byte [esp + 0x150], 1
lea ecx, [esp + 0x70]
call fcn.00482626
lea edx, [esi + 0x370]
mov byte [esp + 0x150], 2
lea ecx, [esp + 0x100]
call fcn.00482626
lea edx, [esi + 0x124]
mov byte [esp + 0x150], 3
lea ecx, [esp + 0x58]
call fcn.00482626
lea edx, [esi + 0x340]
mov byte [esp + 0x150], 4
lea ecx, [esp + 0xd0]
call fcn.00482626
lea ecx, [esp + 0x118]
mov byte [esp + 0x150], 5
call fcn.0044ec9b
lea eax, [esi + 0x5f8]
mov byte [esp + 0x150], 6
push eax
lea ecx, [esp + 0xec]
call fcn.0044f86d
lea eax, [esp + 0xe8]
mov byte [esp + 0x150], 7
push eax
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x120]
call fcn.0044f80c
xor esi, esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], esi
push edi
mov edx, str.https:__analytics.wondershare.cc:8106_sa_project
mov byte [esp + 0x154], 9
lea ecx, [esp + 0x2c]
call fcn.004541bd
pop ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x154], 0xa
call fcn.00453e5b
push esi
push 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x158], 9
call fcn.0044ea87
push edi
mov edx, str.https:__analytics.300624.com:8106_sa_project
lea ecx, [esp + 0x2c]
call fcn.004541bd
pop ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x154], 0xb
call fcn.00453e5b
push esi
push 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x158], 9
call fcn.0044ea87
lea edx, [esp + 0xb8]
lea ecx, [esp + 0x28]
call fcn.00482626
push ebx
push eax
lea eax, [esp + 0x20]
mov byte [esp + 0x158], 0xc
push eax
call fcn.0045fc60
mov ecx, eax
call fcn.0045fcf8
xor ebx, ebx
mov byte [esp + 0x150], 9
push ebx
push 1
lea ecx, [esp + 0x30]
call fcn.0044ea87
push str.downloader_ver
lea ecx, [esp + 0x2c]
call fcn.0044ea5a
lea edx, [esp + 0x88]
mov byte [esp + 0x150], 0xd
lea ecx, [esp + 0x40]
call fcn.00482626
mov esi, eax
mov byte [esp + 0x150], 0xe
call fcn.0045fc60
cmp byte [eax], bl
je 0x47127d
push esi
lea ecx, [esp + 0x2c]
call fcn.0045fed8
push ebx
push 1
lea ecx, [esp + 0x48]
call fcn.0044ea87
push ebx
push 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x158], 9
call fcn.0044ea87
push str.scene_code
lea ecx, [esp + 0x2c]
call fcn.0044ea5a
mov byte [esp + 0x150], 0xf
call fcn.0045fc60
cmp byte [eax], 0
je 0x4712ce
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0x2c]
call fcn.0045fed8
push ebx
push 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x158], 9
call fcn.0044ea87
lea edx, [esp + 0xa0]
lea ecx, [esp + 0x28]
call fcn.00482626
mov esi, eax
mov edx, ebp
mov byte [esp + 0x150], 0x10
lea ecx, [esp + 0x40]
call fcn.00482626
mov edi, eax
mov byte [esp + 0x150], 0x11
call fcn.0045fc60
cmp byte [eax], 0
je 0x471335
push esi
lea eax, [esp + 0x5c]
mov ecx, edi
push eax
lea eax, [esp + 0x108]
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.0045ff33
push ebx
push 1
lea ecx, [esp + 0x48]
call fcn.0044ea87
push ebx
push 1
lea ecx, [esp + 0x30]
call fcn.0044ea87
lea ecx, [esp + 0x18]
call fcn.0045404d
push ebx
push 1
lea ecx, [esp + 0xa8]
call fcn.00451108
push ebx
push 1
lea ecx, [esp + 0xf0]
call fcn.00451108
lea ecx, [esp + 0x118]
call fcn.0044f31b
push ebx
push 1
lea ecx, [esp + 0xd8]
call fcn.0044ea87
push ebx
push 1
lea ecx, [esp + 0x60]
call fcn.0044ea87
push ebx
push 1
lea ecx, [esp + 0x108]
call fcn.0044ea87
push ebx
push 1
lea ecx, [esp + 0x78]
call fcn.0044ea87
push ebx
push 1
lea ecx, [esp + 0x90]
call fcn.00451108
push ebx
push 1
lea ecx, [esp + 0xc0]
call fcn.00451108
mov ecx, dword [esp + 0x148]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x130]
xor ecx, esp
call fcn.00504075
add esp, 0x140
ret 8