Function at 0x46df10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x640e17
mov eax, dword fs:[0]
push eax
sub esp, 0x27c
mov eax, dword [0x74d890]
xor eax, esp
mov dword [esp + 0x278], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x74d890]
xor eax, esp
push eax
lea eax, [esp + 0x290]
mov dword fs:[0], eax
mov esi, dword [esp + 0x2a0]
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], esi
cmp dword [0x752b9c], ebx
je 0x46e39c
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebx
call fcn.004483a0
add esp, 4
push eax
push 0x679d80
push 1
push ebx
push 0x701b1c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, ebx
jl 0x46e321
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x48]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46e315
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
or edx, 0x20
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46e315
xor ecx, ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebx
mov word [esp + 0x7c], cx
mov dword [esp + 0x298], ebx
mov edx, dword [0x752d00]
mov eax, dword [0x754640]
push edx
push eax
lea ecx, [esp + 0x80]
call fcn.00401980
mov eax, dword [esp + 0x78]
cmp eax, ebx
jne 0x46e013
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x38]
call fcn.00417c90
mov byte [esp + 0x298], 1
mov edx, dword [esp + 0x34]
xor ecx, ecx
push ebx
mov word [esp + 0x74], cx
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
call fcn.00401980
mov byte [esp + 0x298], 2
mov eax, dword [esp + 0x6c]
mov ecx, eax
cmp eax, ebx
jne 0x46e059
lea ecx, [esp + 0x70]
mov edi, dword [esp + 0x78]
mov eax, edi
cmp edi, ebx
jne 0x46e067
lea eax, [esp + 0x7c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x46e08d
cmp dx, bx
je 0x46e089
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x46e08d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x46e067
xor eax, eax
jmp 0x46e092
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x46e0af
mov ecx, edi
cmp edi, ebx
jne 0x46e0a0
lea ecx, [esp + 0x7c]
mov eax, dword [esp + 0x14]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov byte [esp + 0x298], 1
lea ecx, [esp + 0x6c]
call fcn.00401210
mov byte [esp + 0x298], bl
lea ecx, [esp + 0x34]
call fcn.00402570
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x78]
call fcn.00401210
cmp esi, ebx
jl 0x46e315
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
push ebx
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x46e315
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
cmp eax, ebx
mov edi, dword [sym.imp.ole32.dll_CoTaskMemFree]
jl 0x46e212
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x30], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46e16b
mov ecx, dword [esp + 0x2c]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x66dea8
call fcn.004021b0
mov edx, dword [esp + 0x2c]
push edx
mov ebp, 1
call edi
jmp 0x46e1fe
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x38]
push eax
push 0x678c68
push 2
push ecx
call fcn.004569e0
add esp, 0x10
test eax, eax
jl 0x46e1fe
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x40]
push ecx
push 0x701adc
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x46e1f2
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x28], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46e1e6
mov ecx, dword [esp + 0x24]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x66dea8
call fcn.004021b0
mov edx, dword [esp + 0x24]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp ebp, ebx
jne 0x46e315
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x34]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46e315
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x2c], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46e276
mov ecx, dword [esp + 0x28]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x66dea8
call fcn.004021b0
mov edx, dword [esp + 0x28]
push edx
mov ebp, 1
call edi
jmp 0x46e309
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push eax
push 0x678c68
push 2
push ecx
call fcn.004569e0
add esp, 0x10
test eax, eax
jl 0x46e309
mov eax, dword [esp + 0x44]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x3c]
push ecx
push 0x701adc
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x46e2fd
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46e2f1
mov ecx, dword [esp + 0x30]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x66dea8
call fcn.004021b0
mov edx, dword [esp + 0x30]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, ebx
jge 0x46e44e
cmp ebp, ebx
jne 0x46e44e
cmp esi, 0x800704c7
je 0x46e44e
lea ecx, [esp + 0x18]
call fcn.00402500
mov dword [esp + 0x298], 3
push esi
lea eax, [esp + 0x1c]
push str._Select_a_Folder__dialog_failed__error__0x_08lx
push eax
call fcn.00402f70
mov ecx, dword [esp + 0x24]
add esp, 0xc
push 0x30
push 0x66dd88
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.00402570
jmp 0x46e44e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, dword [0x752d00]
lea edx, [esp + 0x84]
mov dword [esp + 0x54], edx
mov edx, dword [0x753f34]
push ecx
mov dword [esp + 0x50], eax
xor eax, eax
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
mov word [esp + 0x78], ax
call fcn.00401980
mov dword [esp + 0x298], 4
mov eax, dword [esp + 0x6c]
cmp eax, ebx
jne 0x46e3f2
lea eax, [esp + 0x70]
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], 0x45b090
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
cmp eax, ebx
je 0x46e43a
lea edx, [esp + 0x84]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push ebx
lea eax, [esp + 0x88]
push eax
push 0x66dea8
mov ecx, esi
call fcn.004021b0
mov ebp, 1
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x6c]
call fcn.00401210
mov eax, ebp
mov ecx, dword [esp + 0x290]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x278]
xor ecx, esp
call fcn.006157d3
add esp, 0x288
ret