Function at 0x46c9d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x63e507
mov eax, dword fs:[0]
push eax
sub esp, 0x27c
mov eax, dword [0x7496c8]
xor eax, esp
mov dword [esp + 0x278], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x7496c8]
xor eax, esp
push eax
lea eax, [esp + 0x290]
mov dword fs:[0], eax
mov esi, dword [esp + 0x2a0]
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], esi
cmp dword [0x74e9dc], ebx
je 0x46ce5c
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebx
call fcn.00455410
add esp, 4
push eax
push 0x676cec
push 1
push ebx
push 0x6fe57c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, ebx
jl 0x46cde1
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x48]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46cdd5
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
or edx, 0x20
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46cdd5
xor ecx, ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebx
mov word [esp + 0x7c], cx
mov dword [esp + 0x298], ebx
mov edx, dword [0x74eb40]
mov eax, dword [0x750480]
push edx
push eax
lea ecx, [esp + 0x80]
call fcn.00401980
mov eax, dword [esp + 0x78]
cmp eax, ebx
jne 0x46cad3
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x38]
call fcn.00417fb0
mov byte [esp + 0x298], 1
mov edx, dword [esp + 0x34]
xor ecx, ecx
push ebx
mov word [esp + 0x74], cx
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
call fcn.00401980
mov byte [esp + 0x298], 2
mov eax, dword [esp + 0x6c]
mov ecx, eax
cmp eax, ebx
jne 0x46cb19
lea ecx, [esp + 0x70]
mov edi, dword [esp + 0x78]
mov eax, edi
cmp edi, ebx
jne 0x46cb27
lea eax, [esp + 0x7c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x46cb4d
cmp dx, bx
je 0x46cb49
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x46cb4d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x46cb27
xor eax, eax
jmp 0x46cb52
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x46cb6f
mov ecx, edi
cmp edi, ebx
jne 0x46cb60
lea ecx, [esp + 0x7c]
mov eax, dword [esp + 0x14]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov byte [esp + 0x298], 1
lea ecx, [esp + 0x6c]
call fcn.004011f0
mov byte [esp + 0x298], bl
lea ecx, [esp + 0x34]
call fcn.00402570
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x78]
call fcn.004011f0
cmp esi, ebx
jl 0x46cdd5
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
push ebx
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x46cdd5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
cmp eax, ebx
mov edi, dword [sym.imp.ole32.dll_CoTaskMemFree]
jl 0x46ccd2
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x30], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46cc2b
mov ecx, dword [esp + 0x2c]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x66ae98
call fcn.004021b0
mov edx, dword [esp + 0x2c]
push edx
mov ebp, 1
call edi
jmp 0x46ccbe
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x38]
push eax
push 0x675c48
push 2
push ecx
call fcn.00455d20
add esp, 0x10
test eax, eax
jl 0x46ccbe
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x40]
push ecx
push 0x6fe53c
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x46ccb2
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x28], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46cca6
mov ecx, dword [esp + 0x24]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x66ae98
call fcn.004021b0
mov edx, dword [esp + 0x24]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp ebp, ebx
jne 0x46cdd5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x34]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46cdd5
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x2c], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46cd36
mov ecx, dword [esp + 0x28]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x66ae98
call fcn.004021b0
mov edx, dword [esp + 0x28]
push edx
mov ebp, 1
call edi
jmp 0x46cdc9
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push eax
push 0x675c48
push 2
push ecx
call fcn.00455d20
add esp, 0x10
test eax, eax
jl 0x46cdc9
mov eax, dword [esp + 0x44]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x3c]
push ecx
push 0x6fe53c
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x46cdbd
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x46cdb1
mov ecx, dword [esp + 0x30]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x66ae98
call fcn.004021b0
mov edx, dword [esp + 0x30]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, ebx
jge 0x46cf0e
cmp ebp, ebx
jne 0x46cf0e
cmp esi, 0x800704c7
je 0x46cf0e
lea ecx, [esp + 0x18]
call fcn.00402500
mov dword [esp + 0x298], 3
push esi
lea eax, [esp + 0x1c]
push str._Select_a_Folder__dialog_failed__error__0x_08lx
push eax
call fcn.00402f80
mov ecx, dword [esp + 0x24]
add esp, 0xc
push 0x30
push 0x66ad78
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.00402570
jmp 0x46cf0e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, dword [0x74eb40]
lea edx, [esp + 0x84]
mov dword [esp + 0x54], edx
mov edx, dword [0x74fd74]
push ecx
mov dword [esp + 0x50], eax
xor eax, eax
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
mov word [esp + 0x78], ax
call fcn.00401980
mov dword [esp + 0x298], 4
mov eax, dword [esp + 0x6c]
cmp eax, ebx
jne 0x46ceb2
lea eax, [esp + 0x70]
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], 0x4b0b40
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
cmp eax, ebx
je 0x46cefa
lea edx, [esp + 0x84]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push ebx
lea eax, [esp + 0x88]
push eax
push 0x66ae98
mov ecx, esi
call fcn.004021b0
mov ebp, 1
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x6c]
call fcn.004011f0
mov eax, ebp
mov ecx, dword [esp + 0x290]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x278]
xor ecx, esp
call fcn.00613241
add esp, 0x288
ret