Function at 0x471bf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x64b927
mov eax, dword fs:[0]
push eax
sub esp, 0x27c
mov eax, dword [0x758898]
xor eax, esp
mov dword [esp + 0x278], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x758898]
xor eax, esp
push eax
lea eax, [esp + 0x290]
mov dword fs:[0], eax
mov esi, dword [esp + 0x2a0]
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], esi
cmp dword [0x75dbac], ebx
je 0x47207c
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebx
call fcn.0043bd20
add esp, 4
push eax
push 0x685148
push 1
push ebx
push 0x70d09c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, ebx
jl 0x472001
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x48]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jl 0x471ff5
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
or edx, 0x20
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
mov esi, eax
cmp esi, ebx
jl 0x471ff5
xor ecx, ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebx
mov word [esp + 0x7c], cx
mov dword [esp + 0x298], ebx
mov edx, dword [0x75dd28]
mov eax, dword [0x75f698]
push edx
push eax
lea ecx, [esp + 0x80]
call fcn.00401990
mov eax, dword [esp + 0x78]
cmp eax, ebx
jne 0x471cf3
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x38]
call fcn.00417be0
mov byte [esp + 0x298], 1
mov edx, dword [esp + 0x34]
xor ecx, ecx
push ebx
mov word [esp + 0x74], cx
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
call fcn.00401990
mov byte [esp + 0x298], 2
mov eax, dword [esp + 0x6c]
mov ecx, eax
cmp eax, ebx
jne 0x471d39
lea ecx, [esp + 0x70]
mov edi, dword [esp + 0x78]
mov eax, edi
cmp edi, ebx
jne 0x471d47
lea eax, [esp + 0x7c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x471d6d
cmp dx, bx
je 0x471d69
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x471d6d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x471d47
xor eax, eax
jmp 0x471d72
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x471d8f
mov ecx, edi
cmp edi, ebx
jne 0x471d80
lea ecx, [esp + 0x7c]
mov eax, dword [esp + 0x14]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov byte [esp + 0x298], 1
lea ecx, [esp + 0x6c]
call fcn.00401210
mov byte [esp + 0x298], bl
lea ecx, [esp + 0x34]
call fcn.00402580
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x78]
call fcn.00401210
cmp esi, ebx
jl 0x471ff5
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
push ebx
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x471ff5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
cmp eax, ebx
mov edi, dword [sym.imp.ole32.dll_CoTaskMemFree]
jl 0x471ef2
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x30], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x471e4b
mov ecx, dword [esp + 0x2c]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x678ea8
call fcn.004021c0
mov edx, dword [esp + 0x2c]
push edx
mov ebp, 1
call edi
jmp 0x471ede
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x38]
push eax
push 0x684008
push 2
push ecx
call fcn.00459f90
add esp, 0x10
test eax, eax
jl 0x471ede
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x40]
push ecx
push 0x70d05c
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x471ed2
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x28], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x471ec6
mov ecx, dword [esp + 0x24]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x678ea8
call fcn.004021c0
mov edx, dword [esp + 0x24]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp ebp, ebx
jne 0x471ff5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x34]
call eax
mov esi, eax
cmp esi, ebx
jl 0x471ff5
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x2c], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x471f56
mov ecx, dword [esp + 0x28]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x678ea8
call fcn.004021c0
mov edx, dword [esp + 0x28]
push edx
mov ebp, 1
call edi
jmp 0x471fe9
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push eax
push 0x684008
push 2
push ecx
call fcn.00459f90
add esp, 0x10
test eax, eax
jl 0x471fe9
mov eax, dword [esp + 0x44]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x3c]
push ecx
push 0x70d05c
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x471fdd
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x471fd1
mov ecx, dword [esp + 0x30]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x678ea8
call fcn.004021c0
mov edx, dword [esp + 0x30]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, ebx
jge 0x47212e
cmp ebp, ebx
jne 0x47212e
cmp esi, 0x800704c7
je 0x47212e
lea ecx, [esp + 0x18]
call fcn.00402510
mov dword [esp + 0x298], 3
push esi
lea eax, [esp + 0x1c]
push str._Select_a_Folder__dialog_failed__error__0x_08lx
push eax
call fcn.00402f80
mov ecx, dword [esp + 0x24]
add esp, 0xc
push 0x30
push 0x678d88
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.00402580
jmp 0x47212e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, dword [0x75dd28]
lea edx, [esp + 0x84]
mov dword [esp + 0x54], edx
mov edx, dword [0x75ef8c]
push ecx
mov dword [esp + 0x50], eax
xor eax, eax
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
mov word [esp + 0x78], ax
call fcn.00401990
mov dword [esp + 0x298], 4
mov eax, dword [esp + 0x6c]
cmp eax, ebx
jne 0x4720d2
lea eax, [esp + 0x70]
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], 0x4b95e0
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
cmp eax, ebx
je 0x47211a
lea edx, [esp + 0x84]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push ebx
lea eax, [esp + 0x88]
push eax
push 0x678ea8
mov ecx, esi
call fcn.004021c0
mov ebp, 1
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x6c]
call fcn.00401210
mov eax, ebp
mov ecx, dword [esp + 0x290]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x278]
xor ecx, esp
call fcn.0062023e
add esp, 0x288
ret