Function at 0x4711d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6489b7
mov eax, dword fs:[0]
push eax
sub esp, 0x27c
mov eax, dword [0x755898]
xor eax, esp
mov dword [esp + 0x278], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x755898]
xor eax, esp
push eax
lea eax, [esp + 0x290]
mov dword fs:[0], eax
mov esi, dword [esp + 0x2a0]
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], esi
cmp dword [0x75aba4], ebx
je 0x47165c
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebx
call fcn.00448650
add esp, 4
push eax
push 0x681e48
push 1
push ebx
push 0x7099cc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, ebx
jl 0x4715e1
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x48]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4715d5
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
or edx, 0x20
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4715d5
xor ecx, ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebx
mov word [esp + 0x7c], cx
mov dword [esp + 0x298], ebx
mov edx, dword [0x75ad10]
mov eax, dword [0x75c658]
push edx
push eax
lea ecx, [esp + 0x80]
call fcn.00401980
mov eax, dword [esp + 0x78]
cmp eax, ebx
jne 0x4712d3
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x38]
call fcn.00418200
mov byte [esp + 0x298], 1
mov edx, dword [esp + 0x34]
xor ecx, ecx
push ebx
mov word [esp + 0x74], cx
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
call fcn.00401980
mov byte [esp + 0x298], 2
mov eax, dword [esp + 0x6c]
mov ecx, eax
cmp eax, ebx
jne 0x471319
lea ecx, [esp + 0x70]
mov edi, dword [esp + 0x78]
mov eax, edi
cmp edi, ebx
jne 0x471327
lea eax, [esp + 0x7c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47134d
cmp dx, bx
je 0x471349
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47134d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x471327
xor eax, eax
jmp 0x471352
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x47136f
mov ecx, edi
cmp edi, ebx
jne 0x471360
lea ecx, [esp + 0x7c]
mov eax, dword [esp + 0x14]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov byte [esp + 0x298], 1
lea ecx, [esp + 0x6c]
call fcn.00401210
mov byte [esp + 0x298], bl
lea ecx, [esp + 0x34]
call fcn.00402570
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x78]
call fcn.00401210
cmp esi, ebx
jl 0x4715d5
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
push ebx
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x4715d5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
cmp eax, ebx
mov edi, dword [sym.imp.ole32.dll_CoTaskMemFree]
jl 0x4714d2
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x30], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x47142b
mov ecx, dword [esp + 0x2c]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x675ea0
call fcn.004021b0
mov edx, dword [esp + 0x2c]
push edx
mov ebp, 1
call edi
jmp 0x4714be
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x38]
push eax
push 0x680d48
push 2
push ecx
call fcn.00459850
add esp, 0x10
test eax, eax
jl 0x4714be
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x40]
push ecx
push 0x70998c
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x4714b2
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x28], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4714a6
mov ecx, dword [esp + 0x24]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x675ea0
call fcn.004021b0
mov edx, dword [esp + 0x24]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp ebp, ebx
jne 0x4715d5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x34]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4715d5
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x2c], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x471536
mov ecx, dword [esp + 0x28]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x675ea0
call fcn.004021b0
mov edx, dword [esp + 0x28]
push edx
mov ebp, 1
call edi
jmp 0x4715c9
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push eax
push 0x680d48
push 2
push ecx
call fcn.00459850
add esp, 0x10
test eax, eax
jl 0x4715c9
mov eax, dword [esp + 0x44]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x3c]
push ecx
push 0x70998c
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x4715bd
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4715b1
mov ecx, dword [esp + 0x30]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x675ea0
call fcn.004021b0
mov edx, dword [esp + 0x30]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, ebx
jge 0x47170e
cmp ebp, ebx
jne 0x47170e
cmp esi, 0x800704c7
je 0x47170e
lea ecx, [esp + 0x18]
call fcn.00402500
mov dword [esp + 0x298], 3
push esi
lea eax, [esp + 0x1c]
push str._Select_a_Folder__dialog_failed__error__0x_08lx
push eax
call fcn.00402f70
mov ecx, dword [esp + 0x24]
add esp, 0xc
push 0x30
push 0x675d88
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.00402570
jmp 0x47170e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, dword [0x75ad10]
lea edx, [esp + 0x84]
mov dword [esp + 0x54], edx
mov edx, dword [0x75bf4c]
push ecx
mov dword [esp + 0x50], eax
xor eax, eax
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
mov word [esp + 0x78], ax
call fcn.00401980
mov dword [esp + 0x298], 4
mov eax, dword [esp + 0x6c]
cmp eax, ebx
jne 0x4716b2
lea eax, [esp + 0x70]
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], 0x45de50
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
cmp eax, ebx
je 0x4716fa
lea edx, [esp + 0x84]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push ebx
lea eax, [esp + 0x88]
push eax
push 0x675ea0
mov ecx, esi
call fcn.004021b0
mov ebp, 1
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x6c]
call fcn.00401210
mov eax, ebp
mov ecx, dword [esp + 0x290]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x278]
xor ecx, esp
call fcn.0061d2ff
add esp, 0x288
ret