Function at 0x4720e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x64b977
mov eax, dword fs:[0]
push eax
sub esp, 0x27c
mov eax, dword [0x758898]
xor eax, esp
mov dword [esp + 0x278], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x758898]
xor eax, esp
push eax
lea eax, [esp + 0x290]
mov dword fs:[0], eax
mov esi, dword [esp + 0x2a0]
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], esi
cmp dword [0x75dbac], ebx
je 0x47256c
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebx
call fcn.0043c520
add esp, 4
push eax
push 0x685138
push 1
push ebx
push 0x70d07c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, ebx
jl 0x4724f1
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x48]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4724e5
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
or edx, 0x20
push edx
push eax
mov eax, dword [ecx + 0x24]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4724e5
xor ecx, ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x80], ebx
mov word [esp + 0x7c], cx
mov dword [esp + 0x298], ebx
mov edx, dword [0x75dd28]
mov eax, dword [0x75f698]
push edx
push eax
lea ecx, [esp + 0x80]
call fcn.00401980
mov eax, dword [esp + 0x78]
cmp eax, ebx
jne 0x4721e3
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x38]
call fcn.004182b0
mov byte [esp + 0x298], 1
mov edx, dword [esp + 0x34]
xor ecx, ecx
push ebx
mov word [esp + 0x74], cx
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
call fcn.00401980
mov byte [esp + 0x298], 2
mov eax, dword [esp + 0x6c]
mov ecx, eax
cmp eax, ebx
jne 0x472229
lea ecx, [esp + 0x70]
mov edi, dword [esp + 0x78]
mov eax, edi
cmp edi, ebx
jne 0x472237
lea eax, [esp + 0x7c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47225d
cmp dx, bx
je 0x472259
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47225d
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x472237
xor eax, eax
jmp 0x472262
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x47227f
mov ecx, edi
cmp edi, ebx
jne 0x472270
lea ecx, [esp + 0x7c]
mov eax, dword [esp + 0x14]
mov edx, dword [eax]
push ecx
push eax
mov eax, dword [edx + 0x44]
call eax
mov esi, eax
mov byte [esp + 0x298], 1
lea ecx, [esp + 0x6c]
call fcn.00401210
mov byte [esp + 0x298], bl
lea ecx, [esp + 0x34]
call fcn.00402570
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x78]
call fcn.00401210
cmp esi, ebx
jl 0x4724e5
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
push ebx
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x4724e5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
mov dword [esp + 0x20], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
cmp eax, ebx
mov edi, dword [sym.imp.ole32.dll_CoTaskMemFree]
jl 0x4723e2
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x2c]
push edx
mov dword [esp + 0x30], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x47233b
mov ecx, dword [esp + 0x2c]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x678ea8
call fcn.004021b0
mov edx, dword [esp + 0x2c]
push edx
mov ebp, 1
call edi
jmp 0x4723ce
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x38]
push eax
push 0x683ff8
push 2
push ecx
call fcn.0045a5a0
add esp, 0x10
test eax, eax
jl 0x4723ce
mov eax, dword [esp + 0x38]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x40]
push ecx
push 0x70d03c
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x4723c2
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x24]
push edx
mov dword [esp + 0x28], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4723b6
mov ecx, dword [esp + 0x24]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x678ea8
call fcn.004021b0
mov edx, dword [esp + 0x24]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x40]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp ebp, ebx
jne 0x4724e5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x34]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4724e5
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x2c], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x472446
mov ecx, dword [esp + 0x28]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x678ea8
call fcn.004021b0
mov edx, dword [esp + 0x28]
push edx
mov ebp, 1
call edi
jmp 0x4724d9
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x44]
push eax
push 0x683ff8
push 2
push ecx
call fcn.0045a5a0
add esp, 0x10
test eax, eax
jl 0x4724d9
mov eax, dword [esp + 0x44]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0x3c]
push ecx
push 0x70d03c
push 1
push eax
call edx
mov esi, eax
cmp esi, ebx
jl 0x4724cd
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0x30]
push edx
mov dword [esp + 0x34], ebx
mov ecx, dword [eax]
push 0x80058000
push eax
mov eax, dword [ecx + 0x14]
call eax
mov esi, eax
cmp esi, ebx
jl 0x4724c1
mov ecx, dword [esp + 0x30]
push ebx
push ecx
mov ecx, dword [esp + 0x20]
push 0x678ea8
call fcn.004021b0
mov edx, dword [esp + 0x30]
push edx
mov ebp, 1
call edi
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp esi, ebx
jge 0x47261e
cmp ebp, ebx
jne 0x47261e
cmp esi, 0x800704c7
je 0x47261e
lea ecx, [esp + 0x18]
call fcn.00402500
mov dword [esp + 0x298], 3
push esi
lea eax, [esp + 0x1c]
push str._Select_a_Folder__dialog_failed__error__0x_08lx
push eax
call fcn.00402f70
mov ecx, dword [esp + 0x24]
add esp, 0xc
push 0x30
push 0x678d88
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.00402570
jmp 0x47261e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ecx, dword [0x75dd28]
lea edx, [esp + 0x84]
mov dword [esp + 0x54], edx
mov edx, dword [0x75ef8c]
push ecx
mov dword [esp + 0x50], eax
xor eax, eax
push edx
lea ecx, [esp + 0x74]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x7c], ebx
mov word [esp + 0x78], ax
call fcn.00401980
mov dword [esp + 0x298], 4
mov eax, dword [esp + 0x6c]
cmp eax, ebx
jne 0x4725c2
lea eax, [esp + 0x70]
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], 0x45ed60
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
cmp eax, ebx
je 0x47260a
lea edx, [esp + 0x84]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push ebx
lea eax, [esp + 0x88]
push eax
push 0x678ea8
mov ecx, esi
call fcn.004021b0
mov ebp, 1
mov dword [esp + 0x298], 0xffffffff
lea ecx, [esp + 0x6c]
call fcn.00401210
mov eax, ebp
mov ecx, dword [esp + 0x290]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x278]
xor ecx, esp
call fcn.0062016f
add esp, 0x288
ret