Function at 0x490b30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, dword [esp + 8]
mov eax, dword [esi + 0xd8]
cmp eax, 2
je 0x490bb6
cmp eax, 8
je 0x490bb6
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esi + 0x64], eax
mov eax, dword [esp + 0x18]
mov dword [esi + 0x68], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x70], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x74], ecx
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x6c], edx
mov edx, dword [esp + 0x20]
push eax
push ecx
mov dword [esi + 0x60], 1
mov dword [esi + 0x78], edx
call fcn.00522ff0
mov ecx, dword [esi + 0x84]
mov edx, dword [esp + 0x2c]
mov dword [esi + 0x7c], eax
mov eax, dword [esp + 0x30]
push eax
push ecx
mov dword [esi + 0x80], edx
call fcn.00522ff0
mov edx, dword [esp + 0x34]
mov dword [esi + 0x84], eax
mov dword [esi + 0x88], edx
pop esi
ret 0x3c
mov eax, dword [esi + 0x94]
cmp dword [esi + 0x12c], eax
push ebp
push edi
mov ebp, 1
je 0x490bed
push eax
push str.EVERYTHING_SIZE_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0x94]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x12c], eax
mov eax, dword [esi + 0x98]
cmp dword [esi + 0x130], eax
je 0x490c1d
push eax
push str.EVERYTHING_ATTRIBUTES_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov ecx, dword [esi + 0x98]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x130], ecx
mov eax, dword [esi + 0x9c]
cmp dword [esi + 0x134], eax
je 0x490c4d
push eax
push str.EVERYTHING_DATE_MODIFIED_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov edx, dword [esi + 0x9c]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x134], edx
mov eax, dword [esi + 0xa0]
cmp dword [esi + 0x138], eax
je 0x490c7d
push eax
push str.EVERYTHING_DATE_CREATED_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0xa0]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x138], eax
cmp dword [esi + 0x13c], 0
jne 0x490ca1
push str.EVERYTHING_PATH_COLUMN_1_r_n
mov ecx, esi
call fcn.00490080
add esp, 4
add dword [esi + 0xf8], ebp
mov dword [esi + 0x13c], ebp
mov eax, dword [esi + 0xa4]
cmp dword [esi + 0x140], eax
je 0x490cd1
push eax
push str.EVERYTHING_FILE_LIST_FILENAME_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov ecx, dword [esi + 0xa4]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x140], ecx
mov eax, dword [esi + 0xa8]
cmp dword [esi + 0x144], eax
je 0x490d01
push eax
push str.EVERYTHING_DATE_RECENTLY_CHANGED_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov edx, dword [esi + 0xa8]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x144], edx
mov eax, dword [esi + 0x8c]
cmp dword [esi + 0x124], eax
je 0x490d31
push eax
push str.EVERYTHING_OFFSET__d_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0x8c]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x124], eax
mov eax, dword [esi + 0x90]
cmp dword [esi + 0x128], eax
je 0x490d61
push eax
push str.EVERYTHING_COUNT__d_r_n
mov ecx, esi
call fcn.00490080
mov ecx, dword [esi + 0x90]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x128], ecx
mov edi, dword [esp + 0x14]
cmp dword [esi + 0xfc], edi
je 0x490d89
push edi
push str.EVERYTHING_CASE__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0xfc], edi
mov edi, dword [esp + 0x18]
cmp dword [esi + 0x100], edi
je 0x490db1
push edi
push str.EVERYTHING_WHOLE_WORD__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x100], edi
mov edi, dword [esp + 0x1c]
cmp dword [esi + 0x104], edi
je 0x490dd9
push edi
push str.EVERYTHING_PATH__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x104], edi
mov edi, dword [esp + 0x20]
cmp dword [esi + 0x108], edi
je 0x490e01
push edi
push str.EVERYTHING_DIACRITICS__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x108], edi
mov edi, dword [esp + 0x24]
cmp dword [esi + 0x10c], edi
je 0x490e29
push edi
push str.EVERYTHING_REGEX__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x10c], edi
mov edi, dword [esp + 0x28]
cmp dword [esi + 0x110], edi
je 0x490e51
push edi
push str.EVERYTHING_HIDE_EMPTY_SEARCH_RESULTS__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x110], edi
mov ecx, dword [esi + 0x114]
mov edi, dword [esp + 0x30]
mov al, byte [ecx]
cmp al, byte [edi]
mov edx, edi
jne 0x490e72
test al, al
je 0x490ea5
mov al, byte [ecx + ebp]
add ecx, ebp
add edx, ebp
cmp al, byte [edx]
je 0x490e63
movzx edx, byte [edx]
movzx eax, byte [ecx]
sub eax, edx
je 0x490ea5
push edi
push str.EVERYTHING_SEARCH__s_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0x114]
add esp, 8
push edi
push eax
call fcn.00522ff0
add dword [esi + 0xf8], ebp
mov dword [esi + 0x114], eax
mov edi, dword [esp + 0x34]
mov ecx, dword [esi + 0x11c]
push ebx
mov ebx, edi
and ebx, ebp
and ecx, ebp
cmp ecx, ebx
je 0x490ee3
push ebx
push str.EVERYTHING_FILTER_CASE__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490ed6
or dword [esi + 0x11c], ebp
jmp 0x490edd
and dword [esi + 0x11c], 0xfffffffe
add dword [esi + 0xf8], ebp
mov edx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 8
and edx, 8
cmp edx, ebx
je 0x490f26
mov eax, edi
shr eax, 3
and eax, ebp
push eax
push str.EVERYTHING_FILTER_DIACRITICS__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490f19
or dword [esi + 0x11c], 8
jmp 0x490f20
and dword [esi + 0x11c], 0xfffffff7
add dword [esi + 0xf8], ebp
mov ecx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 4
and ecx, 4
cmp ecx, ebx
je 0x490f69
mov edx, edi
shr edx, 2
and edx, ebp
push edx
push str.EVERYTHING_FILTER_PATH__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490f5c
or dword [esi + 0x11c], 4
jmp 0x490f63
and dword [esi + 0x11c], 0xfffffffb
add dword [esi + 0xf8], ebp
mov eax, dword [esi + 0x11c]
mov ebx, edi
and ebx, 0x10
and eax, 0x10
cmp eax, ebx
je 0x490fac
mov ecx, edi
shr ecx, 4
and ecx, ebp
push ecx
push str.EVERYTHING_FILTER_REGEX__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490f9f
or dword [esi + 0x11c], 0x10
jmp 0x490fa6
and dword [esi + 0x11c], 0xffffffef
add dword [esi + 0xf8], ebp
mov edx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 2
and edx, 2
cmp edx, ebx
je 0x490fec
shr edi, 1
and edi, ebp
push edi
push str.EVERYTHING_FILTER_WHOLE_WORD__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490fdf
or dword [esi + 0x11c], 2
jmp 0x490fe6
and dword [esi + 0x11c], 0xfffffffd
add dword [esi + 0xf8], ebp
mov ecx, dword [esi + 0x118]
mov edi, dword [esp + 0x3c]
mov al, byte [ecx]
cmp al, byte [edi]
mov edx, edi
pop ebx
jne 0x49100f
nop
test al, al
je 0x491042
mov al, byte [ecx + ebp]
add ecx, ebp
add edx, ebp
cmp al, byte [edx]
je 0x491000
movzx edx, byte [edx]
movzx eax, byte [ecx]
sub eax, edx
je 0x491042
push edi
push str.EVERYTHING_FILTER_SEARCH__s_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0x118]
add esp, 8
push edi
push eax
call fcn.00522ff0
add dword [esi + 0xf8], ebp
mov dword [esi + 0x118], eax
mov edi, dword [esp + 0x3c]
cmp dword [esi + 0x120], edi
je 0x491071
mov eax, edi
call fcn.00490610
push eax
push str.EVERYTHING_SORT__s_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x120], edi
push str.EVERYTHING_QUERY_r_n
mov ecx, esi
call fcn.00490080
add dword [esi + 0xf8], ebp
add esp, 4
cmp dword [esi + 0xd8], 2
pop edi
pop ebp
jne 0x491099
push 8
push esi
call fcn.00491510
pop esi
ret 0x3c