Function at 0x490b80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, dword [esp + 8]
mov eax, dword [esi + 0xd8]
cmp eax, 2
je 0x490c06
cmp eax, 8
je 0x490c06
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esi + 0x64], eax
mov eax, dword [esp + 0x18]
mov dword [esi + 0x68], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x70], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x74], ecx
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x6c], edx
mov edx, dword [esp + 0x20]
push eax
push ecx
mov dword [esi + 0x60], 1
mov dword [esi + 0x78], edx
call fcn.00522d10
mov ecx, dword [esi + 0x84]
mov edx, dword [esp + 0x2c]
mov dword [esi + 0x7c], eax
mov eax, dword [esp + 0x30]
push eax
push ecx
mov dword [esi + 0x80], edx
call fcn.00522d10
mov edx, dword [esp + 0x34]
mov dword [esi + 0x84], eax
mov dword [esi + 0x88], edx
pop esi
ret 0x3c
mov eax, dword [esi + 0x94]
cmp dword [esi + 0x12c], eax
push ebp
push edi
mov ebp, 1
je 0x490c3d
push eax
push str.EVERYTHING_SIZE_COLUMN__d_r_n
mov ecx, esi
call fcn.004900c0
mov eax, dword [esi + 0x94]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x12c], eax
mov eax, dword [esi + 0x98]
cmp dword [esi + 0x130], eax
je 0x490c6d
push eax
push str.EVERYTHING_ATTRIBUTES_COLUMN__d_r_n
mov ecx, esi
call fcn.004900c0
mov ecx, dword [esi + 0x98]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x130], ecx
mov eax, dword [esi + 0x9c]
cmp dword [esi + 0x134], eax
je 0x490c9d
push eax
push str.EVERYTHING_DATE_MODIFIED_COLUMN__d_r_n
mov ecx, esi
call fcn.004900c0
mov edx, dword [esi + 0x9c]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x134], edx
mov eax, dword [esi + 0xa0]
cmp dword [esi + 0x138], eax
je 0x490ccd
push eax
push str.EVERYTHING_DATE_CREATED_COLUMN__d_r_n
mov ecx, esi
call fcn.004900c0
mov eax, dword [esi + 0xa0]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x138], eax
cmp dword [esi + 0x13c], 0
jne 0x490cf1
push str.EVERYTHING_PATH_COLUMN_1_r_n
mov ecx, esi
call fcn.004900c0
add esp, 4
add dword [esi + 0xf8], ebp
mov dword [esi + 0x13c], ebp
mov eax, dword [esi + 0xa4]
cmp dword [esi + 0x140], eax
je 0x490d21
push eax
push str.EVERYTHING_FILE_LIST_FILENAME_COLUMN__d_r_n
mov ecx, esi
call fcn.004900c0
mov ecx, dword [esi + 0xa4]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x140], ecx
mov eax, dword [esi + 0xa8]
cmp dword [esi + 0x144], eax
je 0x490d51
push eax
push str.EVERYTHING_DATE_RECENTLY_CHANGED_COLUMN__d_r_n
mov ecx, esi
call fcn.004900c0
mov edx, dword [esi + 0xa8]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x144], edx
mov eax, dword [esi + 0x8c]
cmp dword [esi + 0x124], eax
je 0x490d81
push eax
push str.EVERYTHING_OFFSET__d_r_n
mov ecx, esi
call fcn.004900c0
mov eax, dword [esi + 0x8c]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x124], eax
mov eax, dword [esi + 0x90]
cmp dword [esi + 0x128], eax
je 0x490db1
push eax
push str.EVERYTHING_COUNT__d_r_n
mov ecx, esi
call fcn.004900c0
mov ecx, dword [esi + 0x90]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x128], ecx
mov edi, dword [esp + 0x14]
cmp dword [esi + 0xfc], edi
je 0x490dd9
push edi
push str.EVERYTHING_CASE__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0xfc], edi
mov edi, dword [esp + 0x18]
cmp dword [esi + 0x100], edi
je 0x490e01
push edi
push str.EVERYTHING_WHOLE_WORD__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x100], edi
mov edi, dword [esp + 0x1c]
cmp dword [esi + 0x104], edi
je 0x490e29
push edi
push str.EVERYTHING_PATH__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x104], edi
mov edi, dword [esp + 0x20]
cmp dword [esi + 0x108], edi
je 0x490e51
push edi
push str.EVERYTHING_DIACRITICS__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x108], edi
mov edi, dword [esp + 0x24]
cmp dword [esi + 0x10c], edi
je 0x490e79
push edi
push str.EVERYTHING_REGEX__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x10c], edi
mov edi, dword [esp + 0x28]
cmp dword [esi + 0x110], edi
je 0x490ea1
push edi
push str.EVERYTHING_HIDE_EMPTY_SEARCH_RESULTS__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x110], edi
mov ecx, dword [esi + 0x114]
mov edi, dword [esp + 0x30]
mov al, byte [ecx]
cmp al, byte [edi]
mov edx, edi
jne 0x490ec2
test al, al
je 0x490ef5
mov al, byte [ecx + ebp]
add ecx, ebp
add edx, ebp
cmp al, byte [edx]
je 0x490eb3
movzx edx, byte [edx]
movzx eax, byte [ecx]
sub eax, edx
je 0x490ef5
push edi
push str.EVERYTHING_SEARCH__s_r_n
mov ecx, esi
call fcn.004900c0
mov eax, dword [esi + 0x114]
add esp, 8
push edi
push eax
call fcn.00522d10
add dword [esi + 0xf8], ebp
mov dword [esi + 0x114], eax
mov edi, dword [esp + 0x34]
mov ecx, dword [esi + 0x11c]
push ebx
mov ebx, edi
and ebx, ebp
and ecx, ebp
cmp ecx, ebx
je 0x490f33
push ebx
push str.EVERYTHING_FILTER_CASE__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
test ebx, ebx
je 0x490f26
or dword [esi + 0x11c], ebp
jmp 0x490f2d
and dword [esi + 0x11c], 0xfffffffe
add dword [esi + 0xf8], ebp
mov edx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 8
and edx, 8
cmp edx, ebx
je 0x490f76
mov eax, edi
shr eax, 3
and eax, ebp
push eax
push str.EVERYTHING_FILTER_DIACRITICS__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
test ebx, ebx
je 0x490f69
or dword [esi + 0x11c], 8
jmp 0x490f70
and dword [esi + 0x11c], 0xfffffff7
add dword [esi + 0xf8], ebp
mov ecx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 4
and ecx, 4
cmp ecx, ebx
je 0x490fb9
mov edx, edi
shr edx, 2
and edx, ebp
push edx
push str.EVERYTHING_FILTER_PATH__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
test ebx, ebx
je 0x490fac
or dword [esi + 0x11c], 4
jmp 0x490fb3
and dword [esi + 0x11c], 0xfffffffb
add dword [esi + 0xf8], ebp
mov eax, dword [esi + 0x11c]
mov ebx, edi
and ebx, 0x10
and eax, 0x10
cmp eax, ebx
je 0x490ffc
mov ecx, edi
shr ecx, 4
and ecx, ebp
push ecx
push str.EVERYTHING_FILTER_REGEX__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
test ebx, ebx
je 0x490fef
or dword [esi + 0x11c], 0x10
jmp 0x490ff6
and dword [esi + 0x11c], 0xffffffef
add dword [esi + 0xf8], ebp
mov edx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 2
and edx, 2
cmp edx, ebx
je 0x49103c
shr edi, 1
and edi, ebp
push edi
push str.EVERYTHING_FILTER_WHOLE_WORD__d_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
test ebx, ebx
je 0x49102f
or dword [esi + 0x11c], 2
jmp 0x491036
and dword [esi + 0x11c], 0xfffffffd
add dword [esi + 0xf8], ebp
mov ecx, dword [esi + 0x118]
mov edi, dword [esp + 0x3c]
mov al, byte [ecx]
cmp al, byte [edi]
mov edx, edi
pop ebx
jne 0x49105f
nop
test al, al
je 0x491092
mov al, byte [ecx + ebp]
add ecx, ebp
add edx, ebp
cmp al, byte [edx]
je 0x491050
movzx edx, byte [edx]
movzx eax, byte [ecx]
sub eax, edx
je 0x491092
push edi
push str.EVERYTHING_FILTER_SEARCH__s_r_n
mov ecx, esi
call fcn.004900c0
mov eax, dword [esi + 0x118]
add esp, 8
push edi
push eax
call fcn.00522d10
add dword [esi + 0xf8], ebp
mov dword [esi + 0x118], eax
mov edi, dword [esp + 0x3c]
cmp dword [esi + 0x120], edi
je 0x4910c1
mov eax, edi
call fcn.00490650
push eax
push str.EVERYTHING_SORT__s_r_n
mov ecx, esi
call fcn.004900c0
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x120], edi
push str.EVERYTHING_QUERY_r_n
mov ecx, esi
call fcn.004900c0
add dword [esi + 0xf8], ebp
add esp, 4
cmp dword [esi + 0xd8], 2
pop edi
pop ebp
jne 0x4910e9
push 8
push esi
call fcn.00491560
pop esi
ret 0x3c