Function at 0x48f490
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push edi
mov edi, dword [esp + 8]
mov eax, dword [edi + 0xd8]
cmp eax, 2
je 0x48f516
cmp eax, 8
je 0x48f516
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [edi + 0x64], eax
mov eax, dword [esp + 0x18]
mov dword [edi + 0x68], ecx
mov ecx, dword [esp + 0x1c]
mov dword [edi + 0x70], eax
mov eax, dword [esp + 0x28]
mov dword [edi + 0x74], ecx
mov ecx, dword [edi + 0x7c]
mov dword [edi + 0x6c], edx
mov edx, dword [esp + 0x20]
push eax
push ecx
mov dword [edi + 0x60], 1
mov dword [edi + 0x78], edx
call fcn.0051e5f0
mov ecx, dword [edi + 0x84]
mov edx, dword [esp + 0x2c]
mov dword [edi + 0x7c], eax
mov eax, dword [esp + 0x30]
push eax
push ecx
mov dword [edi + 0x80], edx
call fcn.0051e5f0
mov edx, dword [esp + 0x34]
mov dword [edi + 0x84], eax
mov dword [edi + 0x88], edx
pop edi
ret 0x3c
mov eax, dword [edi + 0x94]
cmp dword [edi + 0x12c], eax
push ebp
push esi
mov ebp, 1
je 0x48f54b
push eax
push str.EVERYTHING_SIZE_COLUMN__d_r_n
call fcn.0048ebd0
mov eax, dword [edi + 0x94]
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x12c], eax
mov eax, dword [edi + 0x98]
cmp dword [edi + 0x130], eax
je 0x48f579
push eax
push str.EVERYTHING_ATTRIBUTES_COLUMN__d_r_n
call fcn.0048ebd0
mov ecx, dword [edi + 0x98]
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x130], ecx
mov eax, dword [edi + 0x9c]
cmp dword [edi + 0x134], eax
je 0x48f5a7
push eax
push str.EVERYTHING_DATE_MODIFIED_COLUMN__d_r_n
call fcn.0048ebd0
mov edx, dword [edi + 0x9c]
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x134], edx
mov eax, dword [edi + 0xa0]
cmp dword [edi + 0x138], eax
je 0x48f5d5
push eax
push str.EVERYTHING_DATE_CREATED_COLUMN__d_r_n
call fcn.0048ebd0
mov eax, dword [edi + 0xa0]
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x138], eax
cmp dword [edi + 0x13c], 0
jne 0x48f5f7
push str.EVERYTHING_PATH_COLUMN_1_r_n
call fcn.0048ebd0
add esp, 4
add dword [edi + 0xf8], ebp
mov dword [edi + 0x13c], ebp
mov eax, dword [edi + 0xa4]
cmp dword [edi + 0x140], eax
je 0x48f625
push eax
push str.EVERYTHING_FILE_LIST_FILENAME_COLUMN__d_r_n
call fcn.0048ebd0
mov ecx, dword [edi + 0xa4]
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x140], ecx
mov eax, dword [edi + 0xa8]
cmp dword [edi + 0x144], eax
je 0x48f653
push eax
push str.EVERYTHING_DATE_RECENTLY_CHANGED_COLUMN__d_r_n
call fcn.0048ebd0
mov edx, dword [edi + 0xa8]
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x144], edx
mov eax, dword [edi + 0x8c]
cmp dword [edi + 0x124], eax
je 0x48f681
push eax
push str.EVERYTHING_OFFSET__d_r_n
call fcn.0048ebd0
mov eax, dword [edi + 0x8c]
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x124], eax
mov eax, dword [edi + 0x90]
cmp dword [edi + 0x128], eax
je 0x48f6af
push eax
push str.EVERYTHING_COUNT__d_r_n
call fcn.0048ebd0
mov ecx, dword [edi + 0x90]
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x128], ecx
mov esi, dword [esp + 0x14]
cmp dword [edi + 0xfc], esi
je 0x48f6d5
push esi
push str.EVERYTHING_CASE__d_r_n
call fcn.0048ebd0
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0xfc], esi
mov esi, dword [esp + 0x18]
cmp dword [edi + 0x100], esi
je 0x48f6fb
push esi
push str.EVERYTHING_WHOLE_WORD__d_r_n
call fcn.0048ebd0
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x100], esi
mov esi, dword [esp + 0x1c]
cmp dword [edi + 0x104], esi
je 0x48f721
push esi
push str.EVERYTHING_PATH__d_r_n
call fcn.0048ebd0
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x104], esi
mov esi, dword [esp + 0x20]
cmp dword [edi + 0x108], esi
je 0x48f747
push esi
push str.EVERYTHING_DIACRITICS__d_r_n
call fcn.0048ebd0
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x108], esi
mov esi, dword [esp + 0x24]
cmp dword [edi + 0x10c], esi
je 0x48f76d
push esi
push str.EVERYTHING_REGEX__d_r_n
call fcn.0048ebd0
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x10c], esi
mov esi, dword [esp + 0x28]
cmp dword [edi + 0x110], esi
je 0x48f793
push esi
push str.EVERYTHING_HIDE_EMPTY_SEARCH_RESULTS__d_r_n
call fcn.0048ebd0
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x110], esi
mov ecx, dword [edi + 0x114]
mov esi, dword [esp + 0x30]
mov al, byte [ecx]
cmp al, byte [esi]
mov edx, esi
jne 0x48f7b4
test al, al
je 0x48f7e5
mov al, byte [ecx + ebp]
add ecx, ebp
add edx, ebp
cmp al, byte [edx]
je 0x48f7a5
movzx edx, byte [edx]
movzx eax, byte [ecx]
sub eax, edx
je 0x48f7e5
push esi
push str.EVERYTHING_SEARCH__s_r_n
call fcn.0048ebd0
mov eax, dword [edi + 0x114]
add esp, 8
push esi
push eax
call fcn.0051e5f0
add dword [edi + 0xf8], ebp
mov dword [edi + 0x114], eax
mov esi, dword [esp + 0x34]
mov ecx, dword [edi + 0x11c]
push ebx
mov ebx, esi
and ebx, ebp
and ecx, ebp
cmp ecx, ebx
je 0x48f821
push ebx
push str.EVERYTHING_FILTER_CASE__d_r_n
call fcn.0048ebd0
add esp, 8
test ebx, ebx
je 0x48f814
or dword [edi + 0x11c], ebp
jmp 0x48f81b
and dword [edi + 0x11c], 0xfffffffe
add dword [edi + 0xf8], ebp
mov edx, dword [edi + 0x11c]
mov ebx, esi
and ebx, 8
and edx, 8
cmp edx, ebx
je 0x48f862
mov eax, esi
shr eax, 3
and eax, ebp
push eax
push str.EVERYTHING_FILTER_DIACRITICS__d_r_n
call fcn.0048ebd0
add esp, 8
test ebx, ebx
je 0x48f855
or dword [edi + 0x11c], 8
jmp 0x48f85c
and dword [edi + 0x11c], 0xfffffff7
add dword [edi + 0xf8], ebp
mov ecx, dword [edi + 0x11c]
mov ebx, esi
and ebx, 4
and ecx, 4
cmp ecx, ebx
je 0x48f8a3
mov edx, esi
shr edx, 2
and edx, ebp
push edx
push str.EVERYTHING_FILTER_PATH__d_r_n
call fcn.0048ebd0
add esp, 8
test ebx, ebx
je 0x48f896
or dword [edi + 0x11c], 4
jmp 0x48f89d
and dword [edi + 0x11c], 0xfffffffb
add dword [edi + 0xf8], ebp
mov eax, dword [edi + 0x11c]
mov ebx, esi
and ebx, 0x10
and eax, 0x10
cmp eax, ebx
je 0x48f8e4
mov ecx, esi
shr ecx, 4
and ecx, ebp
push ecx
push str.EVERYTHING_FILTER_REGEX__d_r_n
call fcn.0048ebd0
add esp, 8
test ebx, ebx
je 0x48f8d7
or dword [edi + 0x11c], 0x10
jmp 0x48f8de
and dword [edi + 0x11c], 0xffffffef
add dword [edi + 0xf8], ebp
mov edx, dword [edi + 0x11c]
mov ebx, esi
and ebx, 2
and edx, 2
cmp edx, ebx
je 0x48f922
shr esi, 1
and esi, ebp
push esi
push str.EVERYTHING_FILTER_WHOLE_WORD__d_r_n
call fcn.0048ebd0
add esp, 8
test ebx, ebx
je 0x48f915
or dword [edi + 0x11c], 2
jmp 0x48f91c
and dword [edi + 0x11c], 0xfffffffd
add dword [edi + 0xf8], ebp
mov ecx, dword [edi + 0x118]
mov esi, dword [esp + 0x3c]
mov al, byte [ecx]
cmp al, byte [esi]
mov edx, esi
pop ebx
jne 0x48f944
test al, al
je 0x48f975
mov al, byte [ecx + ebp]
add ecx, ebp
add edx, ebp
cmp al, byte [edx]
je 0x48f935
movzx edx, byte [edx]
movzx eax, byte [ecx]
sub eax, edx
je 0x48f975
push esi
push str.EVERYTHING_FILTER_SEARCH__s_r_n
call fcn.0048ebd0
mov eax, dword [edi + 0x118]
add esp, 8
push esi
push eax
call fcn.0051e5f0
add dword [edi + 0xf8], ebp
mov dword [edi + 0x118], eax
mov esi, dword [esp + 0x3c]
cmp dword [edi + 0x120], esi
je 0x48f9a2
mov eax, esi
call fcn.0048efc0
push eax
push str.EVERYTHING_SORT__s_r_n
call fcn.0048ebd0
add esp, 8
add dword [edi + 0xf8], ebp
mov dword [edi + 0x120], esi
push str.EVERYTHING_QUERY_r_n
call fcn.0048ebd0
add dword [edi + 0xf8], ebp
add esp, 4
cmp dword [edi + 0xd8], 2
pop esi
pop ebp
jne 0x48f9c8
push 8
push edi
call fcn.0048fe20
pop edi
ret 0x3c