Function at 0x490b40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
mov esi, dword [esp + 8]
mov eax, dword [esi + 0xd8]
cmp eax, 2
je 0x490bc6
cmp eax, 8
je 0x490bc6
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esi + 0x64], eax
mov eax, dword [esp + 0x18]
mov dword [esi + 0x68], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x70], eax
mov eax, dword [esp + 0x28]
mov dword [esi + 0x74], ecx
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x6c], edx
mov edx, dword [esp + 0x20]
push eax
push ecx
mov dword [esi + 0x60], 1
mov dword [esi + 0x78], edx
call fcn.005220d0
mov ecx, dword [esi + 0x84]
mov edx, dword [esp + 0x2c]
mov dword [esi + 0x7c], eax
mov eax, dword [esp + 0x30]
push eax
push ecx
mov dword [esi + 0x80], edx
call fcn.005220d0
mov edx, dword [esp + 0x34]
mov dword [esi + 0x84], eax
mov dword [esi + 0x88], edx
pop esi
ret 0x3c
mov eax, dword [esi + 0x94]
cmp dword [esi + 0x12c], eax
push ebp
push edi
mov ebp, 1
je 0x490bfd
push eax
push str.EVERYTHING_SIZE_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0x94]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x12c], eax
mov eax, dword [esi + 0x98]
cmp dword [esi + 0x130], eax
je 0x490c2d
push eax
push str.EVERYTHING_ATTRIBUTES_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov ecx, dword [esi + 0x98]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x130], ecx
mov eax, dword [esi + 0x9c]
cmp dword [esi + 0x134], eax
je 0x490c5d
push eax
push str.EVERYTHING_DATE_MODIFIED_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov edx, dword [esi + 0x9c]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x134], edx
mov eax, dword [esi + 0xa0]
cmp dword [esi + 0x138], eax
je 0x490c8d
push eax
push str.EVERYTHING_DATE_CREATED_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0xa0]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x138], eax
cmp dword [esi + 0x13c], 0
jne 0x490cb1
push str.EVERYTHING_PATH_COLUMN_1_r_n
mov ecx, esi
call fcn.00490080
add esp, 4
add dword [esi + 0xf8], ebp
mov dword [esi + 0x13c], ebp
mov eax, dword [esi + 0xa4]
cmp dword [esi + 0x140], eax
je 0x490ce1
push eax
push str.EVERYTHING_FILE_LIST_FILENAME_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov ecx, dword [esi + 0xa4]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x140], ecx
mov eax, dword [esi + 0xa8]
cmp dword [esi + 0x144], eax
je 0x490d11
push eax
push str.EVERYTHING_DATE_RECENTLY_CHANGED_COLUMN__d_r_n
mov ecx, esi
call fcn.00490080
mov edx, dword [esi + 0xa8]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x144], edx
mov eax, dword [esi + 0x8c]
cmp dword [esi + 0x124], eax
je 0x490d41
push eax
push str.EVERYTHING_OFFSET__d_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0x8c]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x124], eax
mov eax, dword [esi + 0x90]
cmp dword [esi + 0x128], eax
je 0x490d71
push eax
push str.EVERYTHING_COUNT__d_r_n
mov ecx, esi
call fcn.00490080
mov ecx, dword [esi + 0x90]
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x128], ecx
mov edi, dword [esp + 0x14]
cmp dword [esi + 0xfc], edi
je 0x490d99
push edi
push str.EVERYTHING_CASE__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0xfc], edi
mov edi, dword [esp + 0x18]
cmp dword [esi + 0x100], edi
je 0x490dc1
push edi
push str.EVERYTHING_WHOLE_WORD__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x100], edi
mov edi, dword [esp + 0x1c]
cmp dword [esi + 0x104], edi
je 0x490de9
push edi
push str.EVERYTHING_PATH__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x104], edi
mov edi, dword [esp + 0x20]
cmp dword [esi + 0x108], edi
je 0x490e11
push edi
push str.EVERYTHING_DIACRITICS__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x108], edi
mov edi, dword [esp + 0x24]
cmp dword [esi + 0x10c], edi
je 0x490e39
push edi
push str.EVERYTHING_REGEX__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x10c], edi
mov edi, dword [esp + 0x28]
cmp dword [esi + 0x110], edi
je 0x490e61
push edi
push str.EVERYTHING_HIDE_EMPTY_SEARCH_RESULTS__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x110], edi
mov ecx, dword [esi + 0x114]
mov edi, dword [esp + 0x30]
mov al, byte [ecx]
cmp al, byte [edi]
mov edx, edi
jne 0x490e82
test al, al
je 0x490eb5
mov al, byte [ecx + ebp]
add ecx, ebp
add edx, ebp
cmp al, byte [edx]
je 0x490e73
movzx edx, byte [edx]
movzx eax, byte [ecx]
sub eax, edx
je 0x490eb5
push edi
push str.EVERYTHING_SEARCH__s_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0x114]
add esp, 8
push edi
push eax
call fcn.005220d0
add dword [esi + 0xf8], ebp
mov dword [esi + 0x114], eax
mov edi, dword [esp + 0x34]
mov ecx, dword [esi + 0x11c]
push ebx
mov ebx, edi
and ebx, ebp
and ecx, ebp
cmp ecx, ebx
je 0x490ef3
push ebx
push str.EVERYTHING_FILTER_CASE__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490ee6
or dword [esi + 0x11c], ebp
jmp 0x490eed
and dword [esi + 0x11c], 0xfffffffe
add dword [esi + 0xf8], ebp
mov edx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 8
and edx, 8
cmp edx, ebx
je 0x490f36
mov eax, edi
shr eax, 3
and eax, ebp
push eax
push str.EVERYTHING_FILTER_DIACRITICS__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490f29
or dword [esi + 0x11c], 8
jmp 0x490f30
and dword [esi + 0x11c], 0xfffffff7
add dword [esi + 0xf8], ebp
mov ecx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 4
and ecx, 4
cmp ecx, ebx
je 0x490f79
mov edx, edi
shr edx, 2
and edx, ebp
push edx
push str.EVERYTHING_FILTER_PATH__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490f6c
or dword [esi + 0x11c], 4
jmp 0x490f73
and dword [esi + 0x11c], 0xfffffffb
add dword [esi + 0xf8], ebp
mov eax, dword [esi + 0x11c]
mov ebx, edi
and ebx, 0x10
and eax, 0x10
cmp eax, ebx
je 0x490fbc
mov ecx, edi
shr ecx, 4
and ecx, ebp
push ecx
push str.EVERYTHING_FILTER_REGEX__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490faf
or dword [esi + 0x11c], 0x10
jmp 0x490fb6
and dword [esi + 0x11c], 0xffffffef
add dword [esi + 0xf8], ebp
mov edx, dword [esi + 0x11c]
mov ebx, edi
and ebx, 2
and edx, 2
cmp edx, ebx
je 0x490ffc
shr edi, 1
and edi, ebp
push edi
push str.EVERYTHING_FILTER_WHOLE_WORD__d_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
test ebx, ebx
je 0x490fef
or dword [esi + 0x11c], 2
jmp 0x490ff6
and dword [esi + 0x11c], 0xfffffffd
add dword [esi + 0xf8], ebp
mov ecx, dword [esi + 0x118]
mov edi, dword [esp + 0x3c]
mov al, byte [ecx]
cmp al, byte [edi]
mov edx, edi
pop ebx
jne 0x49101f
nop
test al, al
je 0x491052
mov al, byte [ecx + ebp]
add ecx, ebp
add edx, ebp
cmp al, byte [edx]
je 0x491010
movzx edx, byte [edx]
movzx eax, byte [ecx]
sub eax, edx
je 0x491052
push edi
push str.EVERYTHING_FILTER_SEARCH__s_r_n
mov ecx, esi
call fcn.00490080
mov eax, dword [esi + 0x118]
add esp, 8
push edi
push eax
call fcn.005220d0
add dword [esi + 0xf8], ebp
mov dword [esi + 0x118], eax
mov edi, dword [esp + 0x3c]
cmp dword [esi + 0x120], edi
je 0x491081
mov eax, edi
call fcn.00490610
push eax
push str.EVERYTHING_SORT__s_r_n
mov ecx, esi
call fcn.00490080
add esp, 8
add dword [esi + 0xf8], ebp
mov dword [esi + 0x120], edi
push str.EVERYTHING_QUERY_r_n
mov ecx, esi
call fcn.00490080
add dword [esi + 0xf8], ebp
add esp, 4
cmp dword [esi + 0xd8], 2
pop edi
pop ebp
jne 0x4910a9
push 8
push esi
call fcn.00491520
pop esi
ret 0x3c