Function at 0x49e583
Capabilities:
Create process on windows

Disassembly:
push 0x54
mov eax, 0x50f995
call fcn.004d0314
xor ebx, ebx
push ebx
lea eax, [ebp - 0x20]
push eax
push str.CUephelper::OpenAttachment__
push 0xec
push str..uepuephelper.cpp
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x20], ebx
call fcn.004020c4
mov dword [ebp - 4], ebx
xor esi, esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 4], 1
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x60]
call fcn.0045c1df
mov byte [ebp - 4], 2
cmp dword [eax + 0x18], 0x10
jb 0x49e5d7
mov eax, dword [eax + 4]
jmp 0x49e5da
add eax, 4
mov dword [ebp - 0x18], eax
cmp eax, ebx
je 0x49e639
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x49e5e4
push ebx
push ebx
sub eax, edi
push eax
push dword [ebp - 0x18]
push ebx
push 0xfde9
call dword [0x51a3bc]
mov edi, eax
inc edi
push ebx
mov eax, edi
cdq
push 2
push edx
push eax
mov dword [ebp - 0x2c], edi
call fcn.004d5390
cmp edx, ebx
jg 0x49e630
jl 0x49e61f
cmp eax, 0x7fffffff
ja 0x49e630
push edx
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040e152
mov edi, dword [ebp - 0x2c]
pop ecx
pop ecx
jmp 0x49e635
mov eax, 0x80070057
cmp eax, ebx
jge 0x49e63d
xor eax, eax
jmp 0x49e677
cmp edi, 0x400
jg 0x49e65b
push edi
call fcn.0040e0aa
pop ecx
test al, al
je 0x49e65b
mov eax, edi
call fcn.004dd0c0
mov eax, esp
jmp 0x49e664
push edi
lea esi, [ebp - 0x14]
call fcn.0040e067
push 0xfde9
push edi
push dword [ebp - 0x18]
mov esi, eax
call fcn.0040e11f
mov esi, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004025b6
mov byte [ebp - 4], 4
push ebx
push 1
lea ecx, [ebp - 0x60]
call fcn.00403b93
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 0xc], ebx
jg 0x49e6e9
push str.ERROR_CHECK_BOOLEX:strFilePath.GetLength_____0
push 0xf0
push str..uepuephelper.cpp
push 5
pop ecx
mov dword [ebp - 0x20], 0x80004005
call fcn.0040ef48
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.004028da
mov byte [ebp - 4], bl
cmp esi, ebx
je 0x49e7dc
jmp 0x49e6d2
mov esi, dword [ebp - 0x14]
mov eax, esi
mov esi, dword [esi]
push eax
mov dword [ebp - 0x14], esi
call fcn.004cad3f
pop ecx
cmp esi, ebx
jne 0x49e6cf
jmp 0x49e7dc
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00470771
pop ecx
pop ecx
mov byte [ebp - 4], 5
push dword [ebp - 0x28]
call dword [0x51a4b4]
test eax, eax
jne 0x49e761
push str.ERROR_CHECK_BOOLEX:pathFolder.IsDirectory__
push 0xf3
push str..uepuephelper.cpp
push 5
pop ecx
mov dword [ebp - 0x20], 0x80004005
call fcn.0040ef48
mov byte [ebp - 4], 4
lea eax, [ebp - 0x28]
push eax
call fcn.004025f7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.004028da
mov byte [ebp - 4], bl
cmp esi, ebx
je 0x49e7dc
jmp 0x49e74d
mov esi, dword [ebp - 0x14]
mov eax, esi
mov esi, dword [esi]
push eax
mov dword [ebp - 0x14], esi
call fcn.004cad3f
pop ecx
cmp esi, ebx
jne 0x49e74a
jmp 0x49e7dc
lea eax, [ebp - 0x24]
push eax
call fcn.004028b3
mov byte [ebp - 4], 6
push dword [ebp - 0x1c]
lea eax, [ebp - 0x24]
push str._select__s
push eax
call fcn.00402363
add esp, 0xc
push 1
push ebx
push dword [ebp - 0x24]
push str.explorer.exe
push 0x530958
push ebx
call dword [0x51a480]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x24]
call fcn.004028da
mov byte [ebp - 4], 4
lea eax, [ebp - 0x28]
push eax
call fcn.004025f7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.004028da
mov byte [ebp - 4], bl
cmp esi, ebx
je 0x49e7dc
jmp 0x49e7ca
mov esi, dword [ebp - 0x14]
mov eax, esi
mov esi, dword [esi]
push eax
mov dword [ebp - 0x14], esi
call fcn.004cad3f
pop ecx
cmp esi, ebx
jne 0x49e7c7
mov esi, dword [ebp - 0x20]
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x44]
push eax
call fcn.0040201a
mov eax, esi
lea esp, [ebp - 0x70]
call fcn.004d0397
ret 4