Function at 0x43d610
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f0ba3
mov eax, dword fs:[0]
push eax
sub esp, 0x42c
mov eax, dword [0x534524]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.HELPERFUZZYMODE_BCB0A953_7579_48b3_84DC_79A9438F3D79
push 1
push 0
mov dword [ebp - 0x434], 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
test edi, edi
je 0x43d8ba
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x43d8b3
push str.BirdHelper.exe
lea ecx, [ebp - 0x428]
call fcn.00405a70
mov dword [ebp - 4], 0
call fcn.00422c90
cmp dword [eax + 0x4c], 0
jne 0x43d6c8
call fcn.004197e0
movzx eax, ax
push eax
call fcn.004197e0
movzx eax, ax
push eax
call fcn.004197e0
movzx eax, ax
push eax
call fcn.004197e0
movzx eax, ax
push eax
lea eax, [ebp - 0x428]
push str._c_c_c_chelper.exe
push eax
call fcn.00406320
add esp, 0x18
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.00478f90
add esp, 0xc
call fcn.004375d0
push 0x104
lea edx, [ebp - 0x420]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x4c]
push str.UtilsBirdHelper.exe
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00478f90
add esp, 0xc
call fcn.004375d0
push 0x104
lea edx, [ebp - 0x218]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x4c]
mov eax, dword [ebp - 0x428]
mov byte [ebp - 4], 1
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x43d750
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x43d766
call fcn.00408a80
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x43d8d5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x434], 1
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x428]
push dword [eax - 0xc]
push eax
push 6
lea eax, [ebp - 0x42c]
push str.Utils_
push eax
call fcn.00437200
mov esi, dword [ebp - 0x42c]
lea eax, [ebp - 0x218]
add esp, 0x14
push esi
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43d7d0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00422c90
cmp dword [eax + 0x48], 0
jne 0x43d818
lea ecx, [ebp - 0x421]
call fcn.00409430
push 0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 2
push eax
push 0
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x421]
call fcn.00409970
lea ecx, [ebp - 0x421]
mov byte [ebp - 4], 0
call fcn.00409440
jmp 0x43d82e
push 0
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x430]
call fcn.00405a70
push 0x2710
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 3
push eax
push 1
push 0
push 1
push 0x4fbe24
push dword [ebp - 0x430]
mov dword [ebp - 0x438], 0xffffffff
call fcn.00436600
mov edx, dword [ebp - 0x430]
mov eax, esi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43d891
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x428]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x43d8b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046bf98
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004061c0
int3