Function at 0x43c9d0
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4efb83
mov eax, dword fs:[0]
push eax
sub esp, 0x42c
mov eax, dword [0x533524]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.HELPERFUZZYMODE_BCB0A953_7579_48b3_84DC_79A9438F3D79
push 1
push 0
mov dword [ebp - 0x434], 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
test edi, edi
je 0x43cc7a
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x43cc73
push str.BirdHelper.exe
lea ecx, [ebp - 0x428]
call fcn.00405a70
mov dword [ebp - 4], 0
call fcn.00422c90
cmp dword [eax + 0x4c], 0
jne 0x43ca88
call fcn.004197e0
movzx eax, ax
push eax
call fcn.004197e0
movzx eax, ax
push eax
call fcn.004197e0
movzx eax, ax
push eax
call fcn.004197e0
movzx eax, ax
push eax
lea eax, [ebp - 0x428]
push str._c_c_c_chelper.exe
push eax
call fcn.00406320
add esp, 0x18
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.00478070
add esp, 0xc
call fcn.00436990
push 0x104
lea edx, [ebp - 0x420]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x4c]
push str.UtilsBirdHelper.exe
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00478070
add esp, 0xc
call fcn.00436990
push 0x104
lea edx, [ebp - 0x218]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x4c]
mov eax, dword [ebp - 0x428]
mov byte [ebp - 4], 1
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x43cb10
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x43cb26
call fcn.00408a80
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x43cc95
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x434], 1
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x428]
push dword [eax - 0xc]
push eax
push 6
lea eax, [ebp - 0x42c]
push str.Utils_
push eax
call fcn.004365c0
mov esi, dword [ebp - 0x42c]
lea eax, [ebp - 0x218]
add esp, 0x14
push esi
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43cb90
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.00422c90
cmp dword [eax + 0x48], 0
jne 0x43cbd8
lea ecx, [ebp - 0x421]
call fcn.00409430
push 0
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 2
push eax
push 0
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x421]
call fcn.00409970
lea ecx, [ebp - 0x421]
mov byte [ebp - 4], 0
call fcn.00409440
jmp 0x43cbee
push 0
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x430]
call fcn.00405a70
push 0x2710
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 3
push eax
push 1
push 0
push 1
push 0x4fae24
push dword [ebp - 0x430]
mov dword [ebp - 0x438], 0xffffffff
call fcn.004359c0
mov edx, dword [ebp - 0x430]
mov eax, esi
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43cc51
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x428]
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x43cc73
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046b078
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004061c0
int3