Function at 0x452c6b
Capabilities:
Move file

Disassembly:
push 0xffffffffffffffff
push 0x47609e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3a8
push esi
mov esi, ecx
lea ecx, [esp + 0x154]
call fcn.00428cf0
lea ecx, [esp + 0xc]
mov dword [esp + 0x3b4], 0
call fcn.004152e0
lea ecx, [esp + 0xa0]
mov byte [esp + 0x3b4], 1
call fcn.004152e0
lea ecx, [esp + 0x64]
mov byte [esp + 0x3b4], 2
call fcn.004152e0
lea ecx, [esp + 0x38]
mov byte [esp + 0x3b4], 3
call fcn.004152e0
lea ecx, [esp + 0xcc]
mov byte [esp + 0x3b4], 4
call fcn.004152e0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x3b4], 5
call fcn.00425300
lea ecx, [esp + 0xf8]
mov byte [esp + 0x3b4], 6
call fcn.00422590
lea ecx, [esp + 0x90]
mov byte [esp + 0x3b4], 7
call fcn.00420580
test byte [esi + 0x60], 8
je 0x452d6d
push 0
lea ecx, [esp + 0xd0]
call fcn.00416510
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
lea ecx, [esp + 0x1fc]
call fcn.00425430
lea ecx, [esp + 0xcc]
call fcn.00415700
push 0
lea ecx, [esp + 0xd0]
call fcn.00416510
push eax
lea eax, [esp + 0x68]
push str._soui.txt
push eax
call fcn.00416930
add esp, 0xc
jmp 0x452d7f
lea ecx, [esp + 0x64]
push str.oui.txt
push ecx
call fcn.00416930
add esp, 8
lea edx, [esp + 0x120]
lea ecx, [esp + 0x64]
push edx
push 0
call fcn.00416510
push eax
lea ecx, [esp + 0x100]
call fcn.00423fb0
cmp eax, 1
jne 0x452df7
push 0
push eax
push 0
lea ecx, [esp + 0x9c]
call fcn.004205a0
lea eax, [esp + 4]
lea ecx, [esp + 0x90]
push eax
call fcn.00420690
mov ecx, dword [esp + 0x134]
mov eax, dword [esp + 0x138]
mov edx, dword [esp + 8]
add ecx, 0x28e44000
adc eax, 0x580
cmp eax, edx
ja 0x452fed
jb 0x452df7
cmp ecx, dword [esp + 4]
ja 0x452fed
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x3c]
call fcn.004159b0
push str..tmp
lea ecx, [esp + 0x3c]
call fcn.00415880
push 0x4931c0
lea ecx, [esp + 0xa4]
call fcn.00415970
push str.https:__www.wireshark.org_download_automated_data_manuf
lea ecx, [esp + 0x10]
call fcn.00415970
push 0
push 0
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push str.Accept:___r_n_r_n
push 0
push 0
lea edx, [esp + 0x58]
push 0
lea eax, [esp + 0xc4]
push edx
lea ecx, [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x184]
call fcn.00429e90
test eax, eax
jne 0x452fb7
push str.https:__linuxnet.ca_ieee_oui.txt
lea ecx, [esp + 0x10]
call fcn.00415970
push 0
push 0
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push str.Accept:___r_n_r_n
push 0
push 0
lea edx, [esp + 0x58]
push 0
lea eax, [esp + 0xc4]
push edx
lea ecx, [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x184]
call fcn.00429e90
test eax, eax
jne 0x452fb7
push str.http:__standards_oui.ieee.org_oui_oui.txt
lea ecx, [esp + 0x10]
call fcn.00415970
push 0
push 0
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push str.Accept:___r_n_r_n
push 0
push 0
lea edx, [esp + 0x58]
push 0
lea eax, [esp + 0xc4]
push edx
lea ecx, [esp + 0x34]
push eax
push ecx
lea ecx, [esp + 0x184]
call fcn.00429e90
test eax, eax
jne 0x452fb7
lea ecx, [esp + 0xf8]
mov byte [esp + 0x3b4], 6
call fcn.004225b0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x3b4], 5
call fcn.00425310
lea ecx, [esp + 0xcc]
mov byte [esp + 0x3b4], 4
call fcn.00415380
lea ecx, [esp + 0x38]
mov byte [esp + 0x3b4], 3
call fcn.00415380
lea ecx, [esp + 0x64]
mov byte [esp + 0x3b4], 2
call fcn.00415380
lea ecx, [esp + 0xa0]
mov byte [esp + 0x3b4], 1
call fcn.00415380
lea ecx, [esp + 0xc]
mov byte [esp + 0x3b4], 0
call fcn.00415380
lea ecx, [esp + 0x1bc]
mov dword [esp + 0x3b4], 8
call fcn.004223f0
lea ecx, [esp + 0x154]
mov dword [esp + 0x3b4], 0xffffffff
call fcn.00428c10
xor eax, eax
jmp 0x4530aa
push 0
lea ecx, [esp + 0x68]
call fcn.00416510
push eax
lea ecx, [esp + 0xfc]
call fcn.00423930
push 0
lea ecx, [esp + 0x68]
call fcn.00416510
push eax
push 0
lea ecx, [esp + 0x40]
call fcn.00416510
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
mov ecx, esi
call fcn.00452050
lea ecx, [esp + 0xf8]
mov byte [esp + 0x3b4], 6
call fcn.004225b0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0x3b4], 5
call fcn.00425310
lea ecx, [esp + 0xcc]
mov byte [esp + 0x3b4], 4
call fcn.00415380
lea ecx, [esp + 0x38]
mov byte [esp + 0x3b4], 3
call fcn.00415380
lea ecx, [esp + 0x64]
mov byte [esp + 0x3b4], 2
call fcn.00415380
lea ecx, [esp + 0xa0]
mov byte [esp + 0x3b4], 1
call fcn.00415380
lea ecx, [esp + 0xc]
mov byte [esp + 0x3b4], 0
call fcn.00415380
lea ecx, [esp + 0x1bc]
mov dword [esp + 0x3b4], 9
call fcn.004223f0
lea ecx, [esp + 0x154]
mov dword [esp + 0x3b4], 0xffffffff
call fcn.00428c10
mov eax, 1
mov ecx, dword [esp + 0x3ac]
pop esi
mov dword fs:[0], ecx
add esp, 0x3b4
ret 4