Function at 0x231705e0
Capabilities:
Accept command line arguments
Delete file
Move file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x231705e8
push ecx
xor eax, eax
push ebp
push 0x23170935
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.2316d408
call sub.kernel32.dll_GetCommandLineA_1
mov edx, eax
lea eax, [ebp - 0x10]
call fcn.2315376c
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xc]
mov edx, 0x23170948
call fcn.2315380c
mov eax, dword [ebp - 0xc]
call fcn.2316778c
push dword [0x231749dc]
push dword [0x231731d4]
push 0x23170954
lea eax, [ebp - 4]
mov edx, 3
call fcn.23153880
call sub.kernel32.dll_GetCommandLineA_1
mov edx, eax
lea eax, [ebp - 0x14]
call fcn.2315376c
mov edx, dword [ebp - 0x14]
mov eax, 0x23170964
call fcn.231667f8
test al, al
jne 0x231706d0
mov ecx, dword [ebp - 4]
mov edx, dword [0x231749ec]
mov eax, dword [0x231749f0]
call fcn.23167a04
push 0x23170974
mov eax, dword [ebp - 4]
call fcn.231539c0
push eax
lea eax, [ebp - 0x1c]
call fcn.23167558
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov edx, 0x23170988
call fcn.2315380c
mov eax, dword [ebp - 0x18]
call fcn.231539c0
push eax
call fcn.23169a00
push 4
push 0
lea eax, [ebp - 0x20]
call fcn.23167558
mov eax, dword [ebp - 0x20]
call fcn.231539c0
push eax
call sub.kernel32.dll_MoveFileExA
push 0
call sub.kernel32.dll_ExitProcess_1
push 0x1f4
call sub.kernel32.dll_Sleep
lea eax, [ebp - 8]
push eax
call sub.kernel32.dll_GetCommandLineA_1
mov edx, eax
lea eax, [ebp - 0x24]
call fcn.2315376c
mov eax, dword [ebp - 0x24]
mov ecx, 2
mov edx, 0x231709cc
call fcn.2316786c
mov eax, dword [ebp - 8]
call fcn.23166db8
mov ecx, 1
mov edx, 0x231709e0
mov eax, 0x80000002
call fcn.2316a4b0
mov ecx, 1
mov edx, 0x23170a20
mov eax, 0x80000002
call fcn.2316a4b0
mov ecx, 1
mov edx, 0x23170a60
mov eax, 0x80000002
call fcn.2316a4b0
lea eax, [ebp - 0x28]
mov ecx, 0x23170aa0
mov edx, dword [0x231749d8]
call fcn.2315380c
mov eax, dword [ebp - 0x28]
call fcn.2316778c
mov eax, 0x23170ab4
call fcn.2316b99c
mov eax, 0x23170ac8
call fcn.2316b99c
mov eax, 0x23170adc
call fcn.2316b99c
call fcn.2317049c
cmp dword [0x231749fc], 0
je 0x231707aa
mov edx, 0x4021c
mov eax, dword [0x231749fc]
call fcn.231541d8
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [0x231749fc]
mov dword [edx + 0x208], eax
push 0x7d0
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x2c]
mov eax, 0x23170af4
call fcn.231674dc
mov eax, dword [ebp - 0x2c]
call fcn.23167388
test al, al
jne 0x231707f4
lea edx, [ebp - 0x30]
mov eax, 0x23170af4
call fcn.231674dc
mov eax, dword [ebp - 0x30]
push eax
lea edx, [ebp - 0x34]
mov eax, 0x23170b08
call fcn.231674dc
mov eax, dword [ebp - 0x34]
pop edx
call fcn.23167b00
lea edx, [ebp - 0x38]
mov eax, 0x23170b18
call fcn.231674dc
mov ecx, dword [ebp - 0x38]
mov edx, dword [0x231749ec]
mov eax, dword [0x231749f0]
call fcn.23167a04
lea edx, [ebp - 0x3c]
mov eax, 0x23170b30
call fcn.231674dc
mov ecx, dword [ebp - 0x3c]
mov edx, dword [0x231749ec]
mov eax, dword [0x231749f0]
call fcn.23167a04
mov ecx, dword [0x231749d0]
mov edx, dword [0x231749ec]
mov eax, dword [0x231749f0]
call fcn.23167a04
mov cl, 1
mov edx, 0x23170b48
mov eax, 0x80000002
call fcn.2316a9a4
cmp byte [0x231731d0], 0
jne 0x2317086d
cmp byte [0x231749b8], 0
jne 0x231708aa
lea edx, [ebp - 0x40]
mov eax, 0x23170b80
call fcn.231674dc
mov eax, dword [ebp - 0x40]
push eax
call fcn.23170ea8
test al, al
jne 0x231708aa
lea edx, [ebp - 0x44]
mov eax, 0x23170b94
call fcn.231669f8
lea eax, [ebp - 0x44]
mov edx, 0x23170bac
call fcn.231537c8
mov eax, dword [ebp - 0x44]
push eax
call fcn.23170ea8
call fcn.2316ed64
call fcn.2316e838
mov ecx, dword [0x231749cc]
mov edx, 0x23170bd4
mov eax, 0x80000002
call fcn.2316a2d8
cmp byte [0x231731d0], 0
jne 0x231708f9
push 0x23170c14
push dword [0x231749cc]
push 0x23170c50
lea eax, [ebp - 0x48]
mov edx, 3
call fcn.23153880
mov eax, dword [ebp - 0x48]
xor edx, edx
call fcn.23167ec0
push 4
push 0
lea eax, [ebp - 0x4c]
call fcn.23167558
mov eax, dword [ebp - 0x4c]
call fcn.231539c0
push eax
call sub.kernel32.dll_MoveFileExA
push 0
call sub.kernel32.dll_ExitProcess_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x2317093c
lea eax, [ebp - 0x4c]
mov edx, 0x13
call fcn.23153660
ret