Function at 0x10001765
Capabilities:
Accept command line arguments
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, str.MSango.bin
push esi
push 0x1009090c
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x100019fc
push 0x100902b8
push 1
push 0x10090368
push 0x10090a10
call fcn.10004784
push 0x10090ce8
call fcn.10004de4
add esp, 0x14
call fcn.10004cff
test eax, eax
je 0x100017bb
push 1
pop eax
jmp 0x100019fe
push ebx
push edi
call dword [sym.imp.MSVCRT.dll__getpid]
push eax
push 0x100014a7
call dword [sym.imp.USER32.dll_EnumWindows]
call fcn.10001f93
mov edi, eax
call fcn.1000403f
push 0x10001509
call fcn.10003480
pop ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
call fcn.10001000
push 1
push 0xfffffffffffffff4
lea eax, [ebp - 0xc]
push 0xb
xor ebx, ebx
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x89
mov byte [ebp - 0xb], 0x44
mov byte [ebp - 0xa], 0x24
mov byte [ebp - 9], 0x10
mov byte [ebp - 8], 0x8b
mov byte [ebp - 7], 0x84
mov byte [ebp - 6], 0x24
mov byte [ebp - 5], 0x80
mov byte [ebp - 4], bl
mov byte [ebp - 3], bl
mov byte [ebp - 2], bl
call fcn.10001d35
cmp eax, ebx
jbe 0x10001837
mov dword [0x10009a58], eax
push 2
push 8
lea eax, [ebp - 8]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0x8b
mov byte [ebp - 7], 0x9e
mov byte [ebp - 6], 0xd8
mov byte [ebp - 5], bl
mov byte [ebp - 4], bl
mov byte [ebp - 3], bl
mov byte [ebp - 2], 0x51
call fcn.10001d35
cmp eax, ebx
jbe 0x1000186b
mov dword [0x10009a5c], eax
push 1
push 0xfffffffffffffffb
lea eax, [ebp - 8]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0x50
mov byte [ebp - 7], 0x8d
mov byte [ebp - 6], 0x44
mov byte [ebp - 5], 0x24
mov byte [ebp - 4], 0x18
mov byte [ebp - 3], 0x6a
mov byte [ebp - 2], 0x24
call fcn.10001d35
cmp eax, ebx
jbe 0x100018a2
mov dword [0x10009a60], eax
push 1
push 7
lea eax, [ebp - 8]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0x81
mov byte [ebp - 7], 0xc6
mov byte [ebp - 6], 0xfc
mov byte [ebp - 5], bl
mov byte [ebp - 4], bl
mov byte [ebp - 3], bl
mov byte [ebp - 2], 0x56
call fcn.10001d35
cmp eax, ebx
jbe 0x100018d6
mov dword [0x10009a64], eax
push 1
push 0xa
lea eax, [ebp - 0xc]
push 0xa
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x8d
mov byte [ebp - 0xb], 0x94
mov byte [ebp - 0xa], 0x24
mov byte [ebp - 9], 0xec
mov byte [ebp - 8], bl
mov byte [ebp - 7], bl
mov byte [ebp - 6], bl
mov byte [ebp - 5], 0x6a
mov byte [ebp - 4], 0x40
mov byte [ebp - 3], 0x52
call fcn.10001d35
cmp eax, ebx
jbe 0x10001916
mov dword [0x10009a68], eax
push 1
push 8
lea eax, [ebp - 0xc]
push 8
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x83
mov byte [ebp - 0xb], 0xc7
mov byte [ebp - 0xa], 4
mov byte [ebp - 9], 0x8b
mov byte [ebp - 8], 0x4e
mov byte [ebp - 7], 0x18
mov byte [ebp - 6], 0x51
mov byte [ebp - 5], 0x57
call fcn.10001d35
cmp eax, ebx
jbe 0x10001951
mov dword [0x10009a6c], eax
push 1
push 8
lea eax, [ebp - 0xc]
push 8
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0x7e
mov byte [ebp - 0xa], 0x18
mov byte [ebp - 9], 0x57
mov byte [ebp - 8], 3
mov byte [ebp - 7], 0xd1
mov byte [ebp - 6], 0x52
mov byte [ebp - 5], 0x50
call fcn.10001d35
cmp eax, ebx
jbe 0x1000198c
mov dword [0x10009a70], eax
mov esi, str.sound.dll
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
ja 0x100019a6
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10001991
or byte [ebp - 3], 0xff
push 1
push 0xfffffffffffffffb
lea eax, [ebp - 8]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0x68
mov byte [ebp - 7], 0xfc
mov byte [ebp - 6], 8
mov byte [ebp - 5], bl
mov byte [ebp - 4], bl
mov byte [ebp - 2], 0xd6
call fcn.10001d35
mov esi, eax
cmp esi, ebx
jbe 0x100019f5
push 0x1000170d
push esi
mov ecx, edi
call fcn.10001a50
add esi, 5
push 0x10001685
push esi
mov ecx, edi
call fcn.10001b56
push 1
pop eax
pop edi
pop ebx
jmp 0x100019fe
xor eax, eax
pop esi
leave
ret