Function at 0x10001709
Capabilities:
Accept command line arguments
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, str.MSango.bin
push esi
push 0x1009090c
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x10001959
push 0x100902b8
push 1
pop ebx
push ebx
push 0x10090368
push 0x10090a10
call fcn.100046e2
push 0x10090ce8
call fcn.10004d42
add esp, 0x14
call fcn.10004c5d
test eax, eax
je 0x10001761
mov eax, ebx
jmp 0x1000195b
push edi
call dword [sym.imp.MSVCRT.dll__getpid]
push eax
push 0x1000145d
call dword [sym.imp.USER32.dll_EnumWindows]
call fcn.10001ef1
mov edi, eax
call fcn.10003f9a
push 0x100014bf
call fcn.100033db
pop ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
call fcn.10001000
push ebx
push 0xfffffffffffffffb
lea eax, [ebp - 0xc]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x83
mov byte [ebp - 0xb], 0xc4
mov byte [ebp - 0xa], 8
mov byte [ebp - 9], 0x8d
mov byte [ebp - 8], 0x54
mov byte [ebp - 7], 0x24
mov byte [ebp - 6], 0x4c
call fcn.10001c93
test eax, eax
jbe 0x100017cc
mov dword [0x10009a58], eax
push ebx
push 0xfffffffffffffffb
lea eax, [ebp - 0xc]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x50
mov byte [ebp - 0xb], 0x8d
mov byte [ebp - 0xa], 0x44
mov byte [ebp - 9], 0x24
mov byte [ebp - 8], 0x18
mov byte [ebp - 7], 0x6a
mov byte [ebp - 6], 0x24
call fcn.10001c93
test eax, eax
jbe 0x10001802
mov dword [0x10009a5c], eax
and byte [ebp - 6], 0
and byte [ebp - 5], 0
and byte [ebp - 4], 0
push ebx
push 0x12
lea eax, [ebp - 8]
push 6
push eax
push esi
mov ecx, edi
mov byte [ebp - 8], 0x68
mov byte [ebp - 7], 0xd8
mov byte [ebp - 3], 0x56
call fcn.10001c93
test eax, eax
jbe 0x10001834
mov dword [0x10009a60], eax
and byte [ebp - 8], 0
and byte [ebp - 7], 0
and byte [ebp - 6], 0
push ebx
push 0xa
lea eax, [ebp - 0xc]
push 0xa
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x8d
mov byte [ebp - 0xb], 0x94
mov byte [ebp - 0xa], 0x24
mov byte [ebp - 9], 0xec
mov byte [ebp - 5], 0x6a
mov byte [ebp - 4], 0x40
mov byte [ebp - 3], 0x52
call fcn.10001c93
test eax, eax
jbe 0x10001876
mov dword [0x10009a64], eax
push ebx
push 8
lea eax, [ebp - 0xc]
push 8
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x83
mov byte [ebp - 0xb], 0xc7
mov byte [ebp - 0xa], 4
mov byte [ebp - 9], 0x8b
mov byte [ebp - 8], 0x4e
mov byte [ebp - 7], 0x18
mov byte [ebp - 6], 0x51
mov byte [ebp - 5], 0x57
call fcn.10001c93
test eax, eax
jbe 0x100018b0
mov dword [0x10009a68], eax
push ebx
push 8
lea eax, [ebp - 0xc]
push 8
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x8b
mov byte [ebp - 0xb], 0x7e
mov byte [ebp - 0xa], 0x18
mov byte [ebp - 9], 0x57
mov byte [ebp - 8], 3
mov byte [ebp - 7], 0xd1
mov byte [ebp - 6], 0x52
mov byte [ebp - 5], 0x50
call fcn.10001c93
test eax, eax
jbe 0x100018ea
mov dword [0x10009a6c], eax
mov esi, str.sound.dll
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
ja 0x10001904
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100018ef
and byte [ebp - 9], 0
and byte [ebp - 8], 0
or byte [ebp - 7], 0xff
push ebx
push 0xfffffffffffffffb
lea eax, [ebp - 0xc]
push 7
push eax
push esi
mov ecx, edi
mov byte [ebp - 0xc], 0x68
mov byte [ebp - 0xb], 0xfc
mov byte [ebp - 0xa], 8
mov byte [ebp - 6], 0xd6
call fcn.10001c93
mov esi, eax
test esi, esi
jbe 0x10001954
push 0x100016b1
push esi
mov ecx, edi
call fcn.100019ae
add esi, 5
push 0x1000163b
push esi
mov ecx, edi
call fcn.10001ab4
mov eax, ebx
pop edi
jmp 0x1000195b
xor eax, eax
pop esi
pop ebx
leave
ret