Function at 0x725f2740
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, ecx
push esi
mov esi, edx
push ebx
sub esp, 0x3d4
mov dword [ebp - 0x3b4], eax
call sym._MCICDA_GetOpenDrv
mov ebx, eax
test byte [section..data], 8
jne 0x725f2bd0
test edi, edi
je 0x725f2c1e
test ebx, ebx
je 0x725f2c30
mov eax, dword [ebx + 0x18]
lea ecx, [ebp - 0x3a4]
lea edx, [ebp - 0x334]
call sym._MCICDA_ReadTOC.isra.2
test eax, eax
je 0x725f2bc0
test esi, 4
je 0x725f2ae0
mov edx, dword [edi + 4]
mov eax, ebx
call sym._MCICDA_CalcFrame
lea edx, [ebp - 0x3ac]
mov dword [ebp - 0x3ac], eax
mov eax, ebx
call sym._MCICDA_SkipDataTracks
test eax, eax
jne 0x725f2acf
test byte [section..data], 8
jne 0x725f2f61
test esi, 8
jne 0x725f2b6e
movzx eax, byte [ebp - 0x331]
movzx edx, byte [ebp - 0x332]
add eax, 1
sub eax, edx
movzx edx, byte [ebp + eax*8 - 0x32b]
movzx ecx, byte [ebp + eax*8 - 0x32a]
movzx eax, byte [ebp + eax*8 - 0x329]
imul edx, edx, 0x1194
imul ecx, ecx, 0x4b
add edx, ecx
lea eax, [edx + eax - 1]
mov dword [ebp - 0x3a8], eax
mov edx, dword [ebp - 0x3ac]
cmp edx, eax
ja 0x725f2bb2
test byte [section..data], 8
je 0x725f2873
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], str.Playing_from__u_to__u_n
mov dword [esp + 0x10], 0x3b0
mov dword [esp + 0xc], str.MCICDA_Play
mov dword [esp + 8], 0x725f904d
mov dword [esp + 4], 0x725f8000
mov dword [esp], 3
call sym._ros_dbg_log
xor eax, eax
and esi, 1
mov dword [ebp - 0x3b8], esi
je 0x725f2883
movzx eax, word [edi]
lock or dword [esp], 0
lea esi, [ebx + 0x10]
xchg dword [esi], eax
test eax, eax
jne 0x725f2c83
mov ecx, dword [ebp - 0x3ac]
cmp ecx, dword [ebp - 0x3a8]
je 0x725f2c40
movzx eax, byte [ebp - 0x331]
movzx edx, byte [ebp - 0x332]
add eax, 1
sub eax, edx
movzx edi, byte [ebp + eax*8 - 0x32b]
movzx edx, byte [ebp + eax*8 - 0x32a]
movzx eax, byte [ebp + eax*8 - 0x329]
imul edi, edi, 0x1194
imul edx, edx, 0x4b
add edx, edi
lea eax, [edx + eax - 1]
cmp ecx, eax
je 0x725f2c40
mov edx, dword [ebx + 0x1c]
test edx, edx
je 0x725f297a
mov eax, dword [ebx + 0x20]
mov dword [esp], eax
call sym._SetEvent_4
sub esp, 4
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebx + 0x1c]
mov dword [esp], eax
call sym._WaitForSingleObject_8
mov eax, dword [ebx + 0x1c]
sub esp, 8
mov dword [esp], eax
call sym._CloseHandle_4
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x1c], 0
sub esp, 4
mov dword [esp], eax
call sym._CloseHandle_4
mov eax, dword [ebx + 0x30]
mov dword [ebx + 0x20], 0
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 0x48]
mov eax, dword [ebx + 0x30]
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov eax, dword [ebx + 0x2c]
mov dword [ebx + 0x30], 0
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov dword [ebx + 0x2c], 0
sub esp, 4
mov eax, dword [0x725fa004]
test eax, eax
je 0x725f3010
lea edx, [ebx + 0x2c]
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov dword [esp], 0
call eax
sub esp, 0xc
test eax, eax
jns 0x725f2ca2
lea eax, [ebp - 0x358]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x725f29cf
mov dword [esp], eax
call sym._CloseHandle_4
mov dword [ebx + 0x20], 0
sub esp, 4
mov eax, dword [ebx + 0x30]
test eax, eax
je 0x725f29e8
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov dword [ebx + 0x30], 0
sub esp, 4
mov eax, dword [ebx + 0x2c]
test eax, eax
je 0x725f2a01
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov dword [ebx + 0x2c], 0
sub esp, 4
mov edi, 0xe90452d5
mov ecx, 0x1b4e81b5
mov eax, edi
mul dword [ebp - 0x3ac]
mov eax, ecx
shr edx, 0xc
mov byte [ebp - 0x358], dl
mul dword [ebp - 0x3ac]
mov eax, 0x88888889
mov esi, edx
shr esi, 3
mul esi
mov eax, esi
imul esi, esi, 0x4b
shr edx, 5
imul edx, edx, 0x3c
sub eax, edx
mov byte [ebp - 0x357], al
mov eax, dword [ebp - 0x3ac]
sub eax, esi
mov esi, dword [ebp - 0x3a8]
mov byte [ebp - 0x356], al
mov eax, esi
mul edi
mov eax, esi
lea edi, [ebp - 0x3a4]
shr edx, 0xc
mov byte [ebp - 0x355], dl
mul ecx
mov eax, 0x88888889
mov ecx, edx
shr ecx, 3
mul ecx
mov eax, ecx
imul ecx, ecx, 0x4b
shr edx, 5
imul edx, edx, 0x3c
sub eax, edx
mov edx, 0x24018
mov byte [ebp - 0x354], al
mov eax, esi
sub eax, ecx
mov ecx, dword [ebp - 0x3b4]
mov byte [ebp - 0x353], al
mov eax, dword [ebx + 0x18]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 6
call sym._device_io.constprop.7
test eax, eax
je 0x725f2fb0
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea ecx, [ebp - 0x3a4]
lea edx, [ebp - 0x370]
mov eax, dword [ebx + 0x18]
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], ecx
lea ecx, [ebp - 0x3ae]
mov dword [esp + 4], edx
mov edx, 0x2402c
mov dword [esp], 2
mov byte [ebp - 0x3ae], 1
call sym._device_io.constprop.7
test eax, eax
je 0x725f2bc0
movzx eax, byte [ebp - 0x367]
movzx edx, byte [ebp - 0x366]
imul eax, eax, 0x1194
imul edx, edx, 0x4b
add eax, edx
movzx edx, byte [ebp - 0x365]
add eax, edx
lea edx, [ebp - 0x3ac]
mov dword [ebp - 0x3ac], eax
mov eax, ebx
call sym._MCICDA_SkipDataTracks
test eax, eax
jne 0x725f2acf
test esi, 8
je 0x725f27e0
mov edx, dword [edi + 8]
mov eax, ebx
call sym._MCICDA_CalcFrame
lea edx, [ebp - 0x3a8]
mov dword [ebp - 0x3a8], eax
mov eax, ebx
call sym._MCICDA_SkipDataTracks
test eax, eax
jne 0x725f2acf
mov eax, dword [ebp - 0x3a8]
test byte [section..data], 8
jne 0x725f2fc1
cmp eax, dword [ebp - 0x3ac]
jae 0x725f2873
mov eax, 0x11a
jmp 0x725f2acf
call sym._MCICDA_GetError.isra.4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x3b4]
mov dword [esp + 0x20], edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.__04X___08X___p___n
mov dword [esp + 0x10], 0x38d
mov dword [esp + 0xc], str.MCICDA_Play
mov dword [esp + 8], 0x725f904d
mov dword [esp + 4], 0x725f8000
mov dword [esp], 3
call sym._ros_dbg_log
test edi, edi
jne 0x725f2772
lea esp, [ebp - 0xc]
mov eax, 0x129
pop ebx
pop esi
pop edi
pop ebp
ret
lea esp, [ebp - 0xc]
mov eax, 0x101
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [ebp - 0x3b8]
test ecx, ecx
je 0x725f2acd
lock or dword [esp], 0
xor eax, eax
xchg dword [esi], eax
test eax, eax
je 0x725f2acd
mov edi, dword [ebp - 0x3b4]
mov dword [esp + 8], 1
mov dword [esp], eax
mov dword [esp + 4], edi
call sym._mciDriverNotify_12
xor eax, eax
sub esp, 0xc
jmp 0x725f2acf
mov dword [esp + 8], 4
mov edx, dword [ebx + 0xc]
mov dword [esp], eax
mov dword [esp + 4], edx
call sym._mciDriverNotify_12
sub esp, 0xc
jmp 0x725f2895
mov eax, dword [ebx + 0x2c]
mov eax, dword [eax]
mov esi, dword [eax + 0x18]
call sym._GetDesktopWindow_0
mov dword [esp + 8], 2
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x2c]
mov dword [esp], eax
call esi
movzx eax, byte [ebp - 0x32b]
movzx edx, byte [ebp - 0x32a]
mov dword [ebp - 0x382], 0x20001
mov edi, dword [ebp - 0x3a8]
sub esp, 0xc
mov dword [ebp - 0x37e], 0xac44
mov dword [ebp - 0x37a], 0x2b110
imul edx, edx, 0x4b
mov dword [ebp - 0x376], 0x100004
imul eax, eax, 0x1194
add eax, edx
movzx edx, byte [ebp - 0x329]
add eax, edx
mov edx, dword [ebp - 0x3ac]
sub edi, eax
mov dword [ebx + 0x28], edi
sub edx, eax
xor eax, eax
mov dword [ebx + 0x24], edx
xor edx, edx
mov word [ebp - 0x372], ax
xor eax, eax
mov dword [ebp + eax - 0x34c], edx
add eax, 4
cmp eax, 0x18
jb 0x725f2d33
lea eax, [ebp - 0x382]
lea ecx, [ebx + 0x30]
mov dword [ebp - 0x358], 0x24
mov dword [ebp - 0x354], 0x18000
lea edi, [ebp - 0x358]
mov dword [ebp - 0x350], 0x16650
mov dword [ebp - 0x348], eax
mov eax, dword [ebx + 0x2c]
mov dword [ebp - 0x3b4], edi
mov edx, dword [eax]
mov dword [esp + 0xc], 0
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
test eax, eax
js 0x725f29b6
mov eax, dword [ebx + 0x30]
lea ecx, [ebp - 0x3a0]
mov edx, dword [eax]
mov dword [esp + 0x10], ecx
lea ecx, [ebp - 0x39c]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x2c]
sub esp, 0x20
test eax, eax
js 0x725f29b6
mov ecx, dword [ebx + 0x24]
mov edx, 0xdee95c4d
mov dword [ebp - 0x394], 0
mov eax, ecx
shl eax, 0xb
mov dword [ebp - 0x398], eax
mov eax, edx
mul dword [ebp - 0x350]
mov eax, dword [ebx + 0x28]
shr edx, 0xb
sub eax, ecx
cmp eax, edx
jbe 0x725f2e26
mov eax, edx
mov edx, dword [ebp - 0x3a0]
mov dword [ebp - 0x390], eax
lea edi, [ebp - 0x3a4]
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x38c], 2
mov eax, dword [ebx + 0x18]
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x39c]
mov dword [esp + 0xc], edi
mov dword [esp + 4], edx
mov edx, 0x2403e
mov dword [esp], 0x10
call sym._device_io.constprop.7
mov ecx, dword [ebp - 0x3a0]
mov esi, eax
mov eax, dword [ebx + 0x30]
mov edx, dword [eax]
mov dword [esp + 8], ecx
mov ecx, dword [ebp - 0x39c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0x4c]
sub esp, 0x14
test esi, esi
jne 0x725f3030
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x725f3021
lea eax, [ebp - 0x3a4]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], sym._MCICDA_playLoop_4
mov dword [esp + 4], 0
mov dword [esp], 0
call sym._CreateThread_24
mov dword [ebx + 0x1c], eax
sub esp, 0x18
test eax, eax
je 0x725f29b6
mov eax, dword [ebx + 0x30]
mov edx, dword [eax]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [edx + 0x30]
sub esp, 0x10
test eax, eax
jns 0x725f2acd
mov eax, dword [ebx + 0x20]
mov dword [esp], eax
call sym._SetEvent_4
sub esp, 4
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebx + 0x1c]
mov dword [esp], eax
call sym._WaitForSingleObject_8
mov eax, dword [ebx + 0x1c]
sub esp, 8
mov dword [esp], eax
call sym._CloseHandle_4
mov dword [ebx + 0x1c], 0
sub esp, 4
jmp 0x725f29b6
mov eax, dword [ebp - 0x3ac]
mov dword [esp + 0x1c], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x14], str.MCI_FROM_08X_____u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x39c
mov dword [esp + 0xc], str.MCICDA_Play
mov dword [esp + 8], 0x725f904d
mov dword [esp + 4], 0x725f8000
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x725f27d4
mov dword [ebx + 0x10], 0
mov eax, 0x106
jmp 0x725f2acf
mov dword [esp + 0x1c], eax
mov eax, dword [edi + 8]
mov dword [esp + 0x14], str.MCI_TO_08X_____u_n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0x3ab
mov dword [esp + 0xc], str.MCICDA_Play
mov dword [esp + 8], 0x725f904d
mov dword [esp + 4], 0x725f8000
mov dword [esp], 3
call sym._ros_dbg_log
mov eax, dword [ebp - 0x3a8]
jmp 0x725f2820
lea eax, [ebp - 0x358]
mov dword [ebp - 0x3b4], eax
jmp 0x725f2a01
mov eax, dword [ebx + 0x1c]
jmp 0x725f2eed
mov eax, dword [ebp - 0x390]
add dword [ebx + 0x24], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0
call sym._CreateEventA_16
sub esp, 0x10
mov dword [ebx + 0x20], eax
jmp 0x725f2ead