Function at 0x4018ce
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
cmp esi, edi
je 0x401b84
push esi
call fcn.00401b8b
cmp dword [0x40fc28], edi
pop ecx
je 0x401b84
cmp dword [0x40fc2c], edi
je 0x401b84
cmp dword [0x40fc30], edi
je 0x401b84
cmp dword [0x40fc34], edi
je 0x401b84
cmp dword [0x40fc38], edi
je 0x401b84
mov ebx, dword [0x40d128]
mov ecx, 0x3e8
push 0x14
lea eax, [ebx + ebx*4]
shl eax, 2
cdq
fld dword [0x40c164]
idiv ecx
fild dword [0x40d128]
fdivr st(1)
pop ecx
push 0x5800
fstp dword [0x416e30]
mov edi, eax
mov eax, dword [0x40d12c]
cdq
idiv ecx
add edi, 3
and edi, 0xfffffffc
mov dword [0x4156e4], edi
mov ecx, eax
mov eax, ebx
shl eax, 7
imul ecx, edi
cdq
mov ebx, 0xac44
idiv ebx
shl ecx, 1
xor ebx, ebx
mov dword [0x4156e8], ecx
mov dword [ebp - 4], ebx
push ebx
mov dword [0x40fc98], eax
mov dword [ebp - 8], eax
fild qword [ebp - 8]
mov eax, ecx
cdq
fdivr st(1)
idiv edi
mov edi, 0x40fea0
push edi
fstp dword [0x40fc9c]
fstp st(0)
mov dword [ebp + 8], eax
call fcn.00404b60
add esp, 0xc
xor ecx, ecx
mov eax, 0x40fed4
mov dword [eax - 0x34], ecx
mov dword [eax], 1
add eax, 0x58
inc ecx
cmp eax, 0x4156d4
jl 0x4019bf
movzx eax, byte [esi + 0x128]
mov dword [esi + 0x12c], eax
or dword [esi + 0x150], 0xffffffff
movsx eax, word [esi + 0x24]
or dword [esi + 0x14c], 0xffffffff
mov dword [esi + 0x138], eax
movsx eax, word [esi + 0x26]
push eax
push esi
mov dword [esi + 0x140], ebx
mov dword [esi + 0x144], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0x134], ebx
mov dword [esi + 0x148], ebx
mov dword [esi + 0x154], ebx
call fcn.00401770
movsx eax, word [esi + 0x14]
imul eax, eax, 0xac
push eax
push ebx
push 0x415700
call fcn.00404b60
add esp, 0x14
xor ecx, ecx
cmp word [esi + 0x14], bx
jle 0x401a5d
mov eax, 0x415704
mov dword [eax], edi
inc ecx
movsx edx, word [esi + 0x14]
add edi, 0x58
add eax, 0xac
cmp ecx, edx
jl 0x401a4a
mov eax, dword [ebp + 8]
push 1
pop edi
mov dword [0x40fc24], esi
lea eax, [eax + eax*2]
push edi
shl eax, 1
push eax
call fcn.0040496f
mov dword [0x416df8], eax
mov eax, dword [0x40d128]
pop ecx
mov dword [ebp - 0x18], eax
pop ecx
mov word [ebp - 0x1c], di
shl eax, 2
mov dword [ebp - 0x14], eax
push ebx
push ebx
lea eax, [ebp - 0x1c]
push ebx
push eax
push 0xffffffffffffffff
push 0x416dfc
mov word [ebp - 0x1a], 2
mov word [ebp - 0xe], 0x10
mov word [ebp - 0x10], 4
mov word [ebp - 0xc], bx
call dword [sym.imp.WINMM.dll_waveOutOpen]
test eax, eax
jne 0x401b84
mov eax, dword [0x4156e8]
push edi
mov esi, eax
shl esi, 2
push esi
call fcn.0040496f
pop ecx
or dword [0x4156d4], 0xffffffff
pop ecx
mov dword [0x4156c4], esi
mov esi, 0x4156c0
push 0x20
push esi
mov dword [0x4156e0], eax
push dword [0x416dfc]
mov dword [0x4156d0], 0xc
mov dword [0x4156c0], eax
mov dword [0x4156c8], ebx
mov dword [0x4156cc], ebx
call dword [sym.imp.WINMM.dll_waveOutPrepareHeader]
mov eax, dword [0x4156e8]
push edi
lea eax, [eax*8 + 0x100]
push eax
call fcn.0040496f
mov dword [0x416c80], eax
add eax, 0xf
pop ecx
and al, 0xf0
pop ecx
mov dword [0x4156a0], eax
call fcn.00403b9c
cmp dword [0x40fc44], ebx
jne 0x401b38
push 0x20
push esi
push dword [0x416dfc]
call dword [sym.imp.WINMM.dll_waveOutWrite]
mov byte [0x40fc3c], bl
lea eax, [ebp + 8]
push eax
push ebx
push ebx
push 0x403d1f
push ebx
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateThread]
mov dword [0x40fc40], eax
push 0xf
push dword [0x40fc40]
call dword [sym.imp.KERNEL32.DLL_SetThreadPriority]
mov al, 1
jmp 0x401b86
xor al, al
pop edi
pop esi
pop ebx
leave
ret