Function at 0x4cef90
Capabilities:
Resume thread
Suspend thread

Disassembly:
sub esp, 0x108
mov al, byte [0x4d1008]
push ebx
push ebp
push esi
mov esi, ecx
xor ebp, ebp
push edi
mov dword [esp + 0x14], esi
test al, 0x20
mov dword [esi + 0x24], 0xbb8
mov edi, 0x2015
je 0x4cefe6
mov edi, 0x2010
call fcn.004cec70
mov ebp, eax
test ebp, ebp
jne 0x4cefce
mov al, byte [esi + 0x11]
test al, al
je 0x4cefe2
mov edi, dword [esi + 8]
xor eax, eax
test edi, edi
setle al
dec eax
and al, 0xfd
add eax, 0x2015
mov edi, eax
test ebp, ebp
jne 0x4cefec
or edi, 0x200000
call sub.WKWIN32.dll_Ordinal_20
mov esi, eax
xor bl, bl
mov byte [esp + 0x13], 0
mov byte [esp + 0x12], 1
lea eax, [esi - 8]
cmp eax, 0x61
ja case.0x4cf00f.11
xor ecx, ecx
mov cl, byte [eax + 0x4cf208]
jmp dword [ecx*4 + 0x4cf1f8]
mov byte [esp + 0x12], 0
jmp case.0x4cf00f.11
mov byte [esp + 0x13], 1
jmp case.0x4cf00f.11
mov bl, 1
mov ecx, dword [esp + 0x14]
mov al, byte [ecx + 0x11]
test al, al
je 0x4cf04e
mov al, byte [esp + 0x11c]
test al, al
jne 0x4cf04e
mov eax, dword [ecx + 0x2c]
test eax, eax
je 0x4cf04e
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov ecx, dword [esp + 0x14]
mov al, byte [ecx + 0x13]
test al, al
je 0x4cf0fc
lea edx, [esp + 0x18]
push 0x100
push edx
push 0x100
push 1
call sub.WKWIN32.dll_Ordinal_61
test eax, eax
je 0x4cf0b0
cmp eax, 0x100
ja 0x4cf0b0
mov al, byte [esp + 0x13]
test al, al
jne 0x4cf0b0
test bl, bl
jne 0x4cf0b0
mov al, byte [0x4d1008]
mov ecx, dword [str.Winimarge:_Execution_Error]
test al, 0x20
jne 0x4cf09b
mov ecx, dword [str.Winimarge:_Start_Error]
mov al, byte [esp + 0x12]
test al, al
lea eax, [esp + 0x18]
jne 0x4cf15a
jmp 0x4cf155
mov al, byte [esp + 0x12]
test al, al
je 0x4cf0cd
mov eax, dword [str.Unexpected_WIBU_KEY_driver_error__u.]
push esi
lea ecx, [esp + 0x1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov al, byte [0x4d1008]
mov ecx, dword [str.Winimarge:_Execution_Error]
test al, 0x20
jne 0x4cf0e2
mov ecx, dword [str.Winimarge:_Start_Error]
test bl, bl
je 0x4cf0ed
mov eax, dword [str.Out_of_WIBU_BOX_Expiration_Date__35_.]
jmp 0x4cf15a
mov al, byte [esp + 0x13]
test al, al
je 0x4cf09b
mov eax, dword [str.WIBU_BOX_Limit_Counter_reached_zero__24_.]
jmp 0x4cf15a
mov al, byte [esp + 0x12]
test al, al
je 0x4cf11a
mov edx, dword [str.Unexpected_WIBU_KEY_driver_error__u.]
push esi
lea eax, [esp + 0x1c]
push edx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov al, byte [0x4d1008]
mov ecx, dword [str.Winimarge:_Execution_Error]
test al, 0x20
jne 0x4cf12f
mov ecx, dword [str.Winimarge:_Start_Error]
test bl, bl
je 0x4cf13a
mov eax, dword [str.Out_of_WIBU_BOX_Expiration_Date__35_.]
jmp 0x4cf15a
mov al, byte [esp + 0x13]
test al, al
je 0x4cf149
mov eax, dword [str.WIBU_BOX_Limit_Counter_reached_zero__24_.]
jmp 0x4cf15a
mov al, byte [esp + 0x12]
test al, al
lea eax, [esp + 0x18]
jne 0x4cf15a
mov eax, dword [0x4d13d4]
push edi
push ecx
push eax
push ebp
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edi, dword [esp + 0x14]
mov esi, eax
mov bl, byte [edi + 0x11]
test bl, bl
je 0x4cf18a
mov al, byte [esp + 0x11c]
test al, al
jne 0x4cf18a
mov eax, dword [edi + 0x2c]
test eax, eax
je 0x4cf18a
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [esi - 1]
cmp eax, 4
ja case.default.0x4cf192
jmp dword [eax*4 + 0x4cf26c]
test ebp, ebp
je 0x4cf1aa
push 0
push 0
push 0x10
push ebp
call dword [sym.imp.USER32.dll_PostMessageA]
test bl, bl
je 0x4cf1b5
mov ecx, edi
call fcn.004cf580
mov eax, dword [0x4d1008]
or al, 0x10
mov dword [0x4d1008], eax
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x108
ret 4
mov eax, dword [edi + 8]
dec eax
mov dword [edi + 8], eax
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x108
ret 4
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x108
ret 4