Function at 0x63c030
Capabilities:
Resume thread
Suspend thread

Disassembly:
sub esp, 0x108
mov al, byte [0x63e008]
push ebx
push ebp
push esi
mov esi, ecx
xor ebp, ebp
push edi
mov dword [esp + 0x14], esi
test al, 0x20
mov dword [esi + 0x24], 0xbb8
mov edi, 0x2015
je 0x63c086
mov edi, 0x2010
call fcn.0063bd10
mov ebp, eax
test ebp, ebp
jne 0x63c06e
mov al, byte [esi + 0x11]
test al, al
je 0x63c082
mov edi, dword [esi + 8]
xor eax, eax
test edi, edi
setle al
dec eax
and al, 0xfd
add eax, 0x2015
mov edi, eax
test ebp, ebp
jne 0x63c08c
or edi, 0x200000
call sub.WKWIN32.dll_Ordinal_20
mov esi, eax
xor bl, bl
mov byte [esp + 0x13], 0
mov byte [esp + 0x12], 1
lea eax, [esi - 8]
cmp eax, 0x61
ja case.0x63c0af.11
xor ecx, ecx
mov cl, byte [eax + 0x63c2a8]
jmp dword [ecx*4 + 0x63c298]
mov byte [esp + 0x12], 0
jmp case.0x63c0af.11
mov byte [esp + 0x13], 1
jmp case.0x63c0af.11
mov bl, 1
mov ecx, dword [esp + 0x14]
mov al, byte [ecx + 0x11]
test al, al
je 0x63c0ee
mov al, byte [esp + 0x11c]
test al, al
jne 0x63c0ee
mov eax, dword [ecx + 0x2c]
test eax, eax
je 0x63c0ee
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov ecx, dword [esp + 0x14]
mov al, byte [ecx + 0x13]
test al, al
je 0x63c19c
lea edx, [esp + 0x18]
push pe_nt_image_headers32
push edx
push pe_nt_image_headers32
push 1
call sub.WKWIN32.dll_Ordinal_61
test eax, eax
je 0x63c150
cmp eax, 0x100
ja 0x63c150
mov al, byte [esp + 0x13]
test al, al
jne 0x63c150
test bl, bl
jne 0x63c150
mov al, byte [0x63e008]
mov ecx, dword [str.Gis:_Execution_Error]
test al, 0x20
jne 0x63c13b
mov ecx, dword [str.Gis:_Start_Error]
mov al, byte [esp + 0x12]
test al, al
lea eax, [esp + 0x18]
jne 0x63c1fa
jmp 0x63c1f5
mov al, byte [esp + 0x12]
test al, al
je 0x63c16d
mov eax, dword [str.Unexpected_WIBU_KEY_driver_error__u.]
push esi
lea ecx, [esp + 0x1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov al, byte [0x63e008]
mov ecx, dword [str.Gis:_Execution_Error]
test al, 0x20
jne 0x63c182
mov ecx, dword [str.Gis:_Start_Error]
test bl, bl
je 0x63c18d
mov eax, dword [0x63e3f0]
jmp 0x63c1fa
mov al, byte [esp + 0x13]
test al, al
je 0x63c13b
mov eax, dword [0x63e3e4]
jmp 0x63c1fa
mov al, byte [esp + 0x12]
test al, al
je 0x63c1ba
mov edx, dword [str.Unexpected_WIBU_KEY_driver_error__u.]
push esi
lea eax, [esp + 0x1c]
push edx
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov al, byte [0x63e008]
mov ecx, dword [str.Gis:_Execution_Error]
test al, 0x20
jne 0x63c1cf
mov ecx, dword [str.Gis:_Start_Error]
test bl, bl
je 0x63c1da
mov eax, dword [0x63e3f0]
jmp 0x63c1fa
mov al, byte [esp + 0x13]
test al, al
je 0x63c1e9
mov eax, dword [0x63e3e4]
jmp 0x63c1fa
mov al, byte [esp + 0x12]
test al, al
lea eax, [esp + 0x18]
jne 0x63c1fa
mov eax, dword [0x63e3d4]
push edi
push ecx
push eax
push ebp
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edi, dword [esp + 0x14]
mov esi, eax
mov bl, byte [edi + 0x11]
test bl, bl
je 0x63c22a
mov al, byte [esp + 0x11c]
test al, al
jne 0x63c22a
mov eax, dword [edi + 0x2c]
test eax, eax
je 0x63c22a
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
lea eax, [esi - 1]
cmp eax, 4
ja case.default.0x63c232
jmp dword [eax*4 + 0x63c30c]
test ebp, ebp
je 0x63c24a
push 0
push 0
push 0x10
push ebp
call dword [sym.imp.USER32.dll_PostMessageA]
test bl, bl
je 0x63c255
mov ecx, edi
call fcn.0063c620
mov eax, dword [0x63e008]
or al, 0x10
mov dword [0x63e008], eax
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x108
ret 4
mov eax, dword [edi + 8]
dec eax
mov dword [edi + 8], eax
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x108
ret 4
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x108
ret 4