Function at 0x498c5d
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6ac
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push esi
call fcn.00498c44
cmp eax, 2
pop ecx
je case.default.0x498f49
mov ebx, dword [ebp + 0xc]
and byte [ebp - 0x3e0], 0
and byte [ebp - 0x6ac], 0
test ebx, ebx
jl case.default.0x498f49
cmp ebx, 8
jge case.default.0x498f49
cmp dword [esi + ebx*4 + 0x80], 1
lea eax, [esi + ebx*4 + 0x80]
mov dword [ebp + 0xc], eax
jne 0x498cc3
cmp ebx, 4
je 0x498cbc
cmp ebx, 5
jne 0x498cc3
xor eax, eax
jmp 0x499109
lea eax, [ebp - 0x1dc]
push 0x1e
push eax
push ebx
call fcn.0049896d
mov eax, dword [ebp + 0x10]
and byte [ebp - 0x70], 0
add esp, 0xc
test eax, eax
je 0x498cf1
cmp byte [eax], 0
je 0x498cf1
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004dd750
pop ecx
pop ecx
mov esi, dword [ebp + 0x14]
test esi, esi
je 0x498d1f
cmp byte [esi], 0
je 0x498d1f
cmp byte [ebp - 0x70], 0
je 0x498d13
lea eax, [ebp - 0x70]
push 0x51b9a0
push eax
call fcn.004dd760
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push esi
push eax
call fcn.004dd760
pop ecx
pop ecx
mov esi, dword [ebp + 0x18]
test esi, esi
je 0x498d4d
cmp byte [esi], 0
je 0x498d4d
cmp byte [ebp - 0x70], 0
je 0x498d41
lea eax, [ebp - 0x70]
push 0x51d564
push eax
call fcn.004dd760
pop ecx
pop ecx
lea eax, [ebp - 0x70]
push esi
push eax
call fcn.004dd760
pop ecx
pop ecx
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x498d98
cmp byte [eax], 0
je 0x498d98
lea ecx, [ebp - 0x158]
push 0x64
push ecx
push eax
call fcn.00449ca7
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x4a8]
push eax
call fcn.004dd750
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x1bc]
push str._by_user__s
push eax
call fcn.004dd565
add esp, 0x20
jmp 0x498d9f
and byte [ebp - 0x1bc], 0
mov eax, dword [ebp + 0x20]
mov edi, str.__group__s_
test eax, eax
je 0x498dfd
cmp byte [eax], 0
je 0x498dfd
lea ecx, [ebp - 0x158]
push 0x64
push ecx
push eax
call fcn.00449ca7
add esp, 0xc
cmp byte [ebp - 0x1bc], 0
lea eax, [ebp - 0x158]
push eax
je 0x498de9
lea eax, [ebp - 0x1bc]
push edi
push eax
call fcn.004d9400
pop ecx
lea eax, [ebp + eax - 0x1bc]
jmp 0x498df4
push str._by_user_from_group__s
lea eax, [ebp - 0x1bc]
push eax
call fcn.004dd565
add esp, 0xc
mov esi, dword [ebp + 0x24]
test esi, esi
je 0x498e48
cmp byte [esi], 0
je 0x498e48
lea eax, [ebp - 0x158]
push 0x64
push eax
push esi
call fcn.00449ca7
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.004dd750
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0xf4]
push str._on_host__s
push eax
call fcn.004dd565
add esp, 0x20
jmp 0x498e4f
and byte [ebp - 0xf4], 0
mov eax, dword [ebp + 0x28]
test eax, eax
je 0x498ea8
cmp byte [eax], 0
je 0x498ea8
lea ecx, [ebp - 0x158]
push 0x64
push ecx
push eax
call fcn.00449ca7
add esp, 0xc
cmp byte [ebp - 0xf4], 0
lea eax, [ebp - 0x158]
push eax
je 0x498e94
lea eax, [ebp - 0xf4]
push edi
push eax
call fcn.004d9400
pop ecx
lea eax, [ebp + eax - 0xf4]
jmp 0x498e9f
push str._on_host_from_group__s
lea eax, [ebp - 0xf4]
push eax
call fcn.004dd565
add esp, 0xc
cmp dword [ebp + 0x30], 0
jl 0x498ed8
push dword [ebp + 0x30]
lea eax, [ebp - 0x90]
push str._of__d
push eax
call fcn.004dd565
push dword [ebp + 0x30]
lea eax, [ebp - 0xc]
push 0x51bd9c
push eax
call fcn.004dd565
add esp, 0x18
jmp 0x498ee3
and byte [ebp - 0x90], 0
and byte [ebp - 0xc], 0
cmp byte [ebp - 0xc], 0
mov eax, str.NONE
mov edi, eax
je 0x498ef3
lea edi, [ebp - 0xc]
test esi, esi
je 0x498f02
cmp byte [esi], 0
lea esi, [ebp - 0x444]
jne 0x498f04
mov esi, eax
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
je 0x498f16
cmp byte [ecx], 0
lea ecx, [ebp - 0x4a8]
jne 0x498f18
mov ecx, eax
cmp byte [ebp - 0x70], 0
je 0x498f21
lea eax, [ebp - 0x70]
push edi
push esi
push ecx
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x6ac]
push str._s__s__s__s__s
push eax
call fcn.004dd565
add esp, 0x1c
cmp ebx, 7
ja case.default.0x498f49
jmp dword [ebx*4 + 0x49910e]
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x90]
push eax
push str.Alert:_Soft_limit_s_exceeded_for_feature__s_n_______s_s_n
jmp 0x498fae
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x90]
push eax
push str.Alert:_License_limit_s_reached_for_feature__s_n_______s_s_n
jmp 0x498fae
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x90]
push eax
push str.Alert:_License_denied_at_max_usage_s_for_feature__s_n_______s_s_n
lea eax, [ebp - 0x3e0]
push eax
call fcn.004dd565
add esp, 0x18
jmp 0x49903c
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x70]
push eax
push str.Alert:_Key_expired:_License_returned_for_feature__s_n_______probably_while_still_in_use_s_s_n
jmp 0x49902d
lea eax, [ebp - 0x70]
push eax
push str.Alert:_Maintenance_date_reached_for_feature__s_n
jmp 0x498fec
lea eax, [ebp - 0x70]
push eax
push str.Alert:_Expiration_date_reached_for_feature__s_n
lea eax, [ebp - 0x3e0]
push eax
call fcn.004dd565
add esp, 0xc
jmp 0x49903c
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x70]
push eax
push str.Alert:_Application__s_started_n_______s_s_n
jmp 0x49902d
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x70]
push eax
push str.Alert:_Application__s_terminated_n_______s_s_n
lea eax, [ebp - 0x3e0]
push eax
call fcn.004dd565
add esp, 0x14
mov eax, dword [ebp + 8]
push 1
shl ebx, 4
xor edi, edi
lea esi, [ebx + eax]
pop ebx
cmp dword [esi], ebx
jne 0x49907d
mov eax, dword [eax + 0xa4]
test eax, eax
je 0x49907d
cmp byte [ebp - 0x3e0], 0
je 0x49907d
lea ecx, [ebp - 0x3e0]
push ecx
push 0x54a0b4
push eax
call fcn.004aa5ab
add esp, 0xc
test eax, eax
je 0x49907d
push 2
pop edi
cmp dword [esi + 4], ebx
jne 0x4990fd
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xa8]
test eax, eax
je 0x4990fd
cmp byte [ebp - 0x6ac], 0
je 0x4990fd
push eax
call fcn.004d9400
mov esi, eax
lea eax, [ebp - 0x6ac]
push eax
call fcn.004d9400
lea eax, [esi + eax + 5]
push eax
call fcn.0043e8d8
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x4990c3
push 2
jmp 0x499108
mov eax, dword [ebp + 8]
push dword [eax + 0xa8]
push esi
call fcn.004dd750
push 0x51b99c
push esi
call fcn.004dd760
lea eax, [ebp - 0x6ac]
push eax
push esi
call fcn.004dd760
add esp, 0x18
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp eax, 0x20
jge 0x4990fd
push 2
pop edi
mov eax, dword [ebp + 0xc]
mov dword [eax], ebx
mov eax, edi
jmp 0x499109
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret