Function at 0x40b49d
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x204
mov eax, dword [0x6b1dec]
xor eax, esp
mov dword [esp + 0x200], eax
mov eax, dword [esi + 0x2180c]
add eax, 0xfffffffc
push ebx
push edi
cmp eax, 0x10
ja case.0x40b1e3.14
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
mov ebx, str.Your_account_has_been
jmp dword [eax*4 + 0x40b504]
pop edi
mov dword [esi + 0x21698], 0x685bb0
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
pop edi
mov dword [esi + 0x21698], 0x685bd0
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
mov eax, 0x88888889
mul dword [esi + 0x21804]
shr edx, 5
inc edx
push edx
lea eax, [esp + 0xc]
push str.Your_account_has_been_temporarily_frozen_because_you_are_swearing_more_than_20_times_n_nYou_will_be_unfrozen_in__d_hours
push eax
mov dword [esi + 0x21698], 0x685bf0
call fcn.004069a0
add esp, 0xc
push 0x30
push str.Login
lea ecx, [esp + 0x10]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 0x30
push str.Login
push str.Too_many_failed_login_attempts__your_IP_has_been_blocked_for_one_hour
push 0
mov dword [esi + 0x21698], 0x685ca0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 0x30
push str.Login
push str.Account_was_locked_due_to_suspicious_activity._n_nPlease_check_your_email_for_instructions_on_how_to_unlock_it_or_you_can_reset_password__that_will_also_unlock_your_account.
push 0
mov dword [esi + 0x21698], 0x685d08
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 0x10
push str.Login
push str.Banned:_This_account_has_been_investigated_and_permanently_closed_for_violations_of_the_Terms_of_Use
push 0
mov dword [esi + 0x21698], 0x685dcc
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 0x10
push str.Login
push str.Banned:_Your_account_has_been_banned_by_Client
push 0
mov dword [esi + 0x21698], 0x685e60
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 0x10
push str.Login
push str.By_Code_BB
push 0
mov dword [esi + 0x21698], ebx
call edi
cmp eax, 1
je 0x40b4ed
push 0x10
push str.Login
push str.By_Code_BB
push 0
mov dword [esi + 0x21698], ebx
call edi
cmp eax, 1
je 0x40b4ed
push 0x10
push str.Login
push str.By_Code_BB
push 0
mov dword [esi + 0x21698], ebx
call edi
cmp eax, 1
je 0x40b4ed
push 0x10
push str.Login
push str.By_Code_BB
push 0
mov dword [esi + 0x21698], ebx
call edi
cmp eax, 1
je 0x40b4ed
pop edi
mov dword [esi + 0x21698], 0x685edc
mov dword [esi + 0x20dec], 4
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 0x30
push str.Account_Deleted
push str.Your_account_was_deleted_because_your_payment_was_refunded_or_cancelled_n_nPlease_contact_your_payment_provider
push 0
mov dword [esi + 0x21698], 0x685f04
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 0x30
push str.No_game_ownership_on_Steam
push str.Youve_started_game_under_a_steam_account__but_that_account_does_not_have_The_War_Z_game_ownership
push 0
mov dword [esi + 0x21698], 0x6849fa
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 0x30
push str.Login
push str.Unknown_account_status__please_contact_support_extreme.co.th
push 0
mov dword [esi + 0x21698], 0x68601c
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
push 5
push 0
push 0x6849fa
push str.https:__bit.ly_3DhkjlK
push str.open
push 0
mov dword [esi + 0x21698], 0x6849fa
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop edi
mov dword [esi + 0x20dec], 5
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret
mov dword [esi + 0x21698], str.Login_failed__please_try_again_later
mov ecx, dword [esp + 0x208]
pop edi
pop ebx
xor ecx, esp
call fcn.00591437
add esp, 0x204
ret