Function at 0x41a96e
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x204
mov eax, dword [0x74496c]
xor eax, esp
mov dword [esp + 0x200], eax
mov eax, dword [esi + 0x217d8]
add eax, 0xfffffffc
cmp eax, 0xb
ja case.default.0x41a746
jmp dword [eax*4 + 0x41a9d4]
mov dword [esi + 0x2165c], str.Invalid_username_or_password
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
mov dword [esi + 0x2165c], str.Game_session_active__try_later
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
mov eax, 0x88888889
mul dword [esi + 0x217d0]
shr edx, 5
inc edx
push edx
lea eax, [esp + 4]
push str.Your_account_has_been_temporarily_frozen_because_of_violation_of_the_Terms_of_Service___Paragraph_2___n_nYou_will_be_able_to_continue_to_use_the_service_in__d_hours
push eax
mov dword [esi + 0x2165c], 0x6c5250
call fcn.00415da0
add esp, 0xc
push 0x30
push str.Login
lea ecx, [esp + 8]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
push 0x30
push str.Login
push str.Too_many_failed_login_attempts__your_IP_has_been_blocked_for_one_hour
push 0
mov dword [esi + 0x2165c], 0x6c532c
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
push 0x30
push str.Login
push str.Account_was_locked_due_to_suspicious_activity._n_nPlease_check_your_email_for_instructions_on_how_to_unlock_it_or_you_can_reset_password__that_will_also_unlock_your_account.
push 0
mov dword [esi + 0x2165c], 0x6c5390
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
push 0x10
push str.Login
push str.Banned:_This_account_has_been_investigated_and_permanently_closed_for_violations_of_the_Terms_of_Use
push 0
mov dword [esi + 0x2165c], 0x6c5454
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
push 0x10
push str.Login
push str.Banned:_This_account_has_been_investigated_and_permanently_closed_for_violations_of_the_Terms_of_Use
push 0
mov dword [esi + 0x2165c], 0x6c54f0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
mov dword [esi + 0x2165c], str.Your_guest_game_play_time_is_expired
mov dword [esi + 0x20dec], 5
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
push 0x30
push str.Account_Deleted
push str.Your_account_was_deleted_because_your_payment_was_refunded_or_cancelled_n_nPlease_contact_your_payment_provider
push 0
mov dword [esi + 0x2165c], 0x6c5544
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
push 0x30
push str.No_game_ownership_on_Steam
push str.Youve_started_game_under_a_steam_account__but_that_account_does_not_have_The_War_Z_game_ownership
push 0
mov dword [esi + 0x2165c], 0x6c40ae
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
push 0x30
push str.Login
push str.Unknown_account_status__please_contact_support_extreme.co.th
push 0
mov dword [esi + 0x2165c], 0x6c565c
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
push 5
push 0
push 0x6c40ae
push str.https:__www.facebook.com_groups_728523495463571
push str.open
push 0
mov dword [esi + 0x2165c], 0x6c40ae
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [esi + 0x20dec], 6
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005ff0f4
add esp, 0x204
ret
mov ecx, dword [esp + 0x200]
xor ecx, esp
mov dword [esi + 0x2165c], 0x6c51e8
call fcn.005ff0f4
add esp, 0x204
ret