Function at 0x419f89
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x2b4
mov eax, dword [0x734fd0]
xor eax, esp
mov dword [esp + 0x2b0], eax
mov eax, dword [ebx + 0x21804]
add eax, 0xfffffffc
push esi
cmp eax, 0xc
ja case.default.0x419ce7
jmp dword [eax*4 + 0x41a020]
mov dword [ebx + 0x2165c], str.Invalid_username_or_password
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
mov dword [ebx + 0x2165c], str.Game_session_active__try_later
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
mov eax, 0x88888889
mul dword [ebx + 0x217fc]
shr edx, 5
inc edx
push edx
lea eax, [esp + 0xb8]
push str.Your_account_has_been_temporarily_frozen_because_of_violation_of_the_Terms_of_Service___Paragraph_2___n_nYou_will_be_able_to_continue_to_use_the_service_in__d_hours
push eax
mov dword [ebx + 0x2165c], 0x701bb8
call fcn.00415900
add esp, 0xc
push 0x30
push str.Login
lea ecx, [esp + 0xbc]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
push 0x30
push str.Login
push str.Too_many_failed_login_attempts__your_IP_has_been_blocked_for_one_hour
push 0
mov dword [ebx + 0x2165c], 0x701c94
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
push 0x10
push str.Login
push str.Banned:_This_account_has_been_investigated_and_permanently_closed_for_violations_of_the_Terms_of_Use
push 0
mov dword [ebx + 0x2165c], 0x701cf8
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
push edi
mov edi, 0x701d90
sub edi, 0x560dc93f
lea esi, [esp + 0xf]
call fcn.0041bba0
push 0x44
mov edx, esi
push 0
push edx
mov dword [ebx + 0x2165c], eax
call fcn.005f4bd0
add esp, 0xc
push 0x10
mov ecx, 0x5c47af50
lea eax, [esp + 0xd]
call fcn.0041bc20
push eax
mov edi, 0x4bcbc06
lea esi, [esp + 0x5b]
call fcn.0041bbe0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
push 0x10
push str.Login
push str.Your_account_has_been_banned_by_HardwareID
push 0
mov dword [ebx + 0x2165c], 0x701e48
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
mov dword [ebx + 0x2165c], str.Your_guest_game_play_time_is_expired
mov dword [ebx + 0x20dec], 4
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
push 0x30
push str.Account_Deleted
push str.Your_account_was_deleted_because_your_payment_was_refunded_or_cancelled_n_nPlease_contact_your_payment_provider
push 0
mov dword [ebx + 0x2165c], 0x701ec8
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
push 0x30
push str.No_game_ownership_on_Steam
push str.Youve_started_game_under_a_steam_account__but_that_account_does_not_have_The_War_Z_game_ownership
push 0
mov dword [ebx + 0x2165c], 0x6f98c4
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
push 0x10
push str.Login
push str.Your_account_has_been_banned_by_Hardware_ID
push 0
mov dword [ebx + 0x2165c], 0x701e48
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
push 0x30
push str.Login
push str.Unknown_account_status__please_contact_support_extreme.co.th
push 0
mov dword [ebx + 0x2165c], 0x701fdc
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 5
push 0
push 0x6f98c4
push str.https:__www.facebook.com_groups_1007823939748380
push str.open
push 0
mov dword [ebx + 0x2165c], 0x6f98c4
call esi
push 5
push 0
push 0x6f98c4
push str.https:__www.facebook.com_profile.php_id61558308473608
push str.open
push 0
call esi
push 5
push 0
push 0x6f98c4
push str.https:__discord.gg_PjNcAFjbCk
push str.open
push 0
call esi
mov dword [ebx + 0x20dec], 5
pop esi
mov ecx, dword [esp + 0x2b0]
xor ecx, esp
call fcn.005f2c33
add esp, 0x2b4
ret
mov ecx, dword [esp + 0x2b4]
pop esi
xor ecx, esp
mov dword [ebx + 0x2165c], 0x701b50
call fcn.005f2c33
add esp, 0x2b4
ret