Function at 0x40aff0
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x204
mov eax, dword [0x6b0e6c]
xor eax, esp
mov dword [esp + 0x200], eax
mov eax, dword [esi + 0x21810]
add eax, 0xfffffffc
push ebx
cmp eax, 0xb
ja case.default.0x40b01d
mov ebx, dword [sym.imp.USER32.dll_MessageBoxA]
jmp dword [eax*4 + 0x40b2c0]
mov dword [esi + 0x21698], str.Invalid_username_or_password
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
mov dword [esi + 0x21698], str.Game_session_active__try_later
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
mov eax, 0x88888889
mul dword [esi + 0x21804]
shr edx, 5
inc edx
push edx
lea eax, [esp + 8]
push str.Your_account_has_been_temporarily_frozen_because_of_violation_of_the_Terms_of_Service___Paragraph_2___n_nYou_will_be_able_to_continue_to_use_the_service_in__d_hours
push eax
mov dword [esi + 0x21698], 0x684bb8
call fcn.004067f0
add esp, 0xc
push 0x30
push str.Login
lea ecx, [esp + 0xc]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
push 0x30
push str.Login
push str.Too_many_failed_login_attempts__your_IP_has_been_blocked_for_one_hour
push 0
mov dword [esi + 0x21698], 0x684c94
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
push edi
push 0x10
push str.Login
push 0x684d24
push 0
mov dword [esi + 0x21698], 0x684cf8
call ebx
push 5
push 0
push 0x6839d2
push str.berkeliumz
push str.open
push 0
mov edi, eax
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp edi, 1
pop edi
je 0x40b2a9
push 0x10
push str.Login
push 0x684d24
push 0
mov dword [esi + 0x21698], 0x684d34
call ebx
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
push 0x10
push str.Login
push 0x684d24
push 0
mov dword [esi + 0x21698], 0x684d64
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
mov dword [esi + 0x21698], str.Your_guest_game_play_time_is_expired
mov dword [esi + 0x20dec], 4
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
push 0x30
push str.Account_Deleted
push str.Your_account_was_deleted_because_your_payment_was_refunded_or_cancelled_n_nPlease_contact_your_payment_provider
push 0
mov dword [esi + 0x21698], 0x684db8
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
push 0x30
push str.No_game_ownership_on_Steam
push str.Youve_started_game_under_a_steam_account__but_that_account_does_not_have_The_War_Z_game_ownership
push 0
mov dword [esi + 0x21698], 0x6839d2
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
push 0x30
push str.Login
push str.Unknown_account_status__please_contact_support_extreme.co.th
push 0
mov dword [esi + 0x21698], 0x684ecc
call dword [sym.imp.USER32.dll_MessageBoxA]
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
push 5
push 0
push 0x6839d2
push str.https:__www.facebook.com_profile.php_id100094773976361
push str.open
push 0
mov dword [esi + 0x21698], 0x6839d2
mov dword [esi + 0x20dec], 5
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
pop ebx
mov ecx, dword [esp + 0x200]
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret
mov dword [esi + 0x21698], str.Login_failed__please_try_again_later
mov ecx, dword [esp + 0x204]
pop ebx
xor ecx, esp
call fcn.005908c5
add esp, 0x204
ret