Function at 0x18002de50
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x1800b7480]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rbx, qword [0x1800b8ea8]
lea r8, [0x180097c90]
mov edx, 0x65
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
test rax, rax
jne 0x18002deaa
lea rdx, str.1234
jmp 0x18002def4
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
test eax, eax
jne 0x18002dec5
lea rdx, [0x180097c98]
jmp 0x18002def4
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x18002dedf
lea rdx, [0x180097c9c]
jmp 0x18002def4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
test rax, rax
jne 0x18002df0c
lea rdx, [0x180097ca0]
lea rcx, [0x1800b8b30]
call fcn.180029340
lea rdx, str.InputVNC_false
jmp 0x18002e224
mov edx, esi
mov rcx, rax
call fcn.180036730
lea rcx, str.6E0A1521_BB60_465B_9BC0_A2C9F532CB49
call fcn.1800350b0
mov ebx, eax
mov r8d, eax
lea rdx, str.DLLInit__d
lea rcx, [0x1800b8b30]
call fcn.180029340
test ebx, ebx
js 0x18002e21d
lea rdx, str.DLLServer_OK
lea rcx, [0x1800b8b30]
call fcn.180029340
lea rcx, [0x1800b8d40]
call fcn.180035100
mov ebx, eax
mov r9d, eax
lea r8, [0x1800b8d40]
lea rdx, str.DLLKey__s_d
lea rcx, [0x1800b8b30]
call fcn.180029340
add ebx, 5
cmp ebx, 5
ja case.default.0x18002dfa0
movsxd rax, ebx
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x2e278]
add rcx, rdx
jmp rcx
lea rdx, str.DLLLoad_OK
lea rcx, [0x1800b8b30]
call fcn.180029340
lea rdx, str.BlackDesert64.exe
lea rcx, [0x1800b8b30]
call fcn.180029580
mov edx, eax
mov qword [0x1800b8e50], rdx
lea rcx, [0x1800b8b30]
call fcn.1800294c0
mov qword [0x1800b8e58], rax
mov r9, rax
mov r8, qword [0x1800b8e50]
lea rdx, str.InitAA__d_d
lea rcx, [0x1800b8b30]
call fcn.180029340
call fcn.180035860
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 0
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002e030
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.180027940
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r14, qword [rsp + 0x58]
sub rax, r14
cmp rax, 0xa
jb 0x18002e26a
lea r12, [rsp + 0x48]
mov rsi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x60]
cmp rbp, 0xf
cmova r12, rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
lea r15, [r14 + 0xa]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x20]
cmp r15, rbx
jbe 0x18002e11c
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x18002e0de
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.180033184
test rax, rax
je 0x18002e270
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18002e117
mov eax, socket
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x18002e0f7
xor edi, edi
jmp 0x18002e117
cmp rcx, 0x1000
jb 0x18002e10f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18002e264
jmp 0x18002e0bf
call fcn.180033184
mov rdi, rax
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], rbx
movsd xmm0, qword [str.Expire_at]
movsd qword [rdi], xmm0
movzx ecx, word [0x180097d48]
mov word [rdi + 8], cx
lea rcx, [rdi + 0xa]
mov r8, r14
mov rdx, r12
call fcn.18008f590
mov byte [rdi + r15], 0
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rdx, qword [rsp + 0x20]
mov rcx, qword [0x1800b8e58]
call qword [sym.imp.USER32.dll_SetWindowTextA]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18002e1ac
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002e1a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002e270
call fcn.1800331c0
lea rcx, [0x1800b8b31]
call fcn.180031390
nop
cmp rbp, 0xf
jbe 0x18002e1ec
lea rdx, [rbp + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18002e1e4
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002e25e
mov rcx, rsi
call fcn.1800331c0
mov al, 1
jmp case.default.0x18002dfa0
lea rdx, str.Server_fail__1
jmp 0x18002e224
lea rdx, str.Server_fail__2_The_registration_code_is_disabled
jmp 0x18002e224
lea rdx, str.Server_fail__3_Binding_machine_overruns
jmp 0x18002e224
lea rdx, str.Server_fail__4_The_registration_code_is_online
jmp 0x18002e224
lea rdx, str.Server_fail__5_Expired
jmp 0x18002e224
lea rdx, str.Server_fail__100_Failed_to_connect_to_the_server
lea rcx, [0x1800b8b30]
call fcn.180029340
xor al, al
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.180033630
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret
call fcn.1800613f4
nop
call fcn.1800020b0
nop
call fcn.1800020d0
int3
call fcn.1800613f4
int3