Function at 0x14002d410
Capabilities:
Encrypt data using dpapi

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov rax, qword [0x1401750a0]
xor rax, rsp
mov qword [rbp + 0x60], rax
mov r14, r8
mov rsi, rdx
mov r13, rcx
mov qword [rsp + 0x50], rdx
mov dword [rsp + 0x40], 0
lea rcx, [rbp]
call fcn.140003030
nop
lea rdx, [0x1401362dc]
lea rcx, [rbp - 0x40]
call fcn.140002ff0
nop
mov rcx, r14
call fcn.140002e30
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.140002e30
cmp rax, rbx
jbe 0x14002d48f
xor bl, bl
jmp 0x14002d53b
lea rcx, [rbp - 0x40]
call fcn.140002e30
mov r9, rax
xor r8d, r8d
lea rdx, [rbp - 0x20]
mov rcx, r14
call fcn.14001bbd0
nop
lea rcx, [rbp - 0x20]
call fcn.140002e30
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.140002e30
mov r15, rax
cmp rax, rbx
jbe 0x14002d4cc
xor bl, bl
jmp 0x14002d531
sub rbx, r15
lea rcx, [rbp - 0x20]
call sym.OverwolfLauncher.exe_public:_class_Json::CharReader____ptr64___cdecl_Json::CharReader::operator_class_Json::CharReader_const____ptr64____ptr64
mov rdi, rax
cmp qword [rax + 0x10], rbx
jb 0x14002d6b8
lea rcx, [rbp - 0x40]
call sym.OverwolfLauncher.exe_public:_class_Json::CharReader____ptr64___cdecl_Json::CharReader::operator_class_Json::CharReader_const____ptr64____ptr64
mov r9, rax
mov r11, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002d4fe
mov r11, qword [rax]
mov r10, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14002d50b
mov r10, qword [rdi]
mov r8, r15
mov rdx, rbx
mov rcx, rdi
call fcn.140007140
mov rdx, rax
lea rcx, [r10 + rbx]
mov r9, qword [r9 + 0x10]
mov r8, r11
call fcn.14001bfb0
test eax, eax
sete bl
lea rcx, [rbp - 0x20]
call fcn.140002fb0
nop
lea rcx, [rbp - 0x40]
call fcn.140002fb0
test bl, bl
je 0x14002d615
cmp qword [r13 + 0xd8], 0
je 0x14002d615
mov r9d, reloc.SHLWAPI.dll_SHCreateMemStream
lea r8d, [r9 - 9]
lea rdx, [rbp + 0x40]
mov rcx, r14
call fcn.14001bbd0
nop
mov r9, 0xffffffffffffffff
lea r8d, [r9 + 0x10]
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.14001bbd0
nop
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x80]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x60]
mov qword [rbp - 0x40], rax
lea rcx, [rsp + 0x60]
call fcn.140003030
mov rdi, rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.140003050
mov rbx, rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x60]
call fcn.140003050
nop
mov rcx, qword [r13 + 0xd8]
lea rdx, [rbp]
mov qword [rsp + 0x20], rdx
mov r9, rdi
mov r8, rbx
mov rdx, rax
call fcn.14002dde0
lea rdx, [rbp]
mov rcx, rsi
call fcn.140002fc0
mov dword [rsp + 0x40], 1
lea rcx, [rbp + 0x20]
call fcn.140002fb0
nop
lea rcx, [rbp + 0x40]
call fcn.140002fb0
jmp 0x14002d68e
mov rcx, r14
call fcn.140002e30
mov rbx, rax
mov rcx, r14
call fcn.140002f80
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x20], ebx
lea rax, [rbp - 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x20]
call qword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
je 0x14002d67a
mov r8d, dword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
lea rcx, [rbp]
call fcn.140003f30
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea rdx, [rbp]
mov rcx, rsi
call fcn.140002fc0
mov dword [rsp + 0x40], 1
lea rcx, [rbp]
call fcn.140002fb0
mov rax, rsi
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.1400dd420
add rsp, 0x170
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400073d0
int3