Function at 0x14000a2c0
Capabilities:
Acquire credentials from windows credential manager
Delete file
Get session user name
Reference absolute stream path on windows

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0xc110]
mov eax, 0xc210
call fcn.1400326a0
sub rsp, rax
mov rax, qword [0x14004b010]
xor rax, rsp
mov qword [rbp + 0xc100], rax
mov ecx, 0xc
call fcn.140002170
movdqa xmm0, xmmword [0x140042ea0]
movdqu xmmword [rbp + 0x4ac8], xmm0
movdqa xmm1, xmmword [0x140043170]
movdqu xmmword [rbp + 0x4ad8], xmm1
movdqa xmm0, xmmword [0x140042550]
movdqu xmmword [rbp + 0x4ae8], xmm0
mov dword [rbp + 0x4af8], 0xb06250b
mov dword [rbp + 0x4afc], 0x1000f01
lea rcx, [rbp + 0x4ac8]
call fcn.140020ec0
lea rdx, [rbp + 0x4ac8]
lea rcx, [rbp + 0x248]
call fcn.140022650
mov rcx, rax
call fcn.1400049e0
lea rcx, str.C:Program_FilesEpic_GamesFortniteEngineBuildSourceDistribution.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000a422
mov dword [rbp + 0x8d58], 0x101
lea rdx, [rbp + 0x8d58]
lea rcx, [rbp + 0x8d70]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x8d70]
lea rcx, [rbp + 0x268]
call fcn.140022460
nop
lea r8, [rbp + 0x268]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x288]
call fcn.1400250c0
nop
mov r8d, 0x1c
lea rdx, [0x1400368e8]
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x2a8]
call fcn.140022430
lea rcx, [rbp + 0x2a8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x2a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x288]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x268]
call fcn.1400223c0
lea rcx, str.C:Program_FilesEpic_GamesFortniteEngineBuildPerforceBuild.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000a4f8
lea rcx, str.C:Program_FilesEpic_GamesFortniteEngineBuildNotForLicenseesEpicInternal.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000a4f8
mov dword [rbp + 0x8d5c], 0x101
lea rdx, [rbp + 0x8d5c]
lea rcx, [rbp + 0x8f80]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x8f80]
lea rcx, [rbp + 0x2c8]
call fcn.140022460
nop
lea r8, [rbp + 0x2c8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x2e8]
call fcn.1400250c0
nop
mov r8d, 0x34
lea rdx, str.AppDataLocalMicrosoftWindowsHistorydesktop.ini
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x308]
call fcn.140022430
lea rcx, [rbp + 0x308]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x308]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2c8]
call fcn.1400223c0
mov dword [rbp + 0x8d00], 0x101
lea rdx, [rbp + 0x8d00]
lea rcx, [rbp + 0x9190]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x9190]
lea rcx, [rbp + 0x328]
call fcn.140022460
nop
lea r8, [rbp + 0x328]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x348]
call fcn.1400250c0
nop
mov r8d, 0xf
lea rdx, str._ntuser.ini:NTV
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x368]
call fcn.140022430
lea rcx, [rbp + 0x368]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x368]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x348]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x328]
call fcn.1400223c0
test ebx, ebx
je 0x14000a613
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4668], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqu xmmword [rbp + 0x4678], xmm1
movdqa xmm0, xmmword [str._t8___r406Z_65]
movdqu xmmword [rbp + 0x4688], xmm0
mov byte [rbp + 0x4698], 1
lea rcx, [rbp + 0x4668]
call fcn.140020230
lea rdx, [rbp + 0x4668]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d04], 0x101
lea rdx, [rbp + 0x8d04]
lea rcx, [rbp + 0x93a0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x93a0]
lea rcx, [rbp + 0x388]
call fcn.140022460
nop
lea r8, [rbp + 0x388]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x3a8]
call fcn.1400250c0
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x3c8]
call fcn.140022430
lea rcx, [rbp + 0x3c8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x3a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x388]
call fcn.1400223c0
lea rcx, str.C:WindowsSystem32catroot2dberr.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x8d08], 0x101
lea rdx, [rbp + 0x8d08]
lea rcx, [rbp + 0x95b0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x95b0]
lea rcx, [rbp + 0x3e8]
call fcn.140022460
nop
lea r8, [rbp + 0x3e8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x408]
call fcn.1400250c0
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x428]
call fcn.140022430
lea rcx, [rbp + 0x428]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x428]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x408]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x3e8]
call fcn.1400223c0
mov dword [rbp + 0x8d0c], 0x101
lea rdx, [rbp + 0x8d0c]
lea rcx, [rbp + 0x97c0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x97c0]
lea rcx, [rbp + 0x448]
call fcn.140022460
nop
lea r8, [rbp + 0x448]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x468]
call fcn.1400250c0
nop
mov r8d, 0x2d
lea rdx, [0x140036bd0]
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x488]
call fcn.140022430
lea rcx, [rbp + 0x488]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x488]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x468]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x448]
call fcn.1400223c0
test ebx, ebx
je 0x14000a8ce
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x61d0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x61e0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x61f0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6200], xmm1
mov dword [rbp + 0x6210], 0xa042329
mov dword [rbp + 0x6214], 0xf1a163a
mov dword [rbp + 0x6218], 0xe11b500e
mov word [rbp + 0x621c], 0xf5
mov byte [rbp + 0x621e], 1
lea rcx, [rbp + 0x61d0]
call fcn.140020200
lea rdx, [rbp + 0x61d0]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d10], 0x101
lea rdx, [rbp + 0x8d10]
lea rcx, [rbp + 0x99d0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x99d0]
lea rcx, [rbp + 0x4a8]
call fcn.140022460
nop
lea r8, [rbp + 0x4a8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x4c8]
call fcn.1400250c0
nop
mov r8d, 0x2c
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.140022430
lea rcx, [rbp + 0x4e8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x4e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x4c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x4a8]
call fcn.1400223c0
test ebx, ebx
je 0x14000aa24
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6220], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6230], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6240], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6250], xmm1
mov dword [rbp + 0x6260], 0xa042329
mov dword [rbp + 0x6264], 0xf1a163a
mov dword [rbp + 0x6268], 0xe11b500e
mov word [rbp + 0x626c], 0xf5
mov byte [rbp + 0x626e], 1
lea rcx, [rbp + 0x6220]
call fcn.140020200
lea rdx, [rbp + 0x6220]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d14], 0x101
lea rdx, [rbp + 0x8d14]
lea rcx, [rbp + 0x9be0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x9be0]
lea rcx, [rbp + 0x508]
call fcn.140022460
nop
lea r8, [rbp + 0x508]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x528]
call fcn.1400250c0
nop
mov r8d, 0x2d
lea rdx, [0x140036c90]
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x548]
call fcn.140022430
lea rcx, [rbp + 0x548]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x548]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x528]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x508]
call fcn.1400223c0
test ebx, ebx
je 0x14000ab7a
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6270], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6280], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6290], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x62a0], xmm1
mov dword [rbp + 0x62b0], 0xa040329
mov dword [rbp + 0x62b4], 0xf1a161a
mov dword [rbp + 0x62b8], 0xe11b500e
mov word [rbp + 0x62bc], 0xf5
mov byte [rbp + 0x62be], 1
lea rcx, [rbp + 0x6270]
call fcn.140020200
lea rdx, [rbp + 0x6270]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d18], 0x101
lea rdx, [rbp + 0x8d18]
lea rcx, [rbp + 0x9df0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x9df0]
lea rcx, [rbp + 0x568]
call fcn.140022460
nop
lea r8, [rbp + 0x568]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x588]
call fcn.1400250c0
nop
mov r8d, 0x2c
lea rdx, str.AppDataLocalMicrosoftWindowsusrclass.dat
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x5a8]
call fcn.140022430
lea rcx, [rbp + 0x5a8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x5a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x588]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x568]
call fcn.1400223c0
test ebx, ebx
je 0x14000acd0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x62c0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x62d0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x62e0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x62f0], xmm1
mov dword [rbp + 0x6300], 0xa040329
mov dword [rbp + 0x6304], 0xf1a161a
mov dword [rbp + 0x6308], 0xe11b500e
mov word [rbp + 0x630c], 0xf5
mov byte [rbp + 0x630e], 1
lea rcx, [rbp + 0x62c0]
call fcn.140020200
lea rdx, [rbp + 0x62c0]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d1c], 0x101
lea rdx, [rbp + 0x8d1c]
lea rcx, [rbp + 0xa000]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xa000]
lea rcx, [rbp + 0x5c8]
call fcn.140022460
nop
lea r8, [rbp + 0x5c8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x5e8]
call fcn.1400250c0
nop
mov r8d, 0x3c
lea rdx, str.AppDataLocalMicrosoftVaultUserProfileRoamingLatest.dat
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x608]
call fcn.140022430
lea rcx, [rbp + 0x608]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x608]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x5e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x5c8]
call fcn.1400223c0
test ebx, ebx
je 0x14000ae2f
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x72a0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x72b0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x72c0], xmm0
movdqa xmm1, xmmword [0x140042ac0]
movdqa xmmword [rbp + 0x72d0], xmm1
movdqa xmm0, xmmword [0x140044740]
movdqa xmmword [rbp + 0x72e0], xmm0
mov dword [rbp + 0x72f0], 0xe9cbdae2
mov dword [rbp + 0x72f4], 0xf8f8effd
mov dword [rbp + 0x72f8], 0xe4eeeaa3
mov word [rbp + 0x72fc], pe_nt_image_headers64
lea rcx, [rbp + 0x72a0]
call fcn.1400201d0
lea rdx, [rbp + 0x72a0]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d20], 0x101
lea rdx, [rbp + 0x8d20]
lea rcx, [rbp + 0xa210]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xa210]
lea rcx, [rbp + 0x628]
call fcn.140022460
nop
lea r8, [rbp + 0x628]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x648]
call fcn.1400250c0
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log1
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x668]
call fcn.140022430
lea rcx, [rbp + 0x668]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x668]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x648]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x628]
call fcn.1400223c0
test ebx, ebx
je 0x14000af71
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6d60], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6d70], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6d80], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6d90], xmm1
movdqa xmm0, xmmword [0x1400447b0]
movdqa xmmword [rbp + 0x6da0], xmm0
mov dword [rbp + 0x6db0], 0x100b7e2
lea rcx, [rbp + 0x6d60]
call fcn.140020650
lea rdx, [rbp + 0x6d60]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d24], 0x101
lea rdx, [rbp + 0x8d24]
lea rcx, [rbp + 0xa420]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xa420]
lea rcx, [rbp + 0x688]
call fcn.140022460
nop
lea r8, [rbp + 0x688]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x6a8]
call fcn.1400250c0
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOG2
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x6c8]
call fcn.140022430
lea rcx, [rbp + 0x6c8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x6c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x6a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x688]
call fcn.1400223c0
test ebx, ebx
je 0x14000b0c7
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6310], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6320], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6330], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6340], xmm1
mov dword [rbp + 0x6350], 0xa042329
mov dword [rbp + 0x6354], 0xf1a163a
mov dword [rbp + 0x6358], 0xe11b500e
mov word [rbp + 0x635c], 0xf5
mov byte [rbp + 0x635e], 1
lea rcx, [rbp + 0x6310]
call fcn.140020200
lea rdx, [rbp + 0x6310]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d28], 0x101
lea rdx, [rbp + 0x8d28]
lea rcx, [rbp + 0xa630]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xa630]
lea rcx, [rbp + 0x6e8]
call fcn.140022460
nop
lea r8, [rbp + 0x6e8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x708]
call fcn.1400250c0
nop
mov r8d, 0x37
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log2.LOG2
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x728]
call fcn.140022430
lea rcx, [rbp + 0x728]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x728]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x708]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x6e8]
call fcn.1400223c0
test ebx, ebx
je 0x14000b209
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6dc0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6dd0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6de0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6df0], xmm1
movdqa xmm0, xmmword [0x1400447b0]
movdqa xmmword [rbp + 0x6e00], xmm0
mov dword [rbp + 0x6e10], 0x100b4e2
lea rcx, [rbp + 0x6dc0]
call fcn.140020650
lea rdx, [rbp + 0x6dc0]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d2c], 0x101
lea rdx, [rbp + 0x8d2c]
lea rcx, [rbp + 0xa840]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xa840]
lea rcx, [rbp + 0x748]
call fcn.140022460
nop
lea r8, [rbp + 0x748]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x768]
call fcn.1400250c0
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log2
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x788]
call fcn.140022430
lea rcx, [rbp + 0x788]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x788]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x768]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x748]
call fcn.1400223c0
test ebx, ebx
je 0x14000b34b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6e20], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6e30], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6e40], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6e50], xmm1
movdqa xmm0, xmmword [0x1400447b0]
movdqa xmmword [rbp + 0x6e60], xmm0
mov dword [rbp + 0x6e70], 0x100b4e2
lea rcx, [rbp + 0x6e20]
call fcn.140020650
lea rdx, [rbp + 0x6e20]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d30], 0x101
lea rdx, [rbp + 0x8d30]
lea rcx, [rbp + 0xaa50]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xaa50]
lea rcx, [rbp + 0x7a8]
call fcn.140022460
nop
lea r8, [rbp + 0x7a8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x7c8]
call fcn.1400250c0
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalFortniteGameSavedLMSManifest.sav
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x7e8]
call fcn.140022430
lea rcx, [rbp + 0x7e8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x7e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x7c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x7a8]
call fcn.1400223c0
test ebx, ebx
je 0x14000b48d
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6e80], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6e90], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x6ea0], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x6eb0], xmm1
movdqa xmm0, xmmword [0x140044ad0]
movdqa xmmword [rbp + 0x6ec0], xmm0
mov dword [rbp + 0x6ed0], 0x100f0e4
lea rcx, [rbp + 0x6e80]
call fcn.140020650
lea rdx, [rbp + 0x6e80]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:UsersPublicLibrariescollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000b522
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4d00], xmm0
movdqa xmm1, xmmword [0x1400434d0]
movdqu xmmword [rbp + 0x4d10], xmm1
movdqa xmm0, xmmword [0x140042490]
movdqu xmmword [rbp + 0x4d20], xmm0
mov dword [rbp + 0x4d30], 0x1130500
mov dword [rbp + 0x4d34], 0x8450406
mov dword [rbp + 0x4d38], 0x1001a0c
lea rcx, [rbp + 0x4d00]
call fcn.140020770
lea rdx, [rbp + 0x4d00]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:_Secure:_SDH:_INDEX_ALLOCATION
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000b59f
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4a90], xmm0
movdqa xmm1, xmmword [0x1400429f0]
movdqu xmmword [rbp + 0x4aa0], xmm1
movdqa xmm0, xmmword [0x140042ed0]
movdqu xmmword [rbp + 0x4ab0], xmm0
mov dword [rbp + 0x4ac0], 0x100282a
lea rcx, [rbp + 0x4a90]
call fcn.140020350
lea rdx, [rbp + 0x4a90]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:_Secure:_SDH:_INDEX_ALLOCATION
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000b61c
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4a58], xmm0
movdqa xmm1, xmmword [0x1400429f0]
movdqu xmmword [rbp + 0x4a68], xmm1
movdqa xmm0, xmmword [0x140042ed0]
movdqu xmmword [rbp + 0x4a78], xmm0
mov dword [rbp + 0x4a88], 0x100282a
lea rcx, [rbp + 0x4a58]
call fcn.140020350
lea rdx, [rbp + 0x4a58]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:UsersPublicShared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000b6b8
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4e00], xmm0
movdqa xmm1, xmmword [0x1400434d0]
movdqu xmmword [rbp + 0x4e10], xmm1
movdqa xmm0, xmmword [0x140043090]
movdqu xmmword [rbp + 0x4e20], xmm0
mov dword [rbp + 0x4e30], 0x1141400
mov dword [rbp + 0x4e34], 0xd280406
mov dword [rbp + 0x4e38], 0xa060e
mov byte [rbp + 0x4e3c], 1
lea rcx, [rbp + 0x4e00]
call fcn.140020470
lea rdx, [rbp + 0x4e00]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:MSOCache71230000_00E2_0000_1000_00000000Setup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000b75d
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5430], xmm0
movdqa xmm1, xmmword [0x140043710]
movdqa xmmword [rbp + 0x5440], xmm1
movdqa xmm0, xmmword [0x140043620]
movdqa xmmword [rbp + 0x5450], xmm0
movdqa xmm1, xmmword [0x140042500]
movdqa xmmword [rbp + 0x5460], xmm1
mov dword [rbp + 0x5470], 0xc122529
mov dword [rbp + 0x5474], 0x18550a0c
mov dword [rbp + 0x5478], 0x1000a1c
lea rcx, [rbp + 0x5430]
call fcn.1400201a0
lea rdx, [rbp + 0x5430]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d34], 0x101
lea rdx, [rbp + 0x8d34]
lea rcx, [rbp + 0xac60]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xac60]
lea rcx, [rbp + 0x808]
call fcn.140022460
nop
lea r8, [rbp + 0x808]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x828]
call fcn.1400250c0
nop
mov r8d, 0x1f
lea rdx, str.AppDataLocalTemp04f992c.tmp
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x848]
call fcn.140022430
lea rcx, [rbp + 0x848]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x848]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x828]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x808]
call fcn.1400223c0
test ebx, ebx
je 0x14000b888
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5190], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x51a0], xmm1
movdqa xmm0, xmmword [0x140042f20]
movdqa xmmword [rbp + 0x51b0], xmm0
movdqa xmm1, xmmword [0x140041ff0]
movdqa xmmword [rbp + 0x51c0], xmm1
mov byte [rbp + 0x51d0], 1
lea rcx, [rbp + 0x5190]
call fcn.140020170
lea rdx, [rbp + 0x5190]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d38], 0x101
lea rdx, [rbp + 0x8d38]
lea rcx, [rbp + 0xae70]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xae70]
lea rcx, [rbp + 0x868]
call fcn.140022460
nop
lea r8, [rbp + 0x868]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x888]
call fcn.1400250c0
nop
mov r8d, 0xb
lea rdx, str._ntuser.pol
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x8a8]
call fcn.140022430
lea rcx, [rbp + 0x8a8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x8a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x888]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x868]
call fcn.1400223c0
mov dword [rbp + 0x8d3c], 0x101
lea rdx, [rbp + 0x8d3c]
lea rcx, [rbp + 0xb080]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xb080]
lea rcx, [rbp + 0x8c8]
call fcn.140022460
nop
lea r8, [rbp + 0x8c8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x8e8]
call fcn.1400250c0
nop
mov r8d, 0x1b
lea rdx, str.VideosCapturesdesktop.ini
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x908]
call fcn.140022430
lea rcx, [rbp + 0x908]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x908]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x8e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x8c8]
call fcn.1400223c0
test ebx, ebx
je 0x14000ba73
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4bc0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqu xmmword [rbp + 0x4bd0], xmm1
movdqa xmm0, xmmword [0x140042800]
movdqu xmmword [rbp + 0x4be0], xmm0
mov dword [rbp + 0x4bf0], 0x1b020239
mov dword [rbp + 0x4bf4], 0x1c041e02
mov dword [rbp + 0x4bf8], 0x19010743
mov word [rbp + 0x4bfc], pe_nt_image_headers64
lea rcx, [rbp + 0x4bc0]
call fcn.140020140
lea rdx, [rbp + 0x4bc0]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d40], 0x101
lea rdx, [rbp + 0x8d40]
lea rcx, [rbp + 0xb290]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xb290]
lea rcx, [rbp + 0x928]
call fcn.140022460
nop
lea r8, [rbp + 0x928]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x948]
call fcn.1400250c0
nop
mov r8d, 0x1e
lea rdx, str.AppDataLocalMicrosoftFeeds
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x968]
call fcn.140022430
lea rcx, [rbp + 0x968]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x968]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x948]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x928]
call fcn.1400223c0
test ebx, ebx
je 0x14000bbc0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5f50], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x5f60], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x5f70], xmm0
movdqa xmm1, xmmword [0x1400434f0]
movdqa xmmword [rbp + 0x5f80], xmm1
mov dword [rbp + 0x5f90], 0x1600191b
mov dword [rbp + 0x5f94], 0xe0e152a
mov dword [rbp + 0x5f98], 0xc1b1e
mov byte [rbp + 0x5f9c], 1
lea rcx, [rbp + 0x5f50]
call fcn.140020110
lea rdx, [rbp + 0x5f50]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d44], 0x101
lea rdx, [rbp + 0x8d44]
lea rcx, [rbp + 0xb4a0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xb4a0]
lea rcx, [rbp + 0x988]
call fcn.140022460
nop
lea r8, [rbp + 0x988]
lea rdx, str.C:Users_
lea rcx, [rbp + 0x9a8]
call fcn.1400250c0
nop
mov r8d, 0x2b
lea rdx, str.AppDataLocalMicrosoftFeeds:KnownSources
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0x9c8]
call fcn.140022430
lea rcx, [rbp + 0x9c8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x9c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x9a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x988]
call fcn.1400223c0
mov dword [rbp + 0x8d60], 0x101
lea rdx, [rbp + 0x8d60]
lea rcx, [rbp + 0xb6b0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xb6b0]
lea rcx, [rbp + 0x9e8]
call fcn.140022460
nop
lea r8, [rbp + 0x9e8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0xa08]
call fcn.1400250c0
nop
mov r8d, 0x1e
lea rdx, str.AppDataLocalMicrosoftFeeds
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0xa28]
call fcn.140022430
lea rcx, [rbp + 0xa28]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xa28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xa08]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x9e8]
call fcn.1400223c0
test ebx, ebx
je 0x14000bdb9
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5fa0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x5fb0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x5fc0], xmm0
movdqa xmm1, xmmword [0x1400434f0]
movdqa xmmword [rbp + 0x5fd0], xmm1
mov dword [rbp + 0x5fe0], 0x1600191b
mov dword [rbp + 0x5fe4], 0xe0e152a
mov dword [rbp + 0x5fe8], 0xc1b1e
mov byte [rbp + 0x5fec], 1
lea rcx, [rbp + 0x5fa0]
call fcn.140020110
lea rdx, [rbp + 0x5fa0]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d48], 0x101
lea rdx, [rbp + 0x8d48]
lea rcx, [rbp + 0xb8c0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xb8c0]
lea rcx, [rbp + 0xa48]
call fcn.140022460
nop
lea r8, [rbp + 0xa48]
lea rdx, str.C:Users_
lea rcx, [rbp + 0xa68]
call fcn.1400250c0
nop
mov r8d, 0x2b
lea rdx, str.AppDataLocalMicrosoftFeeds:KnownSources
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0xa88]
call fcn.140022430
lea rcx, [rbp + 0xa88]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xa88]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xa68]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xa48]
call fcn.1400223c0
lea rcx, str.C:desktop.ini:CachedTiles
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000beef
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x45a8], xmm0
movdqa xmm1, xmmword [0x140043490]
movdqu xmmword [rbp + 0x45b8], xmm1
mov dword [rbp + 0x45c8], 0x3b36156f
mov dword [rbp + 0x45cc], 0x83f3f31
mov dword [rbp + 0x45d0], 0x133a3234
mov word [rbp + 0x45d4], pe_nt_image_headers64
lea rcx, [rbp + 0x45a8]
call fcn.140021cd0
lea rdx, [rbp + 0x45a8]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Program_FilesEpic_GamesFortniteEngineConfigNoRedistWindowsShippableWindowsGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000bfc4
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8b00], xmm0
movdqa xmm1, xmmword [0x140043300]
movdqa xmmword [rbp + 0x8b10], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x8b20], xmm0
movdqa xmm1, xmmword [0x140042980]
movdqa xmmword [rbp + 0x8b30], xmm1
movdqa xmm0, xmmword [0x140044830]
movdqa xmmword [rbp + 0x8b40], xmm0
movdqa xmm1, xmmword [0x140043f90]
movdqa xmmword [rbp + 0x8b50], xmm1
movdqa xmm0, xmmword [0x140043f20]
movdqa xmmword [rbp + 0x8b60], xmm0
mov dword [rbp + 0x8b70], 0xc6ced2d1
mov dword [rbp + 0x8b74], 0xc585d9ce
mov dword [rbp + 0x8b78], 0x100c7c3
lea rcx, [rbp + 0x8b00]
call fcn.1400200e0
lea rdx, [rbp + 0x8b00]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Recovery_ntuser.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000c044
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4038], xmm0
movdqa xmm1, xmmword [0x140042ab0]
movdqu xmmword [rbp + 0x4048], xmm1
mov dword [rbp + 0x4058], 0x2a322520
mov dword [rbp + 0x405c], 0x2f222977
mov word [rbp + 0x4060], pe_nt_image_headers64
lea rcx, [rbp + 0x4038]
call fcn.1400207d0
lea rdx, [rbp + 0x4038]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:desktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x8d4c], 0x101
lea rdx, [rbp + 0x8d4c]
lea rcx, [rbp + 0xbad0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xbad0]
lea rcx, [rbp + 0xaa8]
call fcn.140022460
nop
lea r8, [rbp + 0xaa8]
lea rdx, str.C:Users_
lea rcx, [rbp + 0xac8]
call fcn.1400250c0
nop
mov r8d, 0x62
lea rdx, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCookiesESEcontainer.dat
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0xae8]
call fcn.140022430
lea rcx, [rbp + 0xae8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xae8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xac8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xaa8]
call fcn.1400223c0
test ebx, ebx
je 0x14000c190
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5c50], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x5c60], xmm1
movdqa xmm0, xmmword [0x140042be0]
movdqa xmmword [rbp + 0x5c70], xmm0
movdqa xmm1, xmmword [0x140042dd0]
movdqa xmmword [rbp + 0x5c80], xmm1
movdqa xmm0, xmmword [0x140042120]
movdqa xmmword [rbp + 0x5c90], xmm0
mov byte [rbp + 0x5ca0], 1
lea rcx, [rbp + 0x5c50]
call fcn.1400200b0
lea rdx, [rbp + 0x5c50]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d50], 0x101
lea rdx, [rbp + 0x8d50]
lea rcx, [rbp + 0xbce0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xbce0]
lea rcx, [rbp + 0xb08]
call fcn.140022460
nop
lea r8, [rbp + 0xb08]
lea rdx, str.C:Users_
lea rcx, [rbp + 0xb28]
call fcn.1400250c0
nop
mov r8d, 0x57
lea rdx, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings_settings.dat
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0xb48]
call fcn.140022430
lea rcx, [rbp + 0xb48]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xb48]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xb28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xb08]
call fcn.1400223c0
test ebx, ebx
je 0x14000c2e6
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6360], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6370], xmm1
movdqa xmm0, xmmword [0x1400430d0]
movdqa xmmword [rbp + 0x6380], xmm0
movdqa xmm1, xmmword [0x140042420]
movdqa xmmword [rbp + 0x6390], xmm1
mov dword [rbp + 0x63a0], 0xc120529
mov dword [rbp + 0x63a4], 0x1b15130d
mov dword [rbp + 0x63a8], 0xe11b500e
mov word [rbp + 0x63ac], 0xf5
mov byte [rbp + 0x63ae], 1
lea rcx, [rbp + 0x6360]
call fcn.140020200
lea rdx, [rbp + 0x6360]
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x8d54], 0x101
lea rdx, [rbp + 0x8d54]
lea rcx, [rbp + 0xbef0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0xbef0]
lea rcx, [rbp + 0xb68]
call fcn.140022460
nop
lea r8, [rbp + 0xb68]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x28]
call fcn.1400250c0
nop
mov r8d, 0x48
lea rdx, str.AppDataLocalUnrealEngine4.23SavedConfigWindowsClientManifest.ini
mov rcx, rax
call fcn.140024800
mov rdx, rax
lea rcx, [rbp + 0xba8]
call fcn.140022430
lea rcx, [rbp + 0xba8]
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xba8]
call fcn.1400223c0
lea rcx, [rbp + 0xba8]
call fcn.1400229a0
nop
lea rcx, [rsp + 0x28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xb68]
call fcn.1400223c0
test ebx, ebx
je 0x14000c44f
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7e80], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x7e90], xmm1
movdqa xmm0, xmmword [0x140043010]
movdqa xmmword [rbp + 0x7ea0], xmm0
movdqa xmm1, xmmword [0x140043580]
movdqa xmmword [rbp + 0x7eb0], xmm1
movdqa xmm0, xmmword [0x140044820]
movdqa xmmword [rbp + 0x7ec0], xmm0
movdqa xmm1, xmmword [0x140044c70]
movdqa xmmword [rbp + 0x7ed0], xmm1
mov dword [rbp + 0x7ee0], 0xece4f3f3
mov dword [rbp + 0x7ee4], 0xf5f5f3b7
mov word [rbp + 0x7ee8], pe_nt_image_headers64
lea rcx, [rbp + 0x7e80]
call fcn.14000a080
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xbc8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xbe8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedConfigWindowsClientGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0xc08]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xc08]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xbe8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xbc8]
call fcn.1400223c0
test ebx, ebx
je 0x14000c57d
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x83c0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x83d0], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x83e0], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x83f0], xmm1
movdqa xmm0, xmmword [0x140044b40]
movdqa xmmword [rbp + 0x8400], xmm0
movdqa xmm1, xmmword [0x140044050]
movdqa xmmword [rbp + 0x8410], xmm1
mov dword [rbp + 0x8420], 0xf1e3e2f0
mov dword [rbp + 0x8424], 0xb2e8fdf7
mov dword [rbp + 0x8428], 0xf6f0f4
mov byte [rbp + 0x842c], 1
lea rcx, [rbp + 0x83c0]
call fcn.140018c60
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000c648
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8740], xmm0
movdqa xmm1, xmmword [0x140043300]
movdqa xmmword [rbp + 0x8750], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x8760], xmm0
movdqa xmm1, xmmword [0x1400430a0]
movdqa xmmword [rbp + 0x8770], xmm1
movdqa xmm0, xmmword [0x140044760]
movdqa xmmword [rbp + 0x8780], xmm0
movdqa xmm1, xmmword [0x1400449f0]
movdqa xmmword [rbp + 0x8790], xmm1
mov dword [rbp + 0x87a0], 0xd9f2fef6
mov dword [rbp + 0x87a4], 0xeffef9fa
mov dword [rbp + 0x87a8], 0xd3f5b0ee
mov dword [rbp + 0x87ac], 0x100ccce
lea rcx, [rbp + 0x8740]
call fcn.14000a050
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xc28]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xc48]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0xc68]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xc68]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xc48]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xc28]
call fcn.1400223c0
test ebx, ebx
je 0x14000c754
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6a60], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6a70], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x6a80], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x6a90], xmm1
movdqa xmm0, xmmword [0x140044b00]
movdqa xmmword [rbp + 0x6aa0], xmm0
mov dword [rbp + 0x6ab0], 0xfee6d5ab
mov word [rbp + 0x6ab4], pe_nt_image_headers64
lea rcx, [rbp + 0x6a60]
call fcn.140018c90
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:WindowsServiceStateEventLogDatalastalive1.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000c7eb
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x56b0], xmm0
movdqa xmm1, xmmword [0x140042c90]
movdqa xmmword [rbp + 0x56c0], xmm1
movdqa xmm0, xmmword [0x140042e20]
movdqa xmmword [rbp + 0x56d0], xmm0
movdqa xmm1, xmmword [0x140042260]
movdqa xmmword [rbp + 0x56e0], xmm1
mov dword [rbp + 0x56f0], 0x1c594710
mov dword [rbp + 0x56f4], 0x1000e18
lea rcx, [rbp + 0x56b0]
call fcn.140018cc0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xc88]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xca8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftOneDrivelogsCommonDeviceHealthSummaryConfiguration.ini
mov rdx, rax
lea rcx, [rbp + 0xcc8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xcc8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xca8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xc88]
call fcn.1400223c0
test ebx, ebx
je 0x14000c90e
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8900], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x8910], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x8920], xmm0
movdqa xmm1, xmmword [0x140042240]
movdqa xmmword [rbp + 0x8930], xmm1
movdqa xmm0, xmmword [0x1400444c0]
movdqa xmmword [rbp + 0x8940], xmm0
movdqa xmm1, xmmword [0x140044650]
movdqa xmmword [rbp + 0x8950], xmm1
movdqa xmm0, xmmword [0x140044180]
movdqa xmmword [rbp + 0x8960], xmm0
mov dword [rbp + 0x8970], 0x100cfcb
lea rcx, [rbp + 0x8900]
call fcn.140018cf0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:ProgramDataMicrosoftWindowsAppRepositoryPackagesInputApp_1000.17763.1.0_neutral_neutral_cw5n1h2txyewyActivationStore.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000c9cf
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7480], xmm0
movdqa xmm1, xmmword [0x140043130]
movdqa xmmword [rbp + 0x7490], xmm1
movdqa xmm0, xmmword [0x140042540]
movdqa xmmword [rbp + 0x74a0], xmm0
movdqa xmm1, xmmword [0x1400425b0]
movdqa xmmword [rbp + 0x74b0], xmm1
movdqa xmm0, xmmword [0x140044630]
movdqa xmmword [rbp + 0x74c0], xmm0
mov dword [rbp + 0x74d0], 0xe6e8eff1
mov dword [rbp + 0x74d4], 0xfee4feda
mov dword [rbp + 0x74d8], 0xf1eba0e8
mov word [rbp + 0x74dc], 0xe5
mov byte [rbp + 0x74de], 1
lea rcx, [rbp + 0x7480]
call fcn.14000a1a0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xce8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xd08]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedLogsFortniteGame.log
mov rdx, rax
lea rcx, [rbp + 0xd28]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xd28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xd08]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xce8]
call fcn.1400223c0
test ebx, ebx
je 0x14000cae3
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6520], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6530], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x6540], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x6550], xmm1
movdqa xmm0, xmmword [0x140043f70]
movdqa xmmword [rbp + 0x6560], xmm0
mov dword [rbp + 0x6570], 0xa6e2ebe4
mov dword [rbp + 0x6574], 0xece5e5
mov byte [rbp + 0x6578], 1
lea rcx, [rbp + 0x6520]
call fcn.140018d20
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xd48]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xd68]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheContent.IE5
mov rdx, rax
lea rcx, [rbp + 0xd88]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xd88]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xd68]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xd48]
call fcn.1400223c0
test ebx, ebx
je 0x14000cbf0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6820], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6830], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6840], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6850], xmm1
movdqa xmm0, xmmword [0x140044550]
movdqa xmmword [rbp + 0x6860], xmm0
mov dword [rbp + 0x6870], 0xc1a9f2eb
mov dword [rbp + 0x6874], 0x100bfcc
lea rcx, [rbp + 0x6820]
call fcn.14000a170
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xda8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xdc8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistoryHistory.IE5
mov rdx, rax
lea rcx, [rbp + 0xde8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xde8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xdc8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xda8]
call fcn.1400223c0
test ebx, ebx
je 0x14000ccfc
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6ac0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x6ad0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6ae0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6af0], xmm1
movdqa xmm0, xmmword [0x140044c50]
movdqa xmmword [rbp + 0x6b00], xmm0
mov dword [rbp + 0x6b10], 0xbdc2cfab
mov word [rbp + 0x6b14], pe_nt_image_headers64
lea rcx, [rbp + 0x6ac0]
call fcn.140018c90
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:ProgramDataMicrosoftWindowsDeviceMetadataCachedmrc.idx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000cd96
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5cb0], xmm0
movdqa xmm1, xmmword [0x140043130]
movdqa xmmword [rbp + 0x5cc0], xmm1
movdqa xmm0, xmmword [0x140042540]
movdqa xmmword [rbp + 0x5cd0], xmm0
movdqa xmm1, xmmword [0x140042040]
movdqa xmmword [rbp + 0x5ce0], xmm1
movdqa xmm0, xmmword [0x140042150]
movdqa xmmword [rbp + 0x5cf0], xmm0
mov byte [rbp + 0x5d00], 1
lea rcx, [rbp + 0x5cb0]
call fcn.140018c30
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xe08]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xe28]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSyncmetastoreedb.log
mov rdx, rax
lea rcx, [rbp + 0xe48]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xe48]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xe28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xe08]
call fcn.1400223c0
test ebx, ebx
je 0x14000ceb7
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7600], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x7610], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x7620], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x7630], xmm1
movdqa xmm0, xmmword [0x1400448a0]
movdqa xmmword [rbp + 0x7640], xmm0
mov dword [rbp + 0x7650], 0xe7f3f5e4
mov dword [rbp + 0x7654], 0xe9d7effb
mov dword [rbp + 0x7658], 0xfca1ece9
mov dword [rbp + 0x765c], 0x100f5fe
lea rcx, [rbp + 0x7600]
call fcn.140018d50
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xe68]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xe88]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSync_remotemetastore_v1edb.log
mov rdx, rax
lea rcx, [rbp + 0xea8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xea8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xe88]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xe68]
call fcn.1400223c0
test ebx, ebx
je 0x14000cfdb
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7cc0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x7cd0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x7ce0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x7cf0], xmm1
movdqa xmm0, xmmword [0x1400446d0]
movdqa xmmword [rbp + 0x7d00], xmm0
movdqa xmm1, xmmword [0x140044080]
movdqa xmmword [rbp + 0x7d10], xmm1
mov dword [rbp + 0x7d20], 0xb6f5f2f0
mov dword [rbp + 0x7d24], 0xfcf5f5
mov byte [rbp + 0x7d28], 1
lea rcx, [rbp + 0x7cc0]
call fcn.14000a020
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:WindowsSoftwareDistributionPostRebootEventCache.V2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000d082
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5570], xmm0
movdqa xmm1, xmmword [0x140043070]
movdqa xmmword [rbp + 0x5580], xmm1
movdqa xmm0, xmmword [0x140042560]
movdqa xmmword [rbp + 0x5590], xmm0
movdqa xmm1, xmmword [str._v:7_a]
movdqa xmmword [rbp + 0x55a0], xmm1
mov dword [rbp + 0x55b0], 0x1b163501
mov dword [rbp + 0x55b4], 0x2a551f11
mov word [rbp + 0x55b8], 0x4f
mov byte [rbp + 0x55ba], 1
lea rcx, [rbp + 0x5570]
call fcn.140018d80
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xec8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xee8]
call fcn.1400250c0
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0xf08]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xf08]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xee8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xec8]
call fcn.1400223c0
test ebx, ebx
je 0x14000d16c
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4158], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqu xmmword [rbp + 0x4168], xmm1
mov dword [rbp + 0x4178], 0x2d233809
mov dword [rbp + 0x417c], 0x72293f2a
mov dword [rbp + 0x4180], 0x363034
mov byte [rbp + 0x4184], 1
lea rcx, [rbp + 0x4158]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xf28]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xf48]
call fcn.1400250c0
nop
lea r8, str._ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0xf68]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xf68]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xf48]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xf28]
call fcn.1400223c0
test ebx, ebx
je 0x14000d256
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4188], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqu xmmword [rbp + 0x4198], xmm1
mov dword [rbp + 0x41a8], 0x2d233809
mov dword [rbp + 0x41ac], 0x72293f2a
mov dword [rbp + 0x41b0], 0x33312d
mov byte [rbp + 0x41b4], 1
lea rcx, [rbp + 0x4188]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xf88]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0xfa8]
call fcn.1400250c0
nop
lea r8, str.ntuser.dat.LOG1
mov rdx, rax
lea rcx, [rbp + 0xfc8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xfc8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xfa8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xf88]
call fcn.1400223c0
test ebx, ebx
je 0x14000d334
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4898], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqu xmmword [rbp + 0x48a8], xmm1
movdqa xmm0, xmmword [0x140043630]
movdqu xmmword [rbp + 0x48b8], xmm0
mov word [rbp + 0x48c8], pe_nt_image_headers64
lea rcx, [rbp + 0x4898]
call fcn.14000a260
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0xfe8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1008]
call fcn.1400250c0
nop
lea r8, str.ntuser.dat.LOG2
mov rdx, rax
lea rcx, [rbp + 0x1028]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1028]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1008]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xfe8]
call fcn.1400223c0
test ebx, ebx
je 0x14000d412
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x48d0], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqu xmmword [rbp + 0x48e0], xmm1
movdqa xmm0, xmmword [0x140043660]
movdqu xmmword [rbp + 0x48f0], xmm0
mov word [rbp + 0x4900], pe_nt_image_headers64
lea rcx, [rbp + 0x48d0]
call fcn.14000a260
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1048]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1068]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheIEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x1088]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1088]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1068]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1048]
call fcn.1400223c0
test ebx, ebx
je 0x14000d530
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7180], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x7190], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x71a0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x71b0], xmm1
movdqa xmm0, xmmword [0x140044770]
movdqa xmmword [rbp + 0x71c0], xmm0
mov dword [rbp + 0x71d0], 0xe1e6f2eb
mov dword [rbp + 0x71d4], 0xa2f9efe7
mov dword [rbp + 0x71d8], 0xfbefe9
mov byte [rbp + 0x71dc], 1
lea rcx, [rbp + 0x7180]
call fcn.14000a200
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000d5fa
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8580], xmm0
movdqa xmm1, xmmword [0x140043300]
movdqa xmmword [rbp + 0x8590], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x85a0], xmm0
movdqa xmm1, xmmword [0x1400430a0]
movdqa xmmword [rbp + 0x85b0], xmm1
movdqa xmm0, xmmword [0x140044720]
movdqa xmmword [rbp + 0x85c0], xmm0
movdqa xmm1, xmmword [0x140043bf0]
movdqa xmmword [rbp + 0x85d0], xmm1
mov dword [rbp + 0x85e0], 0xebe5f3c3
mov dword [rbp + 0x85e4], 0xdff5f5f0
mov dword [rbp + 0x85e8], 0xc5f7fdfc
mov word [rbp + 0x85ec], pe_nt_image_headers64
lea rcx, [rbp + 0x8580]
call fcn.140009ff0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x140037f50]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:UsersPublicDocuments
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000d68b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x41b8], xmm0
movdqa xmm1, xmmword [0x1400434d0]
movdqu xmmword [rbp + 0x41c8], xmm1
mov dword [rbp + 0x41d8], 0x37130a36
mov dword [rbp + 0x41dc], 0x39362f3a
mov dword [rbp + 0x41e0], 0x2c2a33
mov byte [rbp + 0x41e4], 1
lea rcx, [rbp + 0x41b8]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Program_FilesEpic_GamesFortniteEnginePluginsEditorCryptoKeysAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000d752
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8200], xmm0
movdqa xmm1, xmmword [0x140043300]
movdqa xmmword [rbp + 0x8210], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x8220], xmm0
movdqa xmm1, xmmword [0x140042900]
movdqa xmmword [rbp + 0x8230], xmm1
movdqa xmm0, xmmword [0x140044c40]
movdqa xmmword [rbp + 0x8240], xmm0
movdqa xmm1, xmmword [0x1400449b0]
movdqa xmmword [rbp + 0x8250], xmm1
mov dword [rbp + 0x8260], 0xeae3e5fc
mov dword [rbp + 0x8264], 0xf5f9b4e0
mov word [rbp + 0x8268], 0xf3
mov byte [rbp + 0x826a], 1
lea rcx, [rbp + 0x8200]
call fcn.140018de0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Program_FilesEpic_GamesFortniteEnginePluginsEditorCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000d812
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7ef0], xmm0
movdqa xmm1, xmmword [0x140043300]
movdqa xmmword [rbp + 0x7f00], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x7f10], xmm0
movdqa xmm1, xmmword [0x140042900]
movdqa xmmword [rbp + 0x7f20], xmm1
movdqa xmm0, xmmword [0x1400447f0]
movdqa xmmword [rbp + 0x7f30], xmm0
movdqa xmm1, xmmword [0x140044c60]
movdqa xmmword [rbp + 0x7f40], xmm1
mov dword [rbp + 0x7f50], 0xe1e5e2e6
mov dword [rbp + 0x7f54], 0xf2f2f8b7
mov word [rbp + 0x7f58], pe_nt_image_headers64
lea rcx, [rbp + 0x7ef0]
call fcn.14000a080
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x10a8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x10c8]
call fcn.1400250c0
nop
lea r8, str.DocumentsUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x10e8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x10e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x10c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x10a8]
call fcn.1400223c0
test ebx, ebx
je 0x14000d922
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7780], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x7790], xmm1
movdqa xmm0, xmmword [0x140042330]
movdqa xmmword [rbp + 0x77a0], xmm0
movdqa xmm1, xmmword [0x140042e00]
movdqa xmmword [rbp + 0x77b0], xmm1
movdqa xmm0, xmmword [0x140044250]
movdqa xmmword [rbp + 0x77c0], xmm0
movdqa xmm1, xmmword [0x140042140]
movdqa xmmword [rbp + 0x77d0], xmm1
mov byte [rbp + 0x77e0], 1
lea rcx, [rbp + 0x7780]
call fcn.140018e10
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1108]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1128]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x1148]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1148]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1128]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1108]
call fcn.1400223c0
test ebx, ebx
je 0x14000da3c
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7b00], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x7b10], xmm1
movdqa xmm0, xmmword [0x140043010]
movdqa xmmword [rbp + 0x7b20], xmm0
movdqa xmm1, xmmword [0x140042750]
movdqa xmmword [rbp + 0x7b30], xmm1
movdqa xmm0, xmmword [0x140043f80]
movdqa xmmword [rbp + 0x7b40], xmm0
movdqa xmm1, xmmword [0x140043da0]
movdqa xmmword [rbp + 0x7b50], xmm1
mov dword [rbp + 0x7b60], 0xfef8fc
mov byte [rbp + 0x7b64], 1
lea rcx, [rbp + 0x7b00]
call fcn.14000a0b0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1168]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1188]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedCloud_bb360279f89647c982d9bc6ab596c2eeClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0x11a8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x11a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1188]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1168]
call fcn.1400223c0
test ebx, ebx
je 0x14000db53
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7000], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqa xmmword [rbp + 0x7010], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x7020], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x7030], xmm1
movdqa xmm0, xmmword [0x1400444d0]
movdqa xmmword [rbp + 0x7040], xmm0
mov dword [rbp + 0x7050], 0xe6eef2f1
mov dword [rbp + 0x7054], 0xdfa5f9ee
mov dword [rbp + 0x7058], 0x100f8ec
lea rcx, [rbp + 0x7000]
call fcn.140009fc0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64XSettings.Sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000dbff
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7940], xmm0
movdqa xmm1, xmmword [0x140043300]
movdqa xmmword [rbp + 0x7950], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x7960], xmm0
movdqa xmm1, xmmword [0x1400430a0]
movdqa xmmword [rbp + 0x7970], xmm1
movdqa xmm0, xmmword [0x140044720]
movdqa xmmword [rbp + 0x7980], xmm0
movdqa xmm1, xmmword [0x1400445a0]
movdqa xmmword [rbp + 0x7990], xmm1
mov word [rbp + 0x79a0], pe_nt_image_headers64
lea rcx, [rbp + 0x7940]
call fcn.140009f90
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:UsersPublicShared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000dcad
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x5280], xmm0
movdqa xmm1, xmmword [0x140042d80]
movdqu xmmword [rbp + 0x5290], xmm1
movdqa xmm0, xmmword [str._3:kk]
movdqu xmmword [rbp + 0x52a0], xmm0
mov dword [rbp + 0x52b0], 0x60e0e06
mov dword [rbp + 0x52b4], 0x51e2d0c
mov dword [rbp + 0x52b8], 0x81b4009
mov word [rbp + 0x52bc], 5
mov byte [rbp + 0x52be], 1
lea rcx, [rbp + 0x5280]
call fcn.140009f60
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:System_Volume_Information_tracking.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000dd45
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4e40], xmm0
movdqa xmm1, xmmword [0x140042b10]
movdqu xmmword [rbp + 0x4e50], xmm1
movdqa xmm0, xmmword [0x140042670]
movdqu xmmword [rbp + 0x4e60], xmm0
mov dword [rbp + 0x4e70], 0x3040717
mov dword [rbp + 0x4e74], 0x420c0400
mov dword [rbp + 0x4e78], 0x80101
mov byte [rbp + 0x4e7c], 1
lea rcx, [rbp + 0x4e40]
call fcn.14000a230
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000dde6
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x52c0], xmm0
movdqa xmm1, xmmword [0x140042d80]
movdqu xmmword [rbp + 0x52d0], xmm1
movdqa xmm0, xmmword [str._3:kk]
movdqu xmmword [rbp + 0x52e0], xmm0
mov dword [rbp + 0x52f0], 0x60e0e06
mov dword [rbp + 0x52f4], 0x51e2d0c
mov dword [rbp + 0x52f8], 0x81b4009
mov word [rbp + 0x52fc], 5
mov byte [rbp + 0x52fe], 1
lea rcx, [rbp + 0x52c0]
call fcn.140009f60
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:System_Volume_InformationWPSettings.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000de87
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x5300], xmm0
movdqa xmm1, xmmword [0x140042b10]
movdqu xmmword [rbp + 0x5310], xmm1
movdqa xmm0, xmmword [0x1400430c0]
movdqu xmmword [rbp + 0x5320], xmm0
mov dword [rbp + 0x5330], 0x1c023535
mov dword [rbp + 0x5334], 0xb05031d
mov dword [rbp + 0x5338], 0x110b401e
mov word [rbp + 0x533c], 5
mov byte [rbp + 0x533e], 1
lea rcx, [rbp + 0x5300]
call fcn.140009f60
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x11c8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x11e8]
call fcn.1400250c0
nop
lea r8, str.NTUSER.DAT
mov rdx, rax
lea rcx, [rbp + 0x1208]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1208]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x11e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x11c8]
call fcn.1400223c0
test ebx, ebx
je 0x14000df71
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x41e8], xmm0
movdqa xmm1, xmmword [0x140042c40]
movdqu xmmword [rbp + 0x41f8], xmm1
mov dword [rbp + 0x4208], 0xd031809
mov dword [rbp + 0x420c], 0x72091f0a
mov dword [rbp + 0x4210], 0xb1f19
mov byte [rbp + 0x4214], 1
lea rcx, [rbp + 0x41e8]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:ProgramData_ntuser.pol
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000dff5
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4218], xmm0
movdqa xmm1, xmmword [0x140043130]
movdqu xmmword [rbp + 0x4228], xmm1
mov dword [rbp + 0x4238], 0x2d233809
mov dword [rbp + 0x423c], 0x72293f2a
mov dword [rbp + 0x4240], 0x33312d
mov byte [rbp + 0x4244], 1
lea rcx, [rbp + 0x4218]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:PerfLogscollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000e07b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x45d8], xmm0
movdqa xmm1, xmmword [0x140043420]
movdqu xmmword [rbp + 0x45e8], xmm1
mov dword [rbp + 0x45f8], 0x3b323a39
mov dword [rbp + 0x45fc], 0x3234332d
mov dword [rbp + 0x4600], 0x143e3a73
mov word [rbp + 0x4604], pe_nt_image_headers64
lea rcx, [rbp + 0x45d8]
call fcn.140004950
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Drivers_storage.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000e0f8
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x42a8], xmm0
movdqa xmm1, xmmword [0x1400433e0]
movdqu xmmword [rbp + 0x42b8], xmm1
mov dword [rbp + 0x42c8], 0x3d303727
mov dword [rbp + 0x42cc], 0x3f3a3977
mov dword [rbp + 0x42d0], 0x1003b35
lea rcx, [rbp + 0x42a8]
call fcn.140018e40
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Intel_setup.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000e16b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x3e70], xmm0
movdqa xmm1, xmmword [0x140042b90]
movdqu xmmword [rbp + 0x3e80], xmm1
mov dword [rbp + 0x3e90], 0x3b36357b
mov dword [rbp + 0x3e94], 0x1003f31
lea rcx, [rbp + 0x3e70]
call fcn.140005700
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:MSOCacheSetup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000e1e5
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x3ee8], xmm0
movdqa xmm1, xmmword [0x140042f90]
movdqu xmmword [rbp + 0x3ef8], xmm1
mov dword [rbp + 0x3f08], 0x76272321
mov dword [rbp + 0x3f0c], 0x2f3b3d
mov byte [rbp + 0x3f10], 1
lea rcx, [rbp + 0x3ee8]
call fcn.140018e70
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Program_FilesEpic_GamesFortniteEngineBuildSourceDistribution.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000e267
lea rcx, [rbp + 0x1228]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1248]
call fcn.1400250c0
nop
lea r8, [0x1400368e8]
mov rdx, rax
lea rcx, [rbp + 0x1268]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1268]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1248]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1228]
call fcn.1400223c0
lea rcx, str.D:Program_FilesEpic_GamesFortniteEngineBuildPerforceBuild.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000e2fe
lea rcx, str.D:Program_FilesEpic_GamesFortniteEngineBuildNotForLicenseesEpicInternal.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000e2fe
lea rcx, [rbp + 0x1288]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x12a8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistorydesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x12c8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x12c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x12a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1288]
call fcn.1400223c0
lea rcx, [rbp + 0x12e8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1308]
call fcn.1400250c0
nop
lea r8, str._ntuser.ini:NTV
mov rdx, rax
lea rcx, [rbp + 0x1328]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1328]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1308]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x12e8]
call fcn.1400223c0
test ebx, ebx
je 0x14000e3da
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x46a0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqu xmmword [rbp + 0x46b0], xmm1
movdqa xmm0, xmmword [str._t8___r406Z_65]
movdqu xmmword [rbp + 0x46c0], xmm0
mov byte [rbp + 0x46d0], 1
lea rcx, [rbp + 0x46a0]
call fcn.140018ab0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1348]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1368]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
mov rdx, rax
lea rcx, [rbp + 0x1388]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1388]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1368]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1348]
call fcn.1400223c0
lea rcx, str.D:WindowsSystem32catroot2dberr.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x13a8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x13c8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
mov rdx, rax
lea rcx, [rbp + 0x13e8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x13e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x13c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x13a8]
call fcn.1400223c0
lea rcx, [rbp + 0x1408]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1428]
call fcn.1400250c0
nop
lea r8, [0x140036bd0]
mov rdx, rax
lea rcx, [rbp + 0x1448]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1448]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1428]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1408]
call fcn.1400223c0
test ebx, ebx
je 0x14000e5e0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x63b0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x63c0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x63d0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x63e0], xmm1
mov dword [rbp + 0x63f0], 0xa042329
mov dword [rbp + 0x63f4], 0xf1a163a
mov dword [rbp + 0x63f8], 0xe11b500e
mov word [rbp + 0x63fc], 0xf5
mov byte [rbp + 0x63fe], 1
lea rcx, [rbp + 0x63b0]
call fcn.140018ae0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1468]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1488]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat
mov rdx, rax
lea rcx, [rbp + 0x14a8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x14a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1488]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1468]
call fcn.1400223c0
test ebx, ebx
je 0x14000e6f7
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5700], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x5710], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x5720], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x5730], xmm1
mov dword [rbp + 0x5740], 0xa042329
mov dword [rbp + 0x5744], 0xf1a163a
mov dword [rbp + 0x5748], 0xe11b500e
mov word [rbp + 0x574c], 0xf5
mov byte [rbp + 0x574e], 1
lea rcx, [rbp + 0x5700]
call fcn.140018ae0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x14c8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x14e8]
call fcn.1400250c0
nop
lea r8, [0x140036c90]
mov rdx, rax
lea rcx, [rbp + 0x1508]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1508]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x14e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x14c8]
call fcn.1400223c0
test ebx, ebx
je 0x14000e80e
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5750], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x5760], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x5770], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x5780], xmm1
mov dword [rbp + 0x5790], 0xa040329
mov dword [rbp + 0x5794], 0xf1a161a
mov dword [rbp + 0x5798], 0xe11b500e
mov word [rbp + 0x579c], 0xf5
mov byte [rbp + 0x579e], 1
lea rcx, [rbp + 0x5750]
call fcn.140018ae0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1528]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1548]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsusrclass.dat
mov rdx, rax
lea rcx, [rbp + 0x1568]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1568]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1548]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1528]
call fcn.1400223c0
test ebx, ebx
je 0x14000e925
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x57a0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x57b0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x57c0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x57d0], xmm1
mov dword [rbp + 0x57e0], 0xa040329
mov dword [rbp + 0x57e4], 0xf1a161a
mov dword [rbp + 0x57e8], 0xe11b500e
mov word [rbp + 0x57ec], 0xf5
mov byte [rbp + 0x57ee], 1
lea rcx, [rbp + 0x57a0]
call fcn.140018ae0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1588]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x15a8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftVaultUserProfileRoamingLatest.dat
mov rdx, rax
lea rcx, [rbp + 0x15c8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x15c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x15a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1588]
call fcn.1400223c0
test ebx, ebx
je 0x14000ea45
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7300], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x7310], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x7320], xmm0
movdqa xmm1, xmmword [0x140042ac0]
movdqa xmmword [rbp + 0x7330], xmm1
movdqa xmm0, xmmword [0x140044740]
movdqa xmmword [rbp + 0x7340], xmm0
mov dword [rbp + 0x7350], 0xe9cbdae2
mov dword [rbp + 0x7354], 0xf8f8effd
mov dword [rbp + 0x7358], 0xe4eeeaa3
mov word [rbp + 0x735c], pe_nt_image_headers64
lea rcx, [rbp + 0x7300]
call fcn.140018b10
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x15e8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1608]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log1
mov rdx, rax
lea rcx, [rbp + 0x1628]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1628]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1608]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x15e8]
call fcn.1400223c0
test ebx, ebx
je 0x14000eb48
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6ee0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6ef0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6f00], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6f10], xmm1
movdqa xmm0, xmmword [0x1400447b0]
movdqa xmmword [rbp + 0x6f20], xmm0
mov dword [rbp + 0x6f30], 0x100b7e2
lea rcx, [rbp + 0x6ee0]
call fcn.14000a1d0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1648]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1668]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOG2
mov rdx, rax
lea rcx, [rbp + 0x1688]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1688]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1668]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1648]
call fcn.1400223c0
test ebx, ebx
je 0x14000ec5f
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x57f0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x5800], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x5810], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x5820], xmm1
mov dword [rbp + 0x5830], 0xa042329
mov dword [rbp + 0x5834], 0xf1a163a
mov dword [rbp + 0x5838], 0xe11b500e
mov word [rbp + 0x583c], 0xf5
mov byte [rbp + 0x583e], 1
lea rcx, [rbp + 0x57f0]
call fcn.140018ae0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x16a8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x16c8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log2.LOG2
mov rdx, rax
lea rcx, [rbp + 0x16e8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x16e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x16c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x16a8]
call fcn.1400223c0
test ebx, ebx
je 0x14000ed62
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6f40], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6f50], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6f60], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6f70], xmm1
movdqa xmm0, xmmword [0x1400447b0]
movdqa xmmword [rbp + 0x6f80], xmm0
mov dword [rbp + 0x6f90], 0x100b4e2
lea rcx, [rbp + 0x6f40]
call fcn.14000a1d0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1708]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1728]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log2
mov rdx, rax
lea rcx, [rbp + 0x1748]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1748]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1728]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1708]
call fcn.1400223c0
test ebx, ebx
je 0x14000ee65
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6fa0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6fb0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6fc0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6fd0], xmm1
movdqa xmm0, xmmword [0x1400447b0]
movdqa xmmword [rbp + 0x6fe0], xmm0
mov dword [rbp + 0x6ff0], 0x100b4e2
lea rcx, [rbp + 0x6fa0]
call fcn.14000a1d0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1768]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1788]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedLMSManifest.sav
mov rdx, rax
lea rcx, [rbp + 0x17a8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x17a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1788]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1768]
call fcn.1400223c0
test ebx, ebx
je 0x14000ef68
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x66a0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x66b0], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x66c0], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x66d0], xmm1
movdqa xmm0, xmmword [0x140044ad0]
movdqa xmmword [rbp + 0x66e0], xmm0
mov dword [rbp + 0x66f0], 0x100f0e4
lea rcx, [rbp + 0x66a0]
call fcn.14000a1d0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:UsersPublicLibrariescollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000eff5
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4d40], xmm0
movdqa xmm1, xmmword [0x1400434c0]
movdqu xmmword [rbp + 0x4d50], xmm1
movdqa xmm0, xmmword [0x140042490]
movdqu xmmword [rbp + 0x4d60], xmm0
mov dword [rbp + 0x4d70], 0x1130500
mov dword [rbp + 0x4d74], 0x8450406
mov dword [rbp + 0x4d78], 0x1001a0c
lea rcx, [rbp + 0x4d40]
call fcn.14000a110
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:_Secure:_SDH:_INDEX_ALLOCATION
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000f06e
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4a20], xmm0
movdqa xmm1, xmmword [0x1400429e0]
movdqu xmmword [rbp + 0x4a30], xmm1
movdqa xmm0, xmmword [0x140042ed0]
movdqu xmmword [rbp + 0x4a40], xmm0
mov dword [rbp + 0x4a50], 0x100282a
lea rcx, [rbp + 0x4a20]
call fcn.14000a290
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:_Secure:_SDH:_INDEX_ALLOCATION
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000f0e7
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x49e8], xmm0
movdqa xmm1, xmmword [0x1400429e0]
movdqu xmmword [rbp + 0x49f8], xmm1
movdqa xmm0, xmmword [0x140042ed0]
movdqu xmmword [rbp + 0x4a08], xmm0
mov dword [rbp + 0x4a18], 0x100282a
lea rcx, [rbp + 0x49e8]
call fcn.14000a290
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:UsersPublicShared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000f17f
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4e80], xmm0
movdqa xmm1, xmmword [0x1400434c0]
movdqu xmmword [rbp + 0x4e90], xmm1
movdqa xmm0, xmmword [0x140043090]
movdqu xmmword [rbp + 0x4ea0], xmm0
mov dword [rbp + 0x4eb0], 0x1141400
mov dword [rbp + 0x4eb4], 0xd280406
mov dword [rbp + 0x4eb8], 0xa060e
mov byte [rbp + 0x4ebc], 1
lea rcx, [rbp + 0x4e80]
call fcn.14000a230
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:MSOCache71230000_00E2_0000_1000_00000000Setup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000f220
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x53e0], xmm0
movdqa xmm1, xmmword [0x140043700]
movdqa xmmword [rbp + 0x53f0], xmm1
movdqa xmm0, xmmword [0x140043620]
movdqa xmmword [rbp + 0x5400], xmm0
movdqa xmm1, xmmword [0x140042500]
movdqa xmmword [rbp + 0x5410], xmm1
mov dword [rbp + 0x5420], 0xc122529
mov dword [rbp + 0x5424], 0x18550a0c
mov dword [rbp + 0x5428], 0x1000a1c
lea rcx, [rbp + 0x53e0]
call fcn.140018b40
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x17c8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x17e8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalTemp04f992c.tmp
mov rdx, rax
lea rcx, [rbp + 0xb88]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xb88]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x17e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x17c8]
call fcn.1400223c0
test ebx, ebx
je 0x14000f30c
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5230], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x5240], xmm1
movdqa xmm0, xmmword [0x140042f20]
movdqa xmmword [rbp + 0x5250], xmm0
movdqa xmm1, xmmword [0x140041ff0]
movdqa xmmword [rbp + 0x5260], xmm1
mov byte [rbp + 0x5270], 1
lea rcx, [rbp + 0x5230]
call fcn.140018b70
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1828]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1848]
call fcn.1400250c0
nop
lea r8, str._ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x1868]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1868]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1848]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1828]
call fcn.1400223c0
lea rcx, [rbp + 0x1888]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x18a8]
call fcn.1400250c0
nop
lea r8, str.VideosCapturesdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x18c8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x18c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x18a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1888]
call fcn.1400223c0
test ebx, ebx
je 0x14000f47d
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4c00], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqu xmmword [rbp + 0x4c10], xmm1
movdqa xmm0, xmmword [0x140042800]
movdqu xmmword [rbp + 0x4c20], xmm0
mov dword [rbp + 0x4c30], 0x1b020239
mov dword [rbp + 0x4c34], 0x1c041e02
mov dword [rbp + 0x4c38], 0x19010743
mov word [rbp + 0x4c3c], pe_nt_image_headers64
lea rcx, [rbp + 0x4c00]
call fcn.140018ba0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x18e8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1908]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftFeeds
mov rdx, rax
lea rcx, [rbp + 0x1928]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1928]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1908]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x18e8]
call fcn.1400223c0
test ebx, ebx
je 0x14000f58b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5ff0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6000], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6010], xmm0
movdqa xmm1, xmmword [0x1400434f0]
movdqa xmmword [rbp + 0x6020], xmm1
mov dword [rbp + 0x6030], 0x1600191b
mov dword [rbp + 0x6034], 0xe0e152a
mov dword [rbp + 0x6038], 0xc1b1e
mov byte [rbp + 0x603c], 1
lea rcx, [rbp + 0x5ff0]
call fcn.140018bd0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1948]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1968]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftFeeds:KnownSources
mov rdx, rax
lea rcx, [rbp + 0x1988]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1988]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1968]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1948]
call fcn.1400223c0
lea rcx, [rbp + 0x19a8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x19c8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftFeeds
mov rdx, rax
lea rcx, [rbp + 0x19e8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x19e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x19c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x19a8]
call fcn.1400223c0
test ebx, ebx
je 0x14000f70a
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6040], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6050], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6060], xmm0
movdqa xmm1, xmmword [0x1400434f0]
movdqa xmmword [rbp + 0x6070], xmm1
mov dword [rbp + 0x6080], 0x1600191b
mov dword [rbp + 0x6084], 0xe0e152a
mov dword [rbp + 0x6088], 0xc1b1e
mov byte [rbp + 0x608c], 1
lea rcx, [rbp + 0x6040]
call fcn.140018bd0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1a08]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1a28]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftFeeds:KnownSources
mov rdx, rax
lea rcx, [rbp + 0x1a48]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1a48]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1a28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1a08]
call fcn.1400223c0
lea rcx, str.D:desktop.ini:CachedTiles
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000f801
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4608], xmm0
movdqa xmm1, xmmword [0x140043480]
movdqu xmmword [rbp + 0x4618], xmm1
mov dword [rbp + 0x4628], 0x3b36156f
mov dword [rbp + 0x462c], 0x83f3f31
mov dword [rbp + 0x4630], 0x133a3234
mov word [rbp + 0x4634], pe_nt_image_headers64
lea rcx, [rbp + 0x4608]
call fcn.140004950
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Program_FilesEpic_GamesFortniteEngineConfigNoRedistWindowsShippableWindowsGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000f8d2
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8b80], xmm0
movdqa xmm1, xmmword [0x1400432f0]
movdqa xmmword [rbp + 0x8b90], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x8ba0], xmm0
movdqa xmm1, xmmword [0x140042980]
movdqa xmmword [rbp + 0x8bb0], xmm1
movdqa xmm0, xmmword [0x140044830]
movdqa xmmword [rbp + 0x8bc0], xmm0
movdqa xmm1, xmmword [0x140043f90]
movdqa xmmword [rbp + 0x8bd0], xmm1
movdqa xmm0, xmmword [0x140043f20]
movdqa xmmword [rbp + 0x8be0], xmm0
mov dword [rbp + 0x8bf0], 0xc6ced2d1
mov dword [rbp + 0x8bf4], 0xc585d9ce
mov dword [rbp + 0x8bf8], 0x100c7c3
lea rcx, [rbp + 0x8b80]
call fcn.140018c00
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Recovery_ntuser.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000f94e
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x3fa8], xmm0
movdqa xmm1, xmmword [0x140042aa0]
movdqu xmmword [rbp + 0x3fb8], xmm1
mov dword [rbp + 0x3fc8], 0x2a322520
mov dword [rbp + 0x3fcc], 0x2f222977
mov word [rbp + 0x3fd0], pe_nt_image_headers64
lea rcx, [rbp + 0x3fa8]
call fcn.14000a0e0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:desktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1a68]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1a88]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCookiesESEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x1aa8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1aa8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1a88]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1a68]
call fcn.1400223c0
test ebx, ebx
je 0x14000fa5b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5d10], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x5d20], xmm1
movdqa xmm0, xmmword [0x140042be0]
movdqa xmmword [rbp + 0x5d30], xmm0
movdqa xmm1, xmmword [0x140042dd0]
movdqa xmmword [rbp + 0x5d40], xmm1
movdqa xmm0, xmmword [0x140042120]
movdqa xmmword [rbp + 0x5d50], xmm0
mov byte [rbp + 0x5d60], 1
lea rcx, [rbp + 0x5d10]
call fcn.140018c30
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1ac8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1ae8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings_settings.dat
mov rdx, rax
lea rcx, [rbp + 0x1b08]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1b08]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1ae8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1ac8]
call fcn.1400223c0
test ebx, ebx
je 0x14000fb72
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5840], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x5850], xmm1
movdqa xmm0, xmmword [0x1400430d0]
movdqa xmmword [rbp + 0x5860], xmm0
movdqa xmm1, xmmword [0x140042420]
movdqa xmmword [rbp + 0x5870], xmm1
mov dword [rbp + 0x5880], 0xc120529
mov dword [rbp + 0x5884], 0x1b15130d
mov dword [rbp + 0x5888], 0xe11b500e
mov word [rbp + 0x588c], 0xf5
mov byte [rbp + 0x588e], 1
lea rcx, [rbp + 0x5840]
call fcn.140018ae0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1b28]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1b48]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalUnrealEngine4.23SavedConfigWindowsClientManifest.ini
mov rdx, rax
lea rcx, [rbp + 0x1b68]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1b68]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1b48]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1b28]
call fcn.1400223c0
test ebx, ebx
je 0x14000fc98
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7f60], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x7f70], xmm1
movdqa xmm0, xmmword [0x140043010]
movdqa xmmword [rbp + 0x7f80], xmm0
movdqa xmm1, xmmword [0x140043580]
movdqa xmmword [rbp + 0x7f90], xmm1
movdqa xmm0, xmmword [0x140044820]
movdqa xmmword [rbp + 0x7fa0], xmm0
movdqa xmm1, xmmword [0x140044c70]
movdqa xmmword [rbp + 0x7fb0], xmm1
mov dword [rbp + 0x7fc0], 0xece4f3f3
mov dword [rbp + 0x7fc4], 0xf5f5f3b7
mov word [rbp + 0x7fc8], pe_nt_image_headers64
lea rcx, [rbp + 0x7f60]
call fcn.14000a080
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1b88]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1ba8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedConfigWindowsClientGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x1bc8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1bc8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1ba8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1b88]
call fcn.1400223c0
test ebx, ebx
je 0x14000fdc6
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8430], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x8440], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x8450], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x8460], xmm1
movdqa xmm0, xmmword [0x140044b40]
movdqa xmmword [rbp + 0x8470], xmm0
movdqa xmm1, xmmword [0x140044050]
movdqa xmmword [rbp + 0x8480], xmm1
mov dword [rbp + 0x8490], 0xf1e3e2f0
mov dword [rbp + 0x8494], 0xb2e8fdf7
mov dword [rbp + 0x8498], 0xf6f0f4
mov byte [rbp + 0x849c], 1
lea rcx, [rbp + 0x8430]
call fcn.140018c60
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14000fe91
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x87b0], xmm0
movdqa xmm1, xmmword [0x1400432f0]
movdqa xmmword [rbp + 0x87c0], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x87d0], xmm0
movdqa xmm1, xmmword [0x1400430a0]
movdqa xmmword [rbp + 0x87e0], xmm1
movdqa xmm0, xmmword [0x140044760]
movdqa xmmword [rbp + 0x87f0], xmm0
movdqa xmm1, xmmword [0x1400449f0]
movdqa xmmword [rbp + 0x8800], xmm1
mov dword [rbp + 0x8810], 0xd9f2fef6
mov dword [rbp + 0x8814], 0xeffef9fa
mov dword [rbp + 0x8818], 0xd3f5b0ee
mov dword [rbp + 0x881c], 0x100ccce
lea rcx, [rbp + 0x87b0]
call fcn.14000a050
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1be8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1c08]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0x1c28]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1c28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1c08]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1be8]
call fcn.1400223c0
test ebx, ebx
je 0x14000ff9d
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6b20], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6b30], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x6b40], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x6b50], xmm1
movdqa xmm0, xmmword [0x140044b00]
movdqa xmmword [rbp + 0x6b60], xmm0
mov dword [rbp + 0x6b70], 0xfee6d5ab
mov word [rbp + 0x6b74], pe_nt_image_headers64
lea rcx, [rbp + 0x6b20]
call fcn.140018c90
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:WindowsServiceStateEventLogDatalastalive1.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140010034
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5660], xmm0
movdqa xmm1, xmmword [0x140042c80]
movdqa xmmword [rbp + 0x5670], xmm1
movdqa xmm0, xmmword [0x140042e20]
movdqa xmmword [rbp + 0x5680], xmm0
movdqa xmm1, xmmword [0x140042260]
movdqa xmmword [rbp + 0x5690], xmm1
mov dword [rbp + 0x56a0], 0x1c594710
mov dword [rbp + 0x56a4], 0x1000e18
lea rcx, [rbp + 0x5660]
call fcn.140018cc0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1c48]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1c68]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftOneDrivelogsCommonDeviceHealthSummaryConfiguration.ini
mov rdx, rax
lea rcx, [rbp + 0x1c88]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1c88]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1c68]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1c48]
call fcn.1400223c0
test ebx, ebx
je 0x140010157
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8980], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x8990], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x89a0], xmm0
movdqa xmm1, xmmword [0x140042240]
movdqa xmmword [rbp + 0x89b0], xmm1
movdqa xmm0, xmmword [0x1400444c0]
movdqa xmmword [rbp + 0x89c0], xmm0
movdqa xmm1, xmmword [0x140044650]
movdqa xmmword [rbp + 0x89d0], xmm1
movdqa xmm0, xmmword [0x140044180]
movdqa xmmword [rbp + 0x89e0], xmm0
mov dword [rbp + 0x89f0], 0x100cfcb
lea rcx, [rbp + 0x8980]
call fcn.140018cf0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:ProgramDataMicrosoftWindowsAppRepositoryPackagesInputApp_1000.17763.1.0_neutral_neutral_cw5n1h2txyewyActivationStore.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140010218
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x74e0], xmm0
movdqa xmm1, xmmword [0x140043120]
movdqa xmmword [rbp + 0x74f0], xmm1
movdqa xmm0, xmmword [0x140042540]
movdqa xmmword [rbp + 0x7500], xmm0
movdqa xmm1, xmmword [0x1400425b0]
movdqa xmmword [rbp + 0x7510], xmm1
movdqa xmm0, xmmword [0x140044630]
movdqa xmmword [rbp + 0x7520], xmm0
mov dword [rbp + 0x7530], 0xe6e8eff1
mov dword [rbp + 0x7534], 0xfee4feda
mov dword [rbp + 0x7538], 0xf1eba0e8
mov word [rbp + 0x753c], 0xe5
mov byte [rbp + 0x753e], 1
lea rcx, [rbp + 0x74e0]
call fcn.14000a1a0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1ca8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1cc8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedLogsFortniteGame.log
mov rdx, rax
lea rcx, [rbp + 0x1ce8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1ce8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1cc8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1ca8]
call fcn.1400223c0
test ebx, ebx
je 0x14001032c
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6580], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6590], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x65a0], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x65b0], xmm1
movdqa xmm0, xmmword [0x140043f70]
movdqa xmmword [rbp + 0x65c0], xmm0
mov dword [rbp + 0x65d0], 0xa6e2ebe4
mov dword [rbp + 0x65d4], 0xece5e5
mov byte [rbp + 0x65d8], 1
lea rcx, [rbp + 0x6580]
call fcn.140018d20
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1d08]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1d28]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheContent.IE5
mov rdx, rax
lea rcx, [rbp + 0x1d48]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1d48]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1d28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1d08]
call fcn.1400223c0
test ebx, ebx
je 0x140010439
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6880], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6890], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x68a0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x68b0], xmm1
movdqa xmm0, xmmword [0x140044550]
movdqa xmmword [rbp + 0x68c0], xmm0
mov dword [rbp + 0x68d0], 0xc1a9f2eb
mov dword [rbp + 0x68d4], 0x100bfcc
lea rcx, [rbp + 0x6880]
call fcn.14000a170
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1d68]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1d88]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistoryHistory.IE5
mov rdx, rax
lea rcx, [rbp + 0x1da8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1da8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1d88]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1d68]
call fcn.1400223c0
test ebx, ebx
je 0x140010545
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x6b80], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x6b90], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x6ba0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x6bb0], xmm1
movdqa xmm0, xmmword [0x140044c50]
movdqa xmmword [rbp + 0x6bc0], xmm0
mov dword [rbp + 0x6bd0], 0xbdc2cfab
mov word [rbp + 0x6bd4], pe_nt_image_headers64
lea rcx, [rbp + 0x6b80]
call fcn.140018c90
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:ProgramDataMicrosoftWindowsDeviceMetadataCachedmrc.idx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400105df
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5d70], xmm0
movdqa xmm1, xmmword [0x140043120]
movdqa xmmword [rbp + 0x5d80], xmm1
movdqa xmm0, xmmword [0x140042540]
movdqa xmmword [rbp + 0x5d90], xmm0
movdqa xmm1, xmmword [0x140042040]
movdqa xmmword [rbp + 0x5da0], xmm1
movdqa xmm0, xmmword [0x140042150]
movdqa xmmword [rbp + 0x5db0], xmm0
mov byte [rbp + 0x5dc0], 1
lea rcx, [rbp + 0x5d70]
call fcn.140018c30
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1dc8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1de8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSyncmetastoreedb.log
mov rdx, rax
lea rcx, [rbp + 0x1e08]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1e08]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1de8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1dc8]
call fcn.1400223c0
test ebx, ebx
je 0x140010700
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7660], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x7670], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x7680], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x7690], xmm1
movdqa xmm0, xmmword [0x1400448a0]
movdqa xmmword [rbp + 0x76a0], xmm0
mov dword [rbp + 0x76b0], 0xe7f3f5e4
mov dword [rbp + 0x76b4], 0xe9d7effb
mov dword [rbp + 0x76b8], 0xfca1ece9
mov dword [rbp + 0x76bc], 0x100f5fe
lea rcx, [rbp + 0x7660]
call fcn.140018d50
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1e28]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1e48]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSync_remotemetastore_v1edb.log
mov rdx, rax
lea rcx, [rbp + 0x1e68]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1e68]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1e48]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1e28]
call fcn.1400223c0
test ebx, ebx
je 0x140010824
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7d30], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x7d40], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x7d50], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x7d60], xmm1
movdqa xmm0, xmmword [0x1400446d0]
movdqa xmmword [rbp + 0x7d70], xmm0
movdqa xmm1, xmmword [0x140044080]
movdqa xmmword [rbp + 0x7d80], xmm1
mov dword [rbp + 0x7d90], 0xb6f5f2f0
mov dword [rbp + 0x7d94], 0xfcf5f5
mov byte [rbp + 0x7d98], 1
lea rcx, [rbp + 0x7d30]
call fcn.14000a020
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:WindowsSoftwareDistributionPostRebootEventCache.V2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400108cb
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x5520], xmm0
movdqa xmm1, xmmword [0x140043060]
movdqa xmmword [rbp + 0x5530], xmm1
movdqa xmm0, xmmword [0x140042560]
movdqa xmmword [rbp + 0x5540], xmm0
movdqa xmm1, xmmword [str._v:7_a]
movdqa xmmword [rbp + 0x5550], xmm1
mov dword [rbp + 0x5560], 0x1b163501
mov dword [rbp + 0x5564], 0x2a551f11
mov word [rbp + 0x5568], 0x4f
mov byte [rbp + 0x556a], 1
lea rcx, [rbp + 0x5520]
call fcn.140018d80
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1e88]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1ea8]
call fcn.1400250c0
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0x1ec8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1ec8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1ea8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1e88]
call fcn.1400223c0
test ebx, ebx
je 0x1400109b5
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4248], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqu xmmword [rbp + 0x4258], xmm1
mov dword [rbp + 0x4268], 0x2d233809
mov dword [rbp + 0x426c], 0x72293f2a
mov dword [rbp + 0x4270], 0x363034
mov byte [rbp + 0x4274], 1
lea rcx, [rbp + 0x4248]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1ee8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1f08]
call fcn.1400250c0
nop
lea r8, str._ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x1f28]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1f28]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1f08]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1ee8]
call fcn.1400223c0
test ebx, ebx
je 0x140010a9f
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4278], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqu xmmword [rbp + 0x4288], xmm1
mov dword [rbp + 0x4298], 0x2d233809
mov dword [rbp + 0x429c], 0x72293f2a
mov dword [rbp + 0x42a0], 0x33312d
mov byte [rbp + 0x42a4], 1
lea rcx, [rbp + 0x4278]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1f48]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1f68]
call fcn.1400250c0
nop
lea r8, str.ntuser.dat.LOG1
mov rdx, rax
lea rcx, [rbp + 0x1f88]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1f88]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1f68]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1f48]
call fcn.1400223c0
test ebx, ebx
je 0x140010b7d
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4860], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqu xmmword [rbp + 0x4870], xmm1
movdqa xmm0, xmmword [0x140043630]
movdqu xmmword [rbp + 0x4880], xmm0
mov word [rbp + 0x4890], pe_nt_image_headers64
lea rcx, [rbp + 0x4860]
call fcn.14000a260
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x1fa8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1fc8]
call fcn.1400250c0
nop
lea r8, str.ntuser.dat.LOG2
mov rdx, rax
lea rcx, [rbp + 0x1fe8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1fe8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1fc8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x1fa8]
call fcn.1400223c0
test ebx, ebx
je 0x140010c5b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4828], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqu xmmword [rbp + 0x4838], xmm1
movdqa xmm0, xmmword [0x140043660]
movdqu xmmword [rbp + 0x4848], xmm0
mov word [rbp + 0x4858], pe_nt_image_headers64
lea rcx, [rbp + 0x4828]
call fcn.14000a260
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x2008]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2028]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheIEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x2048]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2048]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2028]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2008]
call fcn.1400223c0
test ebx, ebx
je 0x140010d79
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x76c0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x76d0], xmm1
movdqa xmm0, xmmword [0x140042e70]
movdqa xmmword [rbp + 0x76e0], xmm0
movdqa xmm1, xmmword [0x140042400]
movdqa xmmword [rbp + 0x76f0], xmm1
movdqa xmm0, xmmword [0x140044770]
movdqa xmmword [rbp + 0x7700], xmm0
mov dword [rbp + 0x7710], 0xe1e6f2eb
mov dword [rbp + 0x7714], 0xa2f9efe7
mov dword [rbp + 0x7718], 0xfbefe9
mov byte [rbp + 0x771c], 1
lea rcx, [rbp + 0x76c0]
call fcn.14000a200
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140010e43
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x85f0], xmm0
movdqa xmm1, xmmword [0x1400432f0]
movdqa xmmword [rbp + 0x8600], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x8610], xmm0
movdqa xmm1, xmmword [0x1400430a0]
movdqa xmmword [rbp + 0x8620], xmm1
movdqa xmm0, xmmword [0x140044720]
movdqa xmmword [rbp + 0x8630], xmm0
movdqa xmm1, xmmword [0x140043bf0]
movdqa xmmword [rbp + 0x8640], xmm1
mov dword [rbp + 0x8650], 0xebe5f3c3
mov dword [rbp + 0x8654], 0xdff5f5f0
mov dword [rbp + 0x8658], 0xc5f7fdfc
mov word [rbp + 0x865c], pe_nt_image_headers64
lea rcx, [rbp + 0x85f0]
call fcn.140009ff0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:UsersPublicDocuments
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140010ed4
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x42d8], xmm0
movdqa xmm1, xmmword [0x1400434c0]
movdqu xmmword [rbp + 0x42e8], xmm1
mov dword [rbp + 0x42f8], 0x37130a36
mov dword [rbp + 0x42fc], 0x39362f3a
mov dword [rbp + 0x4300], 0x2c2a33
mov byte [rbp + 0x4304], 1
lea rcx, [rbp + 0x42d8]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Program_FilesEpic_GamesFortniteEnginePluginsEditorCryptoKeysAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140010f9b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x8270], xmm0
movdqa xmm1, xmmword [0x1400432f0]
movdqa xmmword [rbp + 0x8280], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x8290], xmm0
movdqa xmm1, xmmword [0x140042900]
movdqa xmmword [rbp + 0x82a0], xmm1
movdqa xmm0, xmmword [0x140044c40]
movdqa xmmword [rbp + 0x82b0], xmm0
movdqa xmm1, xmmword [0x1400449b0]
movdqa xmmword [rbp + 0x82c0], xmm1
mov dword [rbp + 0x82d0], 0xeae3e5fc
mov dword [rbp + 0x82d4], 0xf5f9b4e0
mov word [rbp + 0x82d8], 0xf3
mov byte [rbp + 0x82da], 1
lea rcx, [rbp + 0x8270]
call fcn.140018de0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Program_FilesEpic_GamesFortniteEnginePluginsEditorCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14001105b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7fd0], xmm0
movdqa xmm1, xmmword [0x1400432f0]
movdqa xmmword [rbp + 0x7fe0], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x7ff0], xmm0
movdqa xmm1, xmmword [0x140042900]
movdqa xmmword [rbp + 0x8000], xmm1
movdqa xmm0, xmmword [0x1400447f0]
movdqa xmmword [rbp + 0x8010], xmm0
movdqa xmm1, xmmword [0x140044c60]
movdqa xmmword [rbp + 0x8020], xmm1
mov dword [rbp + 0x8030], 0xe1e5e2e6
mov dword [rbp + 0x8034], 0xf2f2f8b7
mov word [rbp + 0x8038], pe_nt_image_headers64
lea rcx, [rbp + 0x7fd0]
call fcn.14000a080
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x2068]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2088]
call fcn.1400250c0
nop
lea r8, str.DocumentsUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x20a8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x20a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2088]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2068]
call fcn.1400223c0
test ebx, ebx
je 0x14001116b
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x77f0], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x7800], xmm1
movdqa xmm0, xmmword [0x140042330]
movdqa xmmword [rbp + 0x7810], xmm0
movdqa xmm1, xmmword [0x140042e00]
movdqa xmmword [rbp + 0x7820], xmm1
movdqa xmm0, xmmword [0x140044250]
movdqa xmmword [rbp + 0x7830], xmm0
movdqa xmm1, xmmword [0x140042140]
movdqa xmmword [rbp + 0x7840], xmm1
mov byte [rbp + 0x7850], 1
lea rcx, [rbp + 0x77f0]
call fcn.140018e10
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x20c8]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x20e8]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x2108]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2108]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x20e8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x20c8]
call fcn.1400223c0
test ebx, ebx
je 0x140011285
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7b70], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x7b80], xmm1
movdqa xmm0, xmmword [0x140043010]
movdqa xmmword [rbp + 0x7b90], xmm0
movdqa xmm1, xmmword [0x140042750]
movdqa xmmword [rbp + 0x7ba0], xmm1
movdqa xmm0, xmmword [0x140043f80]
movdqa xmmword [rbp + 0x7bb0], xmm0
movdqa xmm1, xmmword [0x140043da0]
movdqa xmmword [rbp + 0x7bc0], xmm1
mov dword [rbp + 0x7bd0], 0xfef8fc
mov byte [rbp + 0x7bd4], 1
lea rcx, [rbp + 0x7b70]
call fcn.14000a0b0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x2128]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2148]
call fcn.1400250c0
nop
lea r8, str.AppDataLocalFortniteGameSavedCloud_bb360279f89647c982d9bc6ab596c2eeClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0x2168]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2168]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2148]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2128]
call fcn.1400223c0
test ebx, ebx
je 0x14001139c
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x7060], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqa xmmword [rbp + 0x7070], xmm1
movdqa xmm0, xmmword [0x140042b40]
movdqa xmmword [rbp + 0x7080], xmm0
movdqa xmm1, xmmword [0x1400426b0]
movdqa xmmword [rbp + 0x7090], xmm1
movdqa xmm0, xmmword [0x1400444d0]
movdqa xmmword [rbp + 0x70a0], xmm0
mov dword [rbp + 0x70b0], 0xe6eef2f1
mov dword [rbp + 0x70b4], 0xdfa5f9ee
mov dword [rbp + 0x70b8], 0x100f8ec
lea rcx, [rbp + 0x7060]
call fcn.140009fc0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64XSettings.Sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140011448
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqa xmmword [rbp + 0x79b0], xmm0
movdqa xmm1, xmmword [0x1400432f0]
movdqa xmmword [rbp + 0x79c0], xmm1
movdqa xmm0, xmmword [0x140042590]
movdqa xmmword [rbp + 0x79d0], xmm0
movdqa xmm1, xmmword [0x1400430a0]
movdqa xmmword [rbp + 0x79e0], xmm1
movdqa xmm0, xmmword [0x140044720]
movdqa xmmword [rbp + 0x79f0], xmm0
movdqa xmm1, xmmword [0x1400445a0]
movdqa xmmword [rbp + 0x7a00], xmm1
mov word [rbp + 0x7a10], pe_nt_image_headers64
lea rcx, [rbp + 0x79b0]
call fcn.140009f90
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:UsersPublicShared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400114f6
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4f00], xmm0
movdqa xmm1, xmmword [0x140042d70]
movdqu xmmword [rbp + 0x4f10], xmm1
movdqa xmm0, xmmword [str._3:kk]
movdqu xmmword [rbp + 0x4f20], xmm0
mov dword [rbp + 0x4f30], 0x60e0e06
mov dword [rbp + 0x4f34], 0x51e2d0c
mov dword [rbp + 0x4f38], 0x81b4009
mov word [rbp + 0x4f3c], 5
mov byte [rbp + 0x4f3e], 1
lea rcx, [rbp + 0x4f00]
call fcn.140009f60
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:System_Volume_Information_tracking.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14001158e
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4ec0], xmm0
movdqa xmm1, xmmword [0x140042b00]
movdqu xmmword [rbp + 0x4ed0], xmm1
movdqa xmm0, xmmword [0x140042670]
movdqu xmmword [rbp + 0x4ee0], xmm0
mov dword [rbp + 0x4ef0], 0x3040717
mov dword [rbp + 0x4ef4], 0x420c0400
mov dword [rbp + 0x4ef8], 0x80101
mov byte [rbp + 0x4efc], 1
lea rcx, [rbp + 0x4ec0]
call fcn.14000a230
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14001162f
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4f40], xmm0
movdqa xmm1, xmmword [0x140042d70]
movdqu xmmword [rbp + 0x4f50], xmm1
movdqa xmm0, xmmword [str._3:kk]
movdqu xmmword [rbp + 0x4f60], xmm0
mov dword [rbp + 0x4f70], 0x60e0e06
mov dword [rbp + 0x4f74], 0x51e2d0c
mov dword [rbp + 0x4f78], 0x81b4009
mov word [rbp + 0x4f7c], 5
mov byte [rbp + 0x4f7e], 1
lea rcx, [rbp + 0x4f40]
call fcn.140009f60
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:System_Volume_InformationWPSettings.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400116d0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4f80], xmm0
movdqa xmm1, xmmword [0x140042b00]
movdqu xmmword [rbp + 0x4f90], xmm1
movdqa xmm0, xmmword [0x1400430c0]
movdqu xmmword [rbp + 0x4fa0], xmm0
mov dword [rbp + 0x4fb0], 0x1c023535
mov dword [rbp + 0x4fb4], 0xb05031d
mov dword [rbp + 0x4fb8], 0x110b401e
mov word [rbp + 0x4fbc], 5
mov byte [rbp + 0x4fbe], 1
lea rcx, [rbp + 0x4f80]
call fcn.140009f60
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x2188]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x21a8]
call fcn.1400250c0
nop
lea r8, str.NTUSER.DAT
mov rdx, rax
lea rcx, [rbp + 0x21c8]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x21c8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x21a8]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x2188]
call fcn.1400223c0
test ebx, ebx
je 0x1400117ba
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4308], xmm0
movdqa xmm1, xmmword [0x140042c30]
movdqu xmmword [rbp + 0x4318], xmm1
mov dword [rbp + 0x4328], 0xd031809
mov dword [rbp + 0x432c], 0x72091f0a
mov dword [rbp + 0x4330], 0xb1f19
mov byte [rbp + 0x4334], 1
lea rcx, [rbp + 0x4308]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:ProgramData_ntuser.pol
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x14001183e
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4338], xmm0
movdqa xmm1, xmmword [0x140043120]
movdqu xmmword [rbp + 0x4348], xmm1
mov dword [rbp + 0x4358], 0x2d233809
mov dword [rbp + 0x435c], 0x72293f2a
mov dword [rbp + 0x4360], 0x33312d
mov byte [rbp + 0x4364], 1
lea rcx, [rbp + 0x4338]
call fcn.140018db0
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:PerfLogscollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400118c4
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x4638], xmm0
movdqa xmm1, xmmword [0x140043410]
movdqu xmmword [rbp + 0x4648], xmm1
mov dword [rbp + 0x4658], 0x3b323a39
mov dword [rbp + 0x465c], 0x3234332d
mov dword [rbp + 0x4660], 0x143e3a73
mov word [rbp + 0x4664], pe_nt_image_headers64
lea rcx, [rbp + 0x4638]
call fcn.140004950
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Drivers_storage.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140011941
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x40c8], xmm0
movdqa xmm1, xmmword [0x1400433d0]
movdqu xmmword [rbp + 0x40d8], xmm1
mov dword [rbp + 0x40e8], 0x3d303727
mov dword [rbp + 0x40ec], 0x3f3a3977
mov dword [rbp + 0x40f0], 0x1003b35
lea rcx, [rbp + 0x40c8]
call fcn.140018e40
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:Intel_setup.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400119b4
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x3e48], xmm0
movdqa xmm1, xmmword [0x140042b80]
movdqu xmmword [rbp + 0x3e58], xmm1
mov dword [rbp + 0x3e68], 0x3b36357b
mov dword [rbp + 0x3e6c], 0x1003f31
lea rcx, [rbp + 0x3e48]
call fcn.140005700
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.D:MSOCacheSetup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140011a2e
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm0, xmmword [0x1400437c0]
movdqu xmmword [rbp + 0x3f18], xmm0
movdqa xmm1, xmmword [0x140042f80]
movdqu xmmword [rbp + 0x3f28], xmm1
mov dword [rbp + 0x3f38], 0x76272321
mov dword [rbp + 0x3f3c], 0x2f3b3d
mov byte [rbp + 0x3f40], 1
lea rcx, [rbp + 0x3f18]
call fcn.140018e70
mov rdx, rax
mov rcx, rbx
call fcn.140024c10
lea rdx, [0x140025080]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.E:Program_FilesEpic_GamesFortniteEngineBuildSourceDistribution.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140011ab0