Function at 0x14001c710
Capabilities:
Delete file
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x360]
sub rsp, 0x460
mov rax, qword [0x14004b010]
xor rax, rsp
mov qword [rbp + 0x350], rax
lea rcx, str._systemdrive_Program_Files__x86_Epic_GamesLauncherEngineProgramsCrashReportClientConfigDefaultEngine.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_Epic_GamesLauncherVaultCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_EpicGamesLauncherPortalBinariesWin32
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_EpicGamesLauncherPortalBinariesWin32_
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigBase.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigBaseGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigBaseInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsBaseWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsWindowsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherPortalConfigUserLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigBaseHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherPortalConfigNotForLicenseesWindowsWindowsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherPortalConfigUserScalability.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortnite1FortniteGamePersistentDownloadDirCMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortnite1FortniteGamePersistentDownloadDirEMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEngineConfigNoRedistWindowsShippableWindowsGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEnginePlugins
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEnginePluginsCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEnginePluginsEditorCryptoKeysAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEnginePluginsEditorCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64FortniteClient_Win64_Shipping.exe.local
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64SharedFiles:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64XSettings.Sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameConfig
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
xor r15d, r15d
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rax + r8*2], r15w
jne 0x14001c8e0
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x14001c95a
lea r14, [rcx + 0xa]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001c93d
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x14
lea rdx, str.ntuser.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001c97a
mov qword [rsp + 0x20], 0xa
lea r9, str.ntuser.ini
mov edx, 0xa
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001c9f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c9f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c9f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001ca4f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ca4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ca4a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001caa6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001caa1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001caa1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14001cae2
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1c
jb 0x14001cb5d
lea r14, [rcx + 0x1c]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001cb40
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x38
lea rdx, [0x1400368e8]
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001cb7d
mov qword [rsp + 0x20], 0x1c
lea r9, [0x1400368e8]
mov edx, 0x1c
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001cbfa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cbf5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cbf5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001cc52
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cc4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cc4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001cca9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cca4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cca4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14001cce5
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x15
jb 0x14001cd60
lea r14, [rcx + 0x15]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001cd43
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x2a
lea rdx, str.OneDrivedesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001cd80
mov qword [rsp + 0x20], 0x15
lea r9, str.OneDrivedesktop.ini
mov edx, 0x15
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001cdfd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cdf8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cdf8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001ce55
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ce50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ce50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001ceac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cea7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cea7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001cef0
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x16
jb 0x14001cf6b
lea r14, [rcx + 0x16]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001cf4e
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x2c
lea rdx, str.Downloadsdesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001cf8b
mov qword [rsp + 0x20], 0x16
lea r9, str.Downloadsdesktop.ini
mov edx, 0x16
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001d008
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d003
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d003
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001d060
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d05b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d05b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001d0b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d0b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d0b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d0f3
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x13
jb 0x14001d16e
lea r14, [rcx + 0x13]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001d151
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x26
lea rdx, str.Videosdesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001d18e
mov qword [rsp + 0x20], 0x13
lea r9, str.Videosdesktop.ini
mov edx, 0x13
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001d20b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d206
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d206
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001d263
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d25e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d25e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001d2ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d2b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d2b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d300
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x15
jb 0x14001d37b
lea r14, [rcx + 0x15]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001d35e
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x2a
lea rdx, str.Picturesdesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001d39b
mov qword [rsp + 0x20], 0x15
lea r9, str.Picturesdesktop.ini
mov edx, 0x15
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001d418
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d413
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d413
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001d470
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d46b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d46b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001d4c7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d4c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d4c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d503
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x12
jb 0x14001d57e
lea r14, [rcx + 0x12]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001d561
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x24
lea rdx, str.Musicdesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001d59e
mov qword [rsp + 0x20], 0x12
lea r9, str.Musicdesktop.ini
mov edx, 0x12
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001d61b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d616
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d616
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001d673
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d66e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d66e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001d6ca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d6c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d6c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d710
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x16
jb 0x14001d78b
lea r14, [rcx + 0x16]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001d76e
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x2c
lea rdx, str.Documentsdesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001d7ab
mov qword [rsp + 0x20], 0x16
lea r9, str.Documentsdesktop.ini
mov edx, 0x16
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001d828
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d823
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d823
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001d880
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d87b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d87b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001d8d7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d8d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d8d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d913
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.C:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x14
jb 0x14001d98e
lea r14, [rcx + 0x14]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001d971
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x28
lea rdx, str.Desktopdesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001d9ae
mov qword [rsp + 0x20], 0x14
lea r9, str.Desktopdesktop.ini
mov edx, 0x14
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001da2b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001da26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001da26
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001da83
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001da7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001da7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001dada
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dad5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dad5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherEngineConfigBase.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsWindowsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherPortalConfigUserLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsBaseWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherPortalConfigUserScalability.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_Files_x86_Epic_GamesLauncherPortalConfigNotForLicenseesWindowsWindowsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001db90
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.D:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0xa
jb 0x14001dc0b
lea r14, [rcx + 0xa]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001dbee
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x14
lea rdx, str.ntuser.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001dc2b
mov qword [rsp + 0x20], 0xa
lea r9, str.ntuser.ini
mov edx, 0xa
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001dca8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dca3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dca3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001dd00
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dcfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dcfb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001dd57
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dd52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dd52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14001dd93
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.D:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1c
jb 0x14001de0e
lea r14, [rcx + 0x1c]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001ddf1
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x38
lea rdx, [0x1400368e8]
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001de2e
mov qword [rsp + 0x20], 0x1c
lea r9, [0x1400368e8]
mov edx, 0x1c
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001deab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dea6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dea6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001df03
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001defe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001defe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001df5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001df55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001df55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001dfa0
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.D:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x15
jb 0x14001e01b
lea r14, [rcx + 0x15]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001dffe
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x2a
lea rdx, str.OneDrivedesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001e03b
mov qword [rsp + 0x20], 0x15
lea r9, str.OneDrivedesktop.ini
mov edx, 0x15
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001e0b8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e0b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e0b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001e110
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e10b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e10b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001e167
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e162
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e162
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r15w
lea rax, [rbp + 0x140]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x14001e1a3
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x50]
call fcn.140023bb0
nop
lea r8, [rsp + 0x50]
lea rdx, str.D:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x16
jb 0x14001e21e
lea r14, [rcx + 0x16]
mov qword [rdi + 0x10], r14
mov rsi, rdi
cmp rdx, 8
jb 0x14001e201
mov rsi, qword [rdi]
lea rcx, [rsi + rcx*2]
mov r8d, 0x2c
lea rdx, str.Downloadsdesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2], r15w
jmp 0x14001e23e
mov qword [rsp + 0x20], 0x16
lea r9, str.Downloadsdesktop.ini
mov edx, 0x16
mov rcx, rdi
call fcn.140026350
mov rdi, rax
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001e2bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e2b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e2b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14001e313
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e30e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e30e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001e36a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e365
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e365
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov dword [rbp + 0x130], 0x101
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], r15w
lea rax, [rbp + 0x140]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14001e3a1
mov r8, rbx
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x70]
call fcn.140023bb0
nop
lea r8, [rsp + 0x70]
lea rdx, str.D:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
mov rbx, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x13
jb 0x14001e41e
lea rsi, [rcx + 0x13]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp rdx, 8
jb 0x14001e401
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
mov r8d, 0x26
lea rdx, str.Videosdesktop.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rdi + rsi*2], r15w
jmp 0x14001e43e
mov qword [rsp + 0x20], 0x13
lea r9, str.Videosdesktop.ini
mov edx, 0x13
mov rcx, rbx
call fcn.140026350
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14001e4bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e4b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e4b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140031b00
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], r15w
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x70]
call fcn.1400223c0
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.Picturesdesktop.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.Musicdesktop.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.Documentsdesktop.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.Desktopdesktop.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherEngineConfigBase.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsWindowsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherPortalConfigUserLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsBaseWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherPortalConfigUserScalability.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Program_Files_x86_Epic_GamesLauncherPortalConfigNotForLicenseesWindowsWindowsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.ntuser.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, [0x1400368e8]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.OneDrivedesktop.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.Downloadsdesktop.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, [rsp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.Videosdesktop.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x30]
call fcn.1400223c0
lea rcx, [rbp - 0x70]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rsp + 0x50]
call fcn.1400250c0
nop
lea r8, str.Picturesdesktop.ini
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400223c0
lea rcx, [rbp - 0x50]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rsp + 0x70]
call fcn.1400250c0
nop
lea r8, str.Musicdesktop.ini
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp - 0x70]
call fcn.1400223c0
nop
lea rcx, [rsp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rbp - 0x50]
call fcn.1400223c0
lea rcx, [rbp - 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp - 0x70]
call fcn.1400250c0
nop
lea r8, str.Documentsdesktop.ini
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp - 0x50]
call fcn.1400223c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400223c0
nop
lea rcx, [rbp - 0x30]
call fcn.1400223c0
lea rcx, [rbp - 0x10]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp - 0x50]
call fcn.1400250c0
nop
lea r8, str.Desktopdesktop.ini
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp - 0x30]
call fcn.1400223c0
nop
lea rcx, [rbp - 0x50]
call fcn.1400223c0
nop
lea rcx, [rbp - 0x10]
call fcn.1400223c0
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherEngineConfigBase.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsWindowsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherPortalConfigUserLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsBaseWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherPortalConfigUserScalability.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_Files_x86_Epic_GamesLauncherPortalConfigNotForLicenseesWindowsWindowsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x10]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp - 0x30]
call fcn.1400250c0
nop
lea r8, str.ntuser.ini
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp - 0x10]
call fcn.1400223c0
nop
lea rcx, [rbp - 0x30]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x10]
call fcn.1400223c0
lea rcx, [rbp + 0x30]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp - 0x10]
call fcn.1400250c0
nop
lea r8, [0x1400368e8]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x10]
call fcn.1400223c0
nop
lea rcx, [rbp - 0x10]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x30]
call fcn.1400223c0
lea rcx, [rbp + 0x50]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x10]
call fcn.1400250c0
nop
lea r8, str.OneDrivedesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x30]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x10]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x50]
call fcn.1400223c0
lea rcx, [rbp + 0x70]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x30]
call fcn.1400250c0
nop
lea r8, str.Downloadsdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x30]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x70]
call fcn.1400223c0
lea rcx, [rbp + 0x90]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x50]
call fcn.1400250c0
nop
lea r8, str.Videosdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x50]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x90]
call fcn.1400223c0
lea rcx, [rbp + 0xb0]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x70]
call fcn.1400250c0
nop
lea r8, str.Picturesdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x90]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x70]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xb0]
call fcn.1400223c0
lea rcx, [rbp + 0xd0]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x90]
call fcn.1400250c0
nop
lea r8, str.Musicdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xb0]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x90]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xd0]
call fcn.1400223c0
lea rcx, [rbp + 0xf0]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0xb0]
call fcn.1400250c0
nop
lea r8, str.Documentsdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xd0]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xb0]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xf0]
call fcn.1400223c0
lea rcx, [rbp + 0x110]
call fcn.1400057a0
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0xd0]
call fcn.1400250c0
nop
lea r8, str.Desktopdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0xf0]
call fcn.1400251f0
mov rcx, rax
call fcn.1400223b0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xf0]
call fcn.1400223c0
nop
lea rcx, [rbp + 0xd0]
call fcn.1400223c0
nop
lea rcx, [rbp + 0x110]
call fcn.1400223c0
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherEngineConfigBase.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsWindowsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherPortalConfigUserLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsBaseWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherPortalConfigUserScalability.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherEngineConfigBaseHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_Files_x86_Epic_GamesLauncherPortalConfigNotForLicenseesWindowsWindowsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.140031850
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret