Function at 0x140001800
Capabilities:
Acquire credentials from windows credential manager
Delete file
Execute command
Get session user name
Reference absolute stream path on windows
Self delete
Set console window title
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x8db0]
mov eax, 0x8eb0
call fcn.14000ba70
sub rsp, rax
mov rax, qword [0x140033040]
xor rax, rsp
mov qword [rbp + 0x8da0], rax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, str.Color_0b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Apple_Cleaner__Updated_to_S4_
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.Apple_Cleaner_n_n
call fcn.1400013b0
lea rcx, str.___Searching_for_tracking_files...
call fcn.1400013b0
mov dword [rbp + 0x3f08], 0x101
lea rdx, [rbp + 0x3f08]
lea rcx, [rbp + 0x3f40]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x3f40]
lea rcx, [rbp + 0x820]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0x820]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x800]
call fcn.14000a240
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
lea rcx, [rbp + 0x800]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x7e0]
call fcn.14000a240
lea rcx, [rbp + 0x7e0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x7e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x800]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x820]
call fcn.1400011e0
mov dword [rbp + 0x3f0c], 0x101
lea rdx, [rbp + 0x3f0c]
lea rcx, [rbp + 0x4150]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4150]
lea rcx, [rbp + 0x880]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0x880]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x860]
call fcn.14000a240
nop
mov r8d, 0x2d
lea rdx, [0x14000dab0]
lea rcx, [rbp + 0x860]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x840]
call fcn.14000a240
lea rcx, [rbp + 0x840]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x840]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x860]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x880]
call fcn.1400011e0
test ebx, ebx
je 0x140001a3d
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsUsrClass.dat_n
call fcn.1400013b0
mov dword [rbp + 0x3ea4], 0x101
lea rdx, [rbp + 0x3ea4]
lea rcx, [rbp + 0x4360]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4360]
lea rcx, [rbp + 0x8e0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0x8e0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x8c0]
call fcn.14000a240
nop
mov r8d, 0x2c
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat
lea rcx, [rbp + 0x8c0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x8a0]
call fcn.14000a240
lea rcx, [rbp + 0x8a0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x8a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x8c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x8e0]
call fcn.1400011e0
test ebx, ebx
je 0x140001b0f
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsUsrClass.dat_n
call fcn.1400013b0
mov dword [rbp + 0x3ea8], 0x101
lea rdx, [rbp + 0x3ea8]
lea rcx, [rbp + 0x4570]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4570]
lea rcx, [rbp + 0x940]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0x940]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x920]
call fcn.14000a240
nop
mov r8d, 0x2d
lea rdx, [0x14000dbc0]
lea rcx, [rbp + 0x920]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x900]
call fcn.14000a240
lea rcx, [rbp + 0x900]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x900]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x920]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x940]
call fcn.1400011e0
test ebx, ebx
je 0x140001be1
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsusrclass.dat_n
call fcn.1400013b0
mov dword [rbp + 0x3eac], 0x101
lea rdx, [rbp + 0x3eac]
lea rcx, [rbp + 0x4780]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4780]
lea rcx, [rbp + 0x9a0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0x9a0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x980]
call fcn.14000a240
nop
mov r8d, 0x2c
lea rdx, str.AppDataLocalMicrosoftWindowsusrclass.dat
lea rcx, [rbp + 0x980]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x960]
call fcn.14000a240
lea rcx, [rbp + 0x960]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x960]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x980]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x9a0]
call fcn.1400011e0
test ebx, ebx
je 0x140001cb3
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftVaultUserProfileRoamingLatest.dat_n
call fcn.1400013b0
mov dword [rbp + 0x3eb0], 0x101
lea rdx, [rbp + 0x3eb0]
lea rcx, [rbp + 0x4990]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4990]
lea rcx, [rbp + 0xa00]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xa00]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x9e0]
call fcn.14000a240
nop
mov r8d, 0x3c
lea rdx, str.AppDataLocalMicrosoftVaultUserProfileRoamingLatest.dat
lea rcx, [rbp + 0x9e0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x9c0]
call fcn.14000a240
lea rcx, [rbp + 0x9c0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x9c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x9e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xa00]
call fcn.1400011e0
test ebx, ebx
je 0x140001d85
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsUsrClass.dat.log1_n
call fcn.1400013b0
lea rcx, str._nDeleted_C:UsersGayppleAppDataLocalMicrosoftWindowsINetCacheIEcontainer.dat
call fcn.1400013b0
lea rcx, str._n___System_clean
call fcn.1400013b0
lea rcx, str._nPress_any_key_to_continue_._._.
call fcn.1400013b0
lea rcx, str.pause___nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000d9b8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 0x3eb4], 0x101
lea rdx, [rbp + 0x3eb4]
lea rcx, [rbp + 0x4ba0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4ba0]
lea rcx, [rbp + 0xa60]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xa60]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xa40]
call fcn.14000a240
nop
mov r8d, 0x34
lea rdx, str.AppDataLocalMicrosoftWindowsHistorydesktop.ini
lea rcx, [rbp + 0xa40]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xa20]
call fcn.14000a240
lea rcx, [rbp + 0xa20]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xa20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xa40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xa60]
call fcn.1400011e0
mov dword [rbp + 0x3eb8], 0x101
lea rdx, [rbp + 0x3eb8]
lea rcx, [rbp + 0x4db0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4db0]
lea rcx, [rbp + 0xac0]
call fcn.140001260
nop
mov r9d, 0x31
lea r8, str.C:UsersAppDataLocalMicrosoftWindowsHistory_
xor edx, edx
lea rcx, [rbp + 0xac0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xaa0]
call fcn.14000a240
nop
mov r8d, 0xc
lea rdx, str.desktop.ini
lea rcx, [rbp + 0xaa0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xa80]
call fcn.14000a240
lea rcx, [rbp + 0xa80]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xa80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xaa0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xac0]
call fcn.1400011e0
test ebx, ebx
je 0x140001f60
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsdesktop.ini
call fcn.1400013b0
lea rcx, str._nDeleted_C:UsersGayppleAppDataLocalMicrosoftWindowsINetCacheIEcontainer.dat
call fcn.1400013b0
mov dword [rbp + 0x3ebc], 0x101
lea rdx, [rbp + 0x3ebc]
lea rcx, [rbp + 0x4fc0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x4fc0]
lea rcx, [rbp + 0xb20]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xb20]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xb00]
call fcn.14000a240
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
lea rcx, [rbp + 0xb00]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xae0]
call fcn.14000a240
lea rcx, [rbp + 0xae0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xae0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xb00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xb20]
call fcn.1400011e0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 0x3ec0], 0x101
lea rdx, [rbp + 0x3ec0]
lea rcx, [rbp + 0x51d0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x51d0]
lea rcx, [rbp + 0xb80]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.D:Users_
xor edx, edx
lea rcx, [rbp + 0xb80]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xb60]
call fcn.14000a240
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
lea rcx, [rbp + 0xb60]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xb40]
call fcn.14000a240
lea rcx, [rbp + 0xb40]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xb40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xb60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xb80]
call fcn.1400011e0
mov dword [rbp + 0x3ec4], 0x101
lea rdx, [rbp + 0x3ec4]
lea rcx, [rbp + 0x53e0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x53e0]
lea rcx, [rbp + 0xbe0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.E:Users_
xor edx, edx
lea rcx, [rbp + 0xbe0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xbc0]
call fcn.14000a240
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
lea rcx, [rbp + 0xbc0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x660]
call fcn.14000a240
lea rcx, [rbp + 0x660]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x660]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xbc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xbe0]
call fcn.1400011e0
mov dword [rbp + 0x3ec8], 0x101
lea rdx, [rbp + 0x3ec8]
lea rcx, [rbp + 0x55f0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x55f0]
lea rcx, [rbp + 0xc40]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.F:Users_
xor edx, edx
lea rcx, [rbp + 0xc40]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xc20]
call fcn.14000a240
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
lea rcx, [rbp + 0xc20]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xc00]
call fcn.14000a240
lea rcx, [rbp + 0xc00]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xc00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xc20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xc40]
call fcn.1400011e0
lea rcx, str.C:WindowsSystem32catroot2dberr.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x3ecc], 0x101
lea rdx, [rbp + 0x3ecc]
lea rcx, [rbp + 0x5800]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x5800]
lea rcx, [rbp + 0xca0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xca0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xc80]
call fcn.14000a240
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOCK
lea rcx, [rbp + 0xc80]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xc60]
call fcn.14000a240
lea rcx, [rbp + 0xc60]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0xc60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xc80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xca0]
call fcn.1400011e0
mov dword [rbp + 0x3ed0], 0x101
lea rdx, [rbp + 0x3ed0]
lea rcx, [rbp + 0x5a10]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x5a10]
lea rcx, [rbp + 0xd00]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xd00]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xce0]
call fcn.14000a240
nop
mov r8d, 0x2d
lea rdx, [0x14000dab0]
lea rcx, [rbp + 0xce0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xcc0]
call fcn.14000a240
lea rcx, [rbp + 0xcc0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xcc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xce0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xd00]
call fcn.1400011e0
test ebx, ebx
je 0x140002416
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsUsrClass.dat
call fcn.1400013b0
mov dword [rbp + 0x3ed4], 0x101
lea rdx, [rbp + 0x3ed4]
lea rcx, [rbp + 0x5c20]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x5c20]
lea rcx, [rbp + 0xd60]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xd60]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xd40]
call fcn.14000a240
nop
mov r8d, 0x2c
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat
lea rcx, [rbp + 0xd40]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xd20]
call fcn.14000a240
lea rcx, [rbp + 0xd20]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xd20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xd40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xd60]
call fcn.1400011e0
test ebx, ebx
je 0x1400024e8
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsUsrClass.dat
call fcn.1400013b0
mov dword [rbp + 0x3ed8], 0x101
lea rdx, [rbp + 0x3ed8]
lea rcx, [rbp + 0x5e30]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x5e30]
lea rcx, [rbp + 0xdc0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xdc0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xda0]
call fcn.14000a240
nop
mov r8d, 0x2d
lea rdx, [0x14000dbc0]
lea rcx, [rbp + 0xda0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xd80]
call fcn.14000a240
lea rcx, [rbp + 0xd80]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xd80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xda0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xdc0]
call fcn.1400011e0
test ebx, ebx
je 0x1400025ba
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsusrclass.dat
call fcn.1400013b0
mov dword [rbp + 0x3edc], 0x101
lea rdx, [rbp + 0x3edc]
lea rcx, [rbp + 0x6040]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x6040]
lea rcx, [rbp + 0xe20]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xe20]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xe00]
call fcn.14000a240
nop
mov r8d, 0x2c
lea rdx, str.AppDataLocalMicrosoftWindowsusrclass.dat
lea rcx, [rbp + 0xe00]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xde0]
call fcn.14000a240
lea rcx, [rbp + 0xde0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xde0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xe00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xe20]
call fcn.1400011e0
test ebx, ebx
je 0x14000268c
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsusrclass.dat
call fcn.1400013b0
mov dword [rbp + 0x3ee0], 0x101
lea rdx, [rbp + 0x3ee0]
lea rcx, [rbp + 0x6250]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x6250]
lea rcx, [rbp + 0xe80]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xe80]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xe60]
call fcn.14000a240
nop
mov r8d, 0x3c
lea rdx, str.AppDataLocalMicrosoftVaultUserProfileRoamingLatest.dat
lea rcx, [rbp + 0xe60]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xe40]
call fcn.14000a240
lea rcx, [rbp + 0xe40]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xe40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xe60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xe80]
call fcn.1400011e0
test ebx, ebx
je 0x14000275e
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftVaultUserProfileRoamingLatest.dat
call fcn.1400013b0
mov dword [rbp + 0x3ee4], 0x101
lea rdx, [rbp + 0x3ee4]
lea rcx, [rbp + 0x6460]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x6460]
lea rcx, [rbp + 0xee0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xee0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xec0]
call fcn.14000a240
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log1
lea rcx, [rbp + 0xec0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xea0]
call fcn.14000a240
lea rcx, [rbp + 0xea0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xea0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xec0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xee0]
call fcn.1400011e0
test ebx, ebx
je 0x140002830
lea rcx, str.Deleted_C:UsersGayppleAppDataLocalMicrosoftWindowsUsrClass.dat.log1
call fcn.1400013b0
mov dword [rbp + 0x3ee8], 0x101
lea rdx, [rbp + 0x3ee8]
lea rcx, [rbp + 0x6670]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x6670]
lea rcx, [rbp + 0xf40]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xf40]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xf20]
call fcn.14000a240
nop
mov r8d, 0x32
lea rdx, str.AppDataLocalMicrosoftWindowsUsrClass.dat.LOG2
lea rcx, [rbp + 0xf20]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xf00]
call fcn.14000a240
lea rcx, [rbp + 0xf00]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xf00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xf20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xf40]
call fcn.1400011e0
test ebx, ebx
je 0x140002bbc
lea rcx, [rbp + 0x1680]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1660]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log2.LOG2
mov rdx, rax
lea rcx, [rbp + 0x1640]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1640]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1660]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1680]
call fcn.1400011e0
test ebx, ebx
je 0x140002bbc
lea rcx, [rbp + 0x16e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x16c0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsUsrClass.dat.log2
mov rdx, rax
lea rcx, [rbp + 0x16a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x16a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x16c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x16e0]
call fcn.1400011e0
test ebx, ebx
je 0x140002bbc
lea rcx, [rbp + 0x1740]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1720]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedLMSManifest.sav
mov rdx, rax
lea rcx, [rbp + 0x1700]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1700]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1720]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1740]
call fcn.1400011e0
test ebx, ebx
je 0x140002bbc
lea rcx, str.C:UsersPublicLibrariescollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140002bbc
lea rcx, str.C:_Secure:_SDH:_INDEX_ALLOCATION
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140002bbc
lea rcx, str.C:_Secure:_SDH:_INDEX_ALLOCATION
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140002bbc
lea rcx, str.C:UsersPublicShared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140002bbc
lea rcx, str.C:MSOCache71230000_00E2_0000_1000_00000000Setup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140002bbc
lea rcx, [rbp + 0x17a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1780]
call fcn.14000a300
nop
lea r8, str.AppDataLocalTemp04f992c.tmp
mov rdx, rax
lea rcx, [rbp + 0x1760]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1760]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1780]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x17a0]
call fcn.1400011e0
test ebx, ebx
je 0x140002bbc
lea rcx, [rbp + 0x1800]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x17e0]
call fcn.14000a300
nop
lea r8, str._ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x17c0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x17c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x17e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1800]
call fcn.1400011e0
mov dword [rbp + 0x3eec], 0x101
lea rdx, [rbp + 0x3eec]
lea rcx, [rbp + 0x6880]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x6880]
lea rcx, [rbp + 0xfa0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0xfa0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xf80]
call fcn.14000a240
nop
mov r8d, 0x1b
lea rdx, [0x14000e5f8]
lea rcx, [rbp + 0xf80]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xf60]
call fcn.14000a240
lea rcx, [rbp + 0xf60]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xf60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xf80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xfa0]
call fcn.1400011e0
test ebx, ebx
je 0x140002d6e
lea rcx, [rbp + 0x1860]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1840]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftFeeds
mov rdx, rax
lea rcx, [rbp + 0x1820]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1820]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1840]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1860]
call fcn.1400011e0
test ebx, ebx
je 0x140002d6e
lea rcx, [rbp + 0x18c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x18a0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftFeeds:KnownSources
mov rdx, rax
lea rcx, [rbp + 0x1880]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1880]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x18a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x18c0]
call fcn.1400011e0
mov dword [rbp + 0x3ef0], 0x101
lea rdx, [rbp + 0x3ef0]
lea rcx, [rbp + 0x6a90]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x6a90]
lea rcx, [rbp + 0x1000]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0x1000]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xfe0]
call fcn.14000a240
nop
mov r8d, 0x1e
lea rdx, str.AppDataLocalMicrosoftFeeds
lea rcx, [rbp + 0xfe0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0xfc0]
call fcn.14000a240
lea rcx, [rbp + 0xfc0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0xfc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xfe0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1000]
call fcn.1400011e0
test ebx, ebx
je 0x140002ea5
lea rcx, [rbp + 0x1920]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1900]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftFeeds:KnownSources
mov rdx, rax
lea rcx, [rbp + 0x18e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x18e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1900]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1920]
call fcn.1400011e0
lea rcx, str.C:desktop.ini:CachedTiles
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140002ee5
lea rcx, str.C:Program_FilesEpic_GamesFortniteEngineConfigNoRedistWindowsShippableWindowsGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140002ee5
lea rcx, str.C:Recovery_ntuser.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140002ee5
lea rcx, str.C:desktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x3ef4], 0x101
lea rdx, [rbp + 0x3ef4]
lea rcx, [rbp + 0x6ca0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x6ca0]
lea rcx, [rbp + 0x1060]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.C:Users_
xor edx, edx
lea rcx, [rbp + 0x1060]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x1040]
call fcn.14000a240
nop
mov r8d, 0x62
lea rdx, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCookiesESEcontainer.dat
lea rcx, [rbp + 0x1040]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x1020]
call fcn.14000a240
lea rcx, [rbp + 0x1020]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1020]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1040]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1060]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1980]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1960]
call fcn.14000a300
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings_settings.dat
mov rdx, rax
lea rcx, [rbp + 0x1940]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1940]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1960]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1980]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x19e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x19c0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalUnrealEngine4.23SavedConfigWindowsClientManifest.ini
mov rdx, rax
lea rcx, [rbp + 0x19a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x19a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x19c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x19e0]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1a40]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1a20]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedConfigWindowsClientGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x1a00]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1a00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1a20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1a40]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003767
lea rcx, [rbp + 0x1aa0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1a80]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0x1a60]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1a60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1a80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1aa0]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, str.C:WindowsServiceStateEventLogDatalastalive1.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003767
lea rcx, [rbp + 0x1b00]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1ae0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftOneDrivelogsCommonDeviceHealthSummaryConfiguration.ini
mov rdx, rax
lea rcx, [rbp + 0x1ac0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1ac0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1ae0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1b00]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, str.C:ProgramDataMicrosoftWindowsAppRepositoryPackagesInputApp_1000.17763.1.0_neutral_neutral_cw5n1h2txyewyActivationStore.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003767
lea rcx, [rbp + 0x1b60]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1b40]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedLogsFortniteGame.log
mov rdx, rax
lea rcx, [rbp + 0x1b20]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1b20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1b40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1b60]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1bc0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1ba0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheContent.IE5
mov rdx, rax
lea rcx, [rbp + 0x1b80]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1b80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1ba0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1bc0]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1c20]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1c00]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistoryHistory.IE5
mov rdx, rax
lea rcx, [rbp + 0x1be0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1be0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1c00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1c20]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, str.C:ProgramDataMicrosoftWindowsDeviceMetadataCachedmrc.idx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003767
lea rcx, [rbp + 0x1c80]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1c60]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSyncmetastoreedb.log
mov rdx, rax
lea rcx, [rbp + 0x1c40]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1c40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1c60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1c80]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1ce0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1cc0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSync_remotemetastore_v1edb.log
mov rdx, rax
lea rcx, [rbp + 0x1ca0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1ca0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1cc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1ce0]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, str.C:WindowsSoftwareDistributionPostRebootEventCache.V2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003767
lea rcx, [rbp + 0x1d40]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1d20]
call fcn.14000a300
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0x1d00]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1d00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1d20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1d40]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1da0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1d80]
call fcn.14000a300
nop
lea r8, str._ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x1d60]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1d60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1d80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1da0]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1e00]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1de0]
call fcn.14000a300
nop
lea r8, str.ntuser.dat.LOG1
mov rdx, rax
lea rcx, [rbp + 0x1dc0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1dc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1de0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1e00]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1e60]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1e40]
call fcn.14000a300
nop
lea r8, str.ntuser.dat.LOG2
mov rdx, rax
lea rcx, [rbp + 0x1e20]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1e20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1e40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1e60]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, [rbp + 0x1ec0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1ea0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheIEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x1e80]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1e80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1ea0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1ec0]
call fcn.1400011e0
test ebx, ebx
je 0x140003767
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003767
lea rcx, [0x14000f360]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:UsersPublicDocuments
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003931
lea rcx, str.C:Program_FilesEpic_GamesFortniteEnginePluginsEditorCryptoKeysAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003931
lea rcx, str.C:Program_FilesEpic_GamesFortniteEnginePluginsEditorCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003931
lea rcx, [rbp + 0x1f20]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1f00]
call fcn.14000a300
nop
lea r8, [0x14000f5b0]
mov rdx, rax
lea rcx, [rbp + 0x1ee0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1ee0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1f00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1f20]
call fcn.1400011e0
test ebx, ebx
je 0x140003931
lea rcx, [rbp + 0x1f80]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1f60]
call fcn.14000a300
nop
lea r8, str.AppDataLocalUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x1f40]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1f40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1f60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1f80]
call fcn.1400011e0
test ebx, ebx
je 0x140003931
lea rcx, [rbp + 0x1fe0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1fc0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedCloud_bb360279f89647c982d9bc6ab596c2eeClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0x1fa0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x1fa0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1fc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1fe0]
call fcn.1400011e0
test ebx, ebx
je 0x140003931
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64XSettings.Sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003931
lea rcx, str.C:UsersPublicShared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, str.C:System_Volume_Information_tracking.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, str.C:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, str.C:System_Volume_InformationWPSettings.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, [rbp + 0x2040]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x2020]
call fcn.14000a300
nop
lea r8, str.NTUSER.DAT
mov rdx, rax
lea rcx, [rbp + 0x2000]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2000]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2020]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2040]
call fcn.1400011e0
test ebx, ebx
je 0x140003a5e
lea rcx, str.C:ProgramData_ntuser.pol
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, str.C:PerfLogscollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, str.C:Drivers_storage.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, str.C:Intel_setup.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, str.C:MSOCacheSetup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003a5e
lea rcx, str.D:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:UsersPublicShared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:UsersPublicShared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x20a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2080]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistorydesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x2060]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2060]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2080]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x20a0]
call fcn.1400011e0
test ebx, ebx
je 0x140003bb3
lea rcx, [rbp + 0x2100]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x20e0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedLMSManifest.sav
mov rdx, rax
lea rcx, [rbp + 0x20c0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x20c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x20e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2100]
call fcn.1400011e0
test ebx, ebx
je 0x140003bb3
lea rcx, str.D:UsersPublicLibrariescollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003bb3
lea rcx, str.D:UsersPublicShared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003bb3
lea rcx, str.D:UsersPublicShared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:MSOCache71230000_00E2_0000_1000_00000000Setup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003d64
lea rcx, [rbp + 0x2160]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2140]
call fcn.14000a300
nop
lea r8, str.AppDataLocalTemp0021346.tmp
mov rdx, rax
lea rcx, [rbp + 0x2120]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2120]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2140]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2160]
call fcn.1400011e0
test ebx, ebx
je 0x140003d64
lea rcx, [rbp + 0x21c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x21a0]
call fcn.14000a300
nop
lea r8, [0x14000e5f8]
mov rdx, rax
lea rcx, [rbp + 0x2180]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2180]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x21a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x21c0]
call fcn.1400011e0
test ebx, ebx
je 0x140003d64
lea rcx, [rbp + 0x2220]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2200]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftFeeds
mov rdx, rax
lea rcx, [rbp + 0x21e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x21e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2200]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2220]
call fcn.1400011e0
test ebx, ebx
je 0x140003d64
lea rcx, str.D:desktop.ini:CachedTiles
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003d64
lea rcx, str.D:Recovery_ntuser.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140003d64
lea rcx, str.D:desktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x2280]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2260]
call fcn.14000a300
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCookiesESEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x2240]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2240]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2260]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2280]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x22e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x22c0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings_settings.dat
mov rdx, rax
lea rcx, [rbp + 0x22a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x22a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x22c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x22e0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2340]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2320]
call fcn.14000a300
nop
lea r8, str.AppDataLocalUnrealEngine4.23SavedConfigWindowsClientManifest.ini
mov rdx, rax
lea rcx, [rbp + 0x2300]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2300]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2320]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2340]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x23a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2380]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedConfigWindowsClientGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x2360]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2360]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2380]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x23a0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.D:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x2400]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x23e0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSaved
mov rdx, rax
lea rcx, [rbp + 0x23c0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x23c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x23e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2400]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.D:WindowsServiceStateEventLogDatalastalive1.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x2460]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2440]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftOneDrivelogsCommonDeviceHealthSummaryConfiguration.ini
mov rdx, rax
lea rcx, [rbp + 0x2420]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2420]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2440]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2460]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.D:ProgramDataMicrosoftWindowsAppRepositoryPackagesInputApp_1000.17763.1.0_neutral_neutral_cw5n1h2txyewyActivationStore.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x24c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x24a0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedLogsFortniteGame.log
mov rdx, rax
lea rcx, [rbp + 0x2480]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2480]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x24a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x24c0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2520]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2500]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheContent.IE5
mov rdx, rax
lea rcx, [rbp + 0x24e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x24e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2500]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2520]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2580]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2560]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistoryHistory.IE5
mov rdx, rax
lea rcx, [rbp + 0x2540]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2540]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2560]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2580]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.D:ProgramDataMicrosoftWindowsDeviceMetadataCachedmrc.idx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x25e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x25c0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSyncmetastoreedb.log
mov rdx, rax
lea rcx, [rbp + 0x25a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x25a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x25c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x25e0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2640]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2620]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSync_remotemetastore_v1edb.log
mov rdx, rax
lea rcx, [rbp + 0x2600]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2600]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2620]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2640]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.D:WindowsSoftwareDistributionPostRebootEventCache.V2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x26a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2680]
call fcn.14000a300
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0x2660]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2660]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2680]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x26a0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2700]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x26e0]
call fcn.14000a300
nop
lea r8, str.ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x26c0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x26c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x26e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2700]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2760]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2740]
call fcn.14000a300
nop
lea r8, str.ntuser.dat.LOG1
mov rdx, rax
lea rcx, [rbp + 0x2720]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2720]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2740]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2760]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x27c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x27a0]
call fcn.14000a300
nop
lea r8, str.ntuser.dat.LOG2
mov rdx, rax
lea rcx, [rbp + 0x2780]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2780]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x27a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x27c0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2820]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2800]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheIEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x27e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x27e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2800]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2820]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.D:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.D:UsersPublicDocuments
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.D:Program_FilesEpic_GamesFortniteEnginePluginsEditorCryptoKeysAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.D:Program_FilesEpic_GamesFortniteEnginePluginsEditorCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x2880]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2860]
call fcn.14000a300
nop
lea r8, str.DocumentsUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x2840]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2840]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2860]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2880]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x28e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x28c0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x28a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x28a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x28c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x28e0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2940]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2920]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedCloud_bb360279f89647c982d9bc6ab596c2eeClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0x2900]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2900]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2920]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2940]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.D:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.D:System_Volume_Information_tracking.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x29a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x2980]
call fcn.14000a300
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0x2960]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2960]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2980]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x29a0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2a00]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x29e0]
call fcn.14000a300
nop
lea r8, str._ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x29c0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x29c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x29e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2a00]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.D:PerfLogscollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.D:Drivers_storage.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.D:Intel_setup.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.D:MSOCacheSetup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x2a60]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2a40]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistorydesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x2a20]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2a20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2a40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2a60]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2ac0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2aa0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedLMSManifest.sav
mov rdx, rax
lea rcx, [rbp + 0x2a80]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2a80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2aa0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2ac0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.E:UsersPublicLibrariescollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.E:UsersPublicShared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.E:MSOCache71230000_00E2_0000_1000_00000000Setup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, [rbp + 0x2b20]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2b00]
call fcn.14000a300
nop
lea r8, str.AppDataLocalTemp0021346.tmp
mov rdx, rax
lea rcx, [rbp + 0x2ae0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2ae0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2b00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2b20]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2b80]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2b60]
call fcn.14000a300
nop
lea r8, [0x14000e5f8]
mov rdx, rax
lea rcx, [rbp + 0x2b40]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2b40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2b60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2b80]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, [rbp + 0x2be0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2bc0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftFeeds
mov rdx, rax
lea rcx, [rbp + 0x2ba0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2ba0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2bc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2be0]
call fcn.1400011e0
test ebx, ebx
je 0x140004b87
lea rcx, str.E:desktop.ini:CachedTiles
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.E:Recovery_ntuser.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140004b87
lea rcx, str.E:desktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x2c40]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2c20]
call fcn.14000a300
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCookiesESEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x2c00]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2c00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2c20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2c40]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x2ca0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2c80]
call fcn.14000a300
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings_settings.dat
mov rdx, rax
lea rcx, [rbp + 0x2c60]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2c60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2c80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2ca0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x2d00]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2ce0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalUnrealEngine4.23SavedConfigWindowsClientManifest.ini
mov rdx, rax
lea rcx, [rbp + 0x2cc0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2cc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2ce0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2d00]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x2d60]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2d40]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedConfigWindowsClientGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x2d20]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2d20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2d40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2d60]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.E:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x2dc0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2da0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSaved
mov rdx, rax
lea rcx, [rbp + 0x2d80]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2d80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2da0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2dc0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.E:WindowsServiceStateEventLogDatalastalive1.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x2e20]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2e00]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftOneDrivelogsCommonDeviceHealthSummaryConfiguration.ini
mov rdx, rax
lea rcx, [rbp + 0x2de0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2de0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2e00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2e20]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.E:ProgramDataMicrosoftWindowsAppRepositoryPackagesInputApp_1000.17763.1.0_neutral_neutral_cw5n1h2txyewyActivationStore.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x2e80]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2e60]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedLogsFortniteGame.log
mov rdx, rax
lea rcx, [rbp + 0x2e40]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2e40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2e60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2e80]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x2ee0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2ec0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheContent.IE5
mov rdx, rax
lea rcx, [rbp + 0x2ea0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2ea0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2ec0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2ee0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x2f40]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2f20]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistoryHistory.IE5
mov rdx, rax
lea rcx, [rbp + 0x2f00]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2f00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2f20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2f40]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.E:ProgramDataMicrosoftWindowsDeviceMetadataCachedmrc.idx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x2fa0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2f80]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSyncmetastoreedb.log
mov rdx, rax
lea rcx, [rbp + 0x2f60]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2f60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2f80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2fa0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x3000]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x2fe0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsSettingSync_remotemetastore_v1edb.log
mov rdx, rax
lea rcx, [rbp + 0x2fc0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x2fc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x2fe0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3000]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.E:WindowsSoftwareDistributionPostRebootEventCache.V2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x3060]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x3040]
call fcn.14000a300
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0x3020]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3020]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3040]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3060]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x30c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x30a0]
call fcn.14000a300
nop
lea r8, str.ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x3080]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3080]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x30a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x30c0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x3120]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x3100]
call fcn.14000a300
nop
lea r8, str.ntuser.dat.LOG1
mov rdx, rax
lea rcx, [rbp + 0x30e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x30e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3100]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3120]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x3180]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x3160]
call fcn.14000a300
nop
lea r8, str.ntuser.dat.LOG2
mov rdx, rax
lea rcx, [rbp + 0x3140]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3140]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3160]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3180]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x31e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x31c0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheIEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x31a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x31a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x31c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x31e0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.E:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.E:UsersPublicDocuments
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.E:Program_FilesEpic_GamesFortniteEnginePluginsEditorCryptoKeysAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.E:Program_FilesEpic_GamesFortniteEnginePluginsEditorCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x3240]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x3220]
call fcn.14000a300
nop
lea r8, str.DocumentsUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x3200]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3200]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3220]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3240]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x32a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x3280]
call fcn.14000a300
nop
lea r8, str.AppDataLocalUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x3260]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3260]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3280]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x32a0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x3300]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x32e0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedCloud_bb360279f89647c982d9bc6ab596c2eeClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0x32c0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x32c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x32e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3300]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.E:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.E:System_Volume_Information_tracking.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x3360]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x3340]
call fcn.14000a300
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0x3320]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3320]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3340]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3360]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x33c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x33a0]
call fcn.14000a300
nop
lea r8, str._ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x3380]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3380]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x33a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x33c0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.E:PerfLogscollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.E:Drivers_storage.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.E:Intel_setup.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.E:MSOCacheSetup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x3420]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3400]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistorydesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x33e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x33e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3400]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3420]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x3480]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3460]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedLMSManifest.sav
mov rdx, rax
lea rcx, [rbp + 0x3440]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3440]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3460]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3480]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.F:UsersPublicLibrariescollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.F:UsersPublicShared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.F:MSOCache71230000_00E2_0000_1000_00000000Setup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, [rbp + 0x34e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x34c0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalTemp0021346.tmp
mov rdx, rax
lea rcx, [rbp + 0x34a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x34a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x34c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x34e0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x3540]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3520]
call fcn.14000a300
nop
lea r8, [0x14000e5f8]
mov rdx, rax
lea rcx, [rbp + 0x3500]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3500]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3520]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3540]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, [rbp + 0x35a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3580]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftFeeds
mov rdx, rax
lea rcx, [rbp + 0x3560]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3560]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3580]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x35a0]
call fcn.1400011e0
test ebx, ebx
je 0x1400059aa
lea rcx, str.F:desktop.ini:CachedTiles
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.F:Recovery_ntuser.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400059aa
lea rcx, str.F:desktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3600]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x35e0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweACINetCookiesESEcontainer.dat
mov rdx, rax
lea rcx, [rbp + 0x35c0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x35c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x35e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3600]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x3660]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3640]
call fcn.14000a300
nop
lea r8, str.AppDataLocalPackagesMicrosoft.XboxGamingOverlay_8wekyb3d8bbweSettings_settings.dat
mov rdx, rax
lea rcx, [rbp + 0x3620]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3620]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3640]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3660]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x36c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x36a0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalUnrealEngine4.23SavedConfigWindowsClientManifest.ini
mov rdx, rax
lea rcx, [rbp + 0x3680]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3680]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x36a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x36c0]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x3720]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3700]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedConfigWindowsClientGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x36e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x36e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3700]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3720]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, str.F:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, [rbp + 0x3780]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3760]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSaved
mov rdx, rax
lea rcx, [rbp + 0x3740]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3740]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3760]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3780]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, str.F:WindowsServiceStateEventLogDatalastalive1.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, [rbp + 0x37e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x37c0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftOneDrivelogsCommonDeviceHealthSummaryConfiguration.ini
mov rdx, rax
lea rcx, [rbp + 0x37a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x37a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x37c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x37e0]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, str.F:ProgramDataMicrosoftWindowsAppRepositoryPackagesInputApp_1000.17763.1.0_neutral_neutral_cw5n1h2txyewyActivationStore.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, [rbp + 0x3840]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3820]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedLogsFortniteGame.log
mov rdx, rax
lea rcx, [rbp + 0x3800]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3800]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3820]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3840]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x38a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3880]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsINetCacheContent.IE5
mov rdx, rax
lea rcx, [rbp + 0x3860]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3860]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3880]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x38a0]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x3900]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x38e0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalMicrosoftWindowsHistoryHistory.IE5
mov rdx, rax
lea rcx, [rbp + 0x38c0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x38c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x38e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3900]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, str.F:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.F:UsersPublicDocuments
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, [rbp + 0x3960]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3940]
call fcn.14000a300
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0x3920]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3920]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3940]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3960]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x39c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x39a0]
call fcn.14000a300
nop
lea r8, str.ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x3980]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3980]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x39a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x39c0]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, str.F:Program_FilesEpic_GamesFortniteEnginePluginsEditorCryptoKeysAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.F:Program_FilesEpic_GamesFortniteEnginePluginsEditorCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, [rbp + 0x3a20]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3a00]
call fcn.14000a300
nop
lea r8, str.DocumentsUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x39e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x39e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3a00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3a20]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x3a80]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3a60]
call fcn.14000a300
nop
lea r8, str.AppDataLocalUnreal_EngineEngineConfigUserGameUserSettings.ini
mov rdx, rax
lea rcx, [rbp + 0x3a40]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3a40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3a60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3a80]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x3ae0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3ac0]
call fcn.14000a300
nop
lea r8, str.AppDataLocalFortniteGameSavedCloud_bb360279f89647c982d9bc6ab596c2eeClientSettings.Sav
mov rdx, rax
lea rcx, [rbp + 0x3aa0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3aa0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3ac0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3ae0]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, str.F:WindowsSystem32_restoreMachineGuid.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.F:System_Volume_Information_tracking.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, [rbp + 0x3b40]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3b20]
call fcn.14000a300
nop
lea r8, str._ntuser.ini
mov rdx, rax
lea rcx, [rbp + 0x3b00]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3b00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3b20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3b40]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, [rbp + 0x3ba0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3b80]
call fcn.14000a300
nop
lea r8, str._ntuser.pol
mov rdx, rax
lea rcx, [rbp + 0x3b60]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ebx, eax
lea rcx, [rbp + 0x3b60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3b80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3ba0]
call fcn.1400011e0
test ebx, ebx
je 0x140006317
lea rcx, str.F:PerfLogscollection.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.F:Drivers_storage.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.F:Intel_setup.cache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.F:MSOCacheSetup.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.C:Program_FilesEpic_GamesFortniteEngineBuildNotForLicenseesEpicInternal.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.C:Program_FilesEpic_GamesFortniteEngineBuildPerforceBuild.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, str.C:Program_FilesEpic_GamesFortniteEngineBuildSourceDistribution.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x140006317
lea rcx, [rbp + 0x3c00]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x3be0]
call fcn.14000a300
nop
lea r8, str.VideosCapturesdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x3bc0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3bc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3be0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3c00]
call fcn.1400011e0
lea rcx, [rbp + 0x3c60]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x3c40]
call fcn.14000a300
nop
lea r8, str.VideosCapturesdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x3c20]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3c20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3c40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3c60]
call fcn.1400011e0
lea rcx, [rbp + 0x3cc0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.E:Users_
lea rcx, [rbp + 0x3ca0]
call fcn.14000a300
nop
lea r8, str.VideosCapturesdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x3c80]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3c80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3ca0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3cc0]
call fcn.1400011e0
lea rcx, [rbp + 0x3d20]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x3d00]
call fcn.14000a300
nop
lea r8, str.VideosCapturesdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x3ce0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3ce0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3d00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3d20]
call fcn.1400011e0
lea rcx, [rbp + 0x3d80]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x3d60]
call fcn.14000a300
nop
lea r8, str.OneDrivedesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x3d40]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3d40]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3d60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3d80]
call fcn.1400011e0
lea rcx, [rbp + 0x3de0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x3dc0]
call fcn.14000a300
nop
lea r8, str.Downloadsdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x3da0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3da0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3dc0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3de0]
call fcn.1400011e0
lea rcx, [rbp + 0x3e40]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x3e20]
call fcn.14000a300
nop
lea r8, str.Videosdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x3e00]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3e00]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3e20]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3e40]
call fcn.1400011e0
lea rcx, [rbp + 0x1300]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x3e80]
call fcn.14000a300
nop
lea r8, str.Picturesdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x3e60]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x3e60]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x3e80]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1300]
call fcn.1400011e0
lea rcx, [rbp + 0x1360]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1340]
call fcn.14000a300
nop
lea r8, str.Musicdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x1320]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1320]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1340]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1360]
call fcn.1400011e0
lea rcx, [rbp + 0x13c0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x13a0]
call fcn.14000a300
nop
lea r8, str.Documentsdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x1380]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1380]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x13a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x13c0]
call fcn.1400011e0
lea rcx, [rbp + 0x1420]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.C:Users_
lea rcx, [rbp + 0x1400]
call fcn.14000a300
nop
lea r8, str.Desktopdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x13e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x13e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1400]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1420]
call fcn.1400011e0
lea rcx, [rbp + 0x1480]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1460]
call fcn.14000a300
nop
lea r8, str.OneDrivedesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x1440]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1440]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1460]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1480]
call fcn.1400011e0
lea rcx, [rbp + 0x14e0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x14c0]
call fcn.14000a300
nop
lea r8, str.Downloadsdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x14a0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x14a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x14c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x14e0]
call fcn.1400011e0
lea rcx, [rbp + 0x1540]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1520]
call fcn.14000a300
nop
lea r8, str.Videosdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x1500]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1500]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1520]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1540]
call fcn.1400011e0
lea rcx, [rbp + 0x15a0]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.D:Users_
lea rcx, [rbp + 0x1580]
call fcn.14000a300
nop
lea r8, str.Picturesdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x1560]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1560]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1580]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x15a0]
call fcn.1400011e0
mov dword [rbp + 0x3ef8], 0x101
lea rdx, [rbp + 0x3ef8]
lea rcx, [rbp + 0x6eb0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x6eb0]
lea rcx, [rbp + 0x10c0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.D:Users_
xor edx, edx
lea rcx, [rbp + 0x10c0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x10a0]
call fcn.14000a240
nop
mov r8d, 0x12
lea rdx, str.Musicdesktop.ini
lea rcx, [rbp + 0x10a0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x1080]
call fcn.14000a240
lea rcx, [rbp + 0x1080]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1080]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x10a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x10c0]
call fcn.1400011e0
lea rcx, [rbp + 0x15c0]
call fcn.140001410
nop
mov r9d, 9
lea r8, str.D:Users_
xor edx, edx
mov rcx, rax
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x1100]
call fcn.14000a240
nop
mov r8d, 0x16
lea rdx, str.Documentsdesktop.ini
lea rcx, [rbp + 0x1100]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x10e0]
call fcn.14000a240
lea rcx, [rbp + 0x10e0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x10e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1100]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x15c0]
call fcn.1400011e0
mov dword [rbp + 0x3efc], 0x101
lea rdx, [rbp + 0x3efc]
lea rcx, [rbp + 0x70c0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x70c0]
lea rcx, [rbp + 0x1160]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.D:Users_
xor edx, edx
lea rcx, [rbp + 0x1160]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x1140]
call fcn.14000a240
nop
mov r8d, 0x14
lea rdx, str.Desktopdesktop.ini
lea rcx, [rbp + 0x1140]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x1120]
call fcn.14000a240
lea rcx, [rbp + 0x1120]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1120]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1140]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1160]
call fcn.1400011e0
mov dword [rbp + 0x3f00], 0x101
lea rdx, [rbp + 0x3f00]
lea rcx, [rbp + 0x72d0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x72d0]
lea rcx, [rbp + 0x11c0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.E:Users_
xor edx, edx
lea rcx, [rbp + 0x11c0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x11a0]
call fcn.14000a240
nop
mov r8d, 0x15
lea rdx, str.OneDrivedesktop.ini
lea rcx, [rbp + 0x11a0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x1180]
call fcn.14000a240
lea rcx, [rbp + 0x1180]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1180]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x11a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x11c0]
call fcn.1400011e0
mov dword [rbp + 0x3f04], 0x101
lea rdx, [rbp + 0x3f04]
lea rcx, [rbp + 0x74e0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x74e0]
lea rcx, [rbp + 0x1220]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.E:Users_
xor edx, edx
lea rcx, [rbp + 0x1220]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x1200]
call fcn.14000a240
nop
mov r8d, 0x16
lea rdx, str.Downloadsdesktop.ini
lea rcx, [rbp + 0x1200]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x11e0]
call fcn.14000a240
lea rcx, [rbp + 0x11e0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x11e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1200]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1220]
call fcn.1400011e0
mov dword [rbp + 0x3f34], 0x101
lea rdx, [rbp + 0x3f34]
lea rcx, [rbp + 0x76f0]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x76f0]
lea rcx, [rbp + 0x1280]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.E:Users_
xor edx, edx
lea rcx, [rbp + 0x1280]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x1260]
call fcn.14000a240
nop
mov r8d, 0x13
lea rdx, str.Videosdesktop.ini
lea rcx, [rbp + 0x1260]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x1240]
call fcn.14000a240
lea rcx, [rbp + 0x1240]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x1240]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1260]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1280]
call fcn.1400011e0
mov dword [rbp + 0x3f30], 0x101
lea rdx, [rbp + 0x3f30]
lea rcx, [rbp + 0x7900]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x7900]
lea rcx, [rbp + 0x12e0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.E:Users_
xor edx, edx
lea rcx, [rbp + 0x12e0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x12c0]
call fcn.14000a240
nop
mov r8d, 0x15
lea rdx, str.Picturesdesktop.ini
lea rcx, [rbp + 0x12c0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x12a0]
call fcn.14000a240
lea rcx, [rbp + 0x12a0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x12a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x12c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x12e0]
call fcn.1400011e0
mov dword [rbp + 0x3f2c], 0x101
lea rdx, [rbp + 0x3f2c]
lea rcx, [rbp + 0x7b10]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x7b10]
lea rcx, [rbp + 0x4e0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.E:Users_
xor edx, edx
lea rcx, [rbp + 0x4e0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x4c0]
call fcn.14000a240
nop
mov r8d, 0x12
lea rdx, str.Musicdesktop.ini
lea rcx, [rbp + 0x4c0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x4a0]
call fcn.14000a240
lea rcx, [rbp + 0x4a0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x4a0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x4c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x4e0]
call fcn.1400011e0
mov dword [rbp + 0x3f28], 0x101
lea rdx, [rbp + 0x3f28]
lea rcx, [rbp + 0x7d20]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x7d20]
lea rcx, [rbp + 0x540]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.E:Users_
xor edx, edx
lea rcx, [rbp + 0x540]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x520]
call fcn.14000a240
nop
mov r8d, 0x16
lea rdx, str.Documentsdesktop.ini
lea rcx, [rbp + 0x520]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x500]
call fcn.14000a240
lea rcx, [rbp + 0x500]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x500]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x520]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x540]
call fcn.1400011e0
mov dword [rbp + 0x3f24], 0x101
lea rdx, [rbp + 0x3f24]
lea rcx, [rbp + 0x7f30]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x7f30]
lea rcx, [rbp + 0x5a0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.E:Users_
xor edx, edx
lea rcx, [rbp + 0x5a0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x580]
call fcn.14000a240
nop
mov r8d, 0x14
lea rdx, str.Desktopdesktop.ini
lea rcx, [rbp + 0x580]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x560]
call fcn.14000a240
lea rcx, [rbp + 0x560]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x560]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x580]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x5a0]
call fcn.1400011e0
mov dword [rbp + 0x3f20], 0x101
lea rdx, [rbp + 0x3f20]
lea rcx, [rbp + 0x8140]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x8140]
lea rcx, [rbp + 0x5e0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.F:Users_
xor edx, edx
lea rcx, [rbp + 0x5e0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0xba0]
call fcn.14000a240
nop
mov r8d, 0x15
lea rdx, str.OneDrivedesktop.ini
lea rcx, [rbp + 0xba0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x5c0]
call fcn.14000a240
lea rcx, [rbp + 0x5c0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x5c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0xba0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x5e0]
call fcn.1400011e0
mov dword [rbp + 0x3f1c], 0x101
lea rdx, [rbp + 0x3f1c]
lea rcx, [rbp + 0x8350]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x8350]
lea rcx, [rbp + 0x640]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.F:Users_
xor edx, edx
lea rcx, [rbp + 0x640]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x620]
call fcn.14000a240
nop
mov r8d, 0x16
lea rdx, str.Downloadsdesktop.ini
lea rcx, [rbp + 0x620]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x600]
call fcn.14000a240
lea rcx, [rbp + 0x600]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x600]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x620]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x640]
call fcn.1400011e0
mov dword [rbp + 0x3f18], 0x101
lea rdx, [rbp + 0x3f18]
lea rcx, [rbp + 0x8560]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x8560]
lea rcx, [rbp + 0x6a0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.F:Users_
xor edx, edx
lea rcx, [rbp + 0x6a0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x680]
call fcn.14000a240
nop
mov r8d, 0x13
lea rdx, str.Videosdesktop.ini
lea rcx, [rbp + 0x680]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x7c0]
call fcn.14000a240
lea rcx, [rbp + 0x7c0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x7c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x680]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x6a0]
call fcn.1400011e0
mov dword [rbp + 0x3f14], 0x101
lea rdx, [rbp + 0x3f14]
lea rcx, [rbp + 0x8770]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x8770]
lea rcx, [rbp + 0x700]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.F:Users_
xor edx, edx
lea rcx, [rbp + 0x700]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x6e0]
call fcn.14000a240
nop
mov r8d, 0x15
lea rdx, str.Picturesdesktop.ini
lea rcx, [rbp + 0x6e0]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x6c0]
call fcn.14000a240
lea rcx, [rbp + 0x6c0]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x6c0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x6e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x700]
call fcn.1400011e0
mov dword [rbp + 0x3f10], 0x101
lea rdx, [rbp + 0x3f10]
lea rcx, [rbp + 0x8980]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x8980]
lea rcx, [rbp + 0x760]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.F:Users_
xor edx, edx
lea rcx, [rbp + 0x760]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x740]
call fcn.14000a240
nop
mov r8d, 0x12
lea rdx, str.Musicdesktop.ini
lea rcx, [rbp + 0x740]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x720]
call fcn.14000a240
lea rcx, [rbp + 0x720]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x720]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x740]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x760]
call fcn.1400011e0
mov dword [rbp + 0x3ea0], 0x101
lea rdx, [rbp + 0x3ea0]
lea rcx, [rbp + 0x8b90]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rbp + 0x8b90]
lea rcx, [rbp + 0x7a0]
call fcn.140001260
nop
mov r9d, 9
lea r8, str.F:Users_
xor edx, edx
lea rcx, [rbp + 0x7a0]
call fcn.14000a960
mov rdx, rax
lea rcx, [rbp + 0x780]
call fcn.14000a240
nop
mov r8d, 0x16
lea rdx, str.Documentsdesktop.ini
lea rcx, [rbp + 0x780]
call fcn.14000a280
mov rdx, rax
lea rcx, [rbp + 0x480]
call fcn.14000a240
lea rcx, [rbp + 0x480]
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x480]
call fcn.1400011e0
lea rcx, [rbp + 0x480]
call fcn.140001250
nop
lea rcx, [rbp + 0x780]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x7a0]
call fcn.1400011e0
lea rcx, [rbp + 0x1620]
call fcn.140001410
nop
mov r8, rax
lea rdx, str.F:Users_
lea rcx, [rbp + 0x1600]
call fcn.14000a300
nop
lea r8, str.Desktopdesktop.ini
mov rdx, rax
lea rcx, [rbp + 0x15e0]
call fcn.14000a440
mov rcx, rax
call fcn.14000a230
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, [rbp + 0x15e0]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1600]
call fcn.1400011e0
nop
lea rcx, [rbp + 0x1620]
call fcn.1400011e0
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088009_SubgameSelect_Default_StW_512x1024_e47f51e25cbe9943678b9221056a808e81da40e3.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_BattleLabs_PlaylistTile__2__1024x512_ca5f4e84a2941264f787239caa5458d0eabd39e3.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_In_Game_Launch_Week1_SubgameSelect_512x1024_8b298ddfb13ca218af3f10017e4e989888212e9e.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_Launch_ModeTiles_Duos_1024x512_b73da22f5ef25695bd78814e0c708253a2cfd66b.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_Launch_ModeTiles_Solo_1024x512_867508f824d65b998c1e11180306eeb720b1aa11.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_Launch_ModeTiles_Squad_1024x512_4bca2b25311bd5b8c6bd4a4aa32b2bfa2fadbf78.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_LTM_Siphon_PlaylistTile_1024x512_712b3caea93ea8df09d1592c88d55913ad296526.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_LunarNewYear_GanPickaxe_MOTD_1920x1080_1920x1080_7c458359ec91e63c981ae8bae9498a590446c32b.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880BR06_ModeTile_TDM_1024x512_878ba9f92deb153ec85f2bcbce925e185344290e.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880C2CM_Launch_In_Game_Subgame_PropHunt_512x1024_c84b714dc3c2f4ec9dc966074c0c53deef2dc9.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880CM_LobbyTileArt_1024x512_fb48db36552ccb1ab4021b722ea29d515377cc.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880Fortnite_2Ffortnite_game_2Fbattleroyalenews_2F1140HF_2F8ball_MOTD_1024x512_1024x512_b8690a2ee91e5ccfc2c9ab23561be0dda6ee55.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880Fortnite_2Ffortnite_game_2Ftournaments_2F11BR_Arena_ModeTiles_Duos_1024x512_a431d8587eb87ad5630eada21b60bca9874d116a.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880Fortnite_2Ffortnite_game_2Ftournaments_2F11BR_Arena_ModeTiles_Solo_ModeTile_1024x512_6cee09d7bcf82ce3f32ca7c77ca04948121ce617.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirDMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E20BF0DEAA8A19079E0D347735A2F512415B4D9B14
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E22895B436A3CE70D8FCBBA971A99D7782F30E1715
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E22A6A06259337531EA5101E9BD8818AE92450FCE4
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E22AB442E2E24447F99F9C2F298E583AD6F68AEA9B
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2392F08F2C63619C978F2076694222ABC3054CFC4
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2961B1FEC1E2362CF4FD638D26E622DE659AC92E9
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2AEE16FB402698196FE2ABBC267BB5015D24144EB
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2E14DAB2F57E4763BB4A8F40F08DD57DC07ADE36C
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2F005B0C18B5D2B42267BDF297A7FC7C62901554B
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2F127DEB22E390D0C299F3642BDF2B41D6E2A0B9C
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E20BF0DEAA8A19079E0D347735A2F512415B4D9B14
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E22895B436A3CE70D8FCBBA971A99D7782F30E1715
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E22A6A06259337531EA5101E9BD8818AE92450FCE4
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E22AB442E2E24447F99F9C2F298E583AD6F68AEA9B
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2392F08F2C63619C978F2076694222ABC3054CFC4
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2961B1FEC1E2362CF4FD638D26E622DE659AC92E9
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2AEE16FB402698196FE2ABBC267BB5015D24144EB
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2E14DAB2F57E4763BB4A8F40F08DD57DC07ADE36C
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2F005B0C18B5D2B42267BDF297A7FC7C62901554B
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFilesC28FF1DE0C661DAF01E118A30B3F21B897A7A6E2F127DEB22E390D0C299F3642BDF2B41D6E2A0B9C
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMSc7dee411e20a44ab930f841e8d206b1b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_a22d837b6a2b46349421259c0a5411bf
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_b800b911053c4906a5bd399f46ae0055
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS3460cbe1c57d4a838ace32951a4d7171
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMSc52c1f9246eb48ce9dade87be5a66f29
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS7e2a66ce68554814b1bd0aa14351cd71
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_b6c60402a72e4081a6a47c641371c19f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedDataStaged_a1acda587b3e4c7b87df4eb11fece3c0.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedData_a1acda587b3e4c7b87df4eb11fece3c0.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000067
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:ProgramDataIntelShaderCacheEpicGamesLauncher_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcachedatabasesDatabases.db
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheLocal_Storagehttps_ssl.kaptcha.com_0.localstorage
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheLocal_Storagehttps_www.epicgames.com_0.localstorage
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcachedatabases
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheLocal_Storage
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache2cc80dabc69f58b6_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache4cb013792b196a35_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_f1cdccba37924bda_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_ba23d8ecda68de77_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache67a473248953641b_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_b6c28cea6ed9dfc1_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache013888a1cda32b90_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000001
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00004d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStorage
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00004e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00004f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000050
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000051
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000052
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000053
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsEditorPerProjectUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsEngine.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsPortalRegions.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedData65f6b08d488442e694b1e23d152d971e.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedData_b371f0ee15b74eba84bd23830461130c.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedDataOC_65f6b08d488442e694b1e23d152d971e.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedDataOC_b371f0ee15b74eba84bd23830461130c.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogscef3.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogsEpicGamesLauncher.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogsEpicGamesLauncher_2.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCachedata_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCachedata_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCachedata_2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCachedata_3
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000001
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000002
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000004
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000005
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000006
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000007
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000008
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000009
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000a
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000010
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000011
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000012
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000013
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000014
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000015
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000016
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000017
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000018
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000019
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001a
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000020
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000021
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000022
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000023
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000024
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000025
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000026
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000027
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000028
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000030
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000031
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000032
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000033
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000034
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000035
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000036
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000037
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000038
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000039
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003a
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000040
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000041
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000042
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000043
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000044
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000045
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000046
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDir_
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088009_SubgameSelect_Default_StW_512x1024_e47f51e25cbe9943678b9221056a808e81da40e3.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_BattleLabs_PlaylistTile__2__1024x512_ca5f4e84a2941264f787239caa5458d0eabd39e3.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_In_Game_Launch_Week1_SubgameSelect_512x1024_8b298ddfb13ca218af3f10017e4e989888212e9e.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_Launch_ModeTiles_Duos_1024x512_b73da22f5ef25695bd78814e0c708253a2cfd66b.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_Launch_ModeTiles_Solo_1024x512_867508f824d65b998c1e11180306eeb720b1aa11.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_Launch_ModeTiles_Squad_1024x512_4bca2b25311bd5b8c6bd4a4aa32b2bfa2fadbf78.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_LTM_Siphon_PlaylistTile_1024x512_712b3caea93ea8df09d1592c88d55913ad296526.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D088011BR_LunarNewYear_GanPickaxe_MOTD_1920x1080_1920x1080_7c458359ec91e63c981ae8bae9498a590446c32b.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880BR06_ModeTile_TDM_1024x512_878ba9f92deb153ec85f2bcbce925e185344290e.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880C2CM_Launch_In_Game_Subgame_PropHunt_512x1024_c84b714dc3c2f4ec9dc966074c0c53deef2dc9.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880CM_LobbyTileArt_1024x512_fb48db36552ccb1ab4021b722ea29d515377cc.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880Fortnite_2Ffortnite_game_2Fbattleroyalenews_2F1140HF_2F8ball_MOTD_1024x512_1024x512_b8690a2ee91e5ccfc2c9ab23561be0dda6ee55.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880Fortnite_2Ffortnite_game_2Ftournaments_2F11BR_Arena_ModeTiles_Duos_1024x512_a431d8587eb87ad5630eada21b60bca9874d116a.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMSFiles9A71EB4A90946A4A0D9B7D82F48C55B49D0880Fortnite_2Ffortnite_game_2Ftournaments_2F11BR_Arena_ModeTiles_Solo_ModeTile_1024x512_6cee09d7bcf82ce3f32ca7c77ca04948121ce617.jpg
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirDMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMSc7dee411e20a44ab930f841e8d206b1b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_b6c60402a72e4081a6a47c641371c19f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_a22d837b6a2b46349421259c0a5411bf
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS3460cbe1c57d4a838ace32951a4d7171
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS7e2a66ce68554814b1bd0aa14351cd71
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMSc52c1f9246eb48ce9dade87be5a66f29
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_b800b911053c4906a5bd399f46ae0055
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedCloud47343f26116f49d1a460ad740dc2bbbbClientSettings.Sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogs_
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsPortalRegions.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigCrashReportClientUE4CC_Windows_3F785CCB48B0E4F697FA2DA1403F027ACrashReportClient.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigCrashReportClientUE4CC_Windows_D36903E04AEBB495D1D6A58F05AC6671CrashReportClient.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedConfigCrashReportClientUE4CC_Windows_F219A7F84FE8B0694E2FACB917EF2D34CrashReportClient.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedData47d12477ed4c40cab8623c53ea967927.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogsEpicGamesLauncher_backup_2020.01.28_07.02.36.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogsEpicGamesLauncher_backup_2020.01.28_09.00.40.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogsEpicGamesLauncher_backup_2020.01.28_09.00.50.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogsEpicGamesLauncher_2.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogsSelfUpdatePrereqInstall.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedLogsSelfUpdatePrereqInstall_0_PortalPrereqSetup.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbLOG.old
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheLocal_Storagehttps_www.epicgames.com_0.localstorage_journal
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f16dfe4cbf_2643_41f6_977a_7f1e6f36a2f2index_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabaseLOG.old
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache2cc80dabc69f58b6_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache2cc80dabc69f58b6_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedHardwareSurveydxdiag.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsCompat.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsEditorPerProjectUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsEngine.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsMessagingDebugger.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsPortalRegions.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsScalability.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsUdpMessaging.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsXCodeSourceCodeAccess.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_Common_FilesBattlEye
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_Common_FilesBattlEyeBEDaisy.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_CommonFilesBattlEyeBEDaisy.sys_
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_EasyAntiCheat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_EasyAntiCheatEasyAntiCheat.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_Epic_GamesLauncherEngineProgramsCrashReportClientConfigDefaultEngine.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_Epic_GamesLauncherVaultCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_EpicGamesLauncherPortalBinariesWin32
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_EpicGamesLauncherPortalBinariesWin32_
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigBase.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigBaseGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigBaseInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsBaseWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigWindowsWindowsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherPortalConfigUserLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherEngineConfigBaseHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherPortalConfigNotForLicenseesWindowsWindowsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files_x86_Epic_GamesLauncherPortalConfigUserScalability.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortnite1FortniteGamePersistentDownloadDirCMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortnite1FortniteGamePersistentDownloadDirEMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEngineConfigNoRedistWindowsShippableWindowsGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEnginePlugins
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEnginePluginsCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEnginePluginsEditorCryptoKeysAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteEnginePluginsEditorCurveEditorToolsAssetRegistry.bin
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64FortniteClient_Win64_Shipping.exe.local
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64SharedFiles:VersionCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64XSettings.Sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGameConfig
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1d7fef8f9_801d_49d9_a684_6babe0ef53ca
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1d7fef8f9_801d_49d9_a684_6babe0ef53ca_
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1d7fef8f9_801d_49d9_a684_6babe0ef53caindex
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1d7fef8f9_801d_49d9_a684_6babe0ef53caindex_dir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1d7fef8f9_801d_49d9_a684_6babe0ef53caindex_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1e6a49143_8892_41ce_8a92_f2ec698a4ab8
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1e6a49143_8892_41ce_8a92_f2ec698a4ab8index_dir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1e6a49143_8892_41ce_8a92_f2ec698a4ab8index_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1_f825e79d_e5c6_4583_ad21_9af36ff4ec56
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1_f825e79d_e5c6_4583_ad21_9af36ff4ec56_
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1_f825e79d_e5c6_4583_ad21_9af36ff4ec56index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1_f825e79d_e5c6_4583_ad21_9af36ff4ec56index_dir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1_f825e79d_e5c6_4583_ad21_9af36ff4ec56index_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1index.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabase000003.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabaseCURRENT
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabaseLOCK
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStorage
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f15dbdef24_37ef_4a7a_ba75_ee9bc4a22645
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f15dbdef24_37ef_4a7a_ba75_ee9bc4a22645index_dir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1_b90b1134_2a94_4983_be85_2c213daffc4d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1_b90b1134_2a94_4983_be85_2c213daffc4dindex_dir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1dacadf8b_e278_424e_8f13_649b4a298a56
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39ca108634434c91f1dacadf8b_e278_424e_8f13_649b4a298a56index_dir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabase
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCacheindex_dir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherHiddenWebhelperCacheService_WorkerScriptCacheindex_dir
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_FilesEpic_GamesFortniteFortniteGamePersistentDownloadDirCMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_ProgramDataEpicEpicGamesLauncherDataEMS_stage
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSaved
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedCloud
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedCloudd945f059b8b54aa58202ed2989bebfc8
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedConfig
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedConfigCrashReportClient
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedConfigCrashReportClientUE4CC_Windows_AED3596C4ADFAC4DB9E422A6546810D3
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedConfigWindowsClient
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedDemos
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedLMS
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedLogs
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncher_
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGame
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalFortniteGameSavedLMSManifest.sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_Username_AppDataLocalBattlEye
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Program_Files__x86_Epic_GamesLauncherPortalContentNew_UIWhite.png
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCacheindex
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCachedata_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCachedata_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCachedata_2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCachedata_3
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_f1cdccba37924bda_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_f1cdccba37924bda_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_ba23d8ecda68de77_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_ba23d8ecda68de77_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache67a473248953641b_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache67a473248953641b_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_fa813c9ad67834ac_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_fa813c9ad67834ac_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_b6c28cea6ed9dfc1_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_b6c28cea6ed9dfc1_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache013888a1cda32b90_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache297ecea5cebb5dfe_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache297ecea5cebb5dfe_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCached0757ff92c7cde0a_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCached0757ff92c7cde0a_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00004c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1c2ce0abb_57db_483b_84ed_93d43c206a528d46ab1a9ac0f366_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1c2ce0abb_57db_483b_84ed_93d43c206a525abee1ee2254817d_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000008
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000005
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000006
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000010
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000011
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000012
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000013
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000014
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000015
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f10356df83_3d29_4e29_b98c_1b42a5fc821e_fe0c4ca0c0cbe875_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000009
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000a
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbLOG.oldRF2b7b49.TMP
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbCURRENT
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbMANIFEST_000001
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldb000003.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00004d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1c2ce0abb_57db_483b_84ed_93d43c206a52c44640e897c9901e_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1c2ce0abb_57db_483b_84ed_93d43c206a52d6859a2166934330_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1c2ce0abb_57db_483b_84ed_93d43c206a52c44640e897c9901e_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1c2ce0abb_57db_483b_84ed_93d43c206a52d6859a2166934330_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000007
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCacheindex_dir_the_real_indexRF2b8e06.TMP
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1c2ce0abb_57db_483b_84ed_93d43c206a52index_dir_the_real_indexRF2b8e06.TMP
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str._systemdrive_Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f10356df83_3d29_4e29_b98c_1b42a5fc821eindex_dir_the_real_indexRF2b8e06.TMP
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherIntermediateConfigCoalescedSourceConfigsPortalRegions.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigCrashReportClientUE4CC_Windows_72CCB9004D132462217ECE948BC03CBECrashReportClient.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigCrashReportClientUE4CC_Windows_E3661BE544621B07B291448442161091CrashReportClient.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsCompat.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsEditorPerProjectUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsEngine.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsGame.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsHardware.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsInput.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsLightmass.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedConfigWindowsPortalRegions.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedData65f6b08d488442e694b1e23d152d971e.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedData_b371f0ee15b74eba84bd23830461130c.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedDataOC_65f6b08d488442e694b1e23d152d971e.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedDataOC_b371f0ee15b74eba84bd23830461130c.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedLogscef3.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedLogsEpicGamesLauncher.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedLogsEpicGamesLauncher_2.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCachedata_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCachedata_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCachedata_2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCachedata_3
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000001
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000002
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000004
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000005
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000006
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000007
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000008
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000009
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000a
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00000f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000010
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000011
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000012
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000013
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000014
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000015
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000016
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000017
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000018
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000019
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001a
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00001f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000020
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000021
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000022
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000023
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000024
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000025
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000026
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000027
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000028
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00002f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000030
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000031
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000032
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000033
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000034
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000035
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000036
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000037
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000038
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000039
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003a
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003c
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003d
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003e
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_00003f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000040
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000041
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000042
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000043
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000044
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000045
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCache_f_000046
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCacheindex
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCookies
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheCookies_journal
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcachedatabasesDatabases.db
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcachedatabasesDatabases.db_journal
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCachedata_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCachedata_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCachedata_2
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCachedata_3
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheGPUCacheindex
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldb000003.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbCURRENT
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbLOCK
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbLOG
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbLOG.old
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheIndexedDBhttps_www.epicgames.com_0.indexeddb.leveldbMANIFEST_000001
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheLocal_Storagehttps_payment_website_pci.ol.epicgames.com_0.localstorage
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheLocal_Storagehttps_payment_website_pci.ol.epicgames.com_0.localstorage_journal
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheLocal_Storagehttps_ssl.kaptcha.com_0.localstorage
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheLocal_Storagehttps_ssl.kaptcha.com_0.localstorage_journal
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheQuotaManager
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheQuotaManager_journal
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f15dff4910_44e7_4ef8_b06f_a66ce53e0e69_fe0c4ca0c0cbe875_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f15dff4910_44e7_4ef8_b06f_a66ce53e0e69index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f15dff4910_44e7_4ef8_b06f_a66ce53e0e69index_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1779a3f11_745c_419e_bb8b_5b6f2e7e0547index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1779a3f11_745c_419e_bb8b_5b6f2e7e0547index_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1e6f1282c_98d7_452b_bbde_050c09a949954bbf414005652440_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1e6f1282c_98d7_452b_bbde_050c09a94995index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1e6f1282c_98d7_452b_bbde_050c09a94995index_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e30f02f0723dc027b2_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e38b79e197c1500c11_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e3_a8a9373a71443d80_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e3_a8a9373a71443d80_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e3_be52f68b51029c9d_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e3eda4eea3ffd63d3b_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e3eda4eea3ffd63d3b_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e3index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1_f5fe54ed_e03a_40a0_80f8_d0350a52b7e3index_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerCacheStoragee60030e2e5440743857a39cacd108634434c91f1index.txt
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabase000003.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabaseCURRENT
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabaseLOCK
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabaseLOG
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabaseLOG.old
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerDatabaseMANIFEST_000001
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache013888a1cda32b90_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache013888a1cda32b90_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache2cc80dabc69f58b6_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache2cc80dabc69f58b6_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache4cb013792b196a35_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache4cb013792b196a35_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache67a473248953641b_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache67a473248953641b_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_b6c28cea6ed9dfc1_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_b6c28cea6ed9dfc1_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_ba23d8ecda68de77_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_ba23d8ecda68de77_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_f1cdccba37924bda_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_f1cdccba37924bda_1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCache_fa813c9ad67834ac_0
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCacheindex
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheService_WorkerScriptCacheindex_dir_the_real_index
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalEpicGamesLauncherSavedwebcacheVisited_Links
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedCloud65f6b08d488442e694b1e23d152d971eClientSettings.Sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedConfigCrashReportClientUE4CC_Windows_FA58D227408B75B949C1ECA1ABE0D4C7CrashReportClient.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedConfigWindowsClientGameUserSettings.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedDemosUnsavedReplay_2020.06.08_22.56.55.replay
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedLMSManifest.sav
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedLogsFortniteGame.log
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSCacheAccess.json
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D08802895B436A3CE70D8FCBBA971A99D7782F30E1715
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D08802A6A06259337531EA5101E9BD8818AE92450FCE4
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D08803FE1F488F87F34DD44870F1C28FEEF2E82324B1E
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880407DEAB1A83565509618D0A762FD07BB4889CA1A
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880611EBF87394DCC5D902B67C542206F029AE225F1
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D08806AB39DE3E2B3DFA4C3A8B927A27FE3BC4B60578E
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D08807F8F7208B7E299A57B1E6963C221C4A896A7A97B
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D08808C5C92275C748E36EF9BAF10D96D94275784622F
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880961B1FEC1E2362CF4FD638D26E622DE659AC92E9
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880AE2C6A4116D64799B1F8763C784FB0E70F7F0BFF
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880C6B9936C20CBD1BAC3492CDB1C9DE3942D67C703
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880D448A2D69B897D0CA64BC7EAD63C82B135B28C90
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880DFD1FBB2DEE6F543B86519B32AA15BE71656A59E
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880EF2FF9F36D089B164C185B6A2F674F7D4AED1C99
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880F005B0C18B5D2B42267BDF297A7FC7C62901554B
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880F127DEB22E390D0C299F3642BDF2B41D6E2A0B9C
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirCMSFiles9A71EB4A90946A4A0DCD9B7D82F48C55B49D0880F523678DF26F4E1038543E480569523090919F57
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS3460cbe1c57d4a838ace32951a4d7171
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS7e2a66ce68554814b1bd0aa14351cd71
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_a22d837b6a2b46349421259c0a5411bf
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_b6c60402a72e4081a6a47c641371c19f
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMS_b800b911053c4906a5bd399f46ae0055
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMSc52c1f9246eb48ce9dade87be5a66f29
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:Users_username_AppDataLocalFortniteGameSavedPersistentDownloadDirEMSc7dee411e20a44ab930f841e8d206b1b
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsSystem32_spp_store2.0data.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsSystem32_spp_store2.0_tokens.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsSystem32_spp_store2.0cachecache.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:UsersPublicLibrariesdesktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:ProgramData_ntuser.pol
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:UsersDefaultNTUSER.DAT
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsSystem32config_systemprofileAppDataLocalMicrosoftXboxLiveAuthStateCache.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsINFkeyboard.pnf
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsINF_netrasa.pnf
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.C:WindowsINF_netavpna.pnf
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x1c0], 0x278627f8
mov dword [rbp + 0x1c4], 0x27e927e1
mov dword [rbp + 0x1c8], 0x27ae27d6
mov dword [rbp + 0x1cc], 0x27ad27a5
mov dword [rbp + 0x1d0], 0x27b727b4
mov dword [rbp + 0x1d4], 0x27952799
mov dword [rbp + 0x1d8], 0x27bb27be
mov dword [rbp + 0x1dc], 0x27af27bd
mov dword [rbp + 0x1e0], 0x27ff27a6
mov dword [rbp + 0x1e4], 0x279227ff
mov dword [rbp + 0x1e8], 0x27a2278b
mov dword [rbp + 0x1ec], 0x27a427b8
mov dword [rbp + 0x1f0], 0x27a627b6
mov dword [rbp + 0x1f4], 0x27a22786
mov dword [rbp + 0x1f8], 0x27aa27b8
mov dword [rbp + 0x1fc], 0x278627bc
mov dword [rbp + 0x200], 0x27b227be
mov dword [rbp + 0x204], 0x278b27f0
mov dword [rbp + 0x208], 0x27bc278c
mov dword [rbp + 0x20c], 0x2787278a
mov dword [rbp + 0x210], 0x2786279a
mov dword [rbp + 0x214], 0x2787278a
mov dword [rbp + 0x218], 0x278c2795
mov dword [rbp + 0x21c], 0x278327c7
mov dword [rbp + 0x220], 0x278a2785
mov dword [rbp + 0x224], 0x278227b2
mov dword [rbp + 0x228], 0x27932780
xor eax, eax
mov word [rbp + 0x22c], ax
mov byte [rbp + 0x22e], 1
lea rcx, [rbp + 0x1c0]
call fcn.14000a110
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x410], 0x278627f8
mov dword [rbp + 0x414], 0x27e927e1
mov dword [rbp + 0x418], 0x27ae27d6
mov dword [rbp + 0x41c], 0x27ad27a5
mov dword [rbp + 0x420], 0x27b727b4
mov dword [rbp + 0x424], 0x27952799
mov dword [rbp + 0x428], 0x27bb27be
mov dword [rbp + 0x42c], 0x27af27bd
mov dword [rbp + 0x430], 0x27ff27a6
mov dword [rbp + 0x434], 0x279227ff
mov dword [rbp + 0x438], 0x27a2278b
mov dword [rbp + 0x43c], 0x27a427b8
mov dword [rbp + 0x440], 0x27a627b6
mov dword [rbp + 0x444], 0x27a22786
mov dword [rbp + 0x448], 0x27aa27b8
mov dword [rbp + 0x44c], 0x278627bc
mov dword [rbp + 0x450], 0x27b227be
mov dword [rbp + 0x454], 0x279927f0
mov dword [rbp + 0x458], 0x27bc279d
mov dword [rbp + 0x45c], 0x2787278a
mov dword [rbp + 0x460], 0x2786279a
mov dword [rbp + 0x464], 0x2787278a
mov dword [rbp + 0x468], 0x278c2795
mov dword [rbp + 0x46c], 0x278327c7
mov dword [rbp + 0x470], 0x278a2785
mov dword [rbp + 0x474], 0x278227b2
mov dword [rbp + 0x478], 0x27932780
xor eax, eax
mov word [rbp + 0x47c], ax
mov byte [rbp + 0x47e], 1
lea rcx, [rbp + 0x410]
call fcn.14000a110
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp], 0x278627f8
mov dword [rbp + 4], 0x27e927e1
mov dword [rbp + 8], 0x27ae27d6
mov dword [rbp + 0xc], 0x27ad27a5
mov dword [rbp + 0x10], 0x27b727b4
mov dword [rbp + 0x14], 0x27952799
mov dword [rbp + 0x18], 0x27bb27be
mov dword [rbp + 0x1c], 0x27af27bd
mov dword [rbp + 0x20], 0x27ff27a6
mov dword [rbp + 0x24], 0x279227ff
mov dword [rbp + 0x28], 0x27a2278b
mov dword [rbp + 0x2c], 0x27a427b8
mov dword [rbp + 0x30], 0x27a627b6
mov dword [rbp + 0x34], 0x27a22786
mov dword [rbp + 0x38], 0x27aa27b8
mov dword [rbp + 0x3c], 0x278627bc
mov dword [rbp + 0x40], 0x27b227be
mov dword [rbp + 0x44], 0x27b52781
mov dword [rbp + 0x48], 0x279927ba
mov dword [rbp + 0x4c], 0x278d2783
mov dword [rbp + 0x50], 0x27962782
mov dword [rbp + 0x54], 0x27c82781
mov dword [rbp + 0x58], 0x2786278e
mov dword [rbp + 0x5c], 0x27b5278f
mov dword [rbp + 0x60], 0x27832787
mov dword [rbp + 0x64], 0x278e
mov byte [rbp + 0x68], 1
lea rcx, [rbp]
call fcn.14000a140
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rsp + 0x20], 0x278627f8
mov dword [rsp + 0x24], 0x27e927e1
mov dword [rsp + 0x28], 0x27ae27d6
mov dword [rsp + 0x2c], 0x27ad27a5
mov dword [rsp + 0x30], 0x27b727b4
mov dword [rsp + 0x34], 0x27952799
mov dword [rsp + 0x38], 0x27bb27be
mov dword [rsp + 0x3c], 0x27af27bd
mov dword [rsp + 0x40], 0x27ff27a6
mov dword [rsp + 0x44], 0x279227ff
mov dword [rsp + 0x48], 0x27a2278b
mov dword [rsp + 0x4c], 0x27a427b8
mov dword [rsp + 0x50], 0x27a627b6
mov dword [rsp + 0x54], 0x27a22786
mov dword [rsp + 0x58], 0x27aa27b8
mov dword [rsp + 0x5c], 0x278627bc
mov dword [rsp + 0x60], 0x27b227be
mov dword [rsp + 0x64], 0x279927f0
mov dword [rsp + 0x68], 0x27bc279d
mov dword [rsp + 0x6c], 0x27962783
mov dword [rsp + 0x70], 0x2794278b
mov dword [rsp + 0x74], 0x27882784
mov dword [rsp + 0x78], 0x278127c9
mov dword [rsp + 0x7c], 0x278c2787
mov dword [rbp - 0x80], 0x278027b4
mov dword [rbp - 0x7c], 0x278d2782
xor eax, eax
mov word [rbp - 0x78], ax
mov byte [rbp - 0x76], 1
lea rcx, [rsp + 0x20]
call fcn.14000a170
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0xe0], 0x278627f8
mov dword [rbp + 0xe4], 0x27e927e1
mov dword [rbp + 0xe8], 0x27ae27d6
mov dword [rbp + 0xec], 0x27ad27a5
mov dword [rbp + 0xf0], 0x27b727b4
mov dword [rbp + 0xf4], 0x27952799
mov dword [rbp + 0xf8], 0x27bb27be
mov dword [rbp + 0xfc], 0x27af27bd
mov dword [rbp + 0x100], 0x27ff27a6
mov dword [rbp + 0x104], 0x279227ff
mov dword [rbp + 0x108], 0x27a2278b
mov dword [rbp + 0x10c], 0x27a427b8
mov dword [rbp + 0x110], 0x27a627b6
mov dword [rbp + 0x114], 0x27a22786
mov dword [rbp + 0x118], 0x27aa27b8
mov dword [rbp + 0x11c], 0x278627bc
mov dword [rbp + 0x120], 0x27b227be
mov dword [rbp + 0x124], 0x27bc2781
mov dword [rbp + 0x128], 0x278827ab
mov dword [rbp + 0x12c], 0x27832791
mov dword [rbp + 0x130], 0x27ca278d
mov dword [rbp + 0x134], 0x2788278c
mov dword [rbp + 0x138], 0x27b72781
mov dword [rbp + 0x13c], 0x27852785
mov dword [rbp + 0x140], 0x2788
mov byte [rbp + 0x144], 1
lea rcx, [rbp + 0xe0]
call fcn.14000a1a0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x150], 0x278627f8
mov dword [rbp + 0x154], 0x27e927e1
mov dword [rbp + 0x158], 0x27ae27d6
mov dword [rbp + 0x15c], 0x27ad27a5
mov dword [rbp + 0x160], 0x27b727b4
mov dword [rbp + 0x164], 0x27952799
mov dword [rbp + 0x168], 0x27bb27be
mov dword [rbp + 0x16c], 0x27af27bd
mov dword [rbp + 0x170], 0x27ff27a6
mov dword [rbp + 0x174], 0x279227ff
mov dword [rbp + 0x178], 0x27a2278b
mov dword [rbp + 0x17c], 0x27a427b8
mov dword [rbp + 0x180], 0x27a627b6
mov dword [rbp + 0x184], 0x27a22786
mov dword [rbp + 0x188], 0x27aa27b8
mov dword [rbp + 0x18c], 0x278627bc
mov dword [rbp + 0x190], 0x27b227be
mov dword [rbp + 0x194], 0x278b27f0
mov dword [rbp + 0x198], 0x27bc278c
mov dword [rbp + 0x19c], 0x27962783
mov dword [rbp + 0x1a0], 0x2794278b
mov dword [rbp + 0x1a4], 0x27882784
mov dword [rbp + 0x1a8], 0x278127c9
mov dword [rbp + 0x1ac], 0x278c2787
mov dword [rbp + 0x1b0], 0x278027b4
mov dword [rbp + 0x1b4], 0x278d2782
xor eax, eax
mov word [rbp + 0x1b8], ax
mov byte [rbp + 0x1ba], 1
lea rcx, [rbp + 0x150]
call fcn.14000a170
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x2b0], 0x278627f8
mov dword [rbp + 0x2b4], 0x27e927e1
mov dword [rbp + 0x2b8], 0x27ae27d6
mov dword [rbp + 0x2bc], 0x27ad27a5
mov dword [rbp + 0x2c0], 0x27b727b4
mov dword [rbp + 0x2c4], 0x27952799
mov dword [rbp + 0x2c8], 0x27bb27be
mov dword [rbp + 0x2cc], 0x27af27bd
mov dword [rbp + 0x2d0], 0x27ff27a6
mov dword [rbp + 0x2d4], 0x279227ff
mov dword [rbp + 0x2d8], 0x27a2278b
mov dword [rbp + 0x2dc], 0x27a427b8
mov dword [rbp + 0x2e0], 0x27a627b6
mov dword [rbp + 0x2e4], 0x27a22786
mov dword [rbp + 0x2e8], 0x27aa27b8
mov dword [rbp + 0x2ec], 0x278627bc
mov dword [rbp + 0x2f0], 0x27b227be
mov dword [rbp + 0x2f4], 0x279927f0
mov dword [rbp + 0x2f8], 0x27bc279d
mov dword [rbp + 0x2fc], 0x2787278f
mov dword [rbp + 0x300], 0x27922797
mov dword [rbp + 0x304], 0x278f2792
mov dword [rbp + 0x308], 0x27812781
mov dword [rbp + 0x30c], 0x279a2784
mov dword [rbp + 0x310], 0x278527c5
mov dword [rbp + 0x314], 0x27882783
mov dword [rbp + 0x318], 0x279c27b0
mov dword [rbp + 0x31c], 0x2791279e
xor eax, eax
mov word [rbp + 0x320], ax
mov byte [rbp + 0x322], 1
lea rcx, [rbp + 0x2b0]
call fcn.14000a1d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x70], 0x278627f8
mov dword [rbp + 0x74], 0x27e927e1
mov dword [rbp + 0x78], 0x27ae27d6
mov dword [rbp + 0x7c], 0x27ad27a5
mov dword [rbp + 0x80], 0x27b727b4
mov dword [rbp + 0x84], 0x27952799
mov dword [rbp + 0x88], 0x27bb27be
mov dword [rbp + 0x8c], 0x27af27bd
mov dword [rbp + 0x90], 0x27ff27a6
mov dword [rbp + 0x94], 0x279227ff
mov dword [rbp + 0x98], 0x27a2278b
mov dword [rbp + 0x9c], 0x27a427b8
mov dword [rbp + 0xa0], 0x27a627b6
mov dword [rbp + 0xa4], 0x27a22786
mov dword [rbp + 0xa8], 0x27aa27b8
mov dword [rbp + 0xac], 0x278627bc
mov dword [rbp + 0xb0], 0x27b227be
mov dword [rbp + 0xb4], 0x27b02781
mov dword [rbp + 0xb8], 0x279427ba
mov dword [rbp + 0xbc], 0x27952797
mov dword [rbp + 0xc0], 0x2782278a
mov dword [rbp + 0xc4], 0x278b278c
mov dword [rbp + 0xc8], 0x27c62797
mov dword [rbp + 0xcc], 0x27842780
mov dword [rbp + 0xd0], 0x27b3278d
mov dword [rbp + 0xd4], 0x27812781
mov dword [rbp + 0xd8], 0x278c
mov byte [rbp + 0xdc], 1
lea rcx, [rbp + 0x70]
call fcn.14000a200
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x230], 0x278627f8
mov dword [rbp + 0x234], 0x27e927e1
mov dword [rbp + 0x238], 0x27ae27d6
mov dword [rbp + 0x23c], 0x27ad27a5
mov dword [rbp + 0x240], 0x27b727b4
mov dword [rbp + 0x244], 0x27952799
mov dword [rbp + 0x248], 0x27bb27be
mov dword [rbp + 0x24c], 0x27af27bd
mov dword [rbp + 0x250], 0x27ff27a6
mov dword [rbp + 0x254], 0x279227ff
mov dword [rbp + 0x258], 0x27a2278b
mov dword [rbp + 0x25c], 0x27a427b8
mov dword [rbp + 0x260], 0x27a627b6
mov dword [rbp + 0x264], 0x27a22786
mov dword [rbp + 0x268], 0x27aa27b8
mov dword [rbp + 0x26c], 0x278627bc
mov dword [rbp + 0x270], 0x27b227be
mov dword [rbp + 0x274], 0x278b27f0
mov dword [rbp + 0x278], 0x27bc278c
mov dword [rbp + 0x27c], 0x2787278f
mov dword [rbp + 0x280], 0x27922797
mov dword [rbp + 0x284], 0x278f2792
mov dword [rbp + 0x288], 0x27812781
mov dword [rbp + 0x28c], 0x279a2784
mov dword [rbp + 0x290], 0x278527c5
mov dword [rbp + 0x294], 0x27882783
mov dword [rbp + 0x298], 0x279c27b0
mov dword [rbp + 0x29c], 0x2791279e
xor eax, eax
mov word [rbp + 0x2a0], ax
mov byte [rbp + 0x2a2], 1
lea rcx, [rbp + 0x230]
call fcn.14000a1d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x3a0], 0x278627f8
mov dword [rbp + 0x3a4], 0x27e927e1
mov dword [rbp + 0x3a8], 0x27ae27d6
mov dword [rbp + 0x3ac], 0x27ad27a5
mov dword [rbp + 0x3b0], 0x27b727b4
mov dword [rbp + 0x3b4], 0x27952799
mov dword [rbp + 0x3b8], 0x27bb27be
mov dword [rbp + 0x3bc], 0x27af27bd
mov dword [rbp + 0x3c0], 0x27ff27a6
mov dword [rbp + 0x3c4], 0x279227ff
mov dword [rbp + 0x3c8], 0x27a2278b
mov dword [rbp + 0x3cc], 0x27a427b8
mov dword [rbp + 0x3d0], 0x27a627b6
mov dword [rbp + 0x3d4], 0x27a22786
mov dword [rbp + 0x3d8], 0x27aa27b8
mov dword [rbp + 0x3dc], 0x278627bc
mov dword [rbp + 0x3e0], 0x27b227be
mov dword [rbp + 0x3e4], 0x279927f0
mov dword [rbp + 0x3e8], 0x27bc279d
mov dword [rbp + 0x3ec], 0x27d72783
mov dword [rbp + 0x3f0], 0x278a27d4
mov dword [rbp + 0x3f4], 0x27d02781
mov dword [rbp + 0x3f8], 0x278927d7
mov dword [rbp + 0x3fc], 0x278327c7
mov dword [rbp + 0x400], 0x278a2785
mov dword [rbp + 0x404], 0x278227b2
mov dword [rbp + 0x408], 0x27932780
xor eax, eax
mov word [rbp + 0x40c], ax
mov byte [rbp + 0x40e], 1
lea rcx, [rbp + 0x3a0]
call fcn.14000a110
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp - 0x70], 0x278627f8
mov dword [rbp - 0x6c], 0x27e927e1
mov dword [rbp - 0x68], 0x27ae27d6
mov dword [rbp - 0x64], 0x27ad27a5
mov dword [rbp - 0x60], 0x27b727b4
mov dword [rbp - 0x5c], 0x27952799
mov dword [rbp - 0x58], 0x27bb27be
mov dword [rbp - 0x54], 0x27af27bd
mov dword [rbp - 0x50], 0x27ff27a6
mov dword [rbp - 0x4c], 0x279227ff
mov dword [rbp - 0x48], 0x27a2278b
mov dword [rbp - 0x44], 0x27a427b8
mov dword [rbp - 0x40], 0x27a627b6
mov dword [rbp - 0x3c], 0x27a22786
mov dword [rbp - 0x38], 0x27aa27b8
mov dword [rbp - 0x34], 0x278627bc
mov dword [rbp - 0x30], 0x27b227be
mov dword [rbp - 0x2c], 0x27bc2781
mov dword [rbp - 0x28], 0x27d727ea
mov dword [rbp - 0x24], 0x2786278f
mov dword [rbp - 0x20], 0x27d427d5
mov dword [rbp - 0x1c], 0x27c82784
mov dword [rbp - 0x18], 0x2786278e
mov dword [rbp - 0x14], 0x27b5278f
mov dword [rbp - 0x10], 0x27832787
mov dword [rbp - 0xc], 0x278e
xor r12d, r12d
mov byte [rbp - 8], 1
lea rcx, [rbp - 0x70]
call fcn.14000a140
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [rbp + 0x330], 0x278627f8
mov dword [rbp + 0x334], 0x27e927e1
mov dword [rbp + 0x338], 0x27ae27d6
mov dword [rbp + 0x33c], 0x27ad27a5
mov dword [rbp + 0x340], 0x27b727b4
mov dword [rbp + 0x344], 0x27952799
mov dword [rbp + 0x348], 0x27bb27be
mov dword [rbp + 0x34c], 0x27af27bd
mov dword [rbp + 0x350], 0x27ff27a6
mov dword [rbp + 0x354], 0x279227ff
mov dword [rbp + 0x358], 0x27a2278b
mov dword [rbp + 0x35c], 0x27a427b8
mov dword [rbp + 0x360], 0x27a627b6
mov dword [rbp + 0x364], 0x27a22786
mov dword [rbp + 0x368], 0x27aa27b8
mov dword [rbp + 0x36c], 0x278627bc
mov dword [rbp + 0x370], 0x27b227be
mov dword [rbp + 0x374], 0x278b27f0
mov dword [rbp + 0x378], 0x27bc278c
mov dword [rbp + 0x37c], 0x27d72783
mov dword [rbp + 0x380], 0x278a27d4
mov dword [rbp + 0x384], 0x27d02781
mov dword [rbp + 0x388], 0x278927d7
mov dword [rbp + 0x38c], 0x278327c7
mov dword [rbp + 0x390], 0x278a2785
mov dword [rbp + 0x394], 0x278227b2
mov dword [rbp + 0x398], 0x27932780
mov word [rbp + 0x39c], r12w
mov byte [rbp + 0x39e], 1
lea rcx, [rbp + 0x330]
call fcn.14000a110
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:WindowsSystem32_spp_store2.0data.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:WindowsSystem32_spp_store2.0_tokens.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:WindowsSystem32_spp_store2.0cachecache.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:UsersPublicLibrariesdesktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:ProgramData_ntuser.pol
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:UsersDefaultNTUSER.DAT
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.D:WindowsSystem32config_systemprofileAppDataLocalMicrosoftXboxLiveAuthStateCache.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:WindowsSystem32_spp_store2.0data.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:WindowsSystem32_spp_store2.0_tokens.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:WindowsSystem32_spp_store2.0cachecache.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:UsersPublicLibrariesdesktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:ProgramData_ntuser.pol
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:UsersDefaultNTUSER.DAT
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.E:WindowsSystem32config_systemprofileAppDataLocalMicrosoftXboxLiveAuthStateCache.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:WindowsSystem32_spp_store2.0data.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:WindowsSystem32_spp_store2.0_tokens.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:WindowsSystem32_spp_store2.0cachecache.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:UsersPublicLibrariesdesktop.ini
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:ProgramData_ntuser.pol
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:UsersDefaultNTUSER.DAT
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
lea rcx, str.F:WindowsSystem32config_systemprofileAppDataLocalMicrosoftXboxLiveAuthStateCache.dat
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.1400014a0
call fcn.140001480
lea rdx, str.___System_clean
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
mov rcx, rax
lea rdx, [0x14000a6e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400300f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
mov rcx, rax
lea rdx, [0x14000a6e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___Modifying_Regedit...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
mov rcx, rax
lea rdx, [0x14000a6e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___Modified_Regedit
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
mov rcx, rax
lea rdx, [0x14000a6e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400300f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
mov rcx, rax
lea rdx, [0x14000a6e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___Cleaning_Network...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
mov rcx, rax
lea rdx, [0x14000a6e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140001520
lea rdx, str.___Cleaned_Network
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
mov rcx, rax
lea rdx, [0x14000a6e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400300f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
mov rcx, rax
lea rdx, [0x14000a6e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._Risk_option__Do_you_want_to_reset_adapters__Y_N_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000a510
lea rcx, str.pause___nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor eax, eax
mov rcx, qword [rbp + 0x8da0]
xor rcx, rsp
call fcn.14000ac20
lea r11, [rsp + 0x8eb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret