Function at 0x140001f50
Capabilities:
Execute command
Self delete

Disassembly:
sub rsp, 0x28
call fcn.140001230
lea rcx, str.reg_delete__HKLMSYSTEMControlSet001ServicesEpicOnlineServices___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKCUSOFTWAREEpic_Games___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSOFTWAREClassescom.epicgames.launcher___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMControlSet001ServicesBEService___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMControlSet001ServicesBEDaisy___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMControlSet001ServicesEasyAntiCheat___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesBEService___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesBEDaisy___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheat___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSOFTWAREWOW6432NodeEasyAntiCheat___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSOFTWAREWOW6432NodeEpic_Games___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoremicrophoneNonPackaged___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSOFTWAREMicrosoftRADARHeapLeakDetectionDiagnosedApplications___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKCUSoftwareMicrosoftWindowsShellAssociationsUrlAssociationscom.epicgames.launcher___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKCRcom.epicgames.eos___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSOFTWAREMicrosoftRADARHeapLeakDetectionDiagnosedApplications___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSOFTWAREEpicGames___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKEY_USERSS_1_5_18SoftwareEpic_Games___f___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Users_username_AppDataLocalEpicGamesLauncher____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Users_username_AppDataLocalFortniteGame____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Users_username_AppDataLocalEpic_Games____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Users_username_AppDataLocalNVIDIA_Corporation____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Users_username_AppDataRoamingEasyAntiCheat____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_UsersAll_UsersEpicEpicGamesLauncherDataEMScurrent____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Users_username_AppDataLocalUnrealEngine____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Users_username_AppDataLocalUnrealEngineLauncher____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_ProgramDataEpicEpicOnlineServices____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_ProgramDataEpicEpicGamesLauncherDataEMScurrent____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Program_Files__x86_Epic_GamesEpic_Online_Services_service____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64Shared_Files____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Program_Files__x86_Common_FilesBattlEye____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__S__Q___systemdrive_Program_Files__x86_EasyAntiCheat____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.RMDIR__s__Q___systemdrive__Recycle.bin____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.el__q___systemdrive_ProgramDataMicrosoftWindowsWERTemp____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_ProgramDataMicrosoftWindowsWERTemp___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Users_username_AppDataLocalTemp____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Users_username_AppDataLocalTemp___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_WindowsTemp____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_WindowsTemp___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_WindowsTEMP____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_WindowsTEMP___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Windows_temp____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Windows_temp___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Program_Files__x86_Temp____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Program_Files__x86_Temp___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_WindowsLogs____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_WindowsLogs___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Users_username_AppDataLocalD3DSCache____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Users_username_AppDataLocalD3DSCache___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Users_username_AppDataLocalCrashReportClient____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Users_username_AppDataLocalCrashReportClient___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_WindowsPrefetch____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_WindowsPrefetch___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Users_username_Recent____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Users_username_Recent___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Users_username_AppDataLocalAMD____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Users_username_AppDataLocalAMD___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Users_username_AppDataLocalAMD_Common____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Users_username_AppDataLocalAMD_Common___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__q___systemdrive_Users_username_AppDataLocalMicrosoftFeeds____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.for__d__x_in____systemdrive_Users_username_AppDataLocalMicrosoftFeeds___do__rd__s__q___x____nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCookies___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsHistory___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_Users_username_AppDataLocalMicrosoftWindowsINetCache___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_Users_username_AppDataLocalTemp___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_WindowsTemp___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_WindowsPrefetch___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_Temp___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.etl___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.log___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.tmp___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.old___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.bak___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.bac___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.bup___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.chk___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.dmp___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.temp___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesBEService__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesBEService__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesEasyAntiCheat__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEasyAntiCheat__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Program_Files__x86_Common_FilesBattlEyeBEService.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Program_Files__x86_Common_FilesBattlEyeBEService_fn.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalAMDCNGameReportFortniteClient_Win64_Shipping.exegpa.bin_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalAMDDxCache92b1da15789e5451b49097cdafa85ec0f45214d6b0df9e8d.bin_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalAMDDxCache92b1da15789e5451e900a9bc20b57cd2f45214d6b0df9e8d.bin_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalAMDcl.cachex64Version_2.1_AMD_APP__3380.6_.Ellesmere.cache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalD3DSCachee4548a4577c56a8452264C4C_172F_41B9_91B8_7F0C3B1E9021_VEN_1002DEV_67DFSUBSYS_C580REV_E7.idx_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalD3DSCachee4548a4577c56a8452264C4C_172F_41B9_91B8_7F0C3B1E9021_VEN_1002DEV_67DFSUBSYS_C580REV_E7.lock_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalD3DSCachee4548a4577c56a8452264C4C_172F_41B9_91B8_7F0C3B1E9021_VEN_1002DEV_67DFSUBSYS_C580REV_E7.val_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalNVIDIA_CorporationGfeSDKFortniteClient_Win64_Shipping_12856.log_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalMicrosoftWindowsINetCookies_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalMicrosoftWindowsHistory_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalMicrosoftWindowsINetCache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000b560]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsPrefetch_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Temp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.etl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.log
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.tmp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.old
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.bak
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.bac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.bup
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.chk
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str._q__systemdrive_.dmp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__systemdrive_.temp
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalTemp_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:WindowsPrefetch_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Program_Files__x86_EasyAntiCheat_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalEpicGamesLauncher_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Program_Files__x86_Common_FilesBattlEye_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalAMDCNGameReport_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalAMDCNGameReportFortniteClient_Win64_Shipping.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalAMDcl.cache_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalAMDcl.cachex64_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalD3DSCachee4548a4577c56a84_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalNVIDIA_CorporationGfeSDK_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalUnrealEngine5.0_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalCrashReportClient_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__f__s__q__C:Users_username_AppDataLocalFortniteGame_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSOFTWAREWOW6432NodeEasyAntiCheat___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServices_bamStateUserSettingsS_1_5_21_2532382528_581214834_2534474248_1001DeviceHarddiskVolume3Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64FortniteClient_Win64_Shipping_EAC.exe:__B1_8A_B0_E9_8D_13_D5_01_00_00_00_00_00_00_00_00_00_00_00_00_02_00_00_00___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServices_bamStateUserSettingsS_1_5_21_2532382528_581214834_2534474248_1001DeviceHarddiskVolume3Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64EasyAntiCheatEasyAntiCheat_Setup.exe:__73_D5_4B_11_8D_13_D5_01_00_00_00_00_00_00_00_00_00_00_00_00_02_00_00_00___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServices_bamStateUserSettingsS_1_5_21_2532382528_581214834_2534474248_1001DeviceHarddiskVolume3Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64FortniteClient_Win64_Shipping.exe:__E7_CB_84_E9_8D_13_D5_01_00_00_00_00_00_00_00_00_00_00_00_00_02_00_00_00___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatType:_0x00000010___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatStart:_0x00000003___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatErrorControl:_0x00000001___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatImagePath:___systemdrive_Program_Files__x86_EasyAntiCheatEasyAntiCheat.exe____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatDisplayName:__EasyAntiCheat____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatWOW64:_0x0000014C___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatObjectName:__LocalSystem____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatDescription:__Provides_integrated_security_and_services_for_online_multiplayer_games.___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete__HKLMSYSTEMCurrentControlSetServicesEasyAntiCheatSecuritySecurity:__01_00_14_80_A0_00_00_00_AC_00_00_00_14_00_00_00_30_00_00_00_02_00_1C_00_01_00_00_00_02_80_14_00_FF_01_0F_00_01_01_00_00_00_00_00_01_00_00_00_00_02_00_70_00_05_00_00_00_00_00_14_00_30_00_02_00_01_01_00_00_00_00_00_01_00_00_00_00_00_00_14_00_FD_01_02_00_01_01_00_00_00_00_00_05_12_00_00_00_00_00_18_00_FF_01_0F_00_01_02_00_00_00_00_00_05_20_00_00_00_20_02_00_00_00_00_14_00_8D_01_02_00_01_01_00_00_00_00_00_05_04_00_00_00_00_00_14_00_8D_01_02_00_01_01_00_00_00_00_00_05_06_00_00_00_01_01_00_00_00_00_00_05_12_00_00_00_01_01_00_00_00_00_00_05_12_00_00_00___f_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_reset___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r9d, r9d
lea r8, str.Shadow
lea rdx, str.Clean_Done
xor ecx, ecx
add rsp, 0x28
jmp qword [sym.imp.USER32.dll_MessageBoxA]