Function at 0x63cbb0
Capabilities:
Delete file
Hash data with crc32

Disassembly:
push rbp
push rbx
sub rsp, 0xe8
mov rbp, rsp
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0x88], rbp
mov qword [rbp + 0x100], rcx
mov qword [rbp + 0x108], rdx
mov dword [rbp + 0x110], r8d
mov rcx, qword [rbp + 0x100]
call fcn.0040e210
nop
mov eax, dword [rbp + 0x110]
mov dword [rbp + 0xb4], eax
lea rcx, [rbp + 0xc0]
mov rdx, qword [0x0063cb70]
mov r8d, 1
mov r9d, dword [rbp + 0xb4]
call fcn.00411ea0
mov rcx, qword [rbp + 0x108]
mov rdx, qword [rbp + 0xc0]
mov r8d, dword [rbp + 0xb4]
call fcn.00406200
mov rcx, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb4]
lea r8, [rbp + 0x98]
lea r9, [rbp + 0x94]
mov dword [rsp + 0x20], 0
call fcn.004f5b50
mov eax, dword [rbp + 0x94]
mov dword [rbp + 0xb4], eax
lea rcx, [rbp + 0xc0]
mov rdx, qword [0x0063cb70]
mov r8d, 1
mov r9d, dword [rbp + 0xb4]
call fcn.00411ea0
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rbp + 0xc0]
mov r8d, dword [rbp + 0xb4]
call fcn.00406200
mov dword [rbp + 0xb0], 0xffffffff
mov dword [rbp + 0xcc], 0
mov dword [rbp + 0xd0], 0
jmp 0x63cdb8
mov eax, dword [rbp + 0xb4]
sub eax, 0x11bb
cmp dword [rbp + 0xd0], eax
jge 0x63cd72
cmp dword [rbp + 0xcc], 0
jne 0x63cd72
movsxd rax, dword [rbp + 0xd0]
mov rcx, qword [rbp + 0xc0]
add rcx, rax
mov rdx, qword [0x00a8d930]
mov r8d, 0xa
call fcn.0042ade0
cmp al, 1
jne 0x63cd72
mov eax, dword [rbp + 0xd0]
mov dword [rbp + 0xcc], eax
add dword [rbp + 0xd0], 0x11bb
jmp 0x63cdb8
mov eax, dword [rbp + 0xb0]
shr eax, 8
mov rcx, qword [0x00a8d568]
mov rdx, qword [rbp + 0xc0]
movsxd r8, dword [rbp + 0xd0]
movzx rdx, byte [rdx + r8]
mov r8d, dword [rbp + 0xb0]
and r8d, 0xff
xor edx, r8d
mov edx, edx
xor eax, dword [rcx + rdx*4]
mov dword [rbp + 0xb0], eax
add dword [rbp + 0xd0], 1
mov eax, dword [rbp + 0xd0]
cmp eax, dword [rbp + 0xb4]
jl 0x63cd14
cmp dword [rbp + 0xcc], 0
jne 0x63ce09
lea rcx, [rbp + 0x80]
lea rdx, [0x0063d378]
mov r8, qword [rbp + 0x100]
call fcn.004102f0
mov cx, 1
mov rdx, qword [rbp + 0x80]
call fcn.0047cfa0
mov byte [rbp + 0xd7], 0
jmp 0x63d29f
not dword [rbp + 0xb0]
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rbp + 0xcc]
movzx rdx, byte [rbp + 0xb0]
mov byte [rax + rcx + 0xa], dl
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rbp + 0xcc]
movzx edx, word [rbp + 0xb0]
shr edx, 8
mov byte [rax + rcx + 0xb], dl
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rbp + 0xcc]
mov edx, dword [rbp + 0xb0]
shr edx, 0x10
mov byte [rax + rcx + 0xc], dl
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rbp + 0xcc]
mov edx, dword [rbp + 0xb0]
shr edx, 0x10
movzx edx, dx
shr edx, 8
mov byte [rax + rcx + 0xd], dl
call fcn.00406520
mov eax, dword [rbp + 0xcc]
add eax, 0xe
mov ebx, dword [rbp + 0xcc]
add ebx, 0x11ac
mov dword [rbp + 0xd0], eax
cmp dword [rbp + 0xd0], ebx
jg 0x63ced7
add ebx, 1
mov ecx, pe_nt_image_headers64
call fcn.00406550
mov rcx, qword [rbp + 0xc0]
movsxd rdx, dword [rbp + 0xd0]
mov byte [rcx + rdx], al
add dword [rbp + 0xd0], 1
cmp dword [rbp + 0xd0], ebx
jne 0x63ceac
nop
mov rcx, qword [rbp + 0x100]
mov dl, 1
call fcn.0042cb00
cmp al, 1
jne 0x63d1e1
mov rcx, qword [rbp + 0x100]
lea rdx, [rbp + 0xd8]
lea r8, [rbp + 0xbc]
call fcn.0047fcd0
mov dword [rbp + 0xb8], eax
cmp dword [rbp + 0xb8], 0
je 0x63cf72
lea rcx, [rbp + 0x70]
mov edx, dword [rbp + 0xb8]
call fcn.00435d20
lea rcx, [rbp + 0x78]
mov edx, 4
lea r8, [0x0063d3a4]
mov r9, qword [rbp + 0x100]
lea rax, [0x0063d3d0]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.00410420
mov cx, 1
mov rdx, qword [rbp + 0x78]
call fcn.0047cfa0
mov byte [rbp + 0xd7], 0
jmp 0x63d29f
nop
mov dword [rbp + 0xac], 0xffffffff
mov dword [rbp + 0xcc], 0
mov dword [rbp + 0xd0], 0
mov rax, qword [rbp + 0xd8]
mov qword [rbp + 0xa0], rax
jmp 0x63d049
mov eax, dword [rbp + 0xbc]
sub eax, 0x11bb
cmp dword [rbp + 0xd0], eax
jge 0x63d003
cmp dword [rbp + 0xcc], 0
jne 0x63d003
mov rcx, qword [rbp + 0xa0]
mov rdx, qword [0x00a8d930]
mov r8d, 0xa
call fcn.0042ade0
cmp al, 1
jne 0x63d003
mov eax, dword [rbp + 0xd0]
mov dword [rbp + 0xcc], eax
add dword [rbp + 0xd0], 0x11bb
add qword [rbp + 0xa0], 0x11bb
jmp 0x63d049
mov eax, dword [rbp + 0xac]
shr eax, 8
mov rcx, qword [0x00a8d568]
mov rdx, qword [rbp + 0xa0]
movzx rdx, byte [rdx]
mov r8d, dword [rbp + 0xac]
and r8d, 0xff
xor edx, r8d
mov edx, edx
xor eax, dword [rcx + rdx*4]
mov dword [rbp + 0xac], eax
add dword [rbp + 0xd0], 1
add qword [rbp + 0xa0], 1
mov eax, dword [rbp + 0xd0]
cmp eax, dword [rbp + 0xbc]
jl 0x63cfa4
cmp dword [rbp + 0xcc], 0
je 0x63d106
not dword [rbp + 0xac]
mov rax, qword [rbp + 0xd8]
mov qword [rbp + 0xa0], rax
movsxd rax, dword [rbp + 0xcc]
add qword [rbp + 0xa0], rax
mov eax, dword [rbp + 0xb0]
cmp eax, dword [rbp + 0xac]
jne 0x63d12a
mov rax, qword [rbp + 0xa0]
movzx ax, byte [rax + 0xa]
mov rcx, qword [rbp + 0xa0]
movzx cx, byte [rcx + 0xb]
shl ecx, 8
or ax, cx
movzx eax, ax
mov rcx, qword [rbp + 0xa0]
movzx cx, byte [rcx + 0xc]
mov rdx, qword [rbp + 0xa0]
movzx dx, byte [rdx + 0xd]
shl edx, 8
or cx, dx
movzx ecx, cx
shl ecx, 0x10
or eax, ecx
cmp dword [rbp + 0xac], eax
jne 0x63d12a
mov byte [rbp + 0xd7], 1
xor rcx, rcx
mov rdx, qword [rbp + 0x88]
call fcn.0063d2e0
jmp 0x63d29f
lea rcx, [rbp + 0x68]
lea rdx, [0x0063d3e4]
mov r8, qword [rbp + 0x100]
call fcn.004102f0
mov cx, 1
mov rdx, qword [rbp + 0x68]
call fcn.0047cfa0
nop
mov rcx, qword [rbp + 0xd8]
call fcn.00405dd0
mov rcx, qword [rbp + 0x100]
mov edx, 7
call fcn.00480590
mov rcx, qword [rbp + 0x100]
call fcn.0040feb0
mov rcx, rax
call sub.kernel32.dll_DeleteFileW
mov rcx, qword [rbp + 0x100]
mov dl, 1
call fcn.0042cb00
cmp al, 1
jne 0x63d1e1
call sub.kernel32.dll_GetLastError_2
mov dword [rbp + 0xb8], eax
lea rcx, [rbp + 0x58]
mov edx, dword [rbp + 0xb8]
call fcn.00435d20
lea rcx, [rbp + 0x60]
mov edx, 5
lea r8, [0x0063d410]
mov r9, qword [rbp + 0x100]
lea rax, [0x0063d3d0]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [0x0063d448]
mov qword [rsp + 0x30], rax
call fcn.00410420
mov cx, 1
mov rdx, qword [rbp + 0x60]
call fcn.0047cfa0
mov byte [rbp + 0xd7], 0
jmp 0x63d29f
mov rcx, qword [rbp + 0x100]
mov edx, 0x20
mov r8, qword [rbp + 0xc0]
mov r9d, dword [rbp + 0xb4]
call fcn.0047fec0
mov dword [rbp + 0xb8], eax
cmp dword [rbp + 0xb8], 0
je 0x63d273
lea rcx, [rbp + 0x48]
mov edx, dword [rbp + 0xb8]
call fcn.00435d20
lea rcx, [rbp + 0x50]
mov edx, 5
lea r8, [0x0063d480]
mov r9, qword [rbp + 0x100]
lea rax, [0x0063d3d0]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [0x0063d448]
mov qword [rsp + 0x30], rax
call fcn.00410420
mov cx, 1
mov rdx, qword [rbp + 0x50]
call fcn.0047cfa0
mov byte [rbp + 0xd7], 0
jmp 0x63d29f
lea rcx, [rbp + 0x40]
lea rdx, [0x0063d4ac]
mov r8, qword [rbp + 0x100]
call fcn.004102f0
mov cx, 4
mov rdx, qword [rbp + 0x40]
call fcn.0047cfa0
mov byte [rbp + 0xd7], 1
nop
lea rcx, [rbp + 0x40]
mov edx, 9
call fcn.0040e160
lea rcx, [rbp + 0xc0]
mov rdx, qword [0x0063cb70]
call fcn.00412080
lea rcx, [rbp + 0x100]
call fcn.0040e080
movzx rax, byte [rbp + 0xd7]
lea rsp, [rbp + 0xe8]
pop rbx
pop rbp
ret