Function at 0x18000c974
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov byte [rbp - 0x20], 0x7a
xor r15d, r15d
mov byte [rbp - 0x1f], 0x7b
mov r14, rcx
mov byte [rbp - 0x1e], 0x6c
mov ecx, r15d
mov byte [rbp - 0x1d], 0x68
mov byte [rbp - 0x1c], reloc.WS2_32.dll_WSACleanup
lea r12d, [r15 + 1]
mov byte [rbp - 0x1b], 0x66
mov byte [rbp - 0x1a], 0x68
mov byte [rbp - 0x19], 0x77
mov byte [rbp - 0x18], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x17], 0x35
mov byte [rbp - 0x16], 0x7b
mov byte [rbp - 0x15], 0x75
mov byte [rbp - 0x14], WSACleanup
mov byte [rbp - 0x13], r15b
mov al, byte [rbp - 0x20]
mov al, byte [rbp + rcx - 0x20]
sub al, 7
mov byte [rbp + rcx - 0x20], al
add rcx, r12
cmp rcx, 0xd
jb 0x18000c9d5
lea rax, [rbp - 0x20]
mov rcx, r15
mov qword [rbp - 0x10], rax
mov byte [rbp - 0x20], 0x78
mov byte [rbp - 0x1f], 0x79
mov byte [rbp - 0x1e], 0x6a
mov byte [rbp - 0x1d], 0x66
mov byte [rbp - 0x1c], WSACleanup
mov byte [rbp - 0x1b], 0x64
mov byte [rbp - 0x1a], 0x66
mov byte [rbp - 0x19], 0x75
mov byte [rbp - 0x18], WSASetLastError
mov byte [rbp - 0x17], 0x3b
mov byte [rbp - 0x16], 0x39
mov byte [rbp - 0x15], 0x33
mov byte [rbp - 0x14], 0x79
mov byte [rbp - 0x13], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x12], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x11], r15b
mov al, byte [rbp - 0x20]
mov al, byte [rbp + rcx - 0x20]
sub al, 5
mov byte [rbp + rcx - 0x20], al
add rcx, r12
cmp rcx, 0xf
jb 0x18000ca36
lea rax, [rbp - 0x20]
mov rbx, r15
mov qword [rbp - 8], rax
mov rdi, qword [rbp + rbx*8 - 0x10]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, r12d
je 0x18000ca75
add rbx, r12
cmp rbx, 2
jl 0x18000ca54
jmp 0x18000ce1e
lea rdx, [0x1800c0ae8]
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_fopen]
xor edx, edx
mov rcx, rax
mov rsi, rax
lea r8d, [rdx + 2]
call qword [sym.imp.msvcrt.dll_fseek]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_ftell]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
movsxd rdi, eax
call qword [sym.imp.msvcrt.dll_fseek]
mov rcx, rdi
call fcn.180095794
mov r9, rsi
mov r8, r12
mov rdx, rdi
mov rcx, rax
mov rbx, rax
call qword [sym.imp.msvcrt.dll_fread]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_fclose]
mov r8, rdi
mov rdx, rbx
xor ecx, ecx
call fcn.18006ecd4
mov rcx, rbx
mov dword [rbp + 0x38], eax
mov edi, eax
call fcn.180095310
movabs r8, 0xcbf29ce484222325
mov rdx, r15
movzx ecx, byte [rbp + rdx + 0x38]
movabs rax, 0x100000001b3
xor r8, rcx
add rdx, r12
imul r8, rax
cmp rdx, 4
jb 0x18000cafe
mov rdx, qword [0x1801b8610]
mov r9, qword [0x1801b85f8]
and rdx, r8
mov r8, qword [0x1801b85e8]
mov rax, rdx
add rax, rax
mov rcx, qword [r9 + rax*8 + 8]
cmp rcx, r8
je 0x18000cb5e
add rdx, rdx
mov rax, qword [r9 + rdx*8]
jmp 0x18000cb57
cmp rcx, rax
je 0x18000cb5e
mov rcx, qword [rcx + 8]
cmp edi, dword [rcx + 0x10]
jne 0x18000cb4e
jmp 0x18000cb61
mov rcx, r15
test rcx, rcx
mov rax, r8
cmovne rax, rcx
cmp rax, r8
je 0x18000ce1e
lea rcx, [rax + 0x14]
cmp dword [r14 + 0x130], r15d
jne 0x18000cb8b
movzx eax, byte [rcx]
mov dword [r14 + 0x130], eax
add rcx, r12
cmp dword [r14 + 0x134], r15d
jne 0x18000cba1
movzx eax, byte [rcx]
mov dword [r14 + 0x134], eax
add rcx, r12
cmp dword [r14 + 0x138], r15d
jne 0x18000cbb7
movzx eax, byte [rcx]
mov dword [r14 + 0x138], eax
add rcx, r12
cmp dword [r14 + 0x13c], r15d
jne 0x18000cbcd
movzx eax, byte [rcx]
mov dword [r14 + 0x13c], eax
add rcx, r12
cmp dword [r14 + 0x140], r15d
jne 0x18000cbe3
movzx eax, byte [rcx]
mov dword [r14 + 0x140], eax
add rcx, r12
cmp dword [r14 + 0x19c], r15d
jne 0x18000cbf9
movzx eax, byte [rcx]
mov dword [r14 + 0x19c], eax
add rcx, r12
cmp dword [r14 + 0x144], r15d
jne 0x18000cc0f
movzx eax, byte [rcx]
mov dword [r14 + 0x144], eax
add rcx, r12
cmp dword [r14 + 0x148], r15d
jne 0x18000cc25
movzx eax, byte [rcx]
mov dword [r14 + 0x148], eax
add rcx, r12
cmp dword [r14 + 0x14c], r15d
jne 0x18000cc3b
movzx eax, byte [rcx]
mov dword [r14 + 0x14c], eax
add rcx, r12
cmp dword [r14 + 0x150], r15d
jne 0x18000cc51
movzx eax, byte [rcx]
mov dword [r14 + 0x150], eax
add rcx, r12
cmp dword [r14 + 0x198], r15d
jne 0x18000cc67
movzx eax, byte [rcx]
mov dword [r14 + 0x198], eax
add rcx, r12
cmp dword [r14 + 0x154], r15d
jne 0x18000cc7d
movzx eax, byte [rcx]
mov dword [r14 + 0x154], eax
add rcx, r12
cmp dword [r14 + 0x158], r15d
jne 0x18000cc93
movzx eax, byte [rcx]
mov dword [r14 + 0x158], eax
add rcx, r12
cmp dword [r14 + 0x15c], r15d
jne 0x18000cca9
movzx eax, byte [rcx]
mov dword [r14 + 0x15c], eax
add rcx, r12
cmp dword [r14 + 0x160], r15d
jne 0x18000ccbf
movzx eax, byte [rcx]
mov dword [r14 + 0x160], eax
add rcx, r12
cmp dword [r14 + 0x164], r15d
jne 0x18000ccd5
movzx eax, byte [rcx]
mov dword [r14 + 0x164], eax
add rcx, r12
cmp dword [r14 + 0x168], r15d
jne 0x18000cceb
movzx eax, byte [rcx]
mov dword [r14 + 0x168], eax
add rcx, r12
cmp dword [r14 + 0x16c], r15d
jne 0x18000cd01
movzx eax, byte [rcx]
mov dword [r14 + 0x16c], eax
add rcx, r12
cmp dword [r14 + 0x1a8], r15d
jne 0x18000cd17
movzx eax, byte [rcx]
mov dword [r14 + 0x1a8], eax
add rcx, r12
cmp dword [r14 + 0x1ac], r15d
jne 0x18000cd2d
movzx eax, byte [rcx]
mov dword [r14 + 0x1ac], eax
add rcx, r12
cmp dword [r14 + 0x1b0], r15d
jne 0x18000cd43
movzx eax, byte [rcx]
mov dword [r14 + 0x1b0], eax
add rcx, r12
cmp dword [r14 + 0x1a0], r15d
jne 0x18000cd59
movzx eax, byte [rcx]
mov dword [r14 + 0x1a0], eax
add rcx, r12
cmp dword [r14 + 0x1a4], r15d
jne 0x18000cd6f
movzx eax, byte [rcx]
mov dword [r14 + 0x1a4], eax
add rcx, r12
cmp dword [r14 + 0x170], r15d
jne 0x18000cd85
movzx eax, byte [rcx]
mov dword [r14 + 0x170], eax
add rcx, r12
cmp dword [r14 + 0x174], r15d
jne 0x18000cd9b
movzx eax, byte [rcx]
mov dword [r14 + 0x174], eax
add rcx, r12
cmp dword [r14 + 0x178], r15d
jne 0x18000cdb1
movzx eax, byte [rcx]
mov dword [r14 + 0x178], eax
add rcx, r12
cmp dword [r14 + 0x17c], r15d
jne 0x18000cdc7
movzx eax, byte [rcx]
mov dword [r14 + 0x17c], eax
add rcx, r12
cmp dword [r14 + 0x180], r15d
jne 0x18000cddd
movzx eax, byte [rcx]
mov dword [r14 + 0x180], eax
add rcx, r12
cmp dword [r14 + 0x184], r15d
jne 0x18000cdf3
movzx eax, byte [rcx]
mov dword [r14 + 0x184], eax
cmp dword [r14 + 0x188], r15d
jne 0x18000ce08
movzx eax, byte [rcx + r12]
mov dword [r14 + 0x188], eax
cmp dword [r14 + 0x18c], r15d
jne 0x18000ce1e
movzx eax, byte [rcx + r12 + 1]
mov dword [r14 + 0x18c], eax
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret