Function at 0x18000ca08
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x40
mov byte [rbp - 0x20], 0x80
xor r15d, r15d
mov byte [rbp - 0x1f], 0x81
mov r14, rcx
mov byte [rbp - 0x1e], WSACleanup
mov ecx, r15d
mov byte [rbp - 0x1d], WSASetLastError
mov byte [rbp - 0x1c], 0x7a
lea r12d, [r15 + 1]
mov byte [rbp - 0x1b], 0x6c
mov byte [rbp - 0x1a], WSASetLastError
mov byte [rbp - 0x19], 0x7d
mov byte [rbp - 0x18], 0x76
mov byte [rbp - 0x17], 0x3b
mov byte [rbp - 0x16], 0x81
mov byte [rbp - 0x15], 0x7b
mov byte [rbp - 0x14], 0x78
mov byte [rbp - 0x13], r15b
mov al, byte [rbp - 0x20]
mov al, byte [rbp + rcx - 0x20]
sub al, 0xd
mov byte [rbp + rcx - 0x20], al
add rcx, r12
cmp rcx, 0xd
jb 0x18000ca69
lea rax, [rbp - 0x20]
mov rcx, r15
mov qword [rbp - 0x10], rax
mov byte [rbp - 0x20], 0x7a
mov byte [rbp - 0x1f], 0x7b
mov byte [rbp - 0x1e], 0x6c
mov byte [rbp - 0x1d], 0x68
mov byte [rbp - 0x1c], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x1b], 0x66
mov byte [rbp - 0x1a], 0x68
mov byte [rbp - 0x19], 0x77
mov byte [rbp - 0x18], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x17], 0x3d
mov byte [rbp - 0x16], 0x3b
mov byte [rbp - 0x15], 0x35
mov byte [rbp - 0x14], 0x7b
mov byte [rbp - 0x13], 0x75
mov byte [rbp - 0x12], WSACleanup
mov byte [rbp - 0x11], r15b
mov al, byte [rbp - 0x20]
mov al, byte [rbp + rcx - 0x20]
sub al, 7
mov byte [rbp + rcx - 0x20], al
add rcx, r12
cmp rcx, 0xf
jb 0x18000caca
lea rax, [rbp - 0x20]
mov ebx, r15d
mov qword [rbp - 8], rax
lea rdi, [rbp - 0x10]
mov rsi, qword [rdi]
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, r12d
je 0x18000cb0e
add ebx, r12d
add rdi, 8
cmp ebx, 2
jb 0x18000caec
jmp 0x18000cecd
lea rdx, [0x1800c1b30]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_fopen]
xor edx, edx
mov rcx, rax
mov rsi, rax
lea r8d, [rdx + 2]
call qword [sym.imp.msvcrt.dll_fseek]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_ftell]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
movsxd rdi, eax
call qword [sym.imp.msvcrt.dll_fseek]
mov rcx, rdi
call fcn.180096328
mov r9, rsi
mov r8, r12
mov rdx, rdi
mov rcx, rax
mov rbx, rax
call qword [sym.imp.msvcrt.dll_fread]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_fclose]
mov r8, rdi
mov rdx, rbx
xor ecx, ecx
call fcn.18006f89c
mov rcx, rbx
mov dword [rbp + 0x38], eax
mov edi, eax
call fcn.180095ea4
movabs r8, 0xcbf29ce484222325
mov rdx, r15
movzx ecx, byte [rbp + rdx + 0x38]
movabs rax, 0x100000001b3
xor r8, rcx
add rdx, r12
imul r8, rax
cmp rdx, 4
jb 0x18000cb97
mov rdx, qword [0x1801ba6c0]
mov r9, qword [0x1801ba6a8]
and rdx, r8
mov r8, qword [0x1801ba698]
mov rax, rdx
add rax, rax
mov rcx, qword [r9 + rax*8 + 8]
cmp rcx, r8
je 0x18000cbf7
add rdx, rdx
mov rax, qword [r9 + rdx*8]
jmp 0x18000cbf0
cmp rcx, rax
je 0x18000cbf7
mov rcx, qword [rcx + 8]
cmp edi, dword [rcx + 0x10]
jne 0x18000cbe7
jmp 0x18000cbfa
mov rcx, r15
test rcx, rcx
mov rax, r8
cmovne rax, rcx
cmp rax, r8
je 0x18000cecd
lea rcx, [rax + 0x14]
cmp dword [r14 + 0x130], r15d
jne 0x18000cc24
movzx eax, byte [rcx]
mov dword [r14 + 0x130], eax
add rcx, r12
cmp dword [r14 + 0x134], r15d
jne 0x18000cc3a
movzx eax, byte [rcx]
mov dword [r14 + 0x134], eax
add rcx, r12
cmp dword [r14 + 0x138], r15d
jne 0x18000cc50
movzx eax, byte [rcx]
mov dword [r14 + 0x138], eax
add rcx, r12
cmp dword [r14 + 0x13c], r15d
jne 0x18000cc66
movzx eax, byte [rcx]
mov dword [r14 + 0x13c], eax
add rcx, r12
cmp dword [r14 + 0x140], r15d
jne 0x18000cc7c
movzx eax, byte [rcx]
mov dword [r14 + 0x140], eax
add rcx, r12
cmp dword [r14 + 0x19c], r15d
jne 0x18000cc92
movzx eax, byte [rcx]
mov dword [r14 + 0x19c], eax
add rcx, r12
cmp dword [r14 + 0x144], r15d
jne 0x18000cca8
movzx eax, byte [rcx]
mov dword [r14 + 0x144], eax
add rcx, r12
cmp dword [r14 + 0x148], r15d
jne 0x18000ccbe
movzx eax, byte [rcx]
mov dword [r14 + 0x148], eax
add rcx, r12
cmp dword [r14 + 0x14c], r15d
jne 0x18000ccd4
movzx eax, byte [rcx]
mov dword [r14 + 0x14c], eax
add rcx, r12
cmp dword [r14 + 0x150], r15d
jne 0x18000ccea
movzx eax, byte [rcx]
mov dword [r14 + 0x150], eax
add rcx, r12
cmp dword [r14 + 0x198], r15d
jne 0x18000cd00
movzx eax, byte [rcx]
mov dword [r14 + 0x198], eax
add rcx, r12
cmp dword [r14 + 0x154], r15d
jne 0x18000cd16
movzx eax, byte [rcx]
mov dword [r14 + 0x154], eax
add rcx, r12
cmp dword [r14 + 0x158], r15d
jne 0x18000cd2c
movzx eax, byte [rcx]
mov dword [r14 + 0x158], eax
add rcx, r12
cmp dword [r14 + 0x15c], r15d
jne 0x18000cd42
movzx eax, byte [rcx]
mov dword [r14 + 0x15c], eax
add rcx, r12
cmp dword [r14 + 0x160], r15d
jne 0x18000cd58
movzx eax, byte [rcx]
mov dword [r14 + 0x160], eax
add rcx, r12
cmp dword [r14 + 0x164], r15d
jne 0x18000cd6e
movzx eax, byte [rcx]
mov dword [r14 + 0x164], eax
add rcx, r12
cmp dword [r14 + 0x168], r15d
jne 0x18000cd84
movzx eax, byte [rcx]
mov dword [r14 + 0x168], eax
add rcx, r12
cmp dword [r14 + 0x16c], r15d
jne 0x18000cd9a
movzx eax, byte [rcx]
mov dword [r14 + 0x16c], eax
add rcx, r12
cmp dword [r14 + 0x1a8], r15d
jne 0x18000cdb0
movzx eax, byte [rcx]
mov dword [r14 + 0x1a8], eax
add rcx, r12
cmp dword [r14 + 0x1ac], r15d
jne 0x18000cdc6
movzx eax, byte [rcx]
mov dword [r14 + 0x1ac], eax
add rcx, r12
cmp dword [r14 + 0x1b0], r15d
jne 0x18000cddc
movzx eax, byte [rcx]
mov dword [r14 + 0x1b0], eax
add rcx, r12
cmp dword [r14 + 0x1a0], r15d
jne 0x18000cdf2
movzx eax, byte [rcx]
mov dword [r14 + 0x1a0], eax
add rcx, r12
cmp dword [r14 + 0x1a4], r15d
jne 0x18000ce08
movzx eax, byte [rcx]
mov dword [r14 + 0x1a4], eax
add rcx, r12
cmp dword [r14 + 0x170], r15d
jne 0x18000ce1e
movzx eax, byte [rcx]
mov dword [r14 + 0x170], eax
add rcx, r12
cmp dword [r14 + 0x174], r15d
jne 0x18000ce34
movzx eax, byte [rcx]
mov dword [r14 + 0x174], eax
add rcx, r12
cmp dword [r14 + 0x178], r15d
jne 0x18000ce4a
movzx eax, byte [rcx]
mov dword [r14 + 0x178], eax
add rcx, r12
cmp dword [r14 + 0x17c], r15d
jne 0x18000ce60
movzx eax, byte [rcx]
mov dword [r14 + 0x17c], eax
add rcx, r12
cmp dword [r14 + 0x180], r15d
jne 0x18000ce76
movzx eax, byte [rcx]
mov dword [r14 + 0x180], eax
add rcx, r12
cmp dword [r14 + 0x184], r15d
jne 0x18000ce8c
movzx eax, byte [rcx]
mov dword [r14 + 0x184], eax
add rcx, r12
cmp dword [r14 + 0x188], r15d
jne 0x18000cea2
movzx eax, byte [rcx]
mov dword [r14 + 0x188], eax
cmp dword [r14 + 0x18c], r15d
jne 0x18000ceb7
movzx eax, byte [rcx + r12]
mov dword [r14 + 0x18c], eax
cmp dword [r14 + 0x1b4], r15d
jne 0x18000cecd
movzx eax, byte [rcx + r12 + 1]
mov dword [r14 + 0x1b4], eax
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret