Function at 0x18000ca4c
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov byte [rbp - 0x30], 0x77
xor r15d, r15d
mov byte [rbp - 0x2f], 0x78
mov r14, rcx
mov byte [rbp - 0x2e], 0x69
mov ecx, r15d
mov byte [rbp - 0x2d], 0x65
mov byte [rbp - 0x2c], WSACleanup
lea r12d, [r15 + 1]
mov byte [rbp - 0x2b], 0x63
mov byte [rbp - 0x2a], 0x65
mov byte [rbp - 0x29], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x28], WSASetLastError
mov byte [rbp - 0x27], 0x32
mov byte [rbp - 0x26], 0x78
mov byte [rbp - 0x25], WSACleanup
mov byte [rbp - 0x24], WSASetLastError
mov byte [rbp - 0x23], r15b
mov al, byte [rbp - 0x30]
mov al, byte [rbp + rcx - 0x30]
sub al, 4
mov byte [rbp + rcx - 0x30], al
add rcx, r12
cmp rcx, 0xd
jb 0x18000caad
lea rax, [rbp - 0x30]
mov rcx, r15
mov qword [rbp - 0x10], rax
mov byte [rbp - 0x22], 0x76
mov byte [rbp - 0x21], 0x77
mov byte [rbp - 0x20], 0x68
mov byte [rbp - 0x1f], 0x64
mov byte [rbp - 0x1e], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x1d], 0x62
mov byte [rbp - 0x1c], 0x64
mov byte [rbp - 0x1b], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x1a], 0x6c
mov byte [rbp - 0x19], 0x39
mov byte [rbp - 0x18], 0x37
mov byte [rbp - 0x17], 0x31
mov byte [rbp - 0x16], 0x77
mov byte [rbp - 0x15], WSACleanup
mov byte [rbp - 0x14], WSASetLastError
mov byte [rbp - 0x13], r15b
mov al, byte [rbp - 0x22]
mov al, byte [rbp + rcx - 0x22]
sub al, 3
mov byte [rbp + rcx - 0x22], al
add rcx, r12
cmp rcx, 0xf
jb 0x18000cb0e
lea rax, [rbp - 0x22]
mov rbx, r15
mov qword [rbp - 8], rax
mov rdi, qword [rbp + rbx*8 - 0x10]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp eax, r12d
je 0x18000cb4d
add rbx, r12
cmp rbx, 2
jl 0x18000cb2c
jmp 0x18000cef6
lea rdx, [0x1800bfad0]
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_fopen]
xor edx, edx
mov rcx, rax
mov rsi, rax
lea r8d, [rdx + 2]
call qword [sym.imp.msvcrt.dll_fseek]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_ftell]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
movsxd rdi, eax
call qword [sym.imp.msvcrt.dll_fseek]
mov rcx, rdi
call fcn.180094c48
mov r9, rsi
mov r8, r12
mov rdx, rdi
mov rcx, rax
mov rbx, rax
call qword [sym.imp.msvcrt.dll_fread]
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_fclose]
mov r8, rdi
mov rdx, rbx
xor ecx, ecx
call fcn.18006e998
mov rcx, rbx
mov dword [rbp + 0x38], eax
mov edi, eax
call fcn.1800947c4
movabs r8, 0xcbf29ce484222325
mov rdx, r15
movzx ecx, byte [rbp + rdx + 0x38]
movabs rax, 0x100000001b3
xor r8, rcx
add rdx, r12
imul r8, rax
cmp rdx, 4
jb 0x18000cbd6
mov rdx, qword [0x1801b6580]
mov r9, qword [0x1801b6568]
and rdx, r8
mov r8, qword [0x1801b6558]
mov rax, rdx
add rax, rax
mov rcx, qword [r9 + rax*8 + 8]
cmp rcx, r8
je 0x18000cc36
add rdx, rdx
mov rax, qword [r9 + rdx*8]
jmp 0x18000cc2f
cmp rcx, rax
je 0x18000cc36
mov rcx, qword [rcx + 8]
cmp edi, dword [rcx + 0x10]
jne 0x18000cc26
jmp 0x18000cc39
mov rcx, r15
test rcx, rcx
mov rax, r8
cmovne rax, rcx
cmp rax, r8
je 0x18000cef6
lea rcx, [rax + 0x14]
cmp dword [r14 + 0x130], r15d
jne 0x18000cc63
movzx eax, byte [rcx]
mov dword [r14 + 0x130], eax
add rcx, r12
cmp dword [r14 + 0x134], r15d
jne 0x18000cc79
movzx eax, byte [rcx]
mov dword [r14 + 0x134], eax
add rcx, r12
cmp dword [r14 + 0x138], r15d
jne 0x18000cc8f
movzx eax, byte [rcx]
mov dword [r14 + 0x138], eax
add rcx, r12
cmp dword [r14 + 0x13c], r15d
jne 0x18000cca5
movzx eax, byte [rcx]
mov dword [r14 + 0x13c], eax
add rcx, r12
cmp dword [r14 + 0x140], r15d
jne 0x18000ccbb
movzx eax, byte [rcx]
mov dword [r14 + 0x140], eax
add rcx, r12
cmp dword [r14 + 0x19c], r15d
jne 0x18000ccd1
movzx eax, byte [rcx]
mov dword [r14 + 0x19c], eax
add rcx, r12
cmp dword [r14 + 0x144], r15d
jne 0x18000cce7
movzx eax, byte [rcx]
mov dword [r14 + 0x144], eax
add rcx, r12
cmp dword [r14 + 0x148], r15d
jne 0x18000ccfd
movzx eax, byte [rcx]
mov dword [r14 + 0x148], eax
add rcx, r12
cmp dword [r14 + 0x14c], r15d
jne 0x18000cd13
movzx eax, byte [rcx]
mov dword [r14 + 0x14c], eax
add rcx, r12
cmp dword [r14 + 0x150], r15d
jne 0x18000cd29
movzx eax, byte [rcx]
mov dword [r14 + 0x150], eax
add rcx, r12
cmp dword [r14 + 0x198], r15d
jne 0x18000cd3f
movzx eax, byte [rcx]
mov dword [r14 + 0x198], eax
add rcx, r12
cmp dword [r14 + 0x154], r15d
jne 0x18000cd55
movzx eax, byte [rcx]
mov dword [r14 + 0x154], eax
add rcx, r12
cmp dword [r14 + 0x158], r15d
jne 0x18000cd6b
movzx eax, byte [rcx]
mov dword [r14 + 0x158], eax
add rcx, r12
cmp dword [r14 + 0x15c], r15d
jne 0x18000cd81
movzx eax, byte [rcx]
mov dword [r14 + 0x15c], eax
add rcx, r12
cmp dword [r14 + 0x160], r15d
jne 0x18000cd97
movzx eax, byte [rcx]
mov dword [r14 + 0x160], eax
add rcx, r12
cmp dword [r14 + 0x164], r15d
jne 0x18000cdad
movzx eax, byte [rcx]
mov dword [r14 + 0x164], eax
add rcx, r12
cmp dword [r14 + 0x168], r15d
jne 0x18000cdc3
movzx eax, byte [rcx]
mov dword [r14 + 0x168], eax
add rcx, r12
cmp dword [r14 + 0x16c], r15d
jne 0x18000cdd9
movzx eax, byte [rcx]
mov dword [r14 + 0x16c], eax
add rcx, r12
cmp dword [r14 + 0x1a8], r15d
jne 0x18000cdef
movzx eax, byte [rcx]
mov dword [r14 + 0x1a8], eax
add rcx, r12
cmp dword [r14 + 0x1ac], r15d
jne 0x18000ce05
movzx eax, byte [rcx]
mov dword [r14 + 0x1ac], eax
add rcx, r12
cmp dword [r14 + 0x1b0], r15d
jne 0x18000ce1b
movzx eax, byte [rcx]
mov dword [r14 + 0x1b0], eax
add rcx, r12
cmp dword [r14 + 0x1a0], r15d
jne 0x18000ce31
movzx eax, byte [rcx]
mov dword [r14 + 0x1a0], eax
add rcx, r12
cmp dword [r14 + 0x1a4], r15d
jne 0x18000ce47
movzx eax, byte [rcx]
mov dword [r14 + 0x1a4], eax
add rcx, r12
cmp dword [r14 + 0x170], r15d
jne 0x18000ce5d
movzx eax, byte [rcx]
mov dword [r14 + 0x170], eax
add rcx, r12
cmp dword [r14 + 0x174], r15d
jne 0x18000ce73
movzx eax, byte [rcx]
mov dword [r14 + 0x174], eax
add rcx, r12
cmp dword [r14 + 0x178], r15d
jne 0x18000ce89
movzx eax, byte [rcx]
mov dword [r14 + 0x178], eax
add rcx, r12
cmp dword [r14 + 0x17c], r15d
jne 0x18000ce9f
movzx eax, byte [rcx]
mov dword [r14 + 0x17c], eax
add rcx, r12
cmp dword [r14 + 0x180], r15d
jne 0x18000ceb5
movzx eax, byte [rcx]
mov dword [r14 + 0x180], eax
add rcx, r12
cmp dword [r14 + 0x184], r15d
jne 0x18000cecb
movzx eax, byte [rcx]
mov dword [r14 + 0x184], eax
cmp dword [r14 + 0x188], r15d
jne 0x18000cee0
movzx eax, byte [rcx + r12]
mov dword [r14 + 0x188], eax
cmp dword [r14 + 0x18c], r15d
jne 0x18000cef6
movzx eax, byte [rcx + r12 + 1]
mov dword [r14 + 0x18c], eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret