Function at 0x180015220
Capabilities:
Accept command line arguments
Check for time delay via gettickcount
Initialize winsock library
Terminate process

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x380
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov rax, qword [0x1800393f8]
xor rax, rsp
mov qword [rsp + 0x370], rax
mov rbx, rcx
mov ecx, 0x202
lea rdx, [r11 - 0x1d8]
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rcx, [0x1800067a0]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov rcx, qword [0x18003df98]
test rcx, rcx
jne 0x180015297
call fcn.1800070f0
mov rcx, qword [0x18003df98]
lea r8, [0x18002e50b]
lea rdx, [0x18002e6e8]
call fcn.180001c50
mov rdx, qword [0x18003df98]
mov r8, qword [rdx + 8]
xor r13d, r13d
test r8, r8
jne 0x1800152f0
mov rcx, qword [0x18003be50]
call fcn.1800010a0
mov rdi, rax
test rax, rax
jne 0x1800152d6
mov rdi, r13
jmp 0x18001530d
mov dword [rax + 4], r13d
mov rdx, rax
mov ecx, recvfrom
call fcn.180001120
mov qword [rdi + 8], rax
mov byte [rax], r13b
jmp 0x18001530d
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r8
repne scasb al, byte [rdi]
not rcx
lea rdx, [rcx - 1]
mov rcx, r8
call fcn.1800012d0
mov rdi, rax
mov qword [0x18003dfe0], rdi
xor ecx, ecx
call fcn.180006670
mov qword [0x18003dfe8], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rdx, rax
mov rax, qword [0x18003dfe8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x20], rcx
mov r9, qword [0x18003dfe0]
mov r9, qword [r9 + 8]
mov r8, rbx
lea rcx, str.XP2PMain_Start___s___s___s__s_
call fcn.180003e40
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x18003dfac], r13d
jne 0x180015372
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x18003dfac], eax
jmp 0x180015378
mov dword [0x18003dfac], eax
lea rcx, [rsp + 0xa0]
call fcn.180014480
nop
cmp qword [rsp + 0x1c0], 0
jne 0x180015545
mov qword [rsp + 0x90], setsockopt
mov qword [rsp + 0x88], r13
mov byte [rsp + 0x78], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.180016e70
nop
mov qword [rsp + 0x60], setsockopt
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x48], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.180016d50
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x1d0]
call fcn.180013e50
nop
lea rcx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0x10
cmovae rcx, qword [rsp + 0x1e0]
call fcn.1800018c0
mov rbp, rax
lea rcx, [rsp + 0x208]
cmp qword [rsp + 0x220], 0x10
cmovae rcx, qword [rsp + 0x208]
call fcn.1800018c0
mov rdi, rax
lea rcx, [rsp + 0x230]
cmp qword [rsp + 0x248], 0x10
cmovae rcx, qword [rsp + 0x230]
call fcn.1800018c0
mov rbx, rax
lea rcx, [rsp + 0x258]
cmp qword [rsp + 0x270], 0x10
cmovae rcx, qword [rsp + 0x258]
call fcn.1800018c0
mov rsi, rax
lea rcx, [rsp + 0x280]
cmp qword [rsp + 0x298], 0x10
cmovae rcx, qword [rsp + 0x280]
call fcn.1800018c0
mov qword [0x18003dfc8], rax
lea rcx, [rsp + 0x2a8]
cmp qword [rsp + 0x2c0], 0x10
cmovae rcx, qword [rsp + 0x2a8]
call fcn.1800018c0
mov qword [0x18003dfd8], rax
lea rcx, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0x10
cmovae rcx, qword [rsp + 0x2d0]
call fcn.1800018c0
mov qword [0x18003dfd0], rax
lea rcx, [rsp + 0x1d0]
call fcn.180013cd0
nop
cmp qword [rsp + 0x90], 0x10
jb 0x180015527
mov rcx, qword [rsp + 0x78]
call fcn.1800196c8
mov qword [rsp + 0x90], setsockopt
mov qword [rsp + 0x88], r13
mov byte [rsp + 0x78], 0
jmp 0x180015650
lea rcx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rcx, qword [rsp + 0xb0]
call fcn.1800018c0
mov rbp, rax
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rcx, qword [rsp + 0xd8]
call fcn.1800018c0
mov rdi, rax
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rcx, qword [rsp + 0x100]
call fcn.1800018c0
mov rbx, rax
lea rcx, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rcx, qword [rsp + 0x128]
call fcn.1800018c0
mov rsi, rax
lea rcx, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rcx, qword [rsp + 0x150]
call fcn.1800018c0
mov qword [0x18003dfc8], rax
lea rcx, [rsp + 0x178]
cmp qword [rsp + 0x190], 0x10
cmovae rcx, qword [rsp + 0x178]
call fcn.1800018c0
mov qword [0x18003dfd8], rax
lea rcx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0x10
cmovae rcx, qword [rsp + 0x1a0]
call fcn.1800018c0
mov qword [0x18003dfd0], rax
mov rax, qword [rsp + 0x1c8]
test rax, rax
je 0x180015650
mov dword [rax + 4], r13d
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rcx, qword [rsp + 0x100]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
nop
lea rcx, [rsp + 0xa0]
call fcn.180013cd0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov ecx, dword [0x18003dfac]
test ecx, ecx
jne 0x180015700
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x18003dfac], eax
jmp 0x180015737
sub eax, ecx
cmp eax, 0xbb8
jle 0x180015731
mov dword [0x18003dfac], edx
lea rcx, str.c:_xscp.txt
call fcn.180003cf0
lea rcx, [0x180033a38]
call fcn.180003e40
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [0x18003dfac], edx
mov rax, qword [0x18003dfd0]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x38], rcx
mov rax, qword [0x18003dfd8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x30], rcx
mov rax, qword [0x18003dfc8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x28], rcx
mov rax, qword [rbx + 8]
mov qword [rsp + 0x20], rax
mov r9, qword [rdi + 8]
mov r8, qword [rbp + 8]
mov rdx, qword [rsi + 8]
lea rcx, str.__s__s___s___s___s__s__s_
call fcn.180003e40
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.1800133f0
mov r9, rbx
mov r8, rdi
mov rdx, rsi
mov rcx, rbp
call fcn.1800128f0
lea rcx, str._p2p_initial_end
call fcn.180003e40
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r12d, eax
mov esi, r13d
lea r14, vtable.CXP2PPlat.0
mov qword [rsp + 0x40], r14
mov rbx, r13
mov qword [rsp + 0x48], rbx
mov rcx, qword [rbp + 8]
call fcn.180006590
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180015837
cmp dword [rax + 0x18], 0x333d0
je 0x18001582e
cmp dword [rax], ebx
jne 0x18001580a
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001802c
mov rdi, r13
mov qword [rsp + 0x50], r13
mov rbx, r13
mov qword [rsp + 0x48], rbx
jmp 0x180015837
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x48], rbx
test rbx, rbx
jne 0x180015883
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
test rdi, rdi
je 0x18001586d
cmp dword [rdi], ebx
jne 0x18001585b
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001802c
inc esi
cmp esi, 0x64
jl 0x1800157d0
test r12d, r12d
jne 0x180015999
jmp 0x1800158c0
mov edx, r12d
lea rcx, str.Guard_setprocid_:__d
call fcn.180003e40
mov dword [rbx + 0x1e080], r12d
test rdi, rdi
je 0x1800158c0
cmp dword [rdi], 0
jne 0x1800158ad
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001802c
nop
mov qword [rsp + 0x40], r14
mov rbx, r13
mov qword [rsp + 0x48], rbx
mov rcx, qword [rbp + 8]
call fcn.180006590
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180015927
cmp dword [rax + 0x18], 0x333d0
je 0x18001591e
cmp dword [rax], ebx
jne 0x1800158fa
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001802c
mov rdi, r13
mov qword [rsp + 0x50], r13
mov rbx, r13
mov qword [rsp + 0x48], rbx
jmp 0x180015927
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x48], rbx
test rbx, rbx
je 0x180015973
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbx + 0x1e084], eax
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
test rdi, rdi
je 0x1800158c0
cmp dword [rdi], 0
jne 0x18001595c
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001802c
jmp 0x1800158c0
test rdi, rdi
je 0x180015999
cmp dword [rdi], 0
jne 0x180015987
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001802c
lea rcx, str.P2PMain_end_.......
call fcn.180003e40
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800159a5