Function at 0x180014f10
Capabilities:
Accept command line arguments
Check for time delay via gettickcount
Initialize winsock library
Terminate process

Disassembly:
mov rax, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x380
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov rax, qword [0x1800393f8]
xor rax, rsp
mov qword [rsp + 0x370], rax
mov rbx, rcx
mov rcx, qword [0x18003df98]
test rcx, rcx
jne 0x180014f60
call fcn.180006db0
mov rcx, qword [0x18003df98]
lea r8, [0x18002e4fb]
lea rdx, [0x18002e6d8]
call fcn.180001bc0
mov rdx, qword [0x18003df98]
mov r8, qword [rdx + 8]
xor r13d, r13d
test r8, r8
jne 0x180014fb9
mov rcx, qword [0x18003be50]
call fcn.1800010a0
mov rdi, rax
test rax, rax
jne 0x180014f9f
mov rdi, r13
jmp 0x180014fd6
mov dword [rax + 4], r13d
mov rdx, rax
mov ecx, recvfrom
call fcn.180001120
mov qword [rdi + 8], rax
mov byte [rax], r13b
jmp 0x180014fd6
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r8
repne scasb al, byte [rdi]
not rcx
lea rdx, [rcx - 1]
mov rcx, r8
call fcn.1800012d0
mov rdi, rax
mov qword [0x18003dfe8], rdi
xor ecx, ecx
call fcn.180006350
mov qword [0x18003dff0], rax
mov ecx, 0x202
lea rdx, [rsp + 0x1d0]
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rdx, rax
mov r8, rbx
lea rcx, str.XP2PMain_Start___s___s
call fcn.180003b60
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x18003dfb8], r13d
jne 0x18001503b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x18003dfb8], eax
jmp 0x180015041
mov dword [0x18003dfb8], eax
lea rcx, [rsp + 0xa0]
call fcn.1800144e0
nop
cmp qword [rsp + 0x1c0], 0
jne 0x18001520e
mov qword [rsp + 0x90], setsockopt
mov qword [rsp + 0x88], r13
mov byte [rsp + 0x78], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1800167a0
nop
mov qword [rsp + 0x60], setsockopt
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x48], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.180016680
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x1d0]
call fcn.180013eb0
nop
lea rcx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0x10
cmovae rcx, qword [rsp + 0x1e0]
call fcn.180001830
mov rbp, rax
lea rcx, [rsp + 0x208]
cmp qword [rsp + 0x220], 0x10
cmovae rcx, qword [rsp + 0x208]
call fcn.180001830
mov rdi, rax
lea rcx, [rsp + 0x230]
cmp qword [rsp + 0x248], 0x10
cmovae rcx, qword [rsp + 0x230]
call fcn.180001830
mov rbx, rax
lea rcx, [rsp + 0x258]
cmp qword [rsp + 0x270], 0x10
cmovae rcx, qword [rsp + 0x258]
call fcn.180001830
mov rsi, rax
lea rcx, [rsp + 0x280]
cmp qword [rsp + 0x298], 0x10
cmovae rcx, qword [rsp + 0x280]
call fcn.180001830
mov qword [0x18003dfd0], rax
lea rcx, [rsp + 0x2a8]
cmp qword [rsp + 0x2c0], 0x10
cmovae rcx, qword [rsp + 0x2a8]
call fcn.180001830
mov qword [0x18003dfe0], rax
lea rcx, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0x10
cmovae rcx, qword [rsp + 0x2d0]
call fcn.180001830
mov qword [0x18003dfd8], rax
lea rcx, [rsp + 0x1d0]
call fcn.180013d30
nop
cmp qword [rsp + 0x90], 0x10
jb 0x1800151f0
mov rcx, qword [rsp + 0x78]
call fcn.180018ff8
mov qword [rsp + 0x90], setsockopt
mov qword [rsp + 0x88], r13
mov byte [rsp + 0x78], 0
jmp 0x180015319
lea rcx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rcx, qword [rsp + 0xb0]
call fcn.180001830
mov rbp, rax
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rcx, qword [rsp + 0xd8]
call fcn.180001830
mov rdi, rax
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rcx, qword [rsp + 0x100]
call fcn.180001830
mov rbx, rax
lea rcx, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rcx, qword [rsp + 0x128]
call fcn.180001830
mov rsi, rax
lea rcx, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rcx, qword [rsp + 0x150]
call fcn.180001830
mov qword [0x18003dfd0], rax
lea rcx, [rsp + 0x178]
cmp qword [rsp + 0x190], 0x10
cmovae rcx, qword [rsp + 0x178]
call fcn.180001830
mov qword [0x18003dfe0], rax
lea rcx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0x10
cmovae rcx, qword [rsp + 0x1a0]
call fcn.180001830
mov qword [0x18003dfd8], rax
mov rax, qword [rsp + 0x1c8]
test rax, rax
je 0x180015319
mov dword [rax + 4], r13d
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rcx, qword [rsp + 0x100]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
nop
lea rcx, [rsp + 0xa0]
call fcn.180013d30
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov ecx, dword [0x18003dfb8]
test ecx, ecx
jne 0x1800153c9
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x18003dfb8], eax
jmp 0x180015400
sub eax, ecx
cmp eax, 0xbb8
jle 0x1800153fa
mov dword [0x18003dfb8], edx
lea rcx, str.c:_xscp.txt
call fcn.180003a10
lea rcx, [0x180033868]
call fcn.180003b60
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [0x18003dfb8], edx
mov rax, qword [0x18003dfd8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x38], rcx
mov rax, qword [0x18003dfe0]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x30], rcx
mov rax, qword [0x18003dfd0]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x28], rcx
mov rax, qword [rbx + 8]
mov qword [rsp + 0x20], rax
mov r9, qword [rdi + 8]
mov r8, qword [rbp + 8]
mov rdx, qword [rsi + 8]
lea rcx, str.__s__s___s___s___s__s__s_
call fcn.180003b60
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.1800132a0
mov r9, rbx
mov r8, rdi
mov rdx, rsi
mov rcx, rbp
call fcn.1800127d0
lea rcx, str._p2p_initial_end
call fcn.180003b60
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r12d, eax
mov esi, r13d
lea r14, vtable.CXP2PPlat.0
nop dword [rax]
mov qword [rsp + 0x40], r14
mov rbx, r13
mov qword [rsp + 0x48], rbx
mov rcx, qword [rbp + 8]
call fcn.180006270
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180015507
cmp dword [rax + 0x18], 0x333d0
je 0x1800154fe
cmp dword [rax], ebx
jne 0x1800154da
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001795c
mov rdi, r13
mov qword [rsp + 0x50], r13
mov rbx, r13
mov qword [rsp + 0x48], rbx
jmp 0x180015507
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x48], rbx
test rbx, rbx
jne 0x180015553
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
test rdi, rdi
je 0x18001553d
cmp dword [rdi], ebx
jne 0x18001552b
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001795c
inc esi
cmp esi, 0x64
jl 0x1800154a0
test r12d, r12d
jne 0x180015669
jmp 0x180015590
mov edx, r12d
lea rcx, str.Guard_setprocid_:__d
call fcn.180003b60
mov dword [rbx + 0x1e080], r12d
test rdi, rdi
je 0x180015590
cmp dword [rdi], 0
jne 0x18001557d
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001795c
nop
mov qword [rsp + 0x40], r14
mov rbx, r13
mov qword [rsp + 0x48], rbx
mov rcx, qword [rbp + 8]
call fcn.180006270
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1800155f7
cmp dword [rax + 0x18], 0x333d0
je 0x1800155ee
cmp dword [rax], ebx
jne 0x1800155ca
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001795c
mov rdi, r13
mov qword [rsp + 0x50], r13
mov rbx, r13
mov qword [rsp + 0x48], rbx
jmp 0x1800155f7
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x48], rbx
test rbx, rbx
je 0x180015643
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbx + 0x1e084], eax
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
test rdi, rdi
je 0x180015590
cmp dword [rdi], 0
jne 0x18001562c
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001795c
jmp 0x180015590
test rdi, rdi
je 0x180015669
cmp dword [rdi], 0
jne 0x180015657
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.18001795c
lea rcx, str.P2PMain_end_.......
call fcn.180003b60
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180015675