Function at 0x180015390
Capabilities:
Accept command line arguments
Check for time delay via gettickcount
Initialize winsock library
Terminate process

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x380
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov rax, qword [0x1800393f8]
xor rax, rsp
mov qword [rsp + 0x370], rax
mov rbx, rcx
mov ecx, 0x202
lea rdx, [r11 - 0x1d8]
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rcx, [0x180006740]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov rcx, qword [0x18003df98]
test rcx, rcx
jne 0x180015407
call fcn.180007090
mov rcx, qword [0x18003df98]
lea r8, [0x18002e4fb]
lea rdx, [0x18002e6d8]
call fcn.180001c50
mov rdx, qword [0x18003df98]
mov r8, qword [rdx + 8]
xor r13d, r13d
test r8, r8
jne 0x180015460
mov rcx, qword [0x18003be50]
call fcn.1800010a0
mov rdi, rax
test rax, rax
jne 0x180015446
mov rdi, r13
jmp 0x18001547d
mov dword [rax + 4], r13d
mov rdx, rax
mov ecx, recvfrom
call fcn.180001120
mov qword [rdi + 8], rax
mov byte [rax], r13b
jmp 0x18001547d
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r8
repne scasb al, byte [rdi]
not rcx
lea rdx, [rcx - 1]
mov rcx, r8
call fcn.1800012d0
mov rdi, rax
mov qword [0x18003dfe0], rdi
xor ecx, ecx
call fcn.180006610
mov qword [0x18003dfe8], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rdx, rax
mov rax, qword [0x18003dfe8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x20], rcx
mov r9, qword [0x18003dfe0]
mov r9, qword [r9 + 8]
mov r8, rbx
lea rcx, str.XP2PMain_Start___s___s___s__s_
call fcn.180003e90
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x18003dfac], r13d
jne 0x1800154e2
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x18003dfac], eax
jmp 0x1800154e8
mov dword [0x18003dfac], eax
lea rcx, [rsp + 0xa0]
call fcn.1800145f0
nop
cmp qword [rsp + 0x1c0], 0
jne 0x1800156b5
mov qword [rsp + 0x90], setsockopt
mov qword [rsp + 0x88], r13
mov byte [rsp + 0x78], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.180016930
nop
mov qword [rsp + 0x60], setsockopt
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x48], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.180016810
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x1d0]
call fcn.180013fc0
nop
lea rcx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0x10
cmovae rcx, qword [rsp + 0x1e0]
call fcn.1800018c0
mov rbp, rax
lea rcx, [rsp + 0x208]
cmp qword [rsp + 0x220], 0x10
cmovae rcx, qword [rsp + 0x208]
call fcn.1800018c0
mov rdi, rax
lea rcx, [rsp + 0x230]
cmp qword [rsp + 0x248], 0x10
cmovae rcx, qword [rsp + 0x230]
call fcn.1800018c0
mov rbx, rax
lea rcx, [rsp + 0x258]
cmp qword [rsp + 0x270], 0x10
cmovae rcx, qword [rsp + 0x258]
call fcn.1800018c0
mov rsi, rax
lea rcx, [rsp + 0x280]
cmp qword [rsp + 0x298], 0x10
cmovae rcx, qword [rsp + 0x280]
call fcn.1800018c0
mov qword [0x18003dfc8], rax
lea rcx, [rsp + 0x2a8]
cmp qword [rsp + 0x2c0], 0x10
cmovae rcx, qword [rsp + 0x2a8]
call fcn.1800018c0
mov qword [0x18003dfd8], rax
lea rcx, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0x10
cmovae rcx, qword [rsp + 0x2d0]
call fcn.1800018c0
mov qword [0x18003dfd0], rax
lea rcx, [rsp + 0x1d0]
call fcn.180013e40
nop
cmp qword [rsp + 0x90], 0x10
jb 0x180015697
mov rcx, qword [rsp + 0x78]
call fcn.180018f68
mov qword [rsp + 0x90], setsockopt
mov qword [rsp + 0x88], r13
mov byte [rsp + 0x78], 0
jmp 0x1800157c0
lea rcx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae rcx, qword [rsp + 0xb0]
call fcn.1800018c0
mov rbp, rax
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rcx, qword [rsp + 0xd8]
call fcn.1800018c0
mov rdi, rax
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rcx, qword [rsp + 0x100]
call fcn.1800018c0
mov rbx, rax
lea rcx, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rcx, qword [rsp + 0x128]
call fcn.1800018c0
mov rsi, rax
lea rcx, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rcx, qword [rsp + 0x150]
call fcn.1800018c0
mov qword [0x18003dfc8], rax
lea rcx, [rsp + 0x178]
cmp qword [rsp + 0x190], 0x10
cmovae rcx, qword [rsp + 0x178]
call fcn.1800018c0
mov qword [0x18003dfd8], rax
lea rcx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0x10
cmovae rcx, qword [rsp + 0x1a0]
call fcn.1800018c0
mov qword [0x18003dfd0], rax
mov rax, qword [rsp + 0x1c8]
test rax, rax
je 0x1800157c0
mov dword [rax + 4], r13d
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rcx, qword [rsp + 0xd8]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0x10
cmovae rcx, qword [rsp + 0x100]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
nop
lea rcx, [rsp + 0xa0]
call fcn.180013e40
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, eax
mov ecx, dword [0x18003dfac]
test ecx, ecx
jne 0x180015870
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x18003dfac], eax
jmp 0x1800158a7
sub eax, ecx
cmp eax, 0xbb8
jle 0x1800158a1
mov dword [0x18003dfac], edx
lea rcx, str.c:_xscp.txt
call fcn.180003d40
lea rcx, [0x180033a30]
call fcn.180003e90
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [0x18003dfac], edx
mov rax, qword [0x18003dfd0]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x38], rcx
mov rax, qword [0x18003dfd8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x30], rcx
mov rax, qword [0x18003dfc8]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x28], rcx
mov rax, qword [rbx + 8]
mov qword [rsp + 0x20], rax
mov r9, qword [rdi + 8]
mov r8, qword [rbp + 8]
mov rdx, qword [rsi + 8]
lea rcx, str.__s__s___s___s___s__s__s_
call fcn.180003e90
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.1800134d0
mov r9, rbx
mov r8, rdi
mov rdx, rsi
mov rcx, rbp
call fcn.1800129b0
lea rcx, str._p2p_initial_end
call fcn.180003e90
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r12d, eax
mov esi, r13d
lea r14, vtable.CXP2PPlat.0
mov qword [rsp + 0x40], r14
mov rbx, r13
mov qword [rsp + 0x48], rbx
mov rcx, qword [rbp + 8]
call fcn.180006530
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1800159a7
cmp dword [rax + 0x18], 0x333d0
je 0x18001599e
cmp dword [rax], ebx
jne 0x18001597a
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.1800178cc
mov rdi, r13
mov qword [rsp + 0x50], r13
mov rbx, r13
mov qword [rsp + 0x48], rbx
jmp 0x1800159a7
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x48], rbx
test rbx, rbx
jne 0x1800159f3
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
test rdi, rdi
je 0x1800159dd
cmp dword [rdi], ebx
jne 0x1800159cb
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.1800178cc
inc esi
cmp esi, 0x64
jl 0x180015940
test r12d, r12d
jne 0x180015b09
jmp 0x180015a30
mov edx, r12d
lea rcx, str.Guard_setprocid_:__d
call fcn.180003e90
mov dword [rbx + 0x1e080], r12d
test rdi, rdi
je 0x180015a30
cmp dword [rdi], 0
jne 0x180015a1d
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.1800178cc
nop
mov qword [rsp + 0x40], r14
mov rbx, r13
mov qword [rsp + 0x48], rbx
mov rcx, qword [rbp + 8]
call fcn.180006530
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x180015a97
cmp dword [rax + 0x18], 0x333d0
je 0x180015a8e
cmp dword [rax], ebx
jne 0x180015a6a
mov rcx, qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.1800178cc
mov rdi, r13
mov qword [rsp + 0x50], r13
mov rbx, r13
mov qword [rsp + 0x48], rbx
jmp 0x180015a97
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x48], rbx
test rbx, rbx
je 0x180015ae3
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbx + 0x1e084], eax
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
test rdi, rdi
je 0x180015a30
cmp dword [rdi], 0
jne 0x180015acc
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.1800178cc
jmp 0x180015a30
test rdi, rdi
je 0x180015b09
cmp dword [rdi], 0
jne 0x180015af7
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.1800178cc
lea rcx, str.P2PMain_end_.......
call fcn.180003e90
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180015b15