Function at 0x18001e140
Capabilities:
Check for time delay via gettickcount
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
lea ebx, [rcx + 8]
mov r14, rdx
mov dword [rsp + 0x70], ebx
mov r13d, ecx
cmp ecx, ebx
jae 0x18001e3f6
mov r15, qword [rsp + 0x70]
lea esi, [rcx - 7]
mov eax, dword [rsp + 0x70]
lea rdx, [0x180000000]
mov dword [rsp + 0x60], esi
mov ebp, dword [rsp + 0x60]
mov r12d, dword [rsp + 0x60]
mov ebx, dword [rsp + 0x60]
nop dword [rax]
cmp esi, 0x14
ja case.default.0x18001e1a3
mov ecx, dword [rdx + rsi*4 + 0x1e414]
add rcx, rdx
jmp rcx
mov rcx, qword [r14 + 0x28]
xor ebp, ebp
call qword [r14 + 0x20]
test al, al
je 0x18001e3c7
mov edi, 0xbe
nop dword [rax]
mov eax, edi
sub eax, 0xbe
je 0x18001e20f
sub eax, 1
je 0x18001e1fe
sub eax, 1
je 0x18001e1f1
sub eax, 1
je 0x18001e1e3
cmp eax, 1
jne 0x18001e218
call qword [r14 + 0x50]
jmp 0x18001e218
mov eax, 0x10624dd3
mul ebp
mov ebp, edx
shr ebp, 6
jmp 0x18001e218
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, eax
sub ebp, r12d
jmp 0x18001e218
mov r8, r14
mov edx, 0x11a
xor ecx, ecx
call fcn.18001af00
jmp 0x18001e218
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r12d, eax
inc edi
cmp edi, 0xc3
jb 0x18001e1c0
jmp 0x18001e3c7
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x18001e3c7
mov r9, qword [0x18006f7f8]
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x48]
call fcn.18001ced0
mov ebx, ebp
jmp 0x18001e3c7
mov rcx, qword [0x18006f7f8]
xor edx, edx
lea r8d, [rdx + 0xf]
call fcn.18001c380
test al, al
jne 0x18001e3c7
mov ecx, 0xb3
nop
mov eax, ecx
sub eax, 0xb3
je 0x18001e284
cmp eax, 1
je case.0x18001e1a3.20
jmp 0x18001e286
xor ebx, ebx
inc ecx
cmp ecx, 0xb5
jb 0x18001e270
jmp 0x18001e3c7
lea rdx, [0x180053678]
lea rcx, str.data.dat
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r15, rax
test rax, rax
jne 0x18001e2ea
mov edi, 0x123
mov ecx, edi
sub ecx, 0x123
je 0x18001e2d4
sub ecx, 1
je 0x18001e2d0
cmp ecx, 1
je case.0x18001e1a3.20
jmp 0x18001e2e0
xor ebx, ebx
jmp 0x18001e2e0
lea rcx, str.MapSecondLevelRadioBtn
call fcn.18003c270
inc edi
cmp edi, 0x126
jb 0x18001e2b6
xor esi, esi
nop dword [rax]
mov edi, 0x10e
nop word [rax + rax]
mov eax, edi
sub eax, 0x10d
je case.0x18001e1a3.20
cmp eax, 1
jne 0x18001e34e
mov edx, 0x18
lea rax, [0x180000000]
lea rcx, [rsi + rsi*2]
mov r9, r15
lea rcx, [rcx*8 + 0x5b200]
add rcx, rax
lea r8d, [rdx - 0x17]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
cmp rax, 1
je 0x18001e34c
lea rcx, str.unregister_request
call fcn.18003c270
xor ebx, ebx
dec edi
cmp edi, 0x10c
ja 0x18001e300
inc esi
cmp esi, 0xa
jl 0x18001e2f0
mov esi, dword [rsp + 0x60]
jmp 0x18001e3c7
mov rdx, qword [0x18006f7f8]
lea r9, [rsp + 0x60]
mov r8d, pe_nt_image_headers64
mov byte [rsp + 0x60], 1
xor ecx, ecx
call fcn.18001e470
mov edx, 0xd1
mov rcx, r14
call fcn.18001d230
test al, al
jne 0x18001e3c7
mov edi, 0x6b
nop dword [rax]
mov eax, edi
sub eax, 0x6a
je 0x18001e3e6
cmp eax, 1
jne 0x18001e3c0
mov r9, qword [0x18006f7f8]
lea ecx, [rax + 0x47]
xor r8d, r8d
xor edx, edx
call fcn.18001ced0
dec edi
cmp edi, 0x69
ja 0x18001e3a0
lea rdx, [0x180000000]
mov eax, dword [rsp + 0x70]
inc esi
inc r13d
mov dword [rsp + 0x60], esi
cmp r13d, eax
jb 0x18001e190
jmp case.0x18001e1a3.20
xor eax, eax
jmp 0x18001e3fc
mov eax, dword [r14 + 0x58]
jmp 0x18001e3fc
mov ebx, dword [rsp + 0x60]
mov eax, ebx
mov rbx, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret