Function at 0x100011b8
Capabilities:
Check for time delay via gettickcount
Read file on windows
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x11b4]
mov eax, 0x1234
call fcn.10002ce0
mov eax, dword [0x1000e0cc]
xor eax, ebp
mov dword [ebp + 0x11b0], eax
mov eax, dword [ebp + 0x11c0]
push ebx
mov ebx, dword [ebp + 0x11bc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x11c8]
push esi
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0x11cc]
push edi
mov dword [ebp - 0x70], eax
xor eax, eax
push 0x1fe
push eax
mov word [ebp + 0xf9c], ax
lea eax, [ebp + 0xf9e]
push eax
call fcn.10003080
mov eax, dword [str..pipedatastate_]
add esp, 0xc
mov edx, eax
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x10001220
sub eax, edx
lea edi, [ebp + 0xf9c]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
test cx, cx
jne 0x10001234
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
mov eax, ebx
rep movsb byte es:[edi], byte [esi]
mov edx, eax
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x10001253
sub eax, edx
lea edi, [ebp + 0xf9c]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
test cx, cx
jne 0x10001267
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x78], eax
xor eax, eax
push eax
push eax
push 3
push eax
push eax
push 0xc0000000
lea eax, [ebp + 0xf9c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x68], eax
cmp eax, 0xffffffff
jne 0x100012ff
call ebx
dec eax
dec eax
je 0x100012f2
sub eax, 0xe5
jne 0x100012de
push eax
call esi
push 1
call esi
call edi
sub eax, dword [ebp - 0x78]
cmp eax, dword [0x1000e008]
jbe 0x10001299
jmp 0x100012f8
push 0xa
lea eax, [ebp + 0x119c]
push eax
call ebx
push eax
call fcn.10009ef8
add esp, 0xc
mov eax, dword [ebp - 0x70]
and dword [eax], 0
xor al, al
jmp 0x10001389
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
xor edi, edi
push edi
lea ecx, [ebp - 0x80]
push ecx
push dword [ebp + 0x11c4]
push dword [ebp - 0x74]
push eax
call esi
test eax, eax
je 0x1000134a
push edi
lea eax, [ebp - 0x6c]
push eax
push 0x1000
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1000134a
push edi
lea eax, [ebp - 0x80]
push eax
push 1
push dword [ebp - 0x74]
push dword [ebp - 0x68]
call esi
test eax, eax
jne 0x10001355
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100012f8
mov esi, dword [ebp - 0x70]
mov eax, dword [esi]
cmp dword [ebp - 0x6c], eax
jae 0x10001362
mov eax, dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x7c]
call fcn.10002d10
mov eax, dword [esi]
add esp, 0xc
cmp dword [ebp - 0x6c], eax
jae 0x1000137c
mov eax, dword [ebp - 0x6c]
push dword [ebp - 0x68]
mov dword [esi], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
mov ecx, dword [ebp + 0x11b0]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10002bec
add ebp, 0x11b4
leave
ret 0x14