Function at 0x401040
Capabilities:
Execute command
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x4a8
mov esi, esp
mov dword [esi], ebp
mov eax, esp
mov dword [esi + 0x494], eax
mov dword [esi + 0x4a0], 0xffffffff
lea eax, [esi + 0x498]
mov dword [esi + 0x49c], 0x4019b0
mov ecx, dword fs:[0]
mov dword [esi + 0x498], ecx
mov dword fs:[0], eax
mov dword [esi + 0x490], 0
sub esp, 4
mov eax, esp
mov dword [eax], 1
lea ecx, [esi + 0x3d0]
call fcn.00402010
lea ecx, [esi + 0x264]
mov dword [esi + 0x70], ecx
call fcn.00402160
lea ecx, [esi + 0xf8]
mov dword [esi + 0x74], ecx
call fcn.00402160
mov edx, dword [esi + 0x70]
mov ecx, dword [esi + 0x74]
mov dword [esi + 0x4a0], 2
sub esp, 8
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.00408760
add esp, 8
jmp 0x4010eb
sub esp, 4
mov eax, esp
mov dword [eax], str.curl_https:__raw.githubusercontent.com_PancakeWithPotato_PoophackLoader_main_version.txt___C:eshkere_version.txt
mov eax, dword [sym.imp.ucrtbased.dll_system]
mov dword [esi + 0x68], eax
call eax
add esp, 4
mov eax, dword [esi + 0x68]
sub esp, 4
mov ecx, esp
mov dword [ecx], 0x40c139
call eax
add esp, 4
mov eax, dword [esi + 0x68]
sub esp, 4
mov ecx, esp
mov dword [ecx], str.title_Eshkere_Loader
call eax
add esp, 4
mov eax, esp
mov dword [esi + 0x6c], eax
sub esp, 0x1c
mov ecx, esp
sub esp, 4
mov eax, esp
mov dword [eax], str.C:eshkere1441
call fcn.00401db0
jmp 0x401148
call fcn.00408160
add esp, 0x1c
mov byte [esi + 0x67], al
jmp 0x401158
mov al, byte [esi + 0x67]
mov ecx, dword [esi + 0x6c]
mov esp, ecx
xor al, 0xff
test al, 1
jne 0x40116f
jmp 0x4011e9
mov eax, esp
mov dword [esi + 0x60], eax
push eax
sub esp, 0x18
mov ecx, esp
sub esp, 4
mov eax, esp
mov dword [eax], str.C:eshkere1488
call fcn.00401db0
jmp 0x40118f
call fcn.00408160
add esp, 0x1c
mov byte [esi + 0x5f], al
jmp 0x40119f
mov al, byte [esi + 0x5f]
mov ecx, dword [esi + 0x60]
mov esp, ecx
xor al, 0xff
test al, 1
jne 0x4011b6
jmp 0x4011e4
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], 0x40
mov dword [eax + 4], 1
mov dword [eax], str.C:eshkereconfig.txt
lea ecx, [esi + 0x3d0]
call fcn.004021b0
jmp 0x4011df
jmp 0x4011e4
jmp 0x4011e9
mov dword [esi + 0xf4], 0
lea ecx, [esi + 0xd8]
mov dword [esi + 0x58], ecx
call fcn.00401ab0
mov ecx, dword [esi + 0x58]
mov dword [esi + 0x4a0], 8
sub esp, 8
mov eax, esp
mov dword [eax + 4], ecx
lea ecx, [esi + 0x3d0]
mov dword [eax], ecx
call fcn.00402250
add esp, 8
jmp 0x40122b
lea ecx, [esi + 0xd8]
lea eax, [0x40c188]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004022a0
add esp, 8
test al, 1
jne 0x401256
jmp 0x401265
mov dword [esi + 0xf4], 0
jmp 0x401299
sub esp, 0xc
mov eax, esp
lea ecx, [esi + 0xd8]
mov dword [eax], ecx
mov dword [eax + 8], 0xa
mov dword [eax + 4], 0
call fcn.004022d0
add esp, 0xc
mov dword [esi + 0x54], eax
jmp 0x401290
mov eax, dword [esi + 0x54]
mov dword [esi + 0xf4], eax
lea ecx, [esi + 0xd8]
call fcn.00401a00
mov dword [esi + 0x4a0], 2
lea ecx, [esi + 0x3d0]
call fcn.00402390
jmp 0x4012be
lea edx, [esi + 0xd4]
lea ecx, str.C:eshkereconfig.txt
lea eax, [0x40c189]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.ucrtbased.dll_fopen_s]
add esp, 0xc
cmp dword [esi + 0xd4], 0
jne 0x401359
sub esp, 8
mov ecx, dword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.____Failed_to_open_config_file___error_
call fcn.004023e0
add esp, 8
mov dword [esi + 0x50], eax
jmp 0x401318
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
mov ecx, dword [esi + 0x50]
mov edx, eax
sub esp, 4
mov eax, esp
mov dword [eax], edx
mov eax, dword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
call eax
mov dword [esi + 0x4c], eax
jmp 0x40133a
mov ecx, dword [esi + 0x4c]
sub esp, 4
mov eax, esp
mov dword [eax], 0x4027f0
mov eax, dword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
call eax
jmp 0x401354
jmp 0x401359
sub esp, 8
mov ecx, dword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x40c1b5
call fcn.004023e0
add esp, 8
jmp 0x40137a
lea ecx, [esi + 0x3d0]
call fcn.00402390
jmp 0x40138a
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], 0x40
mov dword [eax + 4], 3
mov dword [eax], str.C:eshkere_version.txt
lea ecx, [esi + 0x3d0]
call fcn.004021b0
jmp 0x4013b3
sub esp, 8
mov eax, esp
lea ecx, [esi + 0x3d0]
mov dword [eax], ecx
mov dword [eax + 4], 0x4103c8
call fcn.00402250
add esp, 8
jmp 0x4013d4
lea ecx, [esi + 0x3d0]
call fcn.00402390
jmp 0x4013e4
sub esp, 8
mov ecx, dword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x40c1ce
call fcn.004023e0
add esp, 8
mov dword [esi + 0x48], eax
jmp 0x401408
mov ecx, dword [esi + 0x48]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.Hitler
call fcn.004023e0
add esp, 8
mov dword [esi + 0x44], eax
jmp 0x401429
sub esp, 4
mov eax, esp
lea ecx, [esi + 0xb8]
mov dword [eax], ecx
call fcn.00408980
add esp, 4
jmp 0x401443
mov ecx, dword [esi + 0x44]
mov dword [esi + 0x4a0], 7
sub esp, 8
mov eax, esp
lea edx, [esi + 0xb8]
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.00402840
add esp, 8
mov dword [esi + 0x40], eax
jmp 0x401470
mov ecx, dword [esi + 0x40]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str._Eshkere
call fcn.004023e0
add esp, 8
mov dword [esi + 0x3c], eax
jmp 0x401491
mov ecx, dword [esi + 0x3c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.__version_is
call fcn.004023e0
add esp, 8
mov dword [esi + 0x38], eax
jmp 0x4014b2
mov ecx, dword [esi + 0x38]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.1337
call fcn.004023e0
add esp, 8
mov dword [esi + 0x34], eax
jmp 0x4014d3
mov ecx, dword [esi + 0x34]
sub esp, 4
mov eax, esp
mov dword [eax], 0x4027f0
mov eax, dword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
call eax
jmp 0x4014ed
lea ecx, [esi + 0xb8]
call fcn.00401a00
mov dword [esi + 0xb4], 1
mov dword [esi + 0x4a0], 2
sub esp, 8
mov ecx, dword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str._1__Realitywin.cc_n
call fcn.004023e0
add esp, 8
jmp 0x40152d
sub esp, 8
mov ecx, dword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str._2__Ultrahook_n
call fcn.004023e0
add esp, 8
jmp 0x40154e
mov byte [esi + 0xb3], 0
lea ecx, [esi + 0x94]
call fcn.00401ab0
lea ecx, [esi + 0x78]
call fcn.00401ab0
mov al, byte [esi + 0xb3]
xor al, 0xff
mov dword [esi + 0x4a0], 4
test al, 1
jne 0x401587
jmp 0x4016d4
sub esp, 4
mov eax, esp
lea ecx, [esi + 0xb4]
mov dword [eax], ecx
mov ecx, dword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov eax, dword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::operator___int__]
call eax
jmp 0x4015a6
sub esp, 8
mov ecx, dword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.Decision:
call fcn.004023e0
add esp, 8
mov dword [esi + 0x30], eax
jmp 0x4015ca
mov ecx, dword [esi + 0x30]
mov edx, dword [esi + 0xb4]
sub esp, 4
mov eax, esp
mov dword [eax], edx
mov eax, dword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
call eax
mov dword [esi + 0x2c], eax
jmp 0x4015e9
mov ecx, dword [esi + 0x2c]
sub esp, 4
mov eax, esp
mov dword [eax], 0x4027f0
mov eax, dword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
call eax
jmp 0x401603
mov eax, dword [esi + 0xb4]
mov dword [esi + 0x28], eax
sub eax, 1
je 0x40162b
jmp 0x40161a
mov eax, dword [esi + 0x28]
sub eax, 2
je 0x40166a
jmp 0x4016a9
sub esp, 4
mov eax, esp
mov dword [eax], str.https:__github.com_Vezdehod228_rarelywin_raw_main_oldcsshook.dll
lea ecx, [esi + 0x94]
call fcn.00402880
jmp 0x401646
sub esp, 4
mov eax, esp
mov dword [eax], str.C:eshkere1441oldcsshook.dll
lea ecx, [esi + 0x78]
call fcn.00402880
jmp 0x40165e
mov byte [esi + 0xb3], 1
jmp 0x4016cf
sub esp, 4
mov eax, esp
mov dword [eax], str.https:__github.com_Vezdehod228_rarelywin_raw_main_uh.dll
lea ecx, [esi + 0x94]
call fcn.00402880
jmp 0x401685
sub esp, 4
mov eax, esp
mov dword [eax], str.C:eshkere1488uh.dll
lea ecx, [esi + 0x78]
call fcn.00402880
jmp 0x40169d
mov byte [esi + 0xb3], 1
jmp 0x4016cf
sub esp, 8
mov ecx, dword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], str.Invalid_decision__n
call fcn.004023e0
add esp, 8
jmp 0x4016ca
jmp 0x4016cf
jmp 0x401568
mov eax, esp
mov dword [esi + 0x1c], eax
push eax
sub esp, 0x34
mov ecx, esp
mov eax, ecx
mov dword [esi + 0x20], eax
add ecx, 0x1c
mov dword [esi + 0x24], ecx
sub esp, 4
mov eax, esp
lea edx, [esi + 0x94]
mov dword [eax], edx
call fcn.004028b0
jmp 0x401701
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x4a0], 6
sub esp, 4
mov eax, esp
lea edx, [esi + 0x78]
mov dword [eax], edx
call fcn.004028b0
jmp 0x401722
mov dword [esi + 0x4a0], 4
call fcn.00408000
add esp, 0x38
jmp 0x401739
mov eax, dword [esi + 0x1c]
mov esp, eax
mov eax, esp
mov dword [esi + 0x10], eax
push eax
sub esp, 0x1c
mov ecx, esp
mov eax, ecx
mov dword [esi + 0x14], eax
add ecx, 4
mov dword [esi + 0x18], ecx
sub esp, 4
mov eax, esp
lea edx, [esi + 0x78]
mov dword [eax], edx
call fcn.004028b0
jmp 0x401768
mov eax, esp
mov dword [esi + 0xc], eax
push eax
sub esp, 0x18
mov ecx, esp
mov dword [esi + 0x4a0], 5
sub esp, 4
mov eax, esp
mov dword [eax], str.hl2.exe
call fcn.00401db0
jmp 0x401792
call fcn.00407e50
add esp, 0x1c
mov dword [esi + 8], eax
jmp 0x4017a2
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov esp, edx
mov dword [eax], ecx
mov dword [esi + 0x4a0], 4
call fcn.00408360
add esp, 0x20
mov byte [esi + 7], al
jmp 0x4017c9
mov al, byte [esi + 7]
mov ecx, dword [esi + 0x10]
mov esp, ecx
test al, 1
jne 0x4017de
jmp 0x401811
xor eax, eax
lea ecx, str.Succesfully_Injected___1488_
lea eax, str.Injection_succesfull__1441_
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x40183f
xor eax, eax
lea ecx, str.Failed_to_inject_:___1488_
lea eax, str.Injection_failed__1441_
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x10
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esi + 0x78]
call fcn.00401a00
lea ecx, [esi + 0x94]
call fcn.00401a00
lea ecx, [esi + 0xf8]
call fcn.00401e70
lea ecx, [esi + 0x264]
call fcn.00401e70
lea ecx, [esi + 0x3d0]
call fcn.00402990
mov eax, dword [esi + 0x490]
mov ecx, dword [esi + 0x498]
mov dword fs:[0], ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret