Function at 0x403673
Capabilities:
Get session user name
Schedule task via itaskscheduler

Disassembly:
push 0x274
mov eax, 0x465bb4
call fcn.0044e593
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x270], ebx
lea eax, [ebp - 0x270]
push eax
push 0x46e958
xor eax, eax
inc eax
push eax
push ebx
push 0x46e978
mov dword [ebp - 4], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
js 0x403951
mov eax, dword [ebp - 0x270]
mov esi, str.RobloxGameUpdater
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x1c]
mov dword [ebp - 0x268], ebx
xor edx, edx
inc edx
mov byte [ebp - 4], dl
mov eax, dword [ebp - 0x270]
lea edx, [ebp - 0x268]
mov ecx, dword [eax]
push edx
push 0x46e948
push 0x46e968
push esi
push eax
call dword [ecx + 0x20]
mov esi, eax
test esi, esi
js 0x40393e
mov dword [ebp - 0x26c], ebx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x26c]
mov ecx, dword [eax]
push edx
push 0x46e938
push eax
call dword [ecx]
mov esi, eax
test esi, esi
js 0x403928
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x274], ebx
lea edx, [ebp - 0x274]
push edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x26c]
lea edx, [ebp - 0x27c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
test esi, esi
js 0x403914
push 0x2e
lea eax, [ebp - 0x24a]
push ebx
push eax
call fcn.0044da10
mov ax, word [edi + 0x2a8]
mov word [ebp - 0x244], ax
mov ax, word [edi + 0x2a4]
mov word [ebp - 0x246], ax
mov ax, word [edi + 0x2a0]
mov word [ebp - 0x248], ax
mov ax, word [edi + 0x2b4]
mov word [ebp - 0x23e], ax
mov ax, word [edi + 0x2b0]
mov word [ebp - 0x240], ax
mov ax, word [edi + 0x2ac]
add esp, 0xc
mov word [ebp - 0x242], ax
push 0x30
pop eax
mov word [ebp - 0x24c], ax
mov ax, word [edi + 0x29c]
mov word [ebp - 0x23c], ax
xor eax, eax
inc eax
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
mov word [ebp - 0x228], ax
mov eax, dword [ebp - 0x274]
lea ecx, [ebp - 0x24c]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0xc]
mov esi, eax
test esi, esi
js 0x403914
mov esi, dword [ebp - 0x268]
lea eax, [ebp - 0x264]
push eax
mov ecx, edi
call fcn.00418ec2
mov ecx, eax
mov byte [ebp - 4], 4
cmp dword [ecx + 0x14], 8
jb 0x40382d
mov ecx, dword [ecx]
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x80]
mov esi, eax
xor eax, eax
push ebx
inc eax
push eax
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 3
call fcn.004095c3
test esi, esi
js 0x403914
mov eax, dword [ebp - 0x268]
push str._qbg
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
test esi, esi
js 0x403914
mov eax, dword [ebp - 0x26c]
push 0x2000
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
test esi, esi
js 0x403914
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x21c]
push eax
mov dword [ebp - 0x280], 0x104
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov eax, dword [ebp - 0x26c]
push ebx
mov ecx, dword [eax]
lea edx, [ebp - 0x21c]
push edx
push eax
call dword [ecx + 0x78]
mov esi, eax
test esi, esi
js 0x403914
mov dword [ebp - 0x278], ebx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x278]
mov ecx, dword [eax]
push edx
push 0x46e988
push eax
call dword [ecx]
mov esi, eax
test esi, esi
js 0x403900
mov eax, dword [ebp - 0x278]
xor edx, edx
mov ecx, dword [eax]
inc edx
push edx
push ebx
push eax
call dword [ecx + 0x18]
mov esi, eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x403914
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x274]
test eax, eax
je 0x403928
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
inc eax
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x26c]
test eax, eax
je 0x40393e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x403951
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x403965
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
call fcn.0044e542
ret