Function at 0x407a8b
Capabilities:
Get session user name
Schedule task via itaskscheduler

Disassembly:
push 0x274
mov eax, 0x4410fb
call fcn.0043fef0
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x270], ebx
lea eax, [ebp - 0x270]
push eax
push 0x449bd8
xor eax, eax
inc eax
push eax
push ebx
push 0x449bf8
mov dword [ebp - 4], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
js 0x407d69
mov eax, dword [ebp - 0x270]
mov esi, str.CrunchRevGameUpdater
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x1c]
mov dword [ebp - 0x268], ebx
xor edx, edx
inc edx
mov byte [ebp - 4], dl
mov eax, dword [ebp - 0x270]
lea edx, [ebp - 0x268]
mov ecx, dword [eax]
push edx
push 0x449bc8
push 0x449be8
push esi
push eax
call dword [ecx + 0x20]
mov esi, eax
test esi, esi
js 0x407d56
mov dword [ebp - 0x26c], ebx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x26c]
mov ecx, dword [eax]
push edx
push 0x449bb8
push eax
call dword [ecx]
mov esi, eax
test esi, esi
js 0x407d40
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x274], ebx
lea edx, [ebp - 0x274]
push edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x26c]
lea edx, [ebp - 0x27c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xc]
mov esi, eax
test esi, esi
js 0x407d2c
push 0x2e
lea eax, [ebp - 0x24a]
push ebx
push eax
call sub.MSVCR110.dll_memset
mov ax, word [edi + 0x298]
mov word [ebp - 0x244], ax
mov ax, word [edi + 0x294]
mov word [ebp - 0x246], ax
mov ax, word [edi + 0x290]
mov word [ebp - 0x248], ax
mov ax, word [edi + 0x2a4]
mov word [ebp - 0x23e], ax
mov ax, word [edi + 0x2a0]
mov word [ebp - 0x240], ax
mov ax, word [edi + 0x29c]
add esp, 0xc
mov word [ebp - 0x242], ax
push 0x30
pop eax
mov word [ebp - 0x24c], ax
mov ax, word [edi + 0x28c]
mov word [ebp - 0x23c], ax
xor eax, eax
inc eax
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
mov word [ebp - 0x228], ax
mov eax, dword [ebp - 0x274]
lea ecx, [ebp - 0x24c]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0xc]
mov esi, eax
test esi, esi
js 0x407d2c
mov esi, dword [ebp - 0x268]
lea eax, [ebp - 0x264]
push eax
mov ecx, edi
call fcn.0042609d
mov ecx, eax
mov byte [ebp - 4], 4
cmp dword [ecx + 0x14], 8
jb 0x407c45
mov ecx, dword [ecx]
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x80]
mov esi, eax
xor eax, eax
push ebx
inc eax
push eax
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 3
call fcn.0040253d
test esi, esi
js 0x407d2c
mov eax, dword [ebp - 0x268]
push str._qbg
mov ecx, dword [eax]
push eax
call dword [ecx + 0x88]
mov esi, eax
test esi, esi
js 0x407d2c
mov eax, dword [ebp - 0x26c]
push 0x2000
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
mov esi, eax
test esi, esi
js 0x407d2c
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x21c]
push eax
mov dword [ebp - 0x280], 0x104
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov eax, dword [ebp - 0x26c]
push ebx
mov ecx, dword [eax]
lea edx, [ebp - 0x21c]
push edx
push eax
call dword [ecx + 0x78]
mov esi, eax
test esi, esi
js 0x407d2c
mov dword [ebp - 0x278], ebx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x278]
mov ecx, dword [eax]
push edx
push 0x449c08
push eax
call dword [ecx]
mov esi, eax
test esi, esi
js 0x407d18
mov eax, dword [ebp - 0x278]
xor edx, edx
mov ecx, dword [eax]
inc edx
push edx
push ebx
push eax
call dword [ecx + 0x18]
mov esi, eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x407d2c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x274]
test eax, eax
je 0x407d40
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
inc eax
mov byte [ebp - 4], al
mov eax, dword [ebp - 0x26c]
test eax, eax
je 0x407d56
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x268]
test eax, eax
je 0x407d69
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x407d7d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
call fcn.0043fe9f
ret