Function at 0x18002bf78
Capabilities:
Get session user name
Schedule task via itaskscheduler

Disassembly:
mov rax, rsp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x3a0
mov qword [rsp + 0xb8], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov rax, qword [0x1801563c0]
xor rax, rsp
mov qword [rsp + 0x390], rax
mov r13d, edx
mov r12, rcx
and qword [rsp + 0x78], 0
and qword [rsp + 0x58], 0
and qword [rsp + 0x68], 0
and qword [rsp + 0x40], 0
and qword [rsp + 0x60], 0
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x180119b88]
mov r15d, 1
mov r8d, r15d
xor edx, edx
lea rcx, [0x180119ba8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
jns 0x18002c02e
mov dword [rsp + 0x20], eax
lea r9, str.InstallGenericTaskXP___CoCreateInstance._Return__0x_08X
mov r8d, 0x10a
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
mov eax, ebx
jmp 0x18002ca6c
lea rdx, str.SBWUpdateTask_Logon_
lea rcx, [rsp + 0x30]
call fcn.1800041c0
nop
test r13d, r13d
jne 0x18002c065
lea rcx, str.SBWUpdateTask_Time_
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, str.SBWUpdateTask_Time_
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.180003e28
mov rax, qword [0x18015f768]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x38]
lea rsi, [0x18015f720]
mov rcx, rsi
call fcn.1800cf560
mov rbx, qword [rsp + 0x38]
mov r8, rbx
mov edx, dword [rbx - 8]
lea rcx, [rsp + 0x30]
call fcn.180008324
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [0x180119b78]
lea r8, [0x180119b98]
mov rdx, qword [rsp + 0x30]
call qword [rax + 0x40]
mov ebp, eax
test eax, eax
jns 0x18002c138
mov dword [rsp + 0x20], eax
lea r9, str.InstallGenericTaskXP___NewWorkItem._Return__0x_08X
mov r8d, 0x11d
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
lea rcx, [rbx - 0xc]
lea rdi, [0x18015f758]
or esi, 0xffffffff
cmp rcx, rdi
je 0x18002c112
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c112
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c131
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c131
call fcn.1800d1434
mov eax, ebp
jmp 0x18002ca6c
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
lea r8, [rsp + 0x40]
lea rdx, [0x180119b78]
call qword [rax]
mov ebx, eax
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
and qword [rsp + 0x58], 0
test ebx, ebx
jns 0x18002c1da
mov dword [rsp + 0x20], ebx
lea r9, str.InstallGenericTaskXP___QueryInterface_for_IID_TASK._Return__0x_08X
mov r8d, 0x126
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
lea rdi, [0x18015f758]
or esi, 0xffffffff
cmp rcx, rdi
je 0x18002c1b4
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c1b4
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c1d3
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c1d3
call fcn.1800d1434
mov eax, ebx
jmp 0x18002ca6c
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov rdx, qword [r12 + 8]
call qword [rax + 0x100]
mov ebx, eax
test eax, eax
jns 0x18002c268
mov dword [rsp + 0x20], eax
lea r9, str.SetApplicationName___failed_to_set_application._Return__0x_08X
mov r8d, 0x12f
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
lea rdi, [0x18015f758]
or esi, 0xffffffff
cmp rcx, rdi
je 0x18002c242
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c242
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c261
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c261
call fcn.1800d1434
mov eax, ebx
jmp 0x18002ca6c
mov rdx, qword [r12 + 0x10]
cmp dword [rdx - 8], 0
jle 0x18002c300
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + VarUI4FromDisp]
mov ebx, eax
test eax, eax
jns 0x18002c300
mov dword [rsp + 0x20], eax
lea r9, str.SetParameters___failed_to_set_parameters._Return__0x_08X
mov r8d, 0x13a
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
lea rdi, [0x18015f758]
or esi, 0xffffffff
cmp rcx, rdi
je 0x18002c2da
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c2da
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c2f9
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c2f9
call fcn.1800d1434
mov eax, ebx
jmp 0x18002ca6c
lea r8, [r12 + 8]
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.1800ce2bc
nop
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.1800cde88
mov rbx, qword [rsp + 0x48]
cmp dword [rbx - 8], 0
jle 0x18002c3da
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + 0x120]
mov ebp, eax
test eax, eax
jns 0x18002c3da
mov dword [rsp + 0x20], eax
lea r9, str.SetWorkingDirectory___failed_to_set_starting_directory._Return__0x_08X
mov r8d, 0x148
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
lea rcx, [rbx - 0xc]
lea rdi, [0x18015f758]
or esi, 0xffffffff
cmp rcx, rdi
je 0x18002c394
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c394
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c3b4
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c3b4
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c3d3
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c3d3
call fcn.1800d1434
mov eax, ebp
jmp 0x18002ca6c
mov dword [rsp + 0x70], 0x200
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x190]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
xor r8d, r8d
lea rdx, [rsp + 0x190]
call qword [rax + 0xf0]
mov ebp, eax
test eax, eax
jns 0x18002c4a8
mov dword [rsp + 0x20], eax
lea r9, str.SetAccountInformation___failed_to_set_account_info.__Return__0x_08X
mov r8d, 0x155
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
lea rcx, [rbx - 0xc]
lea rdi, [0x18015f758]
or esi, 0xffffffff
cmp rcx, rdi
je 0x18002c462
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c462
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c482
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c482
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c4a1
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c4a1
call fcn.1800d1434
mov eax, ebp
jmp 0x18002ca6c
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov edx, 0x2000
call qword [rax + 0xe0]
mov ebp, eax
test eax, eax
jns 0x18002c555
mov dword [rsp + 0x20], eax
lea r9, str.SetFlags___failed_to_set_task_flags._Return__0x_08X
mov r8d, 0x15f
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
lea rcx, [rbx - 0xc]
lea rdi, [0x18015f758]
or esi, 0xffffffff
cmp rcx, rdi
je 0x18002c50f
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c50f
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c52f
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c52f
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c54e
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c54e
call fcn.1800d1434
mov eax, ebp
jmp 0x18002ca6c
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x74]
call qword [rax + 0x18]
mov ebp, eax
test eax, eax
jns 0x18002c604
mov dword [rsp + 0x20], eax
lea r9, str.CreateTrigger___failed_to_create_a_task_trigger._Return__0x_08X
mov r8d, 0x167
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
lea rcx, [rbx - 0xc]
lea rdi, [0x18015f758]
or esi, 0xffffffff
cmp rcx, rdi
je 0x18002c5be
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c5be
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c5de
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c5de
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c5fd
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c5fd
call fcn.1800d1434
mov eax, ebp
jmp 0x18002ca6c
mov edi, gethostbyaddr
mov r8, rdi
xor edx, edx
lea rcx, [rsp + 0x80]
call fcn.1800d7640
mov word [rsp + 0x80], di
xor ecx, ecx
call fcn.1800d1cf8
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xc0]
call fcn.1800d4390
xor ecx, ecx
test eax, eax
cmove ecx, dword [rsp + 0xcc]
mov word [rsp + 0x88], cx
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x138]
call fcn.1800d4390
test eax, eax
jne 0x18002c676
mov eax, dword [rsp + 0x148]
inc eax
jmp 0x18002c678
xor eax, eax
mov word [rsp + 0x86], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x110]
call fcn.1800d4390
test eax, eax
jne 0x18002c6a4
mov eax, dword [rsp + 0x124]
add eax, 0x76c
jmp 0x18002c6a6
xor eax, eax
mov word [rsp + 0x84], ax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x160]
call fcn.1800d4390
or esi, 0xffffffff
mov ecx, esi
test eax, eax
cmove ecx, dword [rsp + 0x168]
mov word [rsp + 0x90], cx
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xe8]
call fcn.1800d4390
mov ecx, esi
test eax, eax
cmove ecx, dword [rsp + 0xec]
add cx, r15w
mov word [rsp + 0x92], cx
mov word [rsp + 0xa4], r15w
test r13d, r13d
je 0x18002c71c
mov dword [rsp + 0xa0], 7
jmp 0x18002c73a
mov dword [rsp + 0xa0], r15d
mov eax, dword [r12]
mov dword [rsp + 0x98], eax
mov dword [rsp + 0x94], 0x5a0
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea rdx, [rsp + 0x80]
call qword [rax + 0x18]
mov ebp, eax
test eax, eax
jns 0x18002c7e4
mov dword [rsp + 0x20], eax
lea r9, str.CScheduledTask::SaveTask_____failed_to_add_trigger_to_the_task._Return__0x_08X
mov r8d, 0x186
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
lea rcx, [rbx - 0xc]
lea rdi, [0x18015f758]
cmp rcx, rdi
je 0x18002c79e
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c79e
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c7be
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c7be
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c7dd
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c7dd
call fcn.1800d1434
mov eax, ebp
jmp 0x18002ca6c
lea rdx, str.Keeps_your_Speedbit_software_up_to_date._If_this_task_is_disabled_or_stopped__your_Speedbit_software_will_not_be_kept_up_to_date._This_task_uninstalls_itself_when_there_is_no_Speedbit_software_using_it.
lea rcx, [rsp + 0xb0]
call fcn.1800041c0
nop
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov rdi, qword [rsp + 0xb0]
mov rdx, rdi
call qword [rax + 0x90]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea r8, [rsp + 0x68]
lea rdx, [0x180109cd0]
call qword [rax]
mov ebp, eax
test eax, eax
jns 0x18002c8e5
mov dword [rsp + 0x20], eax
lea r9, str.CScheduledTask::SaveTask_____failed_to_get_an_IPersistFile_interface_on_the_task._Return__0x_08X
mov r8d, 0x191
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
lea rcx, [rdi - 0xc]
lea rdi, [0x18015f758]
cmp rcx, rdi
je 0x18002c884
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c87f
call fcn.1800d1434
mov rbx, qword [rsp + 0x48]
jmp 0x18002c884
mov rbx, qword [rsp + 0x48]
lea rcx, [rbx - 0xc]
cmp rcx, rdi
je 0x18002c89f
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c89f
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c8bf
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c8bf
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c8de
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c8de
call fcn.1800d1434
mov eax, ebp
jmp 0x18002ca6c
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x30]
mov ebp, eax
test eax, eax
jns 0x18002c9b2
mov dword [rsp + 0x20], eax
lea r9, str.CScheduledTask::SaveTask_____error_saving_task._Return__0x_08X
mov r8d, 0x198
lea rdx, str..SPWTaskMgr.cpp
lea rcx, [0x18015f578]
call fcn.18000dc6c
nop
lea rcx, [rdi - 0xc]
lea rdi, [0x18015f758]
cmp rcx, rdi
je 0x18002c951
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c94c
call fcn.1800d1434
mov rbx, qword [rsp + 0x48]
jmp 0x18002c951
mov rbx, qword [rsp + 0x48]
lea rcx, [rbx - 0xc]
cmp rcx, rdi
je 0x18002c96c
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c96c
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c98c
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c98c
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002c9ab
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002c9ab
call fcn.1800d1434
mov eax, ebp
jmp 0x18002ca6c
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x18002c9c2
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x18002c9d2
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x18002c9e3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
lea rcx, [rdi - 0xc]
lea rdi, [0x18015f758]
cmp rcx, rdi
je 0x18002ca10
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002ca0b
call fcn.1800d1434
mov rbx, qword [rsp + 0x48]
jmp 0x18002ca10
mov rbx, qword [rsp + 0x48]
lea rcx, [rbx - 0xc]
cmp rcx, rdi
je 0x18002ca2b
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002ca2b
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x38]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002ca4b
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002ca4b
call fcn.1800d1434
nop
mov rcx, qword [rsp + 0x30]
add rcx, 0xfffffffffffffff4
cmp rcx, rdi
je 0x18002ca6a
mov eax, esi
lock xadd dword [rcx], eax
add eax, esi
test eax, eax
jg 0x18002ca6a
call fcn.1800d1434
xor eax, eax
mov rcx, qword [rsp + 0x390]
xor rcx, rsp
call fcn.1800d12b0
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret