Function at 0x487570
Capabilities:
Find taskbar
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x19a4
call fcn.004d9280
mov eax, dword [0x4f72bc]
xor eax, ebp
mov dword [ebp - 8], eax
cmp dword [0x506e0c], 0
push ebx
mov ebx, ecx
push edi
mov dword [ebp - 0x199c], ebx
mov dword [ebp - 0x19a0], 0
je 0x4875e1
lea eax, [ebp - 0x19a0]
push str.KERNEL32.DLL
mov dword [ebp - 0x19a4], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x4875e1
push str.Wow64DisableWow64FsRedirection
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4875da
lea ecx, [ebp - 0x19a4]
push ecx
call eax
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push esi
xor edi, edi
push 0x487940
mov dword [0x500d70], edi
call fcn.0047abe0
cmp dword [0x500d70], edi
je 0x4877ea
cmp dword [ebp + 8], edi
je 0x48768d
push 0x200
lea edx, [ebp - 0x594]
mov ecx, 0x2c3
call fcn.004ca1e0
add esp, 4
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x487642
push ebx
lea edx, [ebp - 0x594]
push edx
push 0x304
lea eax, [ebp - 0x394]
push eax
jmp 0x487656
push esi
lea ecx, [ebp - 0x594]
push ecx
push 0x304
lea edx, [ebp - 0x394]
push edx
call fcn.00402ee0
movzx eax, word [0x5062f0]
mov edx, dword [0x4fbdcc]
add esp, 0x10
push eax
push 0x40024
push 0x5016f0
lea ecx, [ebp - 0x394]
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxExA]
cmp eax, 6
jne 0x4877ea
mov eax, dword [0x500d70]
push eax
push 1
push 1
mov dword [ebp - 0x1998], edi
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x4877ea
mov ecx, dword [ebp - 0x1998]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x4876c9
mov edi, str.MyError:__KillStartupTask_TerminateProcess
call fcn.004cad00
lea edx, [ebp - 0x1998]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x4876e5
mov edi, str.MyError:__KillStartupTask_GetExitCodeProcess
call fcn.004cad00
mov eax, dword [ebp - 0x1998]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x487701
mov edi, str.MyError:__KillStartupTask_TerminateProcess
call fcn.004cad00
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x1998], 0x103
jne 0x48774b
push esi
lea ebx, [ebp - 0x8c]
call fcn.0048b050
add esp, 4
test eax, eax
je 0x48774b
mov ecx, ebx
call fcn.004c5a50
mov edx, dword [ebp - 0x199c]
mov ecx, ebx
push ecx
push esi
push edx
mov ecx, 9
mov edx, 0x258
call fcn.0048cb90
add esp, 0xc
push 0x1400
lea eax, [ebp - 0x1994]
push 0
push eax
call fcn.004d29c0
add esp, 0xc
push esi
lea ecx, [ebp - 0x1994]
call fcn.004c0890
add esp, 4
lea ecx, [ebp - 0x1994]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x48778a
lea edx, [ebp - 0x1994]
push edx
jmp 0x487799
push esi
call fcn.0047ce20
movzx eax, ax
add esp, 4
add eax, esi
push eax
mov edx, 0x7ffffffe
mov eax, 0x80
lea ecx, [ebp - 0x394]
call fcn.004010b0
lea ecx, [ebp - 0x394]
push ecx
mov edx, ecx
push esi
push edx
mov ecx, 5
mov edx, 0x258
call fcn.0048cb90
add esp, 0xc
push 0x4e27f8
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x4877ea
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
cmp dword [0x506e0c], 0
je 0x487830
lea eax, [ebp - 0x19a0]
push str.KERNEL32.DLL
mov dword [ebp - 0x199c], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x487830
push str.Wow64RevertWow64FsRedirection
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x487829
lea ecx, [ebp - 0x199c]
push ecx
call eax
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 8]
mov eax, dword [0x500d70]
pop edi
xor ecx, ebp
pop ebx
call fcn.004cf2b6
mov esp, ebp
pop ebp
ret