Function at 0x140002590
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, str.About_to_stop_and_remove_all_these_processes__services
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r8, str.cmd__c_taskkill__F__IM_ndrvs.exe
lea rdx, [0x140007a8c]
lea rcx, [0x14000ead0]
call fcn.140005e20
lea rcx, [0x14000ead0]
call fcn.140005cb0
mov rcx, qword [0x14000e620]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, [0x14000ead0]
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r8, str.cmd__c_taskkill__F__IM_ndrvx.exe
lea rdx, [0x140007a8c]
lea rcx, [0x14000ead0]
call fcn.140005e20
lea rcx, [0x14000ead0]
call fcn.140005cb0
mov rcx, qword [0x14000e620]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, [0x14000ead0]
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rbx, str._Y__F__Q
lea r9, str.LRSDRVX
mov qword [rsp + 0x20], rbx
lea r8, str.NET_STOP
lea rdx, str._s__s___s
lea rcx, [0x14000ead0]
call fcn.140005e20
lea rcx, [0x14000ead0]
call fcn.140005cb0
mov rcx, qword [0x14000e620]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, [0x14000ead0]
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r9, str.LRSPULL
mov qword [rsp + 0x20], rbx
lea r8, str.NET_STOP
lea rdx, str._s__s___s
lea rcx, [0x14000ead0]
call fcn.140005e20
lea rcx, [0x14000ead0]
call fcn.140005cb0
mov rcx, qword [0x14000e620]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, [0x14000ead0]
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r9, str.LRS_AWPS
mov qword [rsp + 0x20], rbx
lea r8, str.NET_STOP
lea rdx, str._s__s___s
lea rcx, [0x14000ead0]
call fcn.140005e20
lea rcx, [0x14000ead0]
call fcn.140005cb0
mov rcx, qword [0x14000e620]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, [0x14000ead0]
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r8, str.SC_DELETE_LRSDRVX__Q
lea rdx, [0x140007a8c]
lea rcx, [0x14000ead0]
call fcn.140005e20
lea rcx, [0x14000ead0]
call fcn.140005cb0
mov rcx, qword [0x14000e620]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, [0x14000ead0]
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r8, str.SC_DELETE_LRSPULL___Q
lea rdx, [0x140007a8c]
lea rcx, [0x14000ead0]
call fcn.140005e20
lea rcx, [0x14000ead0]
call fcn.140005cb0
mov rcx, qword [0x14000e620]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, [0x14000ead0]
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r8, str.SC_DELETE_LRS_AWPS__Q
lea rdx, [0x140007a8c]
lea rcx, [0x14000ead0]
call fcn.140005e20
lea rcx, [0x14000ead0]
call fcn.140005cb0
mov rcx, qword [0x14000e620]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [0x14000c6dc]
lea rcx, str.c:prtatibminstall.log
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov qword [0x14000e638], rax
test rax, rax
je 0x140002a02
lea r8, [0x14000ead0]
mov rcx, rax
lea rdx, [0x14000c71c]
call fcn.140001010
mov rcx, qword [0x14000e638]
add rsp, 0x30
pop rbx
jmp qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea r8, str.failed_to_open_log_file_fatal_err
lea rdx, [0x140007a8c]
lea rcx, [0x14000ead0]
call fcn.140005e20
xor r9d, r9d
lea r8, str.Print_ibm_install
lea rdx, [0x14000ead0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3