Function at 0x1400100a0
Capabilities:
Accept command line arguments

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x940]
sub rsp, 0xa40
mov rax, qword [0x1400592a0]
xor rax, rsp
mov qword [rbp + 0x930], rax
xor r13d, r13d
mov r14, rcx
cmp dword [0x1400592e8], 3
mov esi, r13d
mov ebx, r13d
jne 0x1400101fc
cmp dword [0x14005a6c8], r13d
lea r8d, [r13 + 1]
mov edx, r13d
mov qword [rsp + 0x20], r13
sete dl
lea rcx, [rsp + 0x20]
call fcn.140006964
movsxd rsi, eax
test eax, eax
jle 0x14001070f
lea rdx, str.UnInstall_warning:_dependencies_found._r_n
lea ecx, [r13 + 2]
call fcn.140019ae0
test r14, r14
je 0x14001017b
mov rcx, qword [0x140059d90]
lea r8, [rsp + 0x30]
mov r9d, 0x400
mov edx, 0x11c
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
jle 0x140010180
mov edx, 0x44d
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov ebx, 1
mov edx, 0x44e
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov r14, qword [rsp + 0x20]
mov r12, rax
mov r15, rsi
test esi, esi
jle 0x1400101eb
test rax, rax
je 0x1400101ce
mov rsi, r13
mov r9, qword [r14 + rsi*8]
xor r8d, r8d
mov edx, 0x180
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
nop dword [rax + rax]
inc rsi
cmp rsi, r15
jl 0x1400101ab
mov rsi, r13
mov rcx, qword [r14 + rsi*8]
test rcx, rcx
je 0x1400101e3
call fcn.140001454
mov qword [r14 + rsi*8], r13
inc rsi
cmp rsi, r15
jl 0x1400101d1
test r14, r14
je 0x14001070f
mov rcx, r14
jmp 0x14001070a
lea rax, section..data
cmp rax, qword [str.6ij]
jne 0x1400103cd
cmp qword [0x14005a6d0], r13
mov r15d, 0x400
je 0x140010329
call fcn.140017524
test rax, rax
je 0x140010329
call fcn.140017524
mov rcx, rax
call fcn.14002fc8c
test eax, eax
je 0x140010329
call fcn.140008e68
test eax, eax
je 0x140010329
lea rdx, str.NOTICE:_Windows_Media_Player_is_currently_running._r_n
mov ecx, 2
call fcn.140019ae0
test r14, r14
je 0x140010324
mov rcx, qword [0x140059d90]
lea r8, [rsp + 0x30]
mov r9d, r15d
mov edx, 0x96
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x140010329
cmp dword [0x140059cc4], r13d
je 0x1400102fc
mov ecx, 0x800
call fcn.1400014a0
mov r8, rax
test rax, rax
je 0x140010324
lea r9, [rsp + 0x30]
mov edx, r15d
sub r9, rax
mov rcx, rax
lea rax, [rdx + 0x7ffffbfe]
test rax, rax
je 0x1400102e1
movzx eax, word [r9 + rcx]
test ax, ax
je 0x1400102e1
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1400102be
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r13w
jne 0x140010324
mov rcx, r8
call fcn.140001454
jmp 0x140010324
mov edx, 0x3ee
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov ebx, 1
call fcn.14001ac48
mov rcx, rax
movabs rax, 0x624dd2f1a9fbe77
mul rcx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 9
and rcx, 0xfffffffffffffc00
cmp rcx, 0xc800
ja 0x14001070f
lea rdx, str.ALERT:_Less_then_50MB_of_free_disk_space_is_available._r_n
mov ecx, 2
call fcn.140019ae0
test r14, r14
je 0x1400103c6
mov rcx, qword [0x140059d90]
lea r8, [rsp + 0x30]
mov r9d, r15d
mov edx, 0x14d
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14001070f
lea edx, [rbx + 0x3ee]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
inc ebx
jmp 0x14001070f
call fcn.140008e68
mov r12d, 0x800
mov r15d, 0x400
test eax, eax
jne 0x1400103ef
call fcn.140008a30
test eax, eax
je 0x1400104c6
lea rdx, str.NOTICE:_Windows_Media_Player_is_currently_running._r_n
mov ecx, 2
call fcn.140019ae0
test r14, r14
je 0x1400104c1
mov rcx, qword [0x140059d90]
lea r8, [rsp + 0x30]
mov r9d, r15d
mov edx, 0x96
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x1400104c6
cmp dword [0x140059cc4], r13d
je 0x140010499
mov rcx, r12
call fcn.1400014a0
mov rsi, rax
test rax, rax
je 0x1400104c1
lea r9, [rsp + 0x30]
mov r8, r15
sub r9, rax
mov rdx, rax
lea rcx, [r8 + 0x7ffffbfe]
test rcx, rcx
je 0x14001047b
movzx eax, word [r9 + rdx]
test ax, ax
je 0x14001047b
mov word [rdx], ax
add rdx, 2
sub r8, 1
jne 0x140010458
test r8, r8
lea rax, [rdx - 2]
cmovne rax, rdx
mov word [rax], r13w
jne 0x1400104c1
mov rcx, rsi
call fcn.140001454
mov rsi, r13
jmp 0x1400104c1
mov edx, 0x3ee
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
mov ebx, 1
call fcn.140008d30
test eax, eax
je 0x1400105e1
lea rdx, str.NOTICE:_Deskband_is_currently_running._r_n
mov ecx, 2
call fcn.140019ae0
test r14, r14
je 0x1400105df
mov rcx, qword [0x140059d90]
lea r8, [rsp + 0x30]
mov r9d, r15d
mov edx, 0xa3
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x1400105e1
cmp dword [0x140059cc4], r13d
je 0x1400105b6
test rsi, rsi
jne 0x14001057f
mov rcx, r12
call fcn.1400014a0
mov rsi, rax
test rax, rax
je 0x1400105df
lea r8, [rsp + 0x30]
mov rdx, r15
sub r8, rax
mov rcx, rax
lea rax, [rdx + 0x7ffffbfe]
test rax, rax
je 0x14001056c
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14001056c
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x140010549
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], r13w
jne 0x1400105df
jmp 0x1400105a9
lea r8, [0x140049b1c]
mov rdx, r15
mov rcx, rsi
call fcn.140010d0c
test eax, eax
js 0x1400105a9
lea r8, [rsp + 0x30]
mov rdx, r15
mov rcx, rsi
call fcn.140010d0c
test eax, eax
jns 0x1400105df
mov rcx, rsi
call fcn.140001454
mov rsi, r13
jmp 0x1400105df
lea edx, [rbx + 0x3ee]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
inc ebx
cmp ebx, 3
jae 0x14001066e
mov rax, qword [str.6ij]
lea rcx, str.K
cmp rcx, rax
je 0x14001066e
lea rcx, section..data
cmp rcx, rax
jne 0x14001066e
lea rdx, str.NOTICE:_This_system_is_a_MUI_SKU._r_n
mov ecx, 2
call fcn.140019ae0
test r14, r14
je 0x14001066c
mov rcx, qword [0x140059d90]
lea r8, [rsp + 0x30]
mov r9d, r15d
mov edx, 0x98
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x14001066e
lea edx, [rbx + 0x3ee]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetDlgItem]
nop dword [rax + rax]
mov rcx, rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_SetWindowTextW]
nop dword [rax + rax]
inc ebx
test rsi, rsi
je 0x14001070f
cmp dword [0x140059cc4], r13d
je 0x140010707
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
nop dword [rax + rax]
test rax, rax
je 0x140010707
lea rdx, str._NonSilentPlayerWarning
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_wcsstr]
nop dword [rax + rax]
test rax, rax
je 0x140010707
mov rcx, qword [0x140059d90]
lea r8, [rbp + 0x730]
mov r9d, pe_nt_image_headers64
lea edx, [r9 - 0x53]
call qword [sym.imp.USER32.dll_LoadStringW]
nop dword [rax + rax]
test eax, eax
je 0x140010707
mov al, byte [0x14005a79e]
lea r8, [rbp + 0x730]
neg al
mov rdx, rsi
mov rcx, r14
sbb r9d, r9d
and r9d, 0x180000
add r9d, 0x10
call qword [sym.imp.USER32.dll_MessageBoxW]
nop dword [rax + rax]
mov rcx, rsi
call fcn.140001454
mov eax, ebx
mov rcx, qword [rbp + 0x930]
xor rcx, rsp
call fcn.1400017f0
lea r11, [rsp + 0xa40]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret