Function at 0x10029de7
Capabilities:
Accept command line arguments
Extract resource via kernel32 functions
Get disk information

Disassembly:
mov eax, 0x10064ba2
call fcn.10063758
sub esp, 0x84
cmp byte [ebp + 0x38], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], ecx
je 0x10029e3c
cmp byte [ebp + 0x14], 0
je 0x10029e31
mov ecx, dword [edx]
mov edx, 0x144a
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov eax, dword [ebp + 0x3c]
mov eax, dword [eax]
cmp eax, edx
mov eax, dword [ebp + 0x1c]
setle cl
mov dword [eax], ecx
jmp 0x1002a200
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
jmp 0x1002a200
mov dword [ebp - 0x24], 0x2645
cmp dword [ebp - 0x24], 0x2650
jle 0x10029ed7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebx, ebx
xor edi, edi
mov esi, ebx
inc edi
mov edx, ebx
mov dword [ebp + 0x38], ebx
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
shl eax, cl
lea ecx, [ebp - 0x74]
and eax, edx
xor eax, esi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10029e87
mov eax, dword [eax]
push eax
call fcn.1004b9e4
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x74]
call fcn.10002062
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp + 0x38]
inc ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ecx
cmp ecx, 0xdb
jl 0x10029e6c
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0xd80
jl 0x10029e67
inc edx
mov dword [ebp + 0x38], edx
cmp edx, 0x5c21
jl 0x10029e62
inc esi
cmp esi, 0x5f50
jl 0x10029e5d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
jmp 0x10029edc
xor edi, edi
xor ebx, ebx
inc edi
cmp dword [ebp - 0x24], 0x2403
jge 0x10029ef0
push str.khmujkxis_odfxetxkq_okvyvbd_txqjauap_fwlzp_gfxnvzn
call fcn.1004b9e4
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x895
cmp dword [ebp - 0x24], 0xa95
jle 0x10029f48
mov esi, ebx
mov edi, ebx
mov dword [ebp + 0x38], 0x728
mov dword [ebp - 0x1c], ebx
mov eax, edi
mov ecx, 0x10080d98
and eax, ebx
cdq
push edx
push eax
call fcn.10001b47
inc ebx
cmp ebx, 0x18b2
jl 0x10029f12
add edi, esi
dec dword [ebp + 0x38]
push 0
pop ebx
jne 0x10029f0f
inc esi
cmp esi, 0x4f0f
jl 0x10029f06
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
xor edi, edi
inc edi
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x804
jge 0x10029f67
mov edx, str.etlvxb_irj_ovry_jllq_bbmndf_wqwiuda_ixvz_jvg
mov ecx, 0x10080d98
call fcn.10003a21
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x34], 0
je 0x1002a136
mov dword [ebp + 0x38], 0x1fda
cmp dword [ebp + 0x38], 0xeee
jge 0x1002a108
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x38]
push eax
push str._lld__lld_n
call fcn.1004bea7
add esp, 0xc
mov dword [ebp - 0x5c], ebx
lea eax, [ebp - 0x50]
mov dword [ebp - 0x58], ebx
xorps xmm0, xmm0
mov dword [ebp - 0x54], ebx
lea ecx, [ebp - 0x5c]
movlpd qword [ebp - 0x50], xmm0
push eax
push dword [ebp - 0x38]
call fcn.1002eccb
mov dword [ebp - 4], 4
xorps xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
cmp dword [ebp - 0x34], ebx
jl 0x1002a03e
jg 0x10029fd9
cmp dword [ebp - 0x38], ebx
jbe 0x1002a03e
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x5c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + 0x38], eax
lea eax, [esi + eax*8]
push eax
push str._lld
call fcn.1004bea7
mov eax, dword [ebp + 0x38]
pop ecx
add eax, edi
pop ecx
mov ecx, dword [ebp - 0x24]
adc ecx, ebx
mov dword [ebp + 0x38], eax
mov dword [ebp - 0x24], ecx
cmp ecx, dword [ebp - 0x34]
jl 0x10029fe8
jg 0x1002a041
cmp eax, dword [ebp - 0x38]
jb 0x10029fe8
jmp 0x1002a041
mov esi, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
mov ecx, esi
mov eax, edx
mov byte [ebp - 0x28], bl
push dword [ebp - 0x28]
sub eax, esi
sar eax, 3
push eax
call fcn.1002f137
xorps xmm0, xmm0
pop ecx
pop ecx
movlpd qword [ebp - 0x20], xmm0
movlpd qword [ebp - 0x40], xmm0
cmp dword [ebp - 0x34], ebx
jl 0x1002a12e
jg 0x1002a07c
cmp dword [ebp - 0x38], ebx
jbe 0x1002a12e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + 0x38], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
sub ecx, eax
sbb edx, dword [ebp - 0x14]
cmp edx, ebx
jg 0x1002a0ad
jl 0x1002a0a9
cmp ecx, edi
jae 0x1002a0ad
mov ecx, edi
mov edx, ebx
push edx
push ecx
push dword [esi + eax*8 + 4]
push dword [esi + eax*8]
call fcn.10050cd0
add dword [ebp + 0x38], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
adc ecx, edx
mov edx, dword [ebp - 0x14]
add eax, edi
mov dword [ebp - 0x24], ecx
adc edx, ebx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], edx
cmp edx, dword [ebp - 0x34]
jl 0x1002a094
jg 0x1002a0e2
cmp eax, dword [ebp - 0x38]
jb 0x1002a094
mov eax, dword [ebp + 0x38]
push ecx
push eax
push str._lld_n
call fcn.1004b9e4
add esp, 0xc
test esi, esi
je 0x1002a108
push esi
call fcn.1004bbb9
pop ecx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
mov eax, dword [edx]
mov eax, dword [edx]
cmp dword [edx], ebx
je 0x1002a11c
mov eax, dword [ebp + 0x24]
cmp dword [eax], ebx
jne 0x1002a11e
mov edi, ebx
mov eax, dword [edx]
xor ecx, ecx
cmp edi, eax
setge cl
mov dword [edx], ecx
jmp 0x1002a200
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
jmp 0x1002a0e5
mov dword [ebp - 0x14], 0x4eb5
cmp dword [ebp - 0x14], 0x50bd
jle 0x1002a1aa
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x24], 0x619
mov dword [ebp + 0x38], eax
mov esi, ebx
xor eax, esi
lea ecx, [ebp - 0x8c]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a171
mov eax, dword [eax]
push eax
call fcn.1004b9e4
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x8c]
call fcn.10002062
mov eax, dword [ebp + 0x38]
inc esi
cmp esi, 0x2b99
jl 0x1002a157
mov esi, dword [ebp - 0x1c]
add eax, esi
dec dword [ebp - 0x24]
mov dword [ebp + 0x38], eax
jne 0x1002a155
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x1514
jl 0x1002a149
cmp dword [ebp - 0x14], 0x4b93
jge 0x1002a1be
push str.uny_cxqmxppt_tnxvm
call fcn.1004b9e4
pop ecx
mov esi, dword [ebp + 0x40]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0x28]
mov eax, dword [esi]
mov eax, dword [ebp + 0x30]
mov dword [eax], 0x820f90f5
mov eax, dword [ecx]
mov eax, dword [edx]
mov eax, dword [esi]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov eax, dword [ebp + 0x2c]
dec dword [eax]
mov eax, dword [eax]
mov eax, dword [ecx]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x20]
mov dword [ecx], eax
mov eax, dword [ecx]
mov eax, dword [edx]
mov eax, dword [esi]
mov eax, dword [edx]
mov eax, dword [esi]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [esi]
mov eax, dword [edx]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret