Function at 0x1043708
Capabilities:
Create directory
Generate random numbers via winapi

Disassembly:
push 0x254
mov eax, 0x10601ce
call fcn.0104f396
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x258], eax
xor eax, eax
push 0x206
mov word [ebp - 0x23c], ax
xor ebx, ebx
lea eax, [ebp - 0x23a]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x250], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x244], ebx
push 0x1068adc
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 1
call fcn.010309e3
mov eax, dword [esi]
mov byte [ebp - 4], 2
cmp dword [eax - 0xc], ebx
jne 0x10438d6
push 0x125
lea ecx, [ebp - 0x244]
call fcn.01033f0f
movzx eax, al
cmp eax, ebx
jne 0x1043802
push 0x101107c
mov eax, 0x8007000e
push 0x1011064
push eax
mov dword [ebp - 0x240], eax
call fcn.0104a504
mov ecx, dword [ebp - 0x248]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.010303ce
push dword [ebp - 0x244]
mov byte [ebp - 4], 0
call sub.msvcrt.dll_void___cdecl_operator_delete___void__
pop ecx
cmp dword [ebp - 0x24c], 0
je 0x10437f4
push 0
push dword [ebp - 0x24c]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov eax, dword [ebp - 0x240]
call fcn.0104f401
ret 0xc
push 0x104
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
cmp eax, ebx
jne 0x1043859
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, ebx
jle 0x104382e
and eax, 0xffff
or eax, 0x80070000
cmp eax, ebx
mov dword [ebp - 0x240], eax
jl 0x1043842
mov dword [ebp - 0x240], 0x80004005
push 0x1011020
push 0x1011008
call esi
push eax
call fcn.0104a5f6
jmp 0x10437bc
xor eax, eax
mov word [ebp - 0x236], ax
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x248]
call fcn.010313eb
mov edi, dword [ebp - 0x248]
push 0xf0000000
push 1
push ebx
push ebx
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
cmp eax, ebx
jne 0x1043945
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, ebx
jle 0x10438ae
and eax, 0xffff
or eax, 0x80070000
cmp eax, ebx
mov dword [ebp - 0x240], eax
jl 0x10438c2
mov dword [ebp - 0x240], 0x80004005
push 0x1010fc8
push 0x1010fac
call esi
push eax
call fcn.0104a5f6
jmp 0x104393a
push esi
lea ecx, [ebp - 0x248]
call fcn.01031394
push 0x5c
lea ecx, [ebp - 0x248]
call fcn.0103145e
push 0x5c
lea ecx, [ebp - 0x248]
call fcn.010311ee
mov edi, dword [ebp - 0x248]
mov eax, dword [edi - 0xc]
add eax, 0x21
push eax
lea ecx, [ebp - 0x244]
call fcn.01033f0f
movzx eax, al
cmp eax, ebx
jne 0x104387a
mov eax, 0x8007000e
push 0x101107c
mov dword [ebp - 0x240], eax
push 0x1010f94
push eax
call fcn.0104a504
add esp, 0xc
lea ecx, [edi - 0x10]
jmp 0x10437c8
lea eax, [ebp - 0x34]
push eax
push 0x10
push dword [ebp - 0x24c]
call dword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
jne 0x1043994
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jle 0x1043971
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x240], eax
test eax, eax
jl 0x1043985
mov dword [ebp - 0x240], 0x80004005
push 0x1010f50
push 0x1010f38
jmp 0x10438cc
push edi
push 0x1010f30
push 0x104
push dword [ebp - 0x244]
call fcn.01043315
add esp, 0x10
mov dword [ebp - 0x240], eax
test eax, eax
jge 0x10439c6
push 0x1010ed0
push 0x1010eb8
jmp 0x1043934
movzx ebx, byte [ebp - 0x34]
and ebx, 7
add ebx, 9
xor esi, esi
cmp esi, ebx
jae 0x1043a21
movzx ecx, byte [ebp + esi - 0x34]
mov eax, dword [edi - 0xc]
push ecx
mov ecx, 0x82
sub ecx, esi
add ecx, ecx
sub ecx, eax
push 0x1010eac
push ecx
mov ecx, dword [ebp - 0x244]
lea eax, [eax + esi*2]
lea eax, [ecx + eax*2]
push eax
call fcn.01043315
add esp, 0x10
mov dword [ebp - 0x240], eax
test eax, eax
jge 0x1043a1e
push 0x1010e50
push 0x1010e34
jmp 0x1043934
inc esi
jmp 0x10439d2
push dword [ebp - 0x258]
push dword [ebp - 0x244]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1043a76
mov dword [ebp - 0x254], 1
inc dword [ebp - 0x250]
cmp dword [ebp - 0x254], 0
jne 0x1043a60
cmp dword [ebp - 0x250], 0x2710
jb 0x1043945
push dword [ebp - 0x244]
mov ecx, dword [ebp - 0x25c]
call fcn.01031649
jmp 0x104393d
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0xb7
je 0x1043a41
call esi
test eax, eax
jle 0x1043a95
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x240], eax
test eax, eax
jl 0x1043aa9
mov dword [ebp - 0x240], 0x80004005
push dword [ebp - 0x244]
push 0x1010de8
push 0x1010dd0
call esi
push eax
call fcn.0104a5f6
add esp, 0x10
jmp 0x104393d