Function at 0x588a84
Capabilities:
Check if file exists
Get file attributes
Get hostname
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x33
push 0
push 0
dec ecx
jne 0x588a8c
push ecx
push ebx
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x588e38
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
mov eax, dword [ebp - 8]
call fcn.0057f680
test al, al
je 0x588dd4
mov eax, dword [ebp - 8]
cmp byte [eax + 0x60], 0
je 0x588dd4
mov eax, dword [ebp - 8]
cmp byte [eax + 0x61], 0
je 0x588c5d
lea edx, [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.005891a4
mov eax, dword [ebp - 8]
call fcn.00589048
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
je 0x588c54
mov eax, dword [ebp - 8]
mov byte [eax + 8], 1
lea eax, [ebp - 0x13c]
call fcn.00580fd4
cmp byte [ebp - 0x12c], 0
je 0x588b31
push 0x2a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x44]
push eax
push 0x32
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
call fcn.00405f28
push eax
call dword [0x5d5604]
mov dword [ebp - 0x10], eax
jmp 0x588b56
push 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5c]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48]
call fcn.00406448
push eax
call dword [0x5d5618]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
sete byte [ebp - 9]
cmp byte [ebp - 9], 0
je 0x588c47
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
call fcn.00589250
mov dword [ebp - 0x10], 0x104
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x119]
push eax
call sub.kernel32.dll_GetComputerNameA
push 0x588e50
lea eax, [ebp - 0x144]
lea edx, [ebp - 0x119]
mov ecx, 0x105
call fcn.00405d08
push dword [ebp - 0x144]
push 0x588e5c
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 8]
call fcn.00587c00
push dword [ebp - 0x148]
lea eax, [ebp - 0x140]
mov edx, 4
call fcn.00405e2c
mov eax, dword [ebp - 0x140]
call fcn.00405f28
push eax
call sub.kernel32.dll_GetFileAttributesA
cmp eax, 0xffffffff
jne 0x588c54
push 0x588e50
lea eax, [ebp - 0x150]
lea edx, [ebp - 0x119]
mov ecx, 0x105
call fcn.00405d08
push dword [ebp - 0x150]
push 0x588e5c
lea edx, [ebp - 0x154]
mov eax, dword [ebp - 8]
call fcn.00587c00
push dword [ebp - 0x154]
lea eax, [ebp - 0x14c]
mov edx, 4
call fcn.00405e2c
mov eax, dword [ebp - 0x14c]
call fcn.00405f28
push eax
call sub.kernel32.dll_GetFileAttributesA
jmp 0x588c54
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0057f030
mov eax, dword [ebp - 8]
mov byte [eax + 0x61], 0
jmp 0x588c61
mov byte [ebp - 9], 1
cmp byte [ebp - 9], 0
je 0x588dd4
lea eax, [ebp - 0x174]
call fcn.00580fd4
cmp byte [ebp - 0x164], 0
je 0x588ca4
push 0
push 0x2a
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x44]
push ebx
push 0x32
push ebx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x34]
call fcn.00405f28
push eax
call dword [0x5d5610]
mov dword [ebp - 0x10], eax
jmp 0x588cd5
push 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x5c]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x30]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x4c]
call fcn.00406448
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x48]
call fcn.00406448
push eax
call dword [0x5d5624]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
sete byte [ebp - 9]
cmp byte [ebp - 9], 0
je 0x588dc7
lea eax, [ebp - 0x194]
call fcn.00580fd4
cmp byte [ebp - 0x184], 0
je 0x588daf
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x44]
test byte [eax + 0xf], 1
je 0x588daf
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x19c]
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x44]
mov ecx, 0xd
call fcn.00405d08
mov ecx, dword [ebp - 0x19c]
lea eax, [ebp - 0x198]
mov edx, 0x588e68
call fcn.00405db0
mov eax, dword [ebp - 0x198]
call fcn.00405f28
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyA
test eax, eax
jne 0x588daf
xor eax, eax
push ebp
push 0x588da8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c]
call fcn.00405d58
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c]
call fcn.00405f28
push eax
push 1
push 0
push 0x588ea4
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x588daf
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_RegCloseKey_1
ret
mov eax, dword [ebp - 8]
mov byte [eax + 0x60], 0
mov eax, dword [ebp - 8]
call fcn.005887a8
mov eax, dword [ebp - 8]
mov byte [eax + 9], 1
jmp 0x588dd4
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0057f030
mov eax, dword [ebp - 8]
mov byte [eax + 0x60], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x588e3f
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.00405abc
lea eax, [ebp - 0x194]
mov edx, dword [0x580ee4]
mov ecx, 2
call fcn.004068b0
lea eax, [ebp - 0x154]
mov edx, 6
call fcn.00405abc
lea eax, [ebp - 0x13c]
mov edx, dword [0x580ee4]
call fcn.00406864
lea eax, [ebp - 4]
call fcn.00407cbc
ret