Function at 0x4e1a70
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x14
lea eax, [esp + 0xc]
push ebx
push esi
mov esi, ecx
push eax
lea ecx, [esp + 0x14]
xor ebx, ebx
push ecx
push ebx
push 0xf003f
push ebx
push 0x6874e8
push ebx
push str.SoftwareDownloadManagerScheduler
push reloc.WSOCK32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x4e1d03
mov ecx, dword [esp + 0x10]
push ebp
lea edx, [esp + 0xc]
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [esp + 0x14]
push edx
push eax
push ebx
push ebx
mov ebp, 4
push str.isStartEnabled
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x4e1ada
mov byte [esi + 0x19], bl
jmp 0x4e1ae4
cmp dword [esp + 0x14], ebx
setne dl
mov byte [esi + 0x19], dl
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push ebx
push ebx
push str.isStopEnabled
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x4e1b09
mov byte [esi + 0x1a], bl
jmp 0x4e1b13
cmp dword [esp + 0x14], ebx
setne al
mov byte [esi + 0x1a], al
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push ebx
push ebx
push str.isStartDilay
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x4e1b38
mov byte [esi + 0x1b], bl
jmp 0x4e1b42
cmp dword [esp + 0x14], ebx
sete cl
mov byte [esi + 0x1b], cl
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push ebx
push ebx
push str.isForceTurnOff
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x4e1b67
mov byte [esi + 0x2c], bl
jmp 0x4e1b71
cmp dword [esp + 0x14], ebx
setne dl
mov byte [esi + 0x2c], dl
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push ebx
push ebx
push str.isHangUpModem
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x4e1b96
mov byte [esi + 0x2f], bl
jmp 0x4e1ba0
cmp dword [esp + 0x14], ebx
setne al
mov byte [esi + 0x2f], al
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push ebx
push ebx
push str.isTurnOffComputer
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x4e1bc5
mov byte [esi + 0x2d], bl
jmp 0x4e1bcf
cmp dword [esp + 0x14], ebx
setne cl
mov byte [esi + 0x2d], cl
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push ebx
push ebx
push str.isExitIDMWhenDone
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x4e1bf4
mov byte [esi + 0x2e], bl
jmp 0x4e1bfe
cmp dword [esp + 0x14], ebx
setne dl
mov byte [esi + 0x2e], dl
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push ebx
push ebx
push str.startDaysOfWeek
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x4e1c27
mov dword [esi + 0x28], 0x7f
jmp 0x4e1c2e
mov eax, dword [esp + 0x14]
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push ebx
push ebx
push str.startTime
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x4e1c57
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x1c], ecx
jmp 0x4e1c74
push 0xffffffffffffffff
push ebx
push ebx
push 0x17
push 1
push 1
push 0x7d2
lea ecx, [esp + 0x3c]
call fcn.0059eb33
mov edx, dword [eax]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push ebx
push ebx
push str.startDay
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
jne 0x4e1c9d
mov eax, dword [esp + 0x14]
mov dword [esi + 0x20], eax
jmp 0x4e1ca0
mov dword [esi + 0x20], ebx
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push ebx
push ebx
push str.stopTime
push eax
mov dword [esp + 0x28], ebp
call edi
pop edi
pop ebp
test eax, eax
jne 0x4e1cda
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
push eax
mov dword [esi + 0x24], ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop esi
pop ebx
add esp, 0x14
ret
push 0xffffffffffffffff
push ebx
push 0x1e
push 7
push 1
push 1
push 0x7d2
lea ecx, [esp + 0x34]
call fcn.0059eb33
mov edx, dword [eax]
mov eax, dword [esp + 0x10]
push eax
mov dword [esi + 0x24], edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop esi
pop ebx
add esp, 0x14
ret