Function at 0x51c000
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x34
push ebx
push esi
lea eax, [esp + 0x14]
push eax
mov esi, ecx
lea ecx, [esp + 0x14]
push ecx
xor ebx, ebx
push ebx
push 0xf003f
push ebx
push 0x66b96c
push ebx
push str.SoftwareDownloadManagerScheduler
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x51c2a7
mov ecx, dword [esp + 0x10]
push ebp
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x18]
push eax
push ebx
push ebx
push str.isStartEnabled
mov ebp, 4
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x51c06a
mov byte [esi + 0x21], bl
jmp 0x51c074
cmp dword [esp + 0x14], ebx
setne dl
mov byte [esi + 0x21], dl
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
push ecx
push ebx
push ebx
push str.isStopEnabled
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x51c099
mov byte [esi + 0x22], bl
jmp 0x51c0a3
cmp dword [esp + 0x14], ebx
setne al
mov byte [esi + 0x22], al
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x18]
push edx
push ebx
push ebx
push str.isStartDilay
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x51c0c8
mov byte [esi + 0x23], bl
jmp 0x51c0d2
cmp dword [esp + 0x14], ebx
sete cl
mov byte [esi + 0x23], cl
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x18]
push eax
push ebx
push ebx
push str.isForceTurnOff
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x51c0f7
mov byte [esi + 0x40], bl
jmp 0x51c101
cmp dword [esp + 0x14], ebx
setne dl
mov byte [esi + 0x40], dl
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
push ecx
push ebx
push ebx
push str.isHangUpModem
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x51c126
mov byte [esi + 0x43], bl
jmp 0x51c130
cmp dword [esp + 0x14], ebx
setne al
mov byte [esi + 0x43], al
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x18]
push edx
push ebx
push ebx
push str.isTurnOffComputer
push eax
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x51c155
mov byte [esi + 0x41], bl
jmp 0x51c15f
cmp dword [esp + 0x14], ebx
setne cl
mov byte [esi + 0x41], cl
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x18]
push eax
push ebx
push ebx
push str.isExitIDMWhenDone
push ecx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x51c184
mov byte [esi + 0x42], bl
jmp 0x51c18e
cmp dword [esp + 0x14], ebx
setne dl
mov byte [esi + 0x42], dl
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
push ecx
push ebx
push ebx
push str.startDaysOfWeek
push edx
mov dword [esp + 0x28], ebp
call edi
test eax, eax
je 0x51c1b7
mov dword [esi + 0x3c], 0x7f
jmp 0x51c1be
mov eax, dword [esp + 0x14]
mov dword [esi + 0x3c], eax
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x18]
push edx
push ebx
push ebx
push str.startTime
push eax
mov dword [esp + 0x28], ebp
call edi
or ebp, 0xffffffff
test eax, eax
jne 0x51c21a
mov eax, dword [esp + 0x14]
cdq
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x28], edx
lea edx, [esp + 0x10]
push edx
mov dword [esi + 0x24], eax
lea eax, [esp + 0x18]
push eax
push ebx
push ebx
push str.startDay
push ecx
mov dword [esp + 0x28], 4
call edi
test eax, eax
jne 0x51c261
mov eax, dword [esp + 0x14]
cdq
mov dword [esi + 0x30], edx
jmp 0x51c268
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 0x17
mov dword [esp + 0x30], 1
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], 0x77
mov dword [esp + 0x44], ebp
call fcn.00619560
mov ecx, eax
and ecx, edx
add esp, 4
cmp ecx, ebp
jne 0x51c1e6
push 0x80070057
call fcn.00401090
xor eax, eax
xor ecx, ecx
mov dword [esi + 0x30], ecx
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x10]
push edx
mov dword [esi + 0x2c], eax
lea eax, [esp + 0x18]
push eax
push ebx
push ebx
push str.stopTime
push ecx
mov dword [esp + 0x28], 4
call edi
test eax, eax
jne 0x51c2ad
mov eax, dword [esp + 0x14]
cdq
mov dword [esi + 0x38], edx
mov edx, dword [esp + 0x18]
push edx
mov dword [esi + 0x34], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop ebp
pop esi
pop ebx
add esp, 0x34
ret
lea edx, [esp + 0x20]
push edx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], 0x1e
mov dword [esp + 0x2c], 7
mov dword [esp + 0x30], 1
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], 0x77
mov dword [esp + 0x44], ebp
call fcn.00619560
mov ecx, eax
and ecx, edx
add esp, 4
cmp ecx, ebp
jne 0x51c294
push 0x80070057
call fcn.00401090
int3