Function at 0x10003cf6
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x820
mov eax, 0x1019d6fd
call fcn.10003f96
call fcn.10003fe6
lea ecx, [ebp - 0x81c]
call fcn.10004c53
mov eax, dword [0x1027a40c]
and dword [ebp - 4], 0
push str.JavaScriptPerms
push str.FeatureLockdown
mov esi, dword [eax + 0x5c0]
mov ecx, esi
call dword [0x101b33f8]
call esi
pop ecx
pop ecx
push str.BlackList
push eax
mov eax, dword [0x1027a3ec]
mov esi, dword [eax + 0x114]
mov ecx, esi
call dword [0x101b33f8]
call esi
pop ecx
pop ecx
xor ebx, ebx
lea ecx, [ebp - 0x81c]
inc ebx
mov esi, eax
push ebx
call fcn.1017739e
push ebx
lea ecx, [ebp - 0x81c]
mov dword [ebp - 0x81c], esi
call fcn.1017739e
lea ecx, [ebp - 0x828]
call fcn.10004c53
mov edi, dword [0x1027a3a8]
push str.IsSingleClientApp
mov byte [ebp - 4], bl
mov esi, dword [edi + 0x14]
mov ecx, esi
call dword [0x101b33f8]
call esi
mov esi, dword [edi + 0x2c]
pop ecx
movzx eax, ax
mov ecx, esi
push eax
call dword [0x101b33f8]
call esi
pop ecx
test eax, eax
jne 0x10003e19
mov ax, word [0x102724d4]
mov ecx, 0xffff
cmp ax, cx
jne 0x10003dd1
mov ecx, 0x102724d4
call fcn.10002c74
movzx eax, ax
push str.Reader
push eax
mov eax, dword [0x1027a3a8]
mov esi, dword [eax + 0x2c]
mov ecx, esi
call dword [0x101b33f8]
call esi
pop ecx
push eax
call fcn.1017739e
pop ecx
pop ecx
test ax, ax
je 0x10003e19
mov eax, dword [0x10278a08]
mov edi, str.SOFTWAREAdobeAcrobat_ReaderDCJavaScriptPerms
mov esi, dword [eax + 0xcbc]
mov ecx, esi
call dword [0x101b33f8]
call esi
test ax, ax
je 0x10003e1e
mov edi, str.SOFTWAREAdobeAdobe_AcrobatDCJavaScriptPerms
lea eax, [ebp - 0x820]
push eax
push ebx
push 0
push edi
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor edi, edi
test eax, eax
jne 0x10003eaa
lea eax, [ebp - 0x82c]
mov dword [ebp - 0x82c], 0x800
push eax
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x814]
push eax
push edi
push str.tBlackList
push dword [ebp - 0x820]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x10003e9e
cmp dword [ebp - 0x814], ebx
jne 0x10003e9e
push edi
call fcn.1017739e
pop ecx
push eax
push edi
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x828]
call fcn.1017739e
push ebx
lea ecx, [ebp - 0x828]
call fcn.1017739e
push dword [ebp - 0x820]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
push edi
lea ecx, [ebp - 0x81c]
call fcn.1017739e
test eax, eax
jne 0x10003ecc
push edi
push edi
lea ecx, [ebp - 0x828]
call fcn.1017739e
test eax, eax
je 0x10003f15
call fcn.1007be22
cmp dword [0x1027884c], 0
jne 0x10003f1a
push ebx
push 0xc
call fcn.1017739e
pop ecx
mov esi, eax
pop ecx
mov dword [ebp - 0x814], esi
mov byte [ebp - 4], 2
test esi, esi
je 0x10003f04
push esi
mov dword [esi], edi
mov dword [esi + 4], edi
call fcn.1006f95f
pop ecx
mov dword [esi], eax
jmp 0x10003f06
mov esi, edi
mov byte [ebp - 4], bl
mov dword [0x1027884c], esi
test esi, esi
jne 0x10003f1a
mov ebx, edi
movzx ebx, bx
jmp 0x10003f44
push ecx
push ecx
lea eax, [ebp - 0x81c]
mov ecx, esp
push eax
call fcn.1017739e
call fcn.1007b342
lea eax, [ebp - 0x828]
mov ecx, esp
push eax
call fcn.1017739e
call fcn.1007b342
pop ecx
pop ecx
lea ecx, [ebp - 0x828]
call fcn.1017739e
lea ecx, [ebp - 0x81c]
call fcn.1017739e
mov ax, bx
call fcn.10005073
ret