Function at 0x10036c20
Capabilities:
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x244
mov eax, dword [0x101e42fc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov bl, dl
mov dword [ebp - 0x240], ecx
call fcn.10002de0
push str.Inside__pim_uninstallAAMFromAAMCleanerTool
push 0x101b1d5c
push eax
mov esi, dword [eax]
mov esi, dword [esi + 0x54]
mov ecx, esi
call dword [0x1018a4d4]
call esi
add esp, 0xc
call fcn.10002de0
push str.Killing_all_Non_Deployment_workflows
push 0x101b1d5c
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x54]
mov ecx, esi
call dword [0x1018a4d4]
call esi
add esp, 0xc
call fcn.1003b4f0
test al, al
jne 0x10036ca3
push str.Failed_to_kill_Non_Deployment_workflows__uninstallation_moving_ahead_withohut_exit
push 0x101b1d5c
call fcn.10002de0
push eax
call fcn.10003d90
add esp, 0xc
mov dword [ebp - 0x23c], 0
test bl, bl
je 0x10036cc2
call fcn.10033c30
mov edi, eax
mov dword [ebp - 0x23c], edi
test edi, edi
jne 0x10036d05
call fcn.10002de0
push str.Check_and_close_Adobe_Application_Manager_notifiers...
push 0x101b1d5c
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x54]
mov ecx, esi
call dword [0x1018a4d4]
call esi
add esp, 0xc
call fcn.1003ccd0
test al, al
jne 0x10036d1b
push str.Failed_to_close_notification_workflows
push 0x101b1d5c
call fcn.10002de0
push eax
call fcn.10003d90
add esp, 0xc
mov eax, 0xfffffffa
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1014d1d5
mov esp, ebp
pop ebp
ret
call fcn.1003b4f0
test al, al
jne 0x10036d3c
push str.Failed_to_kill_Non_Deployment_workflows__uninstallation_moving_ahead_withohut_exit
push 0x101b1d5c
call fcn.10002de0
push eax
call fcn.10003d90
add esp, 0xc
push 0x228
lea eax, [ebp - 0x234]
push 0
push eax
call fcn.10150b00
add esp, 0xc
mov dword [ebp - 0x238], 0x22c
push 0
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, eax
lea eax, [ebp - 0x238]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x10036e76
nop
mov eax, str.PDapp.exe
lea ecx, [ebp - 0x214]
nop dword [eax + eax]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x10036db6
test dx, dx
je 0x10036db2
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x10036db6
add ecx, 4
add eax, 4
test dx, dx
jne 0x10036d90
xor eax, eax
jmp 0x10036dbb
sbb eax, eax
or eax, 1
test eax, eax
je 0x10036dd7
lea eax, [ebp - 0x238]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x10036d80
jmp 0x10036e76
push dword [ebp - 0x230]
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x10036e52
call fcn.10002de0
push 0xffffffffffffffff
push str.PDapp.exe
push str.Waiting_for_the_process__s_to_complete__terminate__with_timeout:__lu_milliSeconds
mov esi, dword [eax]
push 0x101b1d5c
push eax
mov esi, dword [esi + 0x4c]
mov ecx, esi
call dword [0x1018a4d4]
call esi
add esp, 0x14
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call fcn.10002de0
push str.PDapp.exe
push str.Process__s_is_terminated._Now_procceding_AAM_Uninstallation
push 0x101b1d5c
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0x4c]
mov ecx, esi
call dword [0x1018a4d4]
call esi
add esp, 0x10
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10036e76
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.PDapp.exe
push str.Some_error_occured_in_getting_the_handle_for_the_process__s._Error:__d
push 0x101b1d5c
call fcn.10002de0
push eax
call fcn.10003e20
add esp, 0x14
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
xor edx, edx
push 0
lea ecx, [edx + 1]
call fcn.10027760
add esp, 4
mov esi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
test esi, esi
je 0x10036ebd
push esi
push str.Some_error_occurred_while_executing_modifiers._Error__pim_status__:__d._Ignoring_and_continuing_uninstallation
push 0x101b1d5c
push ecx
call fcn.10002de0
add esp, 4
push eax
call fcn.10003e20
add esp, 0x10
call fcn.10031d90
mov esi, eax
test esi, esi
jns 0x10036ef3
push str.Failed_to_remove_AAM_Files.
push 0x101b1d5c
call fcn.10002de0
push eax
call fcn.10003e20
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1014d1d5
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x240]
test ecx, ecx
je 0x10036f05
mov eax, dword [ebp - 0x23c]
mov dword [ecx], eax
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1014d1d5
mov esp, ebp
pop ebp
ret