Function at 0x1111e700
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4f4
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
lea eax, [ebp - 0x4b0]
push eax
mov esi, ecx
xor edi, edi
call fcn.11144330
add esp, 4
test eax, eax
je 0x1111e984
cmp dword [esi + 0x7bc], edi
je 0x1111e750
cmp dword [esi + 0x7c0], edi
je 0x1111e750
cmp dword [esi + 0x7c4], edi
jne 0x1111e984
cmp byte [0x1127ad8d], 0
je 0x1111e760
mov eax, str.DNARC_DIBQuit
jmp 0x1111e773
call fcn.111babb0
test al, al
mov eax, str.CICAgentDIBQuit
jne 0x1111e773
mov eax, str.Client32DIBQuit
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push eax
push 0
push 0
lea ecx, [ebp - 0x4b0]
push ecx
call edi
mov dword [esi + 0x7bc], eax
cmp byte [0x1127ad8d], 0
je 0x1111e79d
mov eax, str.DNARC_DIBBlit
jmp 0x1111e7b0
call fcn.111babb0
test al, al
mov eax, str.CICAgentDIBBlit
jne 0x1111e7b0
mov eax, str.Client32DIBBlit
push eax
push 0
push 0
lea edx, [ebp - 0x4b0]
push edx
call edi
mov dword [esi + 0x7c0], eax
cmp byte [0x1127ad8d], 0
je 0x1111e7d4
mov eax, str.DNARC_DIBDone
jmp 0x1111e7e7
call fcn.111babb0
test al, al
mov eax, str.CICAgentDIBDone
jne 0x1111e7e7
mov eax, str.Client32DIBDone
push eax
push 0
push 0
lea eax, [ebp - 0x4b0]
push eax
call edi
cmp dword [esi + 0x7bc], 0
mov dword [esi + 0x7c4], eax
je 0x1111e962
cmp dword [esi + 0x7c0], 0
je 0x1111e962
test eax, eax
je 0x1111e962
xor eax, eax
push 0x44
push eax
lea ecx, [ebp - 0x4f4]
push ecx
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], eax
mov dword [ebp - 0x498], eax
call sub.MSVCR100.dll_memset
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
push ebx
lea edx, [ebp - 0x84]
push str.Winsta0_s
push edx
mov dword [ebp - 0x4f4], 0x44
call edi
add esp, 0x18
push 0x207
lea edx, [ebp - 0x492]
push edx
lea eax, [ebp - 0x84]
mov ecx, 0x22
push 0
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 0x4c8], 0x80
mov word [ebp - 0x494], cx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x494]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x1111e8a7
sub eax, edx
sar eax, 1
lea eax, [ebp + eax*2 - 0x494]
push str.___scrape
push eax
call edi
add esp, 8
lea ecx, [ebp - 0x4a4]
push ecx
lea edx, [ebp - 0x4f4]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x494]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1111e940
lea edx, [esi + 0x7cc]
mov eax, ebx
sub edx, ebx
nop
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x1111e900
mov edx, dword [ebp - 0x4a0]
mov ecx, dword [ebp - 0x4a4]
push edx
mov dword [esi + 0x850], ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret 4
push str.Error_launching_scrapeApp_n
call fcn.111bd7b0
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret 4
push str.failed_to_create_1_or_more_scrape_events_n
call fcn.111bd7b0
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.111d9022
mov esp, ebp
pop ebp
ret 4