Function at 0x3b212c0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x3b87d20], 0
je 0x3b212d6
mov eax, 1
mov esp, ebp
pop ebp
ret
mov edx, 0x3b87d28
mov eax, edx
push esi
mov dword [0x3b87d20], 1
lea esi, [eax + 2]
jmp 0x3b212f0
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x3b212f0
sub eax, esi
sar eax, 1
jne 0x3b21306
mov edx, str.TSafeDoc2.dll
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x3b87d24], eax
test eax, eax
je 0x3b2171d
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.SDStart
push eax
call esi
mov dword [0x3b87c44], eax
mov eax, dword [0x3b87d24]
push str.SDStartReadOnly
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.SDStop
push ecx
mov dword [0x3b87c48], eax
call esi
mov edx, dword [0x3b87d24]
push str.IsRunning
push edx
mov dword [0x3b87c4c], eax
call esi
mov dword [0x3b87c50], eax
mov eax, dword [0x3b87d24]
push str.IsRunningEx
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.SDStartKeyboardHook
push ecx
mov dword [0x3b87c54], eax
call esi
mov edx, dword [0x3b87d24]
push str.IsProcessEnableSnapshot
push edx
mov dword [0x3b87c58], eax
call esi
mov dword [0x3b87c5c], eax
mov eax, dword [0x3b87d24]
push str.SetEncryption
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.SetOffline
push ecx
mov dword [0x3b87c60], eax
call esi
mov edx, dword [0x3b87d24]
push str.UpdateSDPolicy
push edx
mov dword [0x3b87c64], eax
call esi
mov dword [0x3b87c68], eax
mov eax, dword [0x3b87d24]
push str.UpdateSafeSoftLib
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.UpdateSystemInfo
push ecx
mov dword [0x3b87c6c], eax
call esi
mov edx, dword [0x3b87d24]
push str.UpdateSystemInfo2
push edx
mov dword [0x3b87c70], eax
call esi
mov dword [0x3b87c74], eax
mov eax, dword [0x3b87d24]
push str.UpdateUserState
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.UpdateDefaultSecuProperty
push ecx
mov dword [0x3b87c78], eax
call esi
mov edx, dword [0x3b87d24]
push str.UpdateCustomEncryption
push edx
mov dword [0x3b87c7c], eax
call esi
mov dword [0x3b87c80], eax
push str.UpdateTargetProcTable
mov eax, dword [0x3b87d24]
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.GetTargetProcInfoTable
push ecx
mov dword [0x3b87c98], eax
call esi
mov edx, dword [0x3b87d24]
push str.GetTSDSafeProcInfo
push edx
mov dword [0x3b87c9c], eax
call esi
mov dword [0x3b87ca0], eax
mov eax, dword [0x3b87d24]
push str.GetGlobalShareData
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.BackupOcularSD
push ecx
mov dword [0x3b87ca4], eax
call esi
mov edx, dword [0x3b87d24]
push str.ClearOcularSD
push edx
mov dword [0x3b87ca8], eax
call esi
mov dword [0x3b87cac], eax
mov eax, dword [0x3b87d24]
push str.DeleteOcularSDBak
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.DeleteOcularSDRescue
push ecx
mov dword [0x3b87cb0], eax
call esi
mov edx, dword [0x3b87d24]
push str.SetTargetProcessByName
push edx
mov dword [0x3b87cb4], eax
call esi
mov dword [0x3b87cb8], eax
mov eax, dword [0x3b87d24]
push str.SetTargetProcessByProcID
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.SetTargetProcessByMatch
push ecx
mov dword [0x3b87cbc], eax
call esi
mov edx, dword [0x3b87d24]
push str.DeleteTargetProcessByIndex
push edx
mov dword [0x3b87cc0], eax
call esi
mov dword [0x3b87cc4], eax
mov eax, dword [0x3b87d24]
push str.FilterShellExecuteExWReadOnly
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.FilterCreateProcessAReadOnly
push ecx
mov dword [0x3b87cc8], eax
call esi
mov edx, dword [0x3b87d24]
push str.FilterCreateProcessWReadOnly
push edx
mov dword [0x3b87ccc], eax
call esi
mov dword [0x3b87cd0], eax
mov eax, dword [0x3b87d24]
push str.FilterCreateProcessInternalWReadOnly
push eax
call esi
mov ecx, dword [0x3b87d24]
mov dword [0x3b87cd4], eax
push str.FilterIExecuteCommandExecuteReadOnly
push ecx
call esi
mov edx, dword [0x3b87d24]
push str.FilterIExecuteCommandExecuteReadOnlyEx
push edx
mov dword [0x3b87cd8], eax
call esi
mov dword [0x3b87cdc], eax
mov eax, dword [0x3b87d24]
push str.EncryptAndDecryptSafeDiskFile
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.IsEncryptOrDecryptSafeDiskFile
push ecx
mov dword [0x3b87c84], eax
call esi
mov edx, dword [0x3b87d24]
push str.IsEncryptOrDecryptSafeDiskFile2
push edx
mov dword [0x3b87c88], eax
call esi
mov dword [0x3b87c8c], eax
mov eax, dword [0x3b87d24]
push str.IsShellEncryptOrDecryptSafeDiskFile2
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.IsShellEncryptOrDecryptSafeDiskFile3
push ecx
mov dword [0x3b87c90], eax
call esi
mov edx, dword [0x3b87d24]
push str.IsFileInSafeDisk
push edx
mov dword [0x3b87c94], eax
call esi
mov dword [0x3b87ce0], eax
mov eax, dword [0x3b87d24]
push str.IsForbidCopyPaste
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.IsFileInReadonlyDirectory
push ecx
mov dword [0x3b87ce4], eax
call esi
mov edx, dword [0x3b87d24]
push str.IsSpecialSafeAreaFile
push edx
mov dword [0x3b87ce8], eax
call esi
mov dword [0x3b87cf0], eax
mov eax, dword [0x3b87d24]
push str.GetDecryptDirectory
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.UpdateProcTree
push ecx
mov dword [0x3b87cec], eax
call esi
mov edx, dword [0x3b87d24]
push str.SetHookState
push edx
mov dword [0x3b87cf4], eax
call esi
mov dword [0x3b87cf8], eax
mov eax, dword [0x3b87d24]
push str.GetHookState
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.IsMatchPassthruFile
push ecx
mov dword [0x3b87cfc], eax
call esi
mov edx, dword [0x3b87d24]
push str.GetUnCheckDecryptToolProcs
mov dword [0x3b87d00], eax
push edx
call esi
mov dword [0x3b87d04], eax
mov eax, dword [0x3b87d24]
push str.GetUnCheckDecryptToolHwnds
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.GetNetShareSourceStatus
push ecx
mov dword [0x3b87d08], eax
call esi
mov edx, dword [0x3b87d24]
push str.GetTargetProcSandBoxTable
push edx
mov dword [0x3b87d0c], eax
call esi
mov dword [0x3b87d10], eax
mov eax, dword [0x3b87d24]
push str.SetSandBoxName
push eax
call esi
mov ecx, dword [0x3b87d24]
push str.GetSandBoxNameByFilePolicy
push ecx
mov dword [0x3b87d14], eax
call esi
mov edx, dword [0x3b87d24]
push str.FilePolicyCom
push edx
mov dword [0x3b87d18], eax
call esi
mov dword [0x3b87d1c], eax
cmp dword [0x3b87c44], 0
pop esi
je 0x3b218cb
cmp dword [0x3b87c4c], 0
je 0x3b218cb
cmp dword [0x3b87c58], 0
je 0x3b218cb
cmp dword [0x3b87c5c], 0
je 0x3b218cb
cmp dword [0x3b87c60], 0
je 0x3b218cb
cmp dword [0x3b87c64], 0
je 0x3b218cb
cmp dword [0x3b87c68], 0
je 0x3b218cb
cmp dword [0x3b87c6c], 0
je 0x3b218cb
cmp dword [0x3b87c70], 0
je 0x3b218cb
cmp dword [0x3b87c74], 0
je 0x3b218cb
cmp dword [0x3b87c78], 0
je 0x3b218cb
cmp dword [0x3b87c7c], 0
je 0x3b218cb
cmp dword [0x3b87c80], 0
je 0x3b218cb
cmp dword [0x3b87c98], 0
je 0x3b218cb
cmp dword [0x3b87c9c], 0
je 0x3b218cb
cmp dword [0x3b87ca0], 0
je 0x3b218cb
cmp dword [0x3b87c84], 0
je 0x3b218cb
cmp dword [0x3b87c88], 0
je 0x3b218cb
cmp dword [0x3b87c8c], 0
je 0x3b218cb
cmp dword [0x3b87c90], 0
je 0x3b218cb
cmp dword [0x3b87c94], 0
je 0x3b218cb
cmp dword [0x3b87ce0], 0
je 0x3b218cb
cmp dword [0x3b87ce4], 0
je 0x3b218cb
cmp dword [0x3b87ce8], 0
je 0x3b218cb
cmp dword [0x3b87cf0], 0
je 0x3b218cb
cmp dword [0x3b87cec], 0
je 0x3b218cb
cmp dword [0x3b87cf4], 0
je 0x3b218cb
cmp dword [0x3b87cf8], 0
je 0x3b218cb
cmp dword [0x3b87cfc], 0
je 0x3b218cb
cmp dword [0x3b87d00], 0
je 0x3b218cb
cmp dword [0x3b87d04], 0
je 0x3b218cb
cmp dword [0x3b87d08], 0
je 0x3b218cb
cmp dword [0x3b87d0c], 0
je 0x3b218cb
cmp dword [0x3b87d10], 0
je 0x3b218cb
cmp dword [0x3b87d14], 0
je 0x3b218cb
cmp dword [0x3b87d18], 0
je 0x3b218cb
cmp dword [0x3b87d1c], 0
jne 0x3b212cd
xor eax, eax
mov esp, ebp
pop ebp
ret