Function at 0x11b01bf0
Capabilities:
Link many functions at runtime

Disassembly:
mov eax, dword [0x11baf230]
test eax, eax
je 0x11b01bff
mov eax, 1
ret
push esi
mov esi, 0x11baf238
push esi
mov dword [0x11baf230], 1
call fcn.11b13f3f
add esp, 4
test eax, eax
jne 0x11b01c21
mov esi, str.TSafeDoc2.dll
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
mov dword [0x11baf234], eax
je 0x11b0204a
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.SDStart
push eax
call esi
mov dword [0x11baf148], eax
mov eax, dword [0x11baf234]
push str.SDStartReadOnly
push eax
call esi
mov ecx, dword [0x11baf234]
push str.SDStop
push ecx
mov dword [0x11baf14c], eax
call esi
mov edx, dword [0x11baf234]
push str.IsRunning
push edx
mov dword [0x11baf150], eax
call esi
mov dword [0x11baf154], eax
mov eax, dword [0x11baf234]
push str.IsRunningEx
push eax
call esi
mov ecx, dword [0x11baf234]
push str.SDStartKeyboardHook
push ecx
mov dword [0x11baf158], eax
call esi
mov edx, dword [0x11baf234]
push str.IsProcessEnableSnapshot
push edx
mov dword [0x11baf15c], eax
call esi
mov dword [0x11baf160], eax
mov eax, dword [0x11baf234]
push str.SetEncryption
push eax
call esi
mov ecx, dword [0x11baf234]
push str.SetOffline
push ecx
mov dword [0x11baf164], eax
call esi
mov edx, dword [0x11baf234]
push str.UpdateSDPolicy
push edx
mov dword [0x11baf168], eax
call esi
mov dword [0x11baf16c], eax
mov eax, dword [0x11baf234]
push str.UpdateSafeSoftLib
push eax
call esi
mov ecx, dword [0x11baf234]
push str.UpdateSystemInfo
push ecx
mov dword [0x11baf170], eax
call esi
mov edx, dword [0x11baf234]
push str.UpdateSystemInfo2
push edx
mov dword [0x11baf174], eax
call esi
mov dword [0x11baf178], eax
mov eax, dword [0x11baf234]
push str.UpdateUserState
push eax
call esi
mov ecx, dword [0x11baf234]
push str.UpdateDefaultSecuProperty
push ecx
mov dword [0x11baf17c], eax
call esi
mov edx, dword [0x11baf234]
push str.UpdateCustomEncryption
push edx
mov dword [0x11baf180], eax
call esi
mov dword [0x11baf184], eax
push str.UpdateTargetProcTable
mov eax, dword [0x11baf234]
push eax
call esi
mov ecx, dword [0x11baf234]
push str.GetTargetProcInfoTable
push ecx
mov dword [0x11baf19c], eax
call esi
mov edx, dword [0x11baf234]
push str.GetTSDSafeProcInfo
push edx
mov dword [0x11baf1a0], eax
call esi
mov dword [0x11baf1a4], eax
mov eax, dword [0x11baf234]
push str.GetGlobalShareData
push eax
call esi
mov ecx, dword [0x11baf234]
push str.BackupOcularSD
push ecx
mov dword [0x11baf1a8], eax
call esi
mov edx, dword [0x11baf234]
push str.ClearOcularSD
push edx
mov dword [0x11baf1ac], eax
call esi
mov dword [0x11baf1b0], eax
mov eax, dword [0x11baf234]
push str.DeleteOcularSDBak
push eax
call esi
mov ecx, dword [0x11baf234]
push str.DeleteOcularSDRescue
push ecx
mov dword [0x11baf1b4], eax
call esi
mov edx, dword [0x11baf234]
push str.SetTargetProcessByName
push edx
mov dword [0x11baf1b8], eax
call esi
mov dword [0x11baf1bc], eax
mov eax, dword [0x11baf234]
push str.SetTargetProcessByProcID
push eax
call esi
mov ecx, dword [0x11baf234]
push str.SetTargetProcessByMatch
push ecx
mov dword [0x11baf1c0], eax
call esi
mov edx, dword [0x11baf234]
push str.DeleteTargetProcessByIndex
push edx
mov dword [0x11baf1c4], eax
call esi
mov dword [0x11baf1c8], eax
mov eax, dword [0x11baf234]
push str.FilterShellExecuteExWReadOnly
push eax
call esi
mov ecx, dword [0x11baf234]
push str.FilterCreateProcessAReadOnly
push ecx
mov dword [0x11baf1cc], eax
call esi
mov edx, dword [0x11baf234]
push str.FilterCreateProcessWReadOnly
push edx
mov dword [0x11baf1d0], eax
call esi
mov dword [0x11baf1d4], eax
mov eax, dword [0x11baf234]
push str.FilterCreateProcessInternalWReadOnly
push eax
call esi
mov ecx, dword [0x11baf234]
mov dword [0x11baf1d8], eax
push str.FilterIExecuteCommandExecuteReadOnly
push ecx
call esi
mov edx, dword [0x11baf234]
push str.FilterIExecuteCommandExecuteReadOnlyEx
push edx
mov dword [0x11baf1dc], eax
call esi
mov dword [0x11baf1e0], eax
mov eax, dword [0x11baf234]
push str.EncryptAndDecryptSafeDiskFile
push eax
call esi
mov ecx, dword [0x11baf234]
push str.IsEncryptOrDecryptSafeDiskFile
push ecx
mov dword [0x11baf188], eax
call esi
mov edx, dword [0x11baf234]
push str.IsEncryptOrDecryptSafeDiskFile2
push edx
mov dword [0x11baf18c], eax
call esi
mov dword [0x11baf190], eax
mov eax, dword [0x11baf234]
push str.IsShellEncryptOrDecryptSafeDiskFile2
push eax
call esi
mov ecx, dword [0x11baf234]
push str.IsShellEncryptOrDecryptSafeDiskFile3
push ecx
mov dword [0x11baf194], eax
call esi
mov edx, dword [0x11baf234]
push str.IsFileInSafeDisk
push edx
mov dword [0x11baf198], eax
call esi
mov dword [0x11baf1e4], eax
mov eax, dword [0x11baf234]
push str.IsForbidCopyPaste
push eax
call esi
mov ecx, dword [0x11baf234]
push str.IsFileInReadonlyDirectory
push ecx
mov dword [0x11baf1e8], eax
call esi
mov edx, dword [0x11baf234]
push str.IsSpecialSafeAreaFile
push edx
mov dword [0x11baf1ec], eax
call esi
mov dword [0x11baf1f4], eax
mov eax, dword [0x11baf234]
push str.GetDecryptDirectory
push eax
call esi
mov ecx, dword [0x11baf234]
push str.UpdateProcTree
push ecx
mov dword [0x11baf1f0], eax
call esi
mov edx, dword [0x11baf234]
push str.SetHookState
push edx
mov dword [0x11baf1f8], eax
call esi
mov dword [0x11baf1fc], eax
mov eax, dword [0x11baf234]
push str.GetHookState
push eax
call esi
mov ecx, dword [0x11baf234]
push str.IsMatchPassthruFile
push ecx
mov dword [0x11baf200], eax
call esi
mov edx, dword [0x11baf234]
push str.GetUnCheckDecryptToolProcs
mov dword [0x11baf204], eax
push edx
call esi
mov dword [0x11baf208], eax
mov eax, dword [0x11baf234]
push str.GetUnCheckDecryptToolHwnds
push eax
call esi
mov ecx, dword [0x11baf234]
push str.GetNetShareSourceStatus
push ecx
mov dword [0x11baf20c], eax
call esi
mov edx, dword [0x11baf234]
push str.GetTargetProcSandBoxTable
push edx
mov dword [0x11baf210], eax
call esi
mov dword [0x11baf214], eax
mov eax, dword [0x11baf234]
push str.SetSandBoxName
push eax
call esi
mov ecx, dword [0x11baf234]
push str.GetSandBoxNameByFilePolicy
push ecx
mov dword [0x11baf218], eax
call esi
mov edx, dword [0x11baf234]
push str.FilePolicyCom
push edx
mov dword [0x11baf21c], eax
call esi
mov dword [0x11baf220], eax
mov eax, dword [0x11baf234]
push str.IsCurrentOpenedEncryptFile
push eax
call esi
mov dword [0x11baf224], eax
mov eax, dword [0x11baf148]
pop esi
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf150]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf15c]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf160]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf164]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf168]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf16c]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf170]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf174]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf178]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf17c]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf180]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf184]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf19c]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1a0]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1a4]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf188]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf18c]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf190]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf194]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf198]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1e4]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1e8]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1ec]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1f4]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1f0]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1f8]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf1fc]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf200]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf204]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf208]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf20c]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf210]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf214]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf218]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf21c]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf220]
test eax, eax
je 0x11b02207
mov eax, dword [0x11baf224]
test eax, eax
je 0x11b02207
mov eax, 1
ret
xor eax, eax
ret