Function at 0x11d34b80
Capabilities:
Link many functions at runtime

Disassembly:
mov eax, dword [0x11df66dc]
test eax, eax
je 0x11d34b8f
mov eax, 1
ret
push esi
mov esi, 0x11df66e4
push esi
mov dword [0x11df66dc], 1
call fcn.11d78fb0
add esp, 4
test eax, eax
jne 0x11d34bb1
mov esi, str.TSafeDoc2.dll
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
mov dword [0x11df66e0], eax
je 0x11d34e2d
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.SDStart
push eax
call esi
mov dword [0x11df6658], eax
mov eax, dword [0x11df66e0]
push str.SDStartReadOnly
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.SDStop
push ecx
mov dword [0x11df665c], eax
call esi
mov edx, dword [0x11df66e0]
push str.IsRunning
push edx
mov dword [0x11df6660], eax
call esi
mov dword [0x11df6664], eax
mov eax, dword [0x11df66e0]
push str.IsRunningEx
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.SDStartKeyboardHook
push ecx
mov dword [0x11df6668], eax
call esi
mov edx, dword [0x11df66e0]
push str.IsProcessEnableSnapshot
push edx
mov dword [0x11df666c], eax
call esi
mov dword [0x11df6670], eax
mov eax, dword [0x11df66e0]
push str.SetEncryption
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.SetOffline
push ecx
mov dword [0x11df6674], eax
call esi
mov edx, dword [0x11df66e0]
push str.UpdateSDPolicy
push edx
mov dword [0x11df6678], eax
call esi
mov dword [0x11df667c], eax
mov eax, dword [0x11df66e0]
push str.UpdateSafeSoftLib
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.UpdateSystemInfo
push ecx
mov dword [0x11df6680], eax
call esi
mov edx, dword [0x11df66e0]
push str.UpdateSystemInfo2
push edx
mov dword [0x11df6684], eax
call esi
mov dword [0x11df6688], eax
mov eax, dword [0x11df66e0]
push str.UpdateUserState
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.GetUserID
push ecx
mov dword [0x11df668c], eax
call esi
mov edx, dword [0x11df66e0]
push str.UpdateDefaultSecuProperty
push edx
mov dword [0x11df6690], eax
call esi
mov dword [0x11df6694], eax
push str.UpdateCustomEncryption
mov eax, dword [0x11df66e0]
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.UpdateTargetProcTable
push ecx
mov dword [0x11df6698], eax
call esi
mov edx, dword [0x11df66e0]
push str.GetTargetProcTable
push edx
mov dword [0x11df669c], eax
call esi
mov dword [0x11df66a0], eax
mov eax, dword [0x11df66e0]
push str.GetTSDSafeProc
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.GetGlobalShareData
push ecx
mov dword [0x11df66a4], eax
call esi
mov edx, dword [0x11df66e0]
push str.BackupOcularSD
push edx
mov dword [0x11df66a8], eax
call esi
mov dword [0x11df66ac], eax
mov eax, dword [0x11df66e0]
push str.DeleteOcularSDBak
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.SetTargetProcessByName
push ecx
mov dword [0x11df66b0], eax
call esi
mov edx, dword [0x11df66e0]
push str.SetTargetProcessByProcID
push edx
mov dword [0x11df66b4], eax
call esi
mov dword [0x11df66b8], eax
mov eax, dword [0x11df66e0]
push str.SetTargetProcessByMatch
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.DeleteTargetProcessByIndex
push ecx
mov dword [0x11df66bc], eax
call esi
mov edx, dword [0x11df66e0]
push str.FilterShellExecuteExWReadOnly
push edx
mov dword [0x11df66c0], eax
call esi
mov dword [0x11df66c4], eax
mov eax, dword [0x11df66e0]
push str.FilterCreateProcessAReadOnly
push eax
call esi
mov ecx, dword [0x11df66e0]
push str.FilterCreateProcessWReadOnly
push ecx
mov dword [0x11df66c8], eax
call esi
mov edx, dword [0x11df66e0]
push str.FilterCreateProcessInternalWReadOnly
push edx
mov dword [0x11df66cc], eax
call esi
mov dword [0x11df66d0], eax
mov eax, dword [0x11df66e0]
push str.FilterIExecuteCommandExecuteReadOnly
push eax
call esi
mov ecx, dword [0x11df66e0]
mov dword [0x11df66d4], eax
push str.FilterIExecuteCommandExecuteReadOnlyEx
push ecx
call esi
mov dword [0x11df66d8], eax
mov eax, dword [0x11df6658]
pop esi
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6660]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df666c]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6670]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6674]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6678]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df667c]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6680]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6684]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6688]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df668c]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6690]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6694]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df6698]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df669c]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df66a0]
test eax, eax
je 0x11d34ed9
mov eax, dword [0x11df66a4]
test eax, eax
je 0x11d34ed9
mov eax, 1
ret
xor eax, eax
ret