simplewall/src/profile.cpp

// simplewall
// Copyright (c) 2016-2019 Henry++

#include "global.hpp"

bool _app_getappinfo (size_t app_hash, EnumInfo info_key, LPVOID presult, size_t size)
{
	if (!app_hash || !presult)
		return false;

	PR_OBJECT ptr_app_object = _app_getappitem (app_hash);

	if (!ptr_app_object)
		return false;

	PITEM_APP ptr_app = (PITEM_APP)ptr_app_object->pdata;

	if (ptr_app)
	{
		if (info_key == InfoTimestamp)
		{
			CopyMemory (presult, &ptr_app->timestamp, size);
		}
		else if (info_key == InfoIconId)
		{
			CopyMemory (presult, &ptr_app->icon_id, size);
		}
		else if (info_key == InfoSilent)
		{
			CopyMemory (presult, &ptr_app->is_silent, size);
		}
		else if (info_key == InfoListviewId)
		{
			UINT v = _app_getlistview_id (ptr_app->type);
			CopyMemory (presult, &v, size);
		}
	}

	_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);

	return true;
}

bool _app_setappinfo (size_t app_hash, EnumInfo info_key, LONG_PTR info_value)
{
	if (!app_hash)
		return false;

	PR_OBJECT ptr_app_object = _app_getappitem (app_hash);

	if (!ptr_app_object)
		return false;

	PITEM_APP ptr_app = (PITEM_APP)ptr_app_object->pdata;

	if (ptr_app)
	{
		if (info_key == InfoUndeletable)
		{
			ptr_app->is_undeletable = info_value ? true : false;
		}
		else if (info_key == InfoClearIds)
		{
			ptr_app->is_haveerrors = false;
			ptr_app->guids.clear ();
		}
	}

	_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);

	return true;
}

size_t _app_addapplication (HWND hwnd, rstring path, time_t timestamp, time_t timer, time_t last_notify, bool is_silent, bool is_enabled, bool is_fromdb)
{
	if (path.IsEmpty () || path.At (0) == 0 || PathIsDirectory (path))
		return 0;

	// if file is shortcut - get location
	if (!is_fromdb)
	{
		if (_wcsnicmp (PathFindExtension (path), L".lnk", 4) == 0)
		{
			path = _app_getshortcutpath (app.GetHWND (), path);

			if (path.IsEmpty ())
				return 0;
		}
	}

	_app_resolvefilename (path);

	const size_t app_hash = path.Hash ();

	if (_app_isappfound (app_hash))
		return app_hash; // already exists

	PITEM_APP ptr_app = new ITEM_APP;

	const bool is_ntoskrnl = (app_hash == config.ntoskrnl_hash);

	rstring real_path;

	if (_wcsnicmp (path, L"\\device\\", 8) == 0) // device path
	{
		real_path = path;

		ptr_app->type = DataAppDevice;
	}
	else if (_wcsnicmp (path, L"S-1-", 4) == 0) // windows store (win8+)
	{
		ptr_app->type = DataAppUWP;

		_app_item_get (DataAppUWP, app_hash, nullptr, &real_path, &ptr_app->pdata);
	}
	else if (PathIsNetworkPath (path)) // network path
	{
		real_path = path;

		ptr_app->type = DataAppNetwork;
	}
	else
	{
		real_path = path;

		if (!is_ntoskrnl && real_path.Find (OBJ_NAME_PATH_SEPARATOR) == rstring::npos)
		{
			if (_app_item_get (DataAppService, app_hash, nullptr, &real_path, &ptr_app->pdata))
				ptr_app->type = DataAppService;

			else
				ptr_app->type = DataAppPico;
		}
		else
		{
			ptr_app->type = DataAppRegular;

			if (is_ntoskrnl) // "system" process
			{
				path.At (0) = _r_str_upper (path.At (0)); // fix "System" lowercase

				real_path = _r_path_expand (PATH_NTOSKRNL);
			}
		}
	}

	if (!real_path.IsEmpty ())
	{
		const DWORD dwAttr = GetFileAttributes (real_path);

		if (ptr_app->type == DataAppRegular)
		{
			const bool is_temp = ((dwAttr != INVALID_FILE_ATTRIBUTES && (dwAttr & FILE_ATTRIBUTE_TEMPORARY) != 0)) || (_wcsnicmp (real_path, config.tmp_dir, config.tmp_length) == 0);

			ptr_app->is_system = !is_temp && (is_ntoskrnl || ((dwAttr != INVALID_FILE_ATTRIBUTES && (dwAttr & FILE_ATTRIBUTE_SYSTEM) != 0)) || (_wcsnicmp (real_path, config.windows_dir, config.wd_length) == 0));
		}
	}

	_app_applycasestyle (real_path.GetBuffer (), real_path.GetLength ()); // apply case-style
	_app_applycasestyle (path.GetBuffer (), path.GetLength ()); // apply case-style

	_r_str_alloc (&ptr_app->original_path, path.GetLength (), path);
	_r_str_alloc (&ptr_app->real_path, real_path.GetLength (), real_path);

	// get display name
	_app_getdisplayname (app_hash, ptr_app, &ptr_app->display_name);

	// get signature information
	{
		PR_OBJECT ptr_signer_object = _app_getsignatureinfo (app_hash, ptr_app);

		if (ptr_signer_object)
			_r_obj_dereference (ptr_signer_object, &_app_dereferencestring);
	}

	ptr_app->is_enabled = is_enabled;
	ptr_app->is_silent = is_silent;

	ptr_app->timestamp = timestamp ? timestamp : _r_unixtime_now ();
	ptr_app->timer = timer;
	ptr_app->last_notify = last_notify;

	if (ptr_app->type == DataAppService || ptr_app->type == DataAppUWP)
		ptr_app->is_undeletable = true;

	// insert object into the map
	apps[app_hash] = _r_obj_allocate (ptr_app);

	// insert item
	if (hwnd)
	{
		const UINT listview_id = _app_getlistview_id (ptr_app->type);

		if (listview_id)
		{
			const size_t item = _r_listview_getitemcount (hwnd, listview_id);

			_r_fastlock_acquireshared (&lock_checkbox);

			_r_listview_additem (hwnd, listview_id, item, 0, ptr_app->display_name, ptr_app->icon_id, _app_getappgroup (app_hash, ptr_app), app_hash);
			_app_setappiteminfo (hwnd, listview_id, item, app_hash, ptr_app);

			_r_fastlock_releaseshared (&lock_checkbox);
		}
	}

	return app_hash;
}

PR_OBJECT _app_getappitem (size_t app_hash)
{
	if (!app_hash || !_app_isappfound (app_hash))
		return nullptr;

	return _r_obj_reference (apps[app_hash]);
}

PR_OBJECT _app_getruleitem (size_t idx)
{
	if (idx == LAST_VALUE || idx >= rules_arr.size ())
		return nullptr;

	return _r_obj_reference (rules_arr.at (idx));
}

PR_OBJECT _app_getruleitem (size_t rule_hash, EnumDataType type, BOOL is_readonly)
{
	if (!rule_hash)
		return nullptr;

	for (size_t i = 0; i < rules_arr.size (); i++)
	{
		PR_OBJECT ptr_rule_object = _r_obj_reference (rules_arr.at (i));

		if (!ptr_rule_object)
			continue;

		const PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

		if (!ptr_rule || ptr_rule->type != type)
		{
			_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
			continue;
		}

		if (is_readonly != -1 && ((BOOL)ptr_rule->is_readonly != (is_readonly)))
		{
			_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
			continue;
		}

		if (ptr_rule->pname && _r_str_hash (ptr_rule->pname) == rule_hash)
			return ptr_rule_object;

		_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
	}

	return nullptr;
}

PR_OBJECT _app_getnetworkitem (size_t network_hash)
{
	if (!network_hash || network_map.find (network_hash) == network_map.end ())
		return nullptr;

	return _r_obj_reference (network_map[network_hash]);
}

void _app_freeapplication (size_t app_hash)
{
	if (app_hash)
	{
		for (size_t i = 0; i < rules_arr.size (); i++)
		{
			PR_OBJECT ptr_rule_object = _r_obj_reference (rules_arr.at (i));

			if (!ptr_rule_object)
				continue;

			const PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

			if (ptr_rule)
			{
				if (ptr_rule->type == DataRuleCustom)
				{
					if (ptr_rule->apps.find (app_hash) != ptr_rule->apps.end ())
					{
						ptr_rule->apps.erase (app_hash);

						if (ptr_rule->is_enabled && ptr_rule->apps.empty ())
						{
							ptr_rule->is_enabled = false;
							ptr_rule->is_haveerrors = false;
						}

						const UINT rule_listview_id = _app_getlistview_id (ptr_rule->type);

						if (rule_listview_id)
						{
							_r_fastlock_acquireshared (&lock_checkbox);
							_app_setruleiteminfo (app.GetHWND (), rule_listview_id, _app_getposition (app.GetHWND (), rule_listview_id, i), ptr_rule, false);
							_r_fastlock_releaseshared (&lock_checkbox);
						}
					}
				}
			}

			_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
		}

		//_r_fastlock_acquireexclusive (&lock_notification);
		//_app_freenotify (app_hash, false, true);
		//_r_fastlock_releaseexclusive (&lock_notification);

		////if (ptr_app && ptr_app->htimer)
		////	DeleteTimerQueueTimer (config.htimer, ptr_app->htimer, nullptr);

		apps.erase (app_hash);
	}
}

void _app_getcount (PITEM_STATUS ptr_status)
{
	for (auto &p : apps)
	{
		PR_OBJECT ptr_app_object = _r_obj_reference (p.second);

		if (!ptr_app_object)
			continue;

		const size_t app_hash = p.first;
		PITEM_APP ptr_app = (PITEM_APP)ptr_app_object->pdata;

		if (ptr_app)
		{
			const bool is_used = _app_isappused (ptr_app, app_hash);

			if (_app_istimeractive (ptr_app))
				ptr_status->apps_timer_count += 1;

			if (!ptr_app->is_undeletable && (!_app_isappexists (ptr_app) || !is_used) && !(ptr_app->type == DataAppService || ptr_app->type == DataAppUWP))
				ptr_status->apps_unused_count += 1;

			if (is_used)
				ptr_status->apps_count += 1;
		}

		_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);
	}

	for (size_t i = 0; i < rules_arr.size (); i++)
	{
		PR_OBJECT ptr_rule_object = _r_obj_reference (rules_arr.at (i));

		if (!ptr_rule_object)
			continue;

		PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

		if (ptr_rule)
		{
			if (ptr_rule->type == DataRuleCustom)
			{
				if (ptr_rule->is_enabled && !ptr_rule->apps.empty ())
					ptr_status->rules_global_count += 1;

				if (ptr_rule->is_readonly)
					ptr_status->rules_predefined_count += 1;

				else if (!ptr_rule->is_readonly)
					ptr_status->rules_user_count += 1;

				ptr_status->rules_count += 1;
			}
		}

		_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
	}
}

size_t _app_getappgroup (size_t app_hash, PITEM_APP const ptr_app)
{
	//	if(!app.ConfigGet (L"IsEnableGroups", false).AsBool ())
	//		return LAST_VALUE;

	if (!ptr_app)
		return 2;

	// apps with special rule
	if (app.ConfigGet (L"IsEnableSpecialGroup", true).AsBool () && _app_isapphaverule (app_hash))
		return 1;

	return ptr_app->is_enabled ? 0 : 2;
}

size_t _app_getrulegroup (PITEM_RULE ptr_rule)
{
	//	if(!app.ConfigGet (L"IsEnableGroups", false).AsBool ())
	//		return LAST_VALUE;

	if (!ptr_rule || !ptr_rule->is_enabled)
		return 2;

	if (app.ConfigGet (L"IsEnableSpecialGroup", true).AsBool () && (ptr_rule->is_forservices || !ptr_rule->apps.empty ()))
		return 1;

	return 0;
}

size_t _app_getruleicon (PITEM_RULE ptr_rule)
{
	if (!ptr_rule)
		return 0;

	return ptr_rule->is_block ? 1 : 0;
}

rstring _app_gettooltip (UINT listview_id, size_t idx)
{
	rstring result;

	if (
		listview_id == IDC_APPS_LV ||
		listview_id == IDC_APPS_PROFILE ||
		listview_id == IDC_APPS_SERVICE ||
		listview_id == IDC_APPS_UWP ||
		listview_id == IDC_NETWORK
		)
	{
		if (listview_id == IDC_NETWORK)
		{
			PR_OBJECT ptr_network_object = _app_getnetworkitem (idx);

			if (ptr_network_object)
			{
				PITEM_NETWORK ptr_network = (PITEM_NETWORK)ptr_network_object->pdata;

				if (ptr_network)
					idx = ptr_network->hash;

				_r_obj_dereference (ptr_network_object, &_app_dereferencenetwork);
			}
		}

		PR_OBJECT ptr_app_object = _app_getappitem (idx);

		if (ptr_app_object)
		{
			PITEM_APP ptr_app = (PITEM_APP)ptr_app_object->pdata;

			if (ptr_app)
			{
				result = (ptr_app->real_path && ptr_app->real_path[0]) ? ptr_app->real_path : ((ptr_app->display_name && ptr_app->display_name[0]) ? ptr_app->display_name : ptr_app->original_path);

				// file information
				if (ptr_app->type == DataAppRegular)
				{
					rstring display_name;
					PR_OBJECT ptr_version_object = _app_getversioninfo (idx, ptr_app);

					if (ptr_version_object)
					{
						if (ptr_version_object->pdata)
							display_name = (LPCWSTR)ptr_version_object->pdata;

						_r_obj_dereference (ptr_version_object, &_app_dereferencestring);
					}

					if (!display_name.IsEmpty ())
						result.AppendFormat (L"\r\n%s:\r\n" SZ_TAB L"%s" SZ_TAB, app.LocaleString (IDS_FILE, nullptr).GetString (), display_name.GetString ());

				}
				else if (ptr_app->type == DataAppService)
				{
					rstring display_name;

					if (_app_item_get (ptr_app->type, idx, &display_name, nullptr, nullptr))
						result.AppendFormat (L"\r\n%s:\r\n" SZ_TAB L"%s\r\n" SZ_TAB L"%s" SZ_TAB, app.LocaleString (IDS_FILE, nullptr).GetString (), ptr_app->original_path, display_name.GetString ());
				}
				else if (ptr_app->type == DataAppUWP)
				{
					rstring display_name;

					if (_app_item_get (ptr_app->type, idx, &display_name, nullptr, nullptr))
						result.AppendFormat (L"\r\n%s:\r\n" SZ_TAB L"%s" SZ_TAB, app.LocaleString (IDS_FILE, nullptr).GetString (), display_name.GetString ());
				}

				// signature information
				if (app.ConfigGet (L"IsCertificatesEnabled", false).AsBool () && ptr_app->is_signed)
				{
					PR_OBJECT ptr_signature_object = _app_getsignatureinfo (idx, ptr_app);

					if (ptr_signature_object)
					{
						if (ptr_signature_object->pdata)
							result.AppendFormat (L"\r\n%s:\r\n" SZ_TAB L"%s", app.LocaleString (IDS_SIGNATURE, nullptr).GetString (), (LPCWSTR)ptr_signature_object->pdata);

						_r_obj_dereference (ptr_signature_object, &_app_dereferencestring);
					}
				}

				// timer information
				if (_app_istimeractive (ptr_app))
					result.AppendFormat (L"\r\n%s:\r\n" SZ_TAB L"%s", app.LocaleString (IDS_TIMELEFT, nullptr).GetString (), _r_fmt_interval (ptr_app->timer - _r_unixtime_now (), 3).GetString ());

				// notes
				{
					rstring buffer;

					if (!_app_isappexists (ptr_app))
						buffer.AppendFormat (SZ_TAB L"%s\r\n", app.LocaleString (IDS_HIGHLIGHT_INVALID, nullptr).GetString ());

					if (listview_id != IDC_NETWORK && _app_isapphaveconnection (idx))
						buffer.AppendFormat (SZ_TAB L"%s\r\n", app.LocaleString (IDS_HIGHLIGHT_CONNECTION, nullptr).GetString ());

					if (ptr_app->is_silent)
						buffer.AppendFormat (SZ_TAB L"%s\r\n", app.LocaleString (IDS_HIGHLIGHT_SILENT, nullptr).GetString ());

					if (ptr_app->is_system)
						buffer.AppendFormat (SZ_TAB L"%s\r\n", app.LocaleString (IDS_HIGHLIGHT_SYSTEM, nullptr).GetString ());

					// app type
					{
						if (ptr_app->type == DataAppNetwork)
							buffer.AppendFormat (SZ_TAB L"%s\r\n", app.LocaleString (IDS_HIGHLIGHT_NETWORK, nullptr).GetString ());

						else if (ptr_app->type == DataAppPico)
							buffer.AppendFormat (SZ_TAB L"%s\r\n", app.LocaleString (IDS_HIGHLIGHT_PICO, nullptr).GetString ());

						else if (ptr_app->type == DataAppUWP)
							buffer.AppendFormat (SZ_TAB L"%s\r\n", app.LocaleString (IDS_HIGHLIGHT_PACKAGE, nullptr).GetString ());

						else if (ptr_app->type == DataAppService)
							buffer.AppendFormat (SZ_TAB L"%s\r\n", app.LocaleString (IDS_HIGHLIGHT_SERVICE, nullptr).GetString ());
					}

					if (!buffer.IsEmpty ())
					{
						buffer.InsertFormat (0, L"\r\n%s:\r\n", app.LocaleString (IDS_NOTES, nullptr).GetString ());
						result.Append (buffer);
					}
				}
			}

			_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);
		}
	}
	else if (
		listview_id == IDC_RULES_BLOCKLIST ||
		listview_id == IDC_RULES_SYSTEM ||
		listview_id == IDC_RULES_CUSTOM
		)
	{
		PR_OBJECT ptr_rule_object = _app_getruleitem (idx);

		if (ptr_rule_object)
		{
			PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

			if (ptr_rule)
			{
				rstring rule_remote = ptr_rule->prule_remote;
				rstring rule_local = ptr_rule->prule_local;

				rule_remote = rule_remote.IsEmpty () ? app.LocaleString (IDS_STATUS_EMPTY, nullptr) : rule_remote.Replace (RULE_DELIMETER, L"\r\n" SZ_TAB);
				rule_local = rule_local.IsEmpty () ? app.LocaleString (IDS_STATUS_EMPTY, nullptr) : rule_local.Replace (RULE_DELIMETER, L"\r\n" SZ_TAB);

				result.Format (L"%s (#%d)\r\n%s:\r\n%s%s\r\n%s:\r\n%s%s", ptr_rule->pname, idx, app.LocaleString (IDS_RULE, L" (" SZ_LOG_REMOTE_ADDRESS L")").GetString (), SZ_TAB, rule_remote.GetString (), app.LocaleString (IDS_RULE, L" (" SZ_LOG_LOCAL_ADDRESS L")").GetString (), SZ_TAB, rule_local.GetString ());

				if (ptr_rule->is_forservices || !ptr_rule->apps.empty ())
					result.AppendFormat (L"\r\n%s:\r\n%s%s", app.LocaleString (IDS_FILEPATH, nullptr).GetString (), SZ_TAB, _app_rulesexpand (ptr_rule, true, L"\r\n" SZ_TAB).GetString ());
			}

			_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
		}
	}

	return result;
}

void _app_setappiteminfo (HWND hwnd, UINT listview_id, size_t item, size_t app_hash, PITEM_APP ptr_app)
{
	if (!ptr_app || !listview_id || item == LAST_VALUE)
		return;

	_app_getappicon (ptr_app, true, &ptr_app->icon_id, nullptr);

	_r_listview_setitem (hwnd, listview_id, item, 0, ptr_app->display_name, ptr_app->icon_id, _app_getappgroup (app_hash, ptr_app));
	_r_listview_setitem (hwnd, listview_id, item, 1, _r_fmt_date (ptr_app->timestamp, FDTF_SHORTDATE | FDTF_SHORTTIME));

	_r_listview_setitemcheck (hwnd, listview_id, item, ptr_app->is_enabled);
}

void _app_setruleiteminfo (HWND hwnd, UINT listview_id, size_t item, PITEM_RULE ptr_rule, bool include_apps)
{
	if (!ptr_rule || !listview_id || item == LAST_VALUE)
		return;

	_r_listview_setitem (hwnd, listview_id, item, 0, ptr_rule->type == DataRuleCustom && ptr_rule->is_readonly ? _r_fmt (L"%s*", ptr_rule->pname) : ptr_rule->pname, _app_getruleicon (ptr_rule), _app_getrulegroup (ptr_rule));
	_r_listview_setitem (hwnd, listview_id, item, 1, app.LocaleString (IDS_DIRECTION_1 + ptr_rule->dir, nullptr));
	_r_listview_setitem (hwnd, listview_id, item, 2, ptr_rule->protocol ? _app_getprotoname (ptr_rule->protocol) : app.LocaleString (IDS_ALL, nullptr));

	_r_listview_setitemcheck (hwnd, listview_id, item, ptr_rule->is_enabled);

	if (include_apps)
	{
		for (auto &p : ptr_rule->apps)
		{
			const size_t app_hash = p.first;
			PR_OBJECT ptr_app_object = _app_getappitem (app_hash);

			if (!ptr_app_object)
				continue;

			PITEM_APP ptr_app = (PITEM_APP)ptr_app_object->pdata;

			if (ptr_app)
			{
				const UINT app_listview_id = _app_getlistview_id (ptr_app->type);

				_app_setappiteminfo (hwnd, app_listview_id, _app_getposition (hwnd, app_listview_id, app_hash), app_hash, ptr_app);
			}

			_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);
		}
	}
}

void _app_ruleenable (PITEM_RULE ptr_rule, bool is_enable)
{
	if (!ptr_rule)
		return;

	ptr_rule->is_enabled = is_enable;

	if (ptr_rule->is_readonly && ptr_rule->pname)
	{
		const size_t rule_hash = _r_str_hash (ptr_rule->pname);

		if (rule_hash)
		{
			PR_OBJECT ptr_config_object = nullptr;
			PITEM_RULE_CONFIG ptr_config = nullptr;

			if (rules_config.find (rule_hash) != rules_config.end ())
			{
				ptr_config_object = _r_obj_reference (rules_config[rule_hash]);

				if (ptr_config_object)
				{
					ptr_config = (PITEM_RULE_CONFIG)ptr_config_object->pdata;

					if (ptr_config)
						ptr_config->is_enabled = is_enable;

					_r_obj_dereference (ptr_config_object, &_app_dereferenceruleconfig);
				}
				else
				{
					ptr_config = new ITEM_RULE_CONFIG;

					ptr_config->is_enabled = is_enable;
					_r_str_alloc (&ptr_config->pname, _r_str_length (ptr_rule->pname), ptr_rule->pname);

					rules_config[rule_hash] = _r_obj_allocate (ptr_config);
				}
			}
			else
			{
				ptr_config = new ITEM_RULE_CONFIG;
				ptr_config_object = _r_obj_allocate (ptr_config);

				ptr_config->is_enabled = is_enable;
				_r_str_alloc (&ptr_config->pname, _r_str_length (ptr_rule->pname), ptr_rule->pname);

				rules_config[rule_hash] = ptr_config_object;
			}
		}
	}
}

void _app_ruleblocklistset ()
{
	const bool is_blockspy = app.ConfigGet (L"BlocklistBlockSpy", true).AsBool ();
	const bool is_allowupdate = app.ConfigGet (L"BlocklistAllowUpdate", true).AsBool ();
	const bool is_allowextra = app.ConfigGet (L"BlocklistAllowExtra", true).AsBool ();

	for (size_t i = 0; i < rules_arr.size (); i++)
	{
		PR_OBJECT ptr_rule_object = _r_obj_reference (rules_arr.at (i));

		if (!ptr_rule_object)
			continue;

		const PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

		if (!ptr_rule || !ptr_rule->pname || !ptr_rule->pname[0] || ptr_rule->type != DataRuleBlocklist)
		{
			_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
			continue;
		}

		if (_wcsnicmp (ptr_rule->pname, L"spy_", 4) == 0)
		{
			ptr_rule->is_block = true;
			ptr_rule->is_enabled = is_blockspy;
		}
		else if (_wcsnicmp (ptr_rule->pname, L"update_", 7) == 0)
		{
			ptr_rule->is_block = !is_allowupdate;
			ptr_rule->is_enabled = true;
		}
		else if (_wcsnicmp (ptr_rule->pname, L"extra_", 6) == 0)
		{
			ptr_rule->is_block = !is_allowextra;
			ptr_rule->is_enabled = true;
		}

		_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
	}
}

rstring _app_rulesexpand (PITEM_RULE ptr_rule, bool is_fordisplay, LPCWSTR delimeter)
{
	rstring result;

	if (ptr_rule)
	{
		if (is_fordisplay && ptr_rule->is_forservices)
		{
			rstring svchost_path = _r_path_expand (PATH_SVCHOST);

			_app_applycasestyle (svchost_path.GetBuffer (), svchost_path.GetLength ());
			svchost_path.ReleaseBuffer ();

			result.AppendFormat (L"%s%s", PROC_SYSTEM_NAME, delimeter);
			result.AppendFormat (L"%s%s", svchost_path.GetString (), delimeter);
		}

		for (auto const &p : ptr_rule->apps)
		{
			PR_OBJECT ptr_app_object = _app_getappitem (p.first);

			if (!ptr_app_object)
				continue;

			PITEM_APP ptr_app = (PITEM_APP)ptr_app_object->pdata;

			if (ptr_app)
			{
				if (is_fordisplay)
				{
					if (ptr_app->type == DataAppUWP || ptr_app->type == DataAppService)
					{
						if (ptr_app->display_name && ptr_app->display_name[0])
							result.Append (ptr_app->display_name);
					}
					else
					{
						if (ptr_app->original_path && ptr_app->original_path[0])
							result.Append (ptr_app->original_path);
					}
				}
				else
				{
					if (ptr_app->original_path && ptr_app->original_path[0])
						result.Append (ptr_app->original_path);
				}

				result.Append (delimeter);
			}

			_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);
		}

		result.Trim (delimeter);
	}

	return result;
}

bool _app_isappfound (size_t app_hash)
{
	return app_hash && apps.find (app_hash) != apps.end ();
}

bool _app_isapphaveconnection (size_t app_hash)
{
	if (!app_hash)
		return false;

	for (auto &p : network_map)
	{
		PR_OBJECT ptr_network_object = _r_obj_reference (p.second);

		if (!ptr_network_object)
			continue;

		PITEM_NETWORK ptr_network = (PITEM_NETWORK)ptr_network_object->pdata;

		if (ptr_network && ptr_network->hash == app_hash)
		{
			if ((ptr_network->protocol == IPPROTO_TCP && (ptr_network->state == MIB_TCP_STATE_ESTAB)) || (ptr_network->protocol == IPPROTO_UDP && !ptr_network->state))
			{
				_r_obj_dereference (ptr_network_object, &_app_dereferencenetwork);
				return true;
			}
		}

		_r_obj_dereference (ptr_network_object, &_app_dereferencenetwork);
	}

	return false;
}

bool _app_isapphaverule (size_t app_hash)
{
	if (!app_hash)
		return false;

	for (size_t i = 0; i < rules_arr.size (); i++)
	{
		PR_OBJECT ptr_rule_object = _r_obj_reference (rules_arr.at (i));

		if (!ptr_rule_object)
			continue;

		const PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

		if (ptr_rule && ptr_rule->is_enabled && ptr_rule->type == DataRuleCustom && ptr_rule->apps.find (app_hash) != ptr_rule->apps.end ())
		{
			_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
			return true;
		}

		_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
	}

	return false;
}

bool _app_isappused (ITEM_APP* ptr_app, size_t app_hash)
{
	if (ptr_app && (ptr_app->is_enabled || ptr_app->is_silent) || _app_isapphaverule (app_hash))
		return true;

	return false;
}

bool _app_isappexists (ITEM_APP* ptr_app)
{
	if (!ptr_app)
		return false;

	if (ptr_app->is_undeletable)
		return true;

	if (ptr_app->is_enabled && ptr_app->is_haveerrors)
		return false;

	if (ptr_app->type == DataAppDevice || ptr_app->type == DataAppNetwork || ptr_app->type == DataAppPico)
		return true;

	else if (ptr_app->type == DataAppRegular)
		return ptr_app->real_path && ptr_app->real_path[0] && _r_fs_exists (ptr_app->real_path);

	else if (ptr_app->type == DataAppService || ptr_app->type == DataAppUWP)
		return _app_item_get (ptr_app->type, _r_str_hash (ptr_app->original_path), nullptr, nullptr, nullptr);

	return true;
}

bool _app_isruleblocklist (LPCWSTR name)
{
	if (!name || !name[0])
		return false;

	if (
		_wcsnicmp (name, L"extra_", 6) == 0 ||
		_wcsnicmp (name, L"spy_", 4) == 0 ||
		_wcsnicmp (name, L"update_", 7) == 0
		)
		return true;

	return false;
}

bool _app_isrulehost (LPCWSTR rule)
{
	if (!rule || !rule[0])
		return false;

	NET_ADDRESS_INFO ni;
	SecureZeroMemory (&ni, sizeof (ni));

	USHORT port = 0;
	BYTE prefix_length = 0;

	static const DWORD types = NET_STRING_NAMED_ADDRESS | NET_STRING_NAMED_SERVICE;
	const DWORD errcode = ParseNetworkString (rule, types, &ni, &port, &prefix_length);

	if (errcode == ERROR_SUCCESS)
	{
		for (size_t i = 0; i < _r_str_length (rule); i++)
		{
			if (rule[i] == L'*')
				return false;
		}
	}

	return (errcode == ERROR_SUCCESS);
}

bool _app_isruleip (LPCWSTR rule)
{
	if (!rule || !rule[0])
		return false;

	NET_ADDRESS_INFO ni;
	SecureZeroMemory (&ni, sizeof (ni));

	USHORT port = 0;
	BYTE prefix_length = 0;

	static const DWORD types = NET_STRING_IP_ADDRESS | NET_STRING_IP_SERVICE | NET_STRING_IP_NETWORK | NET_STRING_IP_ADDRESS_NO_SCOPE | NET_STRING_IP_SERVICE_NO_SCOPE;
	const DWORD errcode = ParseNetworkString (rule, types, &ni, &port, &prefix_length);

	return (errcode == ERROR_SUCCESS);
}

bool _app_isruleport (LPCWSTR rule)
{
	if (!rule || !rule[0])
		return false;

	const size_t length = _r_str_length (rule);

	for (size_t i = 0; i < length; i++)
	{
		if (iswdigit (rule[i]) == 0 && rule[i] != RULE_RANGE_CHAR)
			return false;
	}

	return true;
}

bool _app_profile_load_check_node (pugi::xml_node & root, EnumXmlType type, bool is_strict)
{
	if (root)
	{
		if (is_strict)
			return (root.attribute (L"type").as_int () == type);

		return (root.attribute (L"type").empty () || (root.attribute (L"type").as_int () == type));
	}

	return false;
}

bool _app_profile_load_check (LPCWSTR path, EnumXmlType type, bool is_strict)
{
	pugi::xml_document doc;
	pugi::xml_parse_result result = doc.load_file (path, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

	if (result)
	{
		pugi::xml_node root = doc.child (L"root");

		return _app_profile_load_check_node (root, type, is_strict);
	}

	return false;
}

void _app_profile_load_fallback ()
{
	if (!_app_isappfound (config.my_hash))
		_app_addapplication (nullptr, app.GetBinaryPath (), 0, 0, 0, false, true, true);

	// disable deletion for this shit ;)
	if (!_app_isappfound (config.ntoskrnl_hash))
		_app_addapplication (nullptr, PROC_SYSTEM_NAME, 0, 0, 0, false, false, true);

	if (!_app_isappfound (config.svchost_hash))
		_app_addapplication (nullptr, _r_path_expand (PATH_SVCHOST), 0, 0, 0, false, false, true);

	_app_setappinfo (config.my_hash, InfoUndeletable, TRUE);
	_app_setappinfo (config.ntoskrnl_hash, InfoUndeletable, TRUE);
	_app_setappinfo (config.svchost_hash, InfoUndeletable, TRUE);
}

void _app_profile_load_helper (pugi::xml_node & root, EnumDataType type, UINT version)
{
	for (pugi::xml_node item = root.child (L"item"); item; item = item.next_sibling (L"item"))
	{
		if (type == DataAppRegular)
		{
			_r_fastlock_acquireexclusive (&lock_access);
			_app_addapplication (nullptr, item.attribute (L"path").as_string (), item.attribute (L"timestamp").as_llong (), item.attribute (L"timer").as_llong (), 0, item.attribute (L"is_silent").as_bool (), item.attribute (L"is_enabled").as_bool (), true);
			_r_fastlock_releaseexclusive (&lock_access);
		}
		else if (type == DataRuleBlocklist || type == DataRuleSystem || type == DataRuleCustom)
		{
			const bool is_internal = (type == DataRuleSystem);

			PITEM_RULE ptr_rule = new ITEM_RULE;

			const size_t rule_hash = _r_str_hash (item.attribute (L"name").as_string ());

			PR_OBJECT ptr_config_object = nullptr;
			PITEM_RULE_CONFIG ptr_config = nullptr;

			// allocate required memory
			{
				const rstring attr_name = item.attribute (L"name").as_string ();
				const rstring attr_rule_remote = item.attribute (L"rule").as_string ();
				const rstring attr_rule_local = item.attribute (L"rule_local").as_string ();

				const size_t name_length = min (attr_name.GetLength (), RULE_NAME_CCH_MAX);
				const size_t rule_remote_length = min (attr_rule_remote.GetLength (), RULE_RULE_CCH_MAX);
				const size_t rule_local_length = min (attr_rule_local.GetLength (), RULE_RULE_CCH_MAX);

				_r_str_alloc (&ptr_rule->pname, name_length, attr_name);
				_r_str_alloc (&ptr_rule->prule_remote, rule_remote_length, attr_rule_remote);
				_r_str_alloc (&ptr_rule->prule_local, rule_local_length, attr_rule_local);
			}

			ptr_rule->dir = (FWP_DIRECTION)item.attribute (L"dir").as_int ();
			ptr_rule->protocol = (UINT8)item.attribute (L"protocol").as_int ();
			ptr_rule->af = (ADDRESS_FAMILY)item.attribute (L"version").as_int ();

			ptr_rule->type = ((is_internal && item.attribute (L"is_custom").as_bool ()) ? DataRuleCustom : type);
			ptr_rule->is_block = item.attribute (L"is_block").as_bool ();
			ptr_rule->is_forservices = item.attribute (L"is_services").as_bool ();
			ptr_rule->is_readonly = (type != DataRuleCustom);

			// calculate rule weight
			if (type == DataRuleBlocklist)
				ptr_rule->weight = FILTER_WEIGHT_BLOCKLIST;

			else if (type == DataRuleSystem)
				ptr_rule->weight = FILTER_WEIGHT_SYSTEM;

			else if (type == DataRuleCustom)
				ptr_rule->weight = ptr_rule->is_block ? FILTER_WEIGHT_CUSTOM_BLOCK : FILTER_WEIGHT_CUSTOM;

			ptr_rule->is_enabled = item.attribute (L"is_enabled").as_bool ();

			if (is_internal)
			{
				// internal rules
				if (rules_config.find (rule_hash) != rules_config.end ())
				{
					ptr_config_object = _r_obj_reference (rules_config[rule_hash]);

					if (ptr_config_object)
					{
						ptr_config = (PITEM_RULE_CONFIG)ptr_config_object->pdata;

						if (ptr_config)
							ptr_rule->is_enabled = ptr_config->is_enabled;
					}
				}
			}

			// load apps
			{
				rstring apps_rule = item.attribute (L"apps").as_string ();

				if (is_internal && ptr_config && ptr_config->papps && ptr_config->papps[0])
				{
					if (apps_rule.IsEmpty ())
						apps_rule = ptr_config->papps;

					else
						apps_rule.AppendFormat (L"%s%s", APP_DELIMETER, ptr_config->papps);
				}

				_r_obj_dereference (ptr_config_object, &_app_dereferenceruleconfig);

				if (!apps_rule.IsEmpty ())
				{
					// for compat with old profiles
					if (version < XML_PROFILE_VER_3)
					{
						for (size_t i = 0; i < apps_rule.GetLength (); i++)
						{
							if (apps_rule[i] == L';')
								apps_rule[i] = L'|';
						}
					}

					rstring::rvector arr = apps_rule.AsVector (APP_DELIMETER);

					for (size_t i = 0; i < arr.size (); i++)
					{
						const rstring app_path = _r_path_expand (arr.at (i).Trim (L"\r\n "));
						size_t app_hash = app_path.Hash ();

						if (app_hash)
						{
							if (item.attribute (L"is_services").as_bool () && (app_hash == config.ntoskrnl_hash || app_hash == config.svchost_hash))
								continue;

							if (!_app_isappfound (app_hash))
							{
								_r_fastlock_acquireexclusive (&lock_access);
								app_hash = _app_addapplication (nullptr, app_path, 0, 0, 0, false, false, true);
								_r_fastlock_releaseexclusive (&lock_access);
							}

							if (ptr_rule->type == DataRuleSystem)
							{
								_r_fastlock_acquireshared (&lock_access);
								_app_setappinfo (app_hash, InfoUndeletable, TRUE);
								_r_fastlock_releaseshared (&lock_access);
							}

							ptr_rule->apps[app_hash] = true;
						}
					}
				}
			}

			_r_fastlock_acquireexclusive (&lock_access);
			rules_arr.push_back (_r_obj_allocate (ptr_rule));
			_r_fastlock_releaseexclusive (&lock_access);
		}
		else if (type == DataRulesConfig)
		{
			if (item.attribute (L"name").empty ())
				continue;

			const rstring rule_name = item.attribute (L"name").as_string ();

			// do not load blocklist config (old versions hack)!
			if (_app_isruleblocklist (rule_name))
				continue;

			const size_t rule_hash = rule_name.Hash ();

			if (rule_hash && rules_config.find (rule_hash) == rules_config.end ())
			{
				PITEM_RULE_CONFIG ptr_config = new ITEM_RULE_CONFIG;

				ptr_config->is_enabled = item.attribute (L"is_enabled").as_bool ();

				const rstring attr_name = item.attribute (L"name").as_string ();
				rstring attr_apps = item.attribute (L"apps").as_string ();

				// for compat with old profiles
				if (version < XML_PROFILE_VER_3)
				{
					for (size_t i = 0; i < attr_apps.GetLength (); i++)
					{
						if (attr_apps[i] == L';')
							attr_apps[i] = L'|';
					}
				}

				_r_str_alloc (&ptr_config->pname, attr_name.GetLength (), attr_name);
				_r_str_alloc (&ptr_config->papps, attr_apps.GetLength (), attr_apps);

				rules_config[rule_hash] = _r_obj_allocate (ptr_config);
			}
		}
	}
}

void _app_profile_load_internal (LPCWSTR path, LPCWSTR path_backup, time_t * ptimestamp)
{
	pugi::xml_document doc_original;
	pugi::xml_document doc_backup;

	pugi::xml_parse_result load_original = doc_original.load_file (path, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);
	pugi::xml_parse_result load_backup;

	pugi::xml_node root;

	// if file not found or parsing error, load from backup
	if (path_backup)
	{
		DWORD size = 0;
		const LPVOID buffer = _app_loadresource (app.GetHINSTANCE (), path_backup, RT_RCDATA, &size);

		if (buffer)
			load_backup = doc_backup.load_buffer (buffer, size, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

		if (load_backup)
		{
			if (!load_original || doc_backup.child (L"root").attribute (L"timestamp").as_llong () > doc_original.child (L"root").attribute (L"timestamp").as_llong ())
			{
				root = doc_backup.child (L"root");
				load_original = load_backup;
			}
			else
			{
				root = doc_original.child (L"root");
			}
		}
	}

	// show only syntax, memory and i/o errors...
	if (!load_original && load_original.status != pugi::status_file_not_found && load_original.status != pugi::status_no_document_element)
		_app_logerror (L"pugi::load_file", 0, _r_fmt (L"status: %d,offset: %d,text: %s,file: %s", load_original.status, load_original.offset, rstring (load_original.description ()).GetString (), path), false);

	if (load_original && root)
	{
		if (_app_profile_load_check_node (root, XmlProfileInternalV3, true))
		{
			const UINT version = root.attribute (L"version").as_uint ();

			if (ptimestamp)
				*ptimestamp = root.attribute (L"timestamp").as_llong ();

			pugi::xml_node root_rules_system = root.child (L"rules_system");

			if (root_rules_system)
				_app_profile_load_helper (root_rules_system, DataRuleSystem, version);

			pugi::xml_node root_rules_blocklist = root.child (L"rules_blocklist");

			if (root_rules_blocklist)
				_app_profile_load_helper (root_rules_blocklist, DataRuleBlocklist, version);
		}
	}
}

void _app_profile_load (HWND hwnd, LPCWSTR path_custom)
{
	const UINT current_listview_id = _app_gettab_id (hwnd);
	const size_t selected_item = (size_t)SendDlgItemMessage (hwnd, current_listview_id, LVM_GETNEXTITEM, (WPARAM)-1, LVNI_SELECTED);
	const INT scroll_pos = GetScrollPos (GetDlgItem (hwnd, current_listview_id), SB_VERT);

	// clean listview
	if (hwnd)
	{
		_r_listview_deleteallitems (hwnd, IDC_APPS_PROFILE);
		_r_listview_deleteallitems (hwnd, IDC_APPS_SERVICE);
		_r_listview_deleteallitems (hwnd, IDC_APPS_UWP);
		_r_listview_deleteallitems (hwnd, IDC_RULES_BLOCKLIST);
		_r_listview_deleteallitems (hwnd, IDC_RULES_SYSTEM);
		_r_listview_deleteallitems (hwnd, IDC_RULES_CUSTOM);
	}

	_r_fastlock_acquireexclusive (&lock_access);

	// clear apps
	_app_freeobjects_map (apps, &_app_dereferenceapp, true);

	// clear services/uwp apps
	_app_freeobjects_map (apps_helper, &_app_dereferenceappshelper, true);

	// clear rules config
	_app_freeobjects_map (rules_config, &_app_dereferenceruleconfig, true);

	// clear rules
	_app_freeobjects_vec (rules_arr, &_app_dereferencerule);

	// generate uwp apps list (win8+)
	if (_r_sys_validversion (6, 2))
		_app_generate_packages ();

	// generate services list
	_app_generate_services ();

	_r_fastlock_releaseexclusive (&lock_access);

	// load profile
	if (path_custom || _r_fs_exists (config.profile_path) || _r_fs_exists (config.profile_path_backup))
	{
		pugi::xml_document doc;
		pugi::xml_parse_result result = doc.load_file (path_custom ? path_custom : config.profile_path, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

		// load backup
		if (!result)
			result = doc.load_file (config.profile_path_backup, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

		if (!result)
		{
			// show only syntax, memory and i/o errors...
			if (result.status != pugi::status_file_not_found && result.status != pugi::status_no_document_element)
				_app_logerror (L"pugi::load_file", 0, _r_fmt (L"status: %d,offset: %d,text: %s,file: %s", result.status, result.offset, rstring (result.description ()).GetString (), path_custom ? path_custom : config.profile_path), false);

			_r_fastlock_acquireexclusive (&lock_access);
			_app_profile_load_fallback ();
			_r_fastlock_releaseexclusive (&lock_access);
		}
		else
		{
			pugi::xml_node root = doc.child (L"root");

			if (root)
			{
				const UINT version = root.attribute (L"version").as_uint ();

				if (_app_profile_load_check_node (root, XmlProfileV3, true))
				{
					// load apps (new!)
					pugi::xml_node root_apps = root.child (L"apps");

					if (root_apps)
						_app_profile_load_helper (root_apps, DataAppRegular, version);

					_r_fastlock_acquireexclusive (&lock_access);
					_app_profile_load_fallback ();
					_r_fastlock_releaseexclusive (&lock_access);

					// load rules config (new!)
					pugi::xml_node root_rules_config = root.child (L"rules_config");

					if (root_rules_config)
						_app_profile_load_helper (root_rules_config, DataRulesConfig, version);

					// load user rules (new!)
					pugi::xml_node root_rules_custom = root.child (L"rules_custom");

					if (root_rules_custom)
						_app_profile_load_helper (root_rules_custom, DataRuleCustom, version);

					// load internal rules (new!)
					_app_profile_load_internal (config.profile_internal_path, MAKEINTRESOURCE (IDR_PROFILE_INTERNAL), &config.profile_internal_timestamp);
				}
			}
		}
	}
	else
	{
		// load apps (old!)
		{
			pugi::xml_document doc_apps;
			pugi::xml_parse_result result_apps = doc_apps.load_file (config.apps_path, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

			// load backup
			if (!result_apps)
				result_apps = doc_apps.load_file (config.apps_path_backup, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

			if (result_apps)
			{
				pugi::xml_node root = doc_apps.child (L"root");

				if (root)
				{
					if (_app_profile_load_check_node (root, XmlApps, false))
						_app_profile_load_helper (root, DataAppRegular, 0);
				}

				// made old config backup!
				if (_r_fs_exists (config.apps_path))
					_r_fs_move (config.apps_path, config.apps_path_backup, MOVEFILE_REPLACE_EXISTING);
			}

			_r_fastlock_acquireexclusive (&lock_access);
			_app_profile_load_fallback ();
			_r_fastlock_releaseexclusive (&lock_access);
		}

		// load rules config (old!)
		{
			pugi::xml_document doc_rules_config;
			pugi::xml_parse_result result_rules_config = doc_rules_config.load_file (config.rules_config_path, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

			// load backup
			if (!result_rules_config)
				result_rules_config = doc_rules_config.load_file (config.rules_config_path_backup, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

			if (result_rules_config)
			{
				pugi::xml_node root = doc_rules_config.child (L"root");

				if (root)
				{
					if (_app_profile_load_check_node (root, XmlRulesConfig, false))
						_app_profile_load_helper (root, DataRulesConfig, 0);
				}

				// made old config backup!
				if (_r_fs_exists (config.rules_config_path))
					_r_fs_move (config.rules_config_path, config.rules_config_path_backup, MOVEFILE_REPLACE_EXISTING);
			}
		}

		// load internal rules (new!)
		_app_profile_load_internal (config.profile_internal_path, MAKEINTRESOURCE (IDR_PROFILE_INTERNAL), &config.profile_internal_timestamp);

		// load rules custom (old!)
		{
			pugi::xml_document doc_rules_custom;
			pugi::xml_parse_result result_rules_custom = doc_rules_custom.load_file (config.rules_custom_path, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);

			// load backup
			if (!result_rules_custom)
			{
				if (_r_fs_exists (config.rules_custom_path_backup))
					result_rules_custom = doc_rules_custom.load_file (config.rules_custom_path_backup, PUGIXML_LOAD_FLAGS, PUGIXML_LOAD_ENCODING);
			}

			if (result_rules_custom)
			{
				pugi::xml_node root = doc_rules_custom.child (L"root");

				if (root)
				{
					if (_app_profile_load_check_node (root, XmlRules, false))
						_app_profile_load_helper (root, DataRuleCustom, 0);
				}

				// made old config backup!
				if (_r_fs_exists (config.rules_custom_path))
					_r_fs_move (config.rules_custom_path, config.rules_custom_path_backup, MOVEFILE_REPLACE_EXISTING);
			}
		}

		_app_profile_save (); // required!
	}

	_r_fastlock_acquireshared (&lock_access);
	_app_ruleblocklistset ();
	_r_fastlock_releaseshared (&lock_access);

	if (hwnd)
	{
		_r_fastlock_acquireshared (&lock_access);

		// add apps
		for (auto &p : apps)
		{
			PR_OBJECT ptr_app_object = _r_obj_reference (p.second);

			if (!ptr_app_object)
				continue;

			const size_t app_hash = p.first;
			PITEM_APP ptr_app = (PITEM_APP)ptr_app_object->pdata;

			if (ptr_app)
			{
				const UINT listview_id = _app_getlistview_id (ptr_app->type);

				if (listview_id)
				{
					const size_t item = _r_listview_getitemcount (hwnd, listview_id);

					if (item != LAST_VALUE)
					{
						_r_fastlock_acquireshared (&lock_checkbox);

						_r_listview_additem (hwnd, listview_id, item, 0, ptr_app->display_name, ptr_app->icon_id, _app_getappgroup (app_hash, ptr_app), app_hash);
						_app_setappiteminfo (hwnd, listview_id, item, app_hash, ptr_app);

						_r_fastlock_releaseshared (&lock_checkbox);
					}
				}

				// install timer
				if (ptr_app->timer)
					_app_timer_set (hwnd, ptr_app, (ptr_app->timer - _r_unixtime_now ()));
			}

			_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);
		}

		// add services and store apps
		for (auto &p : apps_helper)
		{
			PR_OBJECT ptr_item_object = _r_obj_reference (p.second);

			if (!ptr_item_object)
				continue;

			PITEM_APP_HELPER ptr_app_item = (PITEM_APP_HELPER)ptr_item_object->pdata;

			if (ptr_app_item)
				_app_addapplication (hwnd, ((ptr_app_item->type == DataAppService) ? ptr_app_item->service_name : ptr_app_item->sid), ptr_app_item->timestamp, 0, 0, false, false, true);

			_r_obj_dereference (ptr_item_object, &_app_dereferenceappshelper);
		}

		// add rules
		for (size_t i = 0; i < rules_arr.size (); i++)
		{
			PR_OBJECT ptr_rule_object = _r_obj_reference (rules_arr.at (i));

			if (!ptr_rule_object)
				continue;

			const PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

			if (ptr_rule)
			{
				const UINT listview_id = _app_getlistview_id (ptr_rule->type);

				if (listview_id)
				{
					const size_t item = _r_listview_getitemcount (hwnd, listview_id);

					_r_fastlock_acquireshared (&lock_checkbox);

					_r_listview_additem (hwnd, listview_id, item, 0, ptr_rule->pname, _app_getruleicon (ptr_rule), _app_getrulegroup (ptr_rule), i);
					_app_setruleiteminfo (hwnd, listview_id, item, ptr_rule, false);

					_r_fastlock_releaseshared (&lock_checkbox);
				}
			}

			_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
		}

		_r_fastlock_releaseshared (&lock_access);
	}

	if (hwnd && current_listview_id)
	{
		const UINT new_listview_id = _app_gettab_id (hwnd);

		_app_listviewsort (hwnd, new_listview_id);

		if (current_listview_id == new_listview_id)
			_app_showitem (hwnd, current_listview_id, selected_item, scroll_pos);
	}
}

void _app_profile_save (LPCWSTR path_custom)
{
	const time_t current_time = _r_unixtime_now ();
	const bool is_backuprequired = !path_custom && (app.ConfigGet (L"IsBackupProfile", true).AsBool () && (((current_time - app.ConfigGet (L"BackupTimestamp", 0).AsLonglong ()) >= app.ConfigGet (L"BackupPeriod", _R_SECONDSCLOCK_HOUR (BACKUP_HOURS_PERIOD)).AsLonglong ()) || !_r_fs_exists (config.profile_path_backup)));

	pugi::xml_document doc;
	pugi::xml_node root = doc.append_child (L"root");

	if (root)
	{
		root.append_attribute (L"timestamp").set_value (current_time);
		root.append_attribute (L"type").set_value (XmlProfileV3);
		root.append_attribute (L"version").set_value (XML_PROFILE_VER_3);

		pugi::xml_node root_apps = root.append_child (L"apps");
		pugi::xml_node root_rules_custom = root.append_child (L"rules_custom");
		pugi::xml_node root_rule_config = root.append_child (L"rules_config");

		_r_fastlock_acquireshared (&lock_access);

		// save apps
		if (root_apps)
		{
			for (auto &p : apps)
			{
				PR_OBJECT ptr_app_object = _r_obj_reference (p.second);

				if (!ptr_app_object)
					continue;

				PITEM_APP ptr_app = (PITEM_APP)ptr_app_object->pdata;

				if (ptr_app)
				{
					if (!ptr_app->original_path)
					{
						_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);
						continue;
					}

					const bool is_used = _app_isappused (ptr_app, p.first);

					if (!is_used && (ptr_app->type == DataAppService || ptr_app->type == DataAppUWP))
					{
						_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);
						continue;
					}

					pugi::xml_node item = root_apps.append_child (L"item");

					if (item)
					{
						item.append_attribute (L"path").set_value (ptr_app->original_path);

						if (ptr_app->timestamp)
							item.append_attribute (L"timestamp").set_value (ptr_app->timestamp);

						// set timer (if presented)
						if (_app_istimeractive (ptr_app))
							item.append_attribute (L"timer").set_value (ptr_app->timer);

						if (ptr_app->is_silent)
							item.append_attribute (L"is_silent").set_value (ptr_app->is_silent);

						if (ptr_app->is_enabled)
							item.append_attribute (L"is_enabled").set_value (ptr_app->is_enabled);
					}
				}

				_r_obj_dereference (ptr_app_object, &_app_dereferenceapp);
			}
		}

		// save user rules
		if (root_rules_custom)
		{
			for (size_t i = 0; i < rules_arr.size (); i++)
			{
				PR_OBJECT ptr_rule_object = _r_obj_reference (rules_arr.at (i));

				if (!ptr_rule_object)
					continue;

				const PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

				if (!ptr_rule || ptr_rule->is_readonly || !ptr_rule->pname || !ptr_rule->pname[0])
				{
					_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
					continue;
				}

				pugi::xml_node item = root_rules_custom.append_child (L"item");

				if (item)
				{
					item.append_attribute (L"name").set_value (ptr_rule->pname);

					if (ptr_rule->prule_remote && ptr_rule->prule_remote[0])
						item.append_attribute (L"rule").set_value (ptr_rule->prule_remote);

					if (ptr_rule->prule_local && ptr_rule->prule_local[0])
						item.append_attribute (L"rule_local").set_value (ptr_rule->prule_local);

					if (ptr_rule->dir != FWP_DIRECTION_OUTBOUND)
						item.append_attribute (L"dir").set_value (ptr_rule->dir);

					if (ptr_rule->protocol != 0)
						item.append_attribute (L"protocol").set_value (ptr_rule->protocol);

					if (ptr_rule->af != AF_UNSPEC)
						item.append_attribute (L"version").set_value (ptr_rule->af);

					// add apps attribute
					if (!ptr_rule->apps.empty ())
					{
						const rstring rule_apps = _app_rulesexpand (ptr_rule, false, APP_DELIMETER);

						if (!rule_apps.IsEmpty ())
							item.append_attribute (L"apps").set_value (rule_apps);
					}

					if (ptr_rule->is_block)
						item.append_attribute (L"is_block").set_value (ptr_rule->is_block);

					if (ptr_rule->is_enabled)
						item.append_attribute (L"is_enabled").set_value (ptr_rule->is_enabled);
				}

				_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
			}
		}

		// save rules config
		if (root_rule_config)
		{
			for (auto &p : rules_config)
			{
				const PR_OBJECT ptr_config_object = _r_obj_reference (p.second);

				if (!ptr_config_object)
					continue;

				PITEM_RULE_CONFIG ptr_config = (PITEM_RULE_CONFIG)ptr_config_object->pdata;

				if (!ptr_config || !ptr_config->pname || !ptr_config->pname[0])
				{
					_r_obj_dereference (ptr_config_object, &_app_dereferenceruleconfig);
					continue;
				}

				pugi::xml_node item = root_rule_config.append_child (L"item");

				if (item)
				{
					item.append_attribute (L"name").set_value (ptr_config->pname);

					// save apps
					const size_t rule_hash = _r_str_hash (ptr_config->pname);
					const PR_OBJECT ptr_rule_object = _app_getruleitem (rule_hash, DataRuleCustom, true);

					if (ptr_rule_object)
					{
						const PITEM_RULE ptr_rule = (PITEM_RULE)ptr_rule_object->pdata;

						if (ptr_rule && !ptr_rule->apps.empty ())
						{
							const rstring rule_apps = _app_rulesexpand (ptr_rule, false, APP_DELIMETER);

							if (!rule_apps.IsEmpty ())
								item.append_attribute (L"apps").set_value (rule_apps);
						}

						_r_obj_dereference (ptr_rule_object, &_app_dereferencerule);
					}

					if (ptr_config->is_enabled)
						item.append_attribute (L"is_enabled").set_value (ptr_config->is_enabled);
				}

				_r_obj_dereference (ptr_config_object, &_app_dereferenceruleconfig);
			}
		}

		doc.save_file (path_custom ? path_custom : config.profile_path, L"\t", PUGIXML_SAVE_FLAGS, PUGIXML_SAVE_ENCODING);

		_r_fastlock_releaseshared (&lock_access);

		// make backup
		if (is_backuprequired)
		{
			doc.save_file (config.profile_path_backup, L"\t", PUGIXML_SAVE_FLAGS, PUGIXML_SAVE_ENCODING);
			app.ConfigSet (L"BackupTimestamp", current_time);
		}
	}
}