Function at 0x140047ef0
Capabilities:
Check if file exists

Disassembly:
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1b00]
mov eax, 0x1c00
call fcn.14017fcc0
sub rsp, rax
mov qword [rbp + 0x450], 0xfffffffffffffffe
mov qword [rsp + 0x1c38], rbx
mov qword [rsp + 0x1c40], rsi
mov rax, qword [0x140232230]
xor rax, rsp
mov qword [rbp + 0x1af0], rax
mov rsi, rcx
cmp edx, 0x401
jg 0x14004856e
je 0x1400483d0
cmp edx, 0xc8
jne case.0x1400485ae.1038
mov edx, 0x3ea
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r15, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1032
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jne case.0x1400485ae.1038
mov edx, 0xa6
lea r9d, [rdx + 0x7e]
lea r8d, [rdx + 1]
mov rcx, rsi
call fcn.1400681f0
cmp eax, 6
jne case.0x1400485ae.1038
xor edi, edi
mov word [rbp + 0x18e0], di
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x18e2]
call fcn.140171ae0
xor edx, edx
mov r8d, 0x90
lea rcx, [rbp - 0x28]
call fcn.140171ae0
mov dword [rbp - 0x30], ILFree
mov qword [rbp - 0x28], rsi
lea rax, [rbp + 0x18e0]
mov qword [rbp], rax
lea rax, str.PeerBlock_Text_Lists__.p2p_
mov qword [rbp - 0x18], rax
lea rax, [0x1401c7838]
mov qword [rbp + 0x38], rax
mov dword [rbp + 8], 0x104
mov dword [rbp + 0x30], 0x804
lea rcx, [rbp - 0x30]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
test eax, eax
je case.0x1400485ae.1038
lea r8, [rbp + 0x18e0]
mov edx, 0x208
lea rcx, [rbp + 0x12b0]
call fcn.140007f00
lea rcx, [rbp + 0x16d0]
call fcn.140007df0
mov rdx, rax
lea r8, [rbp + 0x12b0]
lea rcx, [rbp + 0x780]
call fcn.140008260
lea rdx, [rbp + 0xfc0]
lea rcx, [rbp + 0x780]
call fcn.140021800
nop
xor edx, edx
lea r8d, [rdi + 0x54]
lea rcx, [rsp + 0x74]
call fcn.140171ae0
mov r14d, 4
mov dword [rsp + 0x70], r14d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1042
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x74], eax
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x104b
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
mov rsi, qword [rbp - 0x68]
lea rcx, [rsp + 0x50]
call fcn.14003b590
nop
lea rdx, [rbp + 0xdb0]
mov rcx, rsi
call fcn.140045050
mov rdx, rax
lea r9, [rbp + 0x990]
lea rcx, [rbp + 0x990]
or rax, rcx
and eax, 0xf
jne 0x140048149
mov eax, r14d
nop
movaps xmm0, xmmword [rdx]
movaps xmmword [rcx], xmm0
movaps xmm1, xmmword [rdx + 0x10]
movaps xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [rdx + 0x20]
movaps xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [rdx + 0x30]
movaps xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [rdx + 0x40]
movaps xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [rdx + 0x50]
movaps xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [rdx + 0x60]
movaps xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movaps xmm1, xmmword [rdx + 0x70]
movaps xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
dec rax
jne 0x1400480f0
mov rax, qword [rdx]
mov qword [rcx], rax
jmp 0x140048157
mov r8d, 0x208
mov rcx, r9
call fcn.1401669c0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x990]
call fcn.140040f30
lea rcx, [rsp + 0x50]
call fcn.140116c10
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.140117440
mov qword [rbp + 0x1038], rdi
mov qword [rbp + 0x1040], rdi
mov qword [rbp + 0x1040], 7
mov qword [rbp + 0x1038], rdi
mov word [rbp + 0x1028], di
cmp word [rbp + 0x18e0], 0
jne 0x1400481b4
mov rbx, rdi
jmp 0x1400481ca
lea rax, [rbp + 0x18e0]
or rbx, 0xffffffffffffffff
nop
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400481c0
mov r8, rbx
lea rdx, [rbp + 0x18e0]
lea rcx, [rbp + 0x1028]
call fcn.14000dc20
nop
lea rdx, [rbp + 0x1028]
lea rcx, [rbp + 0x1088]
call fcn.14000e330
nop
mov r8d, edi
cmp dword [rbp - 4], 1
setne r8b
inc r8d
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140116840
nop
cmp qword [rbp + 0x10a0], 0x10
jb 0x140048227
mov rcx, qword [rbp + 0x1088]
call fcn.1401669a0
mov qword [rbp + 0x10a0], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1098], rdi
mov byte [rbp + 0x1088], 0
cmp qword [rbp + 0x1040], 8
jb 0x140048256
mov rcx, qword [rbp + 0x1028]
call fcn.1401669a0
mov qword [rbp + 0x1040], 7
mov qword [rbp + 0x1038], rdi
mov word [rbp + 0x1028], di
mov ecx, 0x238
call fcn.140166ea4
mov qword [rsp + 0x30], rax
test rax, rax
je 0x140048290
mov rcx, rax
call fcn.140003a90
mov rbx, rax
jmp 0x140048293
mov rbx, rdi
lea rcx, [rbx + 0x30]
lea r9, [rbp + 0x780]
lea rdx, [rbp + 0x780]
mov rax, rdx
or rax, rcx
and eax, 0xf
jne 0x140048309
movaps xmm0, xmmword [rdx]
movaps xmmword [rcx], xmm0
movaps xmm1, xmmword [rdx + 0x10]
movaps xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [rdx + 0x20]
movaps xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [rdx + 0x30]
movaps xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [rdx + 0x40]
movaps xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [rdx + 0x50]
movaps xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [rdx + 0x60]
movaps xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movaps xmm1, xmmword [rdx + 0x70]
movaps xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
dec r14
jne 0x1400482b0
mov rax, qword [rdx]
mov qword [rcx], rax
jmp 0x140048317
mov r8d, 0x208
mov rdx, r9
call fcn.1401669c0
mov eax, dword [rsi + 0x28]
mov dword [rbx + 0x28], eax
lea rdx, [rsi + 8]
lea rcx, [rbx + 8]
call fcn.14000e210
mov rax, qword [rsi]
mov edx, 1
mov rcx, rsi
call qword [rax]
mov dword [rsp + 0x70], 5
mov qword [rbp - 0x68], rbx
lea rax, [rbp + 0xfc0]
cmp qword [rbp + 0xfd8], 8
cmovae rax, qword [rbp + 0xfc0]
mov qword [rbp - 0x78], rax
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x104c
mov rcx, r15
call qword [sym.imp.USER32.dll_SendMessageW]
or qword [0x14023a1b0], 1
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x50]
call fcn.14003b4d0
nop
mov rcx, qword [rsp + 0x50]
call fcn.1401669a0
nop
cmp qword [rbp + 0xfd8], 8
jb 0x1400483b2
mov rcx, qword [rbp + 0xfc0]
call fcn.1401669a0
mov qword [rbp + 0xfd8], 7
mov qword [rbp + 0xfd0], rdi
mov word [rbp + 0xfc0], di
jmp case.0x1400485ae.1038
mov edx, 0x3ea
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rsi, rax
lea rcx, [rbp + 0xfe0]
call fcn.140027710
nop
mov r9d, 2
or r8, 0xffffffffffffffff
mov edx, 0x100c
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
mov dword [rsp + 0x30], eax
cmp eax, 0xffffffff
je 0x140048443
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xfe0]
call fcn.140027810
movsxd r8, ebx
mov edx, 0x100c
mov r9d, 2
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, eax
mov dword [rsp + 0x30], eax
cmp eax, 0xffffffff
jne 0x140048410
xor edi, edi
cmp qword [rbp + 0x1000], rdi
je 0x14004853d
or qword [0x14023a1b0], 1
lea r14d, [rdi + 4]
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xfe0]
call fcn.140027980
mov rcx, rax
lea rdx, [rsp + 0x38]
call fcn.140027b70
mov r8, qword [rax]
test r8, r8
jne 0x14004848b
mov r8, rdi
jmp 0x14004848e
mov r8, qword [r8]
mov rdx, qword [rax + 0x10]
mov rcx, qword [r8 + 0x10]
dec rcx
mov rax, rdx
shr rax, 2
and rcx, rax
and edx, 3
mov rax, qword [r8 + 8]
mov rcx, qword [rax + rcx*8]
movsxd rbx, dword [rcx + rdx*4]
mov rax, qword [rbp + 0x1000]
test rax, rax
je 0x1400484da
dec rax
mov qword [rbp + 0x1000], rax
mov rax, qword [rbp + 0xff8]
cmove rax, rdi
mov qword [rbp + 0xff8], rax
xor edx, edx
lea r8d, [rdx + 0x54]
lea rcx, [rsp + 0x74]
call fcn.140171ae0
mov dword [rsp + 0x74], ebx
mov dword [rsp + 0x70], r14d
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, rbx
xor r9d, r9d
mov edx, 0x1008
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x140048530
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
cmp qword [rbp + 0x1000], rdi
jne 0x140048460
lea rax, [rbp + 0xfe0]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0xfe0]
call fcn.1400278e0
nop
mov rcx, qword [rbp + 0xfe0]
call fcn.1401669a0
mov qword [rbp + 0xfe0], rdi
jmp case.0x1400485ae.1038
cmp edx, 0x9c51
jg case.0x1400485ae.1038
je 0x140049eb0
add edx, 0xfffffbfe
cmp edx, 0xa7
ja case.0x1400485ae.1038
movsxd rax, edx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x4a310]
mov ecx, dword [rdx + rax*4 + 0x4a2dc]
add rcx, rdx
jmp rcx
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x30], rax
mov qword [rbp + 0xe8], 7
xor edi, edi
mov qword [rbp + 0xe0], rdi
mov word [rbp + 0xd0], di
lea r8d, [rdi + 0x37]
lea rdx, str._listsproc___Lists_OnCommand_____clicked_on_IDC_P2PLIST
lea rcx, [rbp + 0xd0]
call fcn.14000dc20
nop
lea r8d, [rdi + 7]
lea rdx, [rbp + 0xd0]
call fcn.140078560
mov edx, 0x49f
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140048711
lea rax, [rbp + 0x290]
mov qword [rsp + 0x30], rax
mov qword [rbp + reloc.SHELL32.dll_IsUserAnAdmin], 7
mov qword [rbp + 0x2a0], rdi
mov word [rbp + 0x290], di
lea r8d, [rdi + 0x36]
lea rdx, str._listsproc___Lists_OnCommand_____P2P_list_now_selected
lea rcx, [rbp + 0x290]
call fcn.14000dc20
nop
lea r8d, [rdi + 5]
lea rdx, [rbp + 0x290]
call fcn.140078560
lea rax, [rbp + 0x110]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x3f0]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x128], 7
mov qword [rbp + 0x120], rdi
mov word [rbp + 0x110], di
lea r8d, [rdi + 0x10]
lea rdx, str.Default_P2P_List
lea rcx, [rbp + 0x110]
call fcn.14000dc20
nop
mov qword [rbp + 0x408], 7
mov qword [rbp + 0x400], rdi
mov word [rbp + 0x3f0], di
lea r8d, [rdi + 0x31]
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_level_1
lea rcx, [rbp + 0x3f0]
call fcn.14000dc20
nop
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x3f0]
call fcn.140047190
mov edx, 0x4a6
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x150]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x168], 7
mov qword [rbp + 0x160], rdi
mov word [rbp + 0x150], di
mov r8d, 0x3a
lea rdx, str._listsproc___Lists_OnCommand_____P2P_list_now_NOT_selected
lea rcx, [rbp + 0x150]
call fcn.14000dc20
nop
mov r8d, 5
lea rdx, [rbp + 0x150]
call fcn.140078560
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x308], 7
mov qword [rbp + 0x300], rdi
mov word [rbp + 0x2f0], di
mov r8d, 0x31
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_level_1
lea rcx, [rbp + 0x2f0]
call fcn.14000dc20
nop
lea rcx, [rbp + 0x2f0]
call fcn.140047390
mov edx, 0x4a6
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x1a8], 7
xor edi, edi
mov qword [rbp + 0x1a0], rdi
mov word [rbp + 0x190], di
lea r8d, [rdi + 0x37]
lea rdx, str._listsproc___Lists_OnCommand_____clicked_on_IDC_SPYLIST
lea rcx, [rbp + 0x190]
call fcn.14000dc20
nop
lea r8d, [rdi + 7]
lea rdx, [rbp + 0x190]
call fcn.140078560
mov edx, 0x4a0
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140048915
lea rax, [rbp + 0x3b0]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x3c8], 7
mov qword [rbp + 0x3c0], rdi
mov word [rbp + 0x3b0], di
lea r8d, [rdi + 0x36]
lea rdx, str._listsproc___Lists_OnCommand_____Spy_list_now_selected
lea rcx, [rbp + 0x3b0]
call fcn.14000dc20
nop
lea r8d, [rdi + 5]
lea rdx, [rbp + 0x3b0]
call fcn.140078560
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x330]
mov qword [rsp + 0x30], rax
mov qword [rbp + 0x1e8], 7
mov qword [rbp + 0x1e0], rdi
mov word [rbp + 0x1d0], di
lea r8d, [rdi + 0x10]
lea rdx, str.Default_Spy_List
lea rcx, [rbp + 0x1d0]
call fcn.14000dc20
nop
mov qword [rbp + 0x348], 7
mov qword [rbp + 0x340], rdi
mov word [rbp + 0x330], di
lea r8d, [rdi + 0x31]
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_spyware
lea rcx, [rbp + 0x330]
call fcn.14000dc20
nop
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x330]
call fcn.140047190
mov edx, 0x4a7
jmp 0x1400486f5
lea rax, [rbp + 0x210]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x228], 7
mov qword [rbp + 0x220], rdi
mov word [rbp + 0x210], di
mov r8d, 0x3a
lea rdx, str._listsproc___Lists_OnCommand_____Spy_list_now_NOT_selected
lea rcx, [rbp + 0x210]
call fcn.14000dc20
nop
mov r8d, 5
lea rdx, [rbp + 0x210]
call fcn.140078560
lea rax, [rbp + 0x430]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x448], 7
mov qword [rbp + 0x440], rdi
mov word [rbp + 0x430], di
mov r8d, 0x31
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_spyware
lea rcx, [rbp + 0x430]
call fcn.14000dc20
nop
lea rcx, [rbp + 0x430]
call fcn.140047390
mov edx, 0x4a7
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x250]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x268], 7
xor edi, edi
mov qword [rbp + 0x260], rdi
mov word [rbp + 0x250], di
lea r8d, [rdi + 0x37]
lea rdx, str._listsproc___Lists_OnCommand_____clicked_on_IDC_ADSLIST
lea rcx, [rbp + 0x250]
call fcn.14000dc20
nop
lea r8d, [rdi + 7]
lea rdx, [rbp + 0x250]
call fcn.140078560
mov edx, 0x4a1
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140048b19
lea rax, [rbp + 0x370]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x388], 7
mov qword [rbp + 0x380], rdi
mov word [rbp + 0x370], di
lea r8d, [rdi + 0x36]
lea rdx, str._listsproc___Lists_OnCommand_____Ads_list_now_selected
lea rcx, [rbp + 0x370]
call fcn.14000dc20
nop
lea r8d, [rdi + 5]
lea rdx, [rbp + 0x370]
call fcn.140078560
lea rax, [rbp + 0x90]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x30], rax
mov qword [rbp + 0xa8], 7
mov qword [rbp + 0xa0], rdi
mov word [rbp + 0x90], di
lea r8d, [rdi + 0x10]
lea rdx, str.Default_Ads_List
lea rcx, [rbp + 0x90]
call fcn.14000dc20
nop
mov qword [rbp + 0xc8], 7
mov qword [rbp + 0xc0], rdi
mov word [rbp + 0xb0], di
lea r8d, [rdi + 0x43]
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_ads_trackers_and_bad_pr0n
lea rcx, [rbp + 0xb0]
call fcn.14000dc20
nop
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0xb0]
call fcn.140047190
mov edx, 0x4a8
jmp 0x1400486f5
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x108], 7
mov qword [rbp + 0x100], rdi
mov word [rbp + 0xf0], di
mov r8d, 0x3a
lea rdx, str._listsproc___Lists_OnCommand_____Ads_list_now_NOT_selected
lea rcx, [rbp + 0xf0]
call fcn.14000dc20
nop
mov r8d, 5
lea rdx, [rbp + 0xf0]
call fcn.140078560
lea rax, [rbp + 0x130]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x148], 7
mov qword [rbp + 0x140], rdi
mov word [rbp + 0x130], di
mov r8d, 0x43
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_ads_trackers_and_bad_pr0n
lea rcx, [rbp + 0x130]
call fcn.14000dc20
nop
lea rcx, [rbp + 0x130]
call fcn.140047390
mov edx, 0x4a8
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x170]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x188], 7
xor edi, edi
mov qword [rbp + 0x180], rdi
mov word [rbp + 0x170], di
lea r8d, [rdi + 0x37]
lea rdx, str._listsproc___Lists_OnCommand_____clicked_on_IDC_EDULIST
lea rcx, [rbp + 0x170]
call fcn.14000dc20
nop
lea r8d, [rdi + 7]
lea rdx, [rbp + 0x170]
call fcn.140078560
mov edx, 0x4a2
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsDlgButtonChecked]
cmp eax, 1
jne 0x140048d1d
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x1c8], 7
mov qword [rbp + 0x1c0], rdi
mov word [rbp + 0x1b0], di
lea r8d, [rdi + 0x36]
lea rdx, str._listsproc___Lists_OnCommand_____Edu_list_now_selected
lea rcx, [rbp + 0x1b0]
call fcn.14000dc20
nop
lea r8d, [rdi + 5]
lea rdx, [rbp + 0x1b0]
call fcn.140078560
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x230]
mov qword [rsp + 0x30], rax
mov qword [rbp + 0x208], 7
mov qword [rbp + 0x200], rdi
mov word [rbp + 0x1f0], di
lea r8d, [rdi + 0x10]
lea rdx, str.Default_Edu_List
lea rcx, [rbp + 0x1f0]
call fcn.14000dc20
nop
mov qword [rbp + 0x248], 7
mov qword [rbp + 0x240], rdi
mov word [rbp + 0x230], di
lea r8d, [rdi + 0x2d]
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_edu
lea rcx, [rbp + 0x230]
call fcn.14000dc20
nop
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x230]
call fcn.140047190
mov edx, 0x4a9
jmp 0x1400486f5
lea rax, [rbp + 0x270]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x288], 7
mov qword [rbp + 0x280], rdi
mov word [rbp + 0x270], di
mov r8d, 0x3a
lea rdx, str._listsproc___Lists_OnCommand_____Edu_list_now_NOT_selected
lea rcx, [rbp + 0x270]
call fcn.14000dc20
nop
mov r8d, 5
lea rdx, [rbp + 0x270]
call fcn.140078560
lea rax, [rbp + 0x2d0]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x2e8], 7
mov qword [rbp + 0x2e0], rdi
mov word [rbp + 0x2d0], di
mov r8d, 0x2d
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_edu
lea rcx, [rbp + 0x2d0]
call fcn.14000dc20
nop
lea rcx, [rbp + 0x2d0]
call fcn.140047390
mov edx, 0x4a9
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x310]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x328], 7
xor edi, edi
mov qword [rbp + 0x320], rdi
mov word [rbp + 0x310], di
lea r8d, [rdi + 0x37]
lea rdx, str._listsproc___Lists_OnCommand_____clicked_on_IDC_OPENP2P
lea rcx, [rbp + 0x310]
call fcn.14000dc20
nop
lea r8d, [rdi + 5]
lea rdx, [rbp + 0x310]
call fcn.140078560
lea rax, [rbp + 0x350]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x368], 7
mov qword [rbp + 0x360], rdi
mov word [rbp + 0x350], di
lea r8d, [rdi + 0x31]
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_level_1
lea rcx, [rbp + 0x350]
call fcn.14000dc20
nop
lea rcx, [rbp + 0x350]
call fcn.140047570
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140048f12
lea rax, [rbp + 0x390]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x3a8], 7
mov qword [rbp + 0x3a0], rdi
mov word [rbp + 0x390], di
lea r8d, [rdi + 0x3c]
lea rdx, str._listsproc___Lists_OnCommand_____found_P2P_list_in_def_lists
lea rcx, [rbp + 0x390]
call fcn.14000dc20
nop
lea rdx, [rbp + 0x390]
mov r8d, 6
call fcn.140078560
imul rbx, rbx, 0x68
add rbx, qword [0x140239cc8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov qword [rsp + 0x20], rbx
lea r9, [0x14003f730]
mov r8, rsi
mov edx, 0x7b
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, 1
jne case.0x1400485ae.1038
or qword [0x14023a1b0], 1
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x3e8], 7
mov qword [rbp + 0x3e0], rdi
mov word [rbp + 0x3d0], di
mov r8d, 0x44
lea rdx, str._listsproc___Lists_OnCommand_____couldnt_find_P2P_list_in_def_lists
lea rcx, [rbp + 0x3d0]
call fcn.14000dc20
nop
mov r8d, 3
lea rdx, [rbp + 0x3d0]
call fcn.140078560
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x480]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____clicked_on_IDC_OPENSPY
lea rcx, [rbp + 0x480]
call fcn.14000dd70
nop
mov r8d, 5
mov rdx, rax
call fcn.140078560
lea rax, [rbp + 0x540]
mov qword [rsp + 0x38], rax
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_spyware
lea rcx, [rbp + 0x540]
call fcn.14000dd70
nop
mov rcx, rax
call fcn.140047570
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140048fef
lea rax, [rbp + 0x680]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____found_Spy_list_in_def_lists
lea rcx, [rbp + 0x680]
call fcn.14000dd70
nop
mov rdx, rax
jmp 0x140048ec0
lea rax, [rbp + 0x580]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____couldnt_find_Spy_list_in_def_lists
lea rcx, [rbp + 0x580]
call fcn.14000dd70
nop
mov r8d, 3
mov rdx, rax
call fcn.140078560
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x700]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____clicked_on_IDC_OPENADS
lea rcx, [rbp + 0x700]
call fcn.14000dd70
nop
mov r8d, 5
mov rdx, rax
call fcn.140078560
lea rax, [rbp + 0x5c0]
mov qword [rsp + 0x38], rax
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_ads_trackers_and_bad_pr0n
lea rcx, [rbp + 0x5c0]
call fcn.14000dd70
nop
mov rcx, rax
call fcn.140047570
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400490a9
lea rax, [rbp + 0x6c0]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____found_Ads_list_in_def_lists
lea rcx, [rbp + 0x6c0]
call fcn.14000dd70
nop
mov rdx, rax
jmp 0x140048ec0
lea rax, [rbp + 0x600]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____couldnt_find_P2P_list_in_def_lists
lea rcx, [rbp + 0x600]
call fcn.14000dd70
nop
mov r8d, 3
mov rdx, rax
call fcn.140078560
jmp case.0x1400485ae.1038
lea rax, [rbp + 0x720]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____clicked_on_IDC_OPENEDU
lea rcx, [rbp + 0x720]
call fcn.14000dd70
nop
mov r8d, 5
mov rdx, rax
call fcn.140078560
lea rax, [rbp + 0x640]
mov qword [rsp + 0x38], rax
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_edu
lea rcx, [rbp + 0x640]
call fcn.14000dd70
nop
mov rcx, rax
call fcn.140047570
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140049163
lea rax, [rbp + 0x500]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____found_Edu_list_in_def_lists
lea rcx, [rbp + 0x500]
call fcn.14000dd70
nop
mov rdx, rax
jmp 0x140048ec0
lea rax, [rbp + 0x520]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____couldnt_find_P2P_list_in_def_lists
lea rcx, [rbp + 0x520]
call fcn.14000dd70
nop
mov r8d, 3
mov rdx, rax
call fcn.140078560
jmp case.0x1400485ae.1038
xor edi, edi
mov qword [rsp + 0x30], rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x140003d60]
mov r8, rsi
mov edx, 0x84
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, 1
jne case.0x1400485ae.1038
mov qword [rbp + 0xfd0], rdi
mov qword [rbp + 0xfd8], rdi
mov qword [rbp + 0xfd8], 7
mov qword [rbp + 0xfd0], rdi
mov word [rbp + 0xfc0], di
mov dword [rsp + 0x20], edi
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, qword [rsp + 0x30]
call fcn.140169244
or rbx, 0xffffffffffffffff
test rax, rax
je 0x140049247
lea rdx, [rax + 0x30]
lea rax, [rbp + 0xfc0]
cmp rax, rdx
je 0x1400492ba
mov r9, rbx
xor r8d, r8d
lea rcx, [rbp + 0xfc0]
call fcn.14000e0c0
jmp 0x1400492ba
mov dword [rsp + 0x20], edi
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, qword [rsp + 0x30]
call fcn.140169244
test rax, rax
je 0x1400492ba
lea rcx, [rax + 0x30]
lea rdx, [rbp + 0x1048]
call fcn.140021800
nop
mov rdx, rax
lea rcx, [rbp + 0xfc0]
call fcn.140003e40
nop
cmp qword [rbp + 0x1060], 8
jb 0x1400492a1
mov rcx, qword [rbp + 0x1048]
call fcn.1401669a0
mov qword [rbp + 0x1060], 7
mov qword [rbp + 0x1058], rdi
mov word [rbp + 0x1048], di
mov r9, qword [rbp + 0xfd0]
test r9, r9
jne 0x14004930e
lea rax, [rbp + 0x560]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____no_list_to_add
lea rcx, [rbp + 0x560]
call fcn.14000dd70
nop
mov r8d, 3
mov rdx, rax
call fcn.140078560
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140049309
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
jmp 0x14004839c
lea rcx, [rbp + 0xfc0]
mov r10, qword [rbp + 0xfc0]
mov r11, qword [rbp + 0xfd8]
cmp r11, 8
cmovae rcx, r10
mov r8d, 0x31
cmp r9, r8
cmovb r8, r9
test r8, r8
je 0x14004936a
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_level_1
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14004935b
add rcx, 2
add rdx, 2
dec r8
jne 0x140049344
jmp 0x14004936a
mov r8d, 1
cmp word [rcx], ax
cmovb r8d, ebx
jmp 0x14004936d
mov r8d, edi
movsxd rax, r8d
test r8d, r8d
jne 0x140049380
cmp r9, 0x31
jb 0x140049388
mov eax, edi
setne al
test eax, eax
je 0x1400494d0
lea rcx, [rbp + 0xfc0]
cmp r11, 8
cmovae rcx, r10
mov r8d, 0x31
cmp r9, r8
cmovb r8, r9
test r8, r8
je 0x1400493d6
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_spyware
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x1400493c7
add rcx, 2
add rdx, 2
dec r8
jne 0x1400493b0
jmp 0x1400493d6
mov r8d, 1
cmp word [rcx], ax
cmovb r8d, ebx
jmp 0x1400493d9
mov r8d, edi
movsxd rax, r8d
test r8d, r8d
jne 0x1400493ec
cmp r9, 0x31
jb 0x1400493f4
mov eax, edi
setne al
test eax, eax
je 0x1400494d0
lea rcx, [rbp + 0xfc0]
cmp r11, 8
cmovae rcx, r10
mov r8d, 0x43
cmp r9, r8
cmovb r8, r9
test r8, r8
je 0x140049446
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_ads_trackers_and_bad_pr0n
nop dword [rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140049437
add rcx, 2
add rdx, 2
dec r8
jne 0x140049420
jmp 0x140049446
mov r8d, 1
cmp word [rcx], ax
cmovb r8d, ebx
jmp 0x140049449
mov r8d, edi
movsxd rax, r8d
test r8d, r8d
jne 0x14004945c
cmp r9, 0x43
jb 0x140049460
mov eax, edi
setne al
test eax, eax
je 0x1400494d0
lea rcx, [rbp + 0xfc0]
cmp r11, 8
cmovae rcx, r10
mov r8d, 0x2d
cmp r9, r8
cmovb r8, r9
test r8, r8
je 0x1400494ae
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_edu
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14004949f
add rcx, 2
add rdx, 2
dec r8
jne 0x140049488
jmp 0x1400494ae
mov r8d, 1
cmp word [rcx], ax
cmovb r8d, ebx
jmp 0x1400494b1
mov r8d, edi
movsxd rax, r8d
test r8d, r8d
jne 0x1400494c8
cmp r9, 0x2d
jb 0x140049929
mov eax, edi
setne al
test eax, eax
jne 0x140049929
lea rdx, str._listsproc___Lists_OnCommand_____Newly_added_url:__1___found_in_custom_lists_
lea rcx, [rbp + 0x11b0]
call fcn.140021a10
nop
lea rdx, [rbp + 0xfc0]
mov rcx, rax
call fcn.14000cbd0
mov rdx, rax
lea rcx, [rbp + 0xfe0]
call fcn.14000dbe0
nop
lea rcx, [rbp + 0x11b0]
call fcn.1400090e0
lea rax, [rbp + 0x410]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x428], 7
mov qword [rbp + 0x420], rdi
mov word [rbp + 0x410], di
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0xfe0]
lea rcx, [rbp + 0x410]
call fcn.14000e0c0
nop
mov r8d, 5
lea rdx, [rbp + 0x410]
call fcn.140078560
lea rax, [rbp + 0x70]
mov qword [rsp + 0x38], rax
mov qword [rbp + 0x88], 7
mov qword [rbp + 0x80], rdi
mov word [rbp + 0x70], di
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0xfc0]
lea rcx, [rbp + 0x70]
call fcn.14000e0c0
nop
lea rdx, [0x140239cc8]
lea rcx, [rbp + 0x70]
call fcn.140042640
cmp rax, 0xffffffffffffffff
je 0x1400495d7
lea rax, [rbp + 0x4e0]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____found_url_in_selected_def_lists
lea rcx, [rbp + 0x4e0]
call fcn.14000dd70
nop
mov r8d, 5
jmp 0x1400498d8
lea rax, [rbp + 0x5a0]
mov qword [rsp + 0x38], rax
lea rdx, str._listsproc___Lists_OnCommand_____url_NOT_found_in_selected_def_lists__enabling_it
lea rcx, [rbp + 0x5a0]
call fcn.14000dd70
nop
mov r8d, 5
mov rdx, rax
call fcn.140078560
mov qword [rsp + 0x20], gethostname
lea r9, str.http:__list.iblocklist.com_lists_bluetack_level_1
mov r8, qword [rbp + 0xfd0]
lea rcx, [rbp + 0xfc0]
call fcn.140026580
test eax, eax
jne 0x1400496b2
lea rax, [rbp + 0x5e0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x50], rax
lea rdx, str.Default_P2P_List
lea rcx, [rbp + 0x5e0]
call fcn.14000dd70
mov rbx, rax
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_level_1
lea rcx, [rbp + 0x4a0]
call fcn.14000dd70
nop
mov rdx, rbx
mov rcx, rax
call fcn.140047190
mov edx, 0x4a6
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x49f
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x1400498e0
mov qword [rsp + 0x20], gethostname
lea r9, str.http:__list.iblocklist.com_lists_bluetack_spyware
mov r8, qword [rbp + 0xfd0]
lea rcx, [rbp + 0xfc0]
call fcn.140026580
test eax, eax
jne 0x14004975f
lea rax, [rbp + 0x4c0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x620]
mov qword [rsp + 0x38], rax
lea rdx, str.Default_Spy_List
lea rcx, [rbp + 0x4c0]
call fcn.14000dd70
mov rbx, rax
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_spyware
lea rcx, [rbp + 0x620]
call fcn.14000dd70
nop
mov rdx, rbx
mov rcx, rax
call fcn.140047190
mov edx, 0x4a7
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x4a0
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x1400498e0
mov qword [rsp + 0x20], 0x43
lea r9, str.http:__list.iblocklist.com_lists_bluetack_ads_trackers_and_bad_pr0n
mov r8, qword [rbp + 0xfd0]
lea rcx, [rbp + 0xfc0]
call fcn.140026580
test eax, eax
jne 0x14004980c
lea rax, [rbp + 0x660]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x6a0]
mov qword [rsp + 0x38], rax
lea rdx, str.Default_Ads_List
lea rcx, [rbp + 0x660]
call fcn.14000dd70
mov rbx, rax
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_ads_trackers_and_bad_pr0n
lea rcx, [rbp + 0x6a0]
call fcn.14000dd70
nop
mov rdx, rbx
mov rcx, rax
call fcn.140047190
mov edx, 0x4a8
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x4a1
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x1400498e0
mov qword [rsp + 0x20], 0x2d
lea r9, str.http:__list.iblocklist.com_lists_bluetack_edu
mov r8, qword [rbp + 0xfd0]
lea rcx, [rbp + 0xfc0]
call fcn.140026580
test eax, eax
jne 0x1400498b2
lea rax, [rbp + 0x6e0]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x760]
mov qword [rsp + 0x38], rax
lea rdx, str.Default_Edu_List
lea rcx, [rbp + 0x6e0]
call fcn.14000dd70
mov rbx, rax
lea rdx, str.http:__list.iblocklist.com_lists_bluetack_edu
lea rcx, [rbp + 0x760]
call fcn.14000dd70
nop
mov rdx, rbx
mov rcx, rax
call fcn.140047190
mov edx, 0x4a9
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
mov edx, 1
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 0x4a2
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x1400498e0
lea rax, [rbp + 0x740]
mov qword [rsp + 0x50], rax
lea rdx, str._listsproc___Lists_OnCommand____ERROR:__Cant_figure_out_which_list_to_select__
lea rcx, [rbp + 0x740]
call fcn.14000dd70
nop
mov r8d, 2
mov rdx, rax
call fcn.140078560
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400498f5
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
cmp qword [rbp + 0xff8], 8
jb 0x14004990b
mov rcx, qword [rbp + 0xfe0]
call fcn.1401669a0
mov qword [rbp + 0xff8], 7
mov qword [rbp + 0xff0], rdi
mov word [rbp + 0xfe0], di
jmp 0x14004839c
lea rdx, str._listsproc___Lists_OnCommand_____newly_added_url:__1___NOT_found_in_custom_lists
lea rcx, [rbp + 0x10b0]
call fcn.140021a10
nop
lea rdx, [rbp + 0xfc0]
mov rcx, rax
call fcn.14000cbd0
mov rdx, rax
lea rcx, [rbp + 0xfe0]
call fcn.14000dbe0
nop
lea rcx, [rbp + 0x10b0]
call fcn.1400090e0
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x50], rax
mov qword [rbp + 0x2c8], 7
mov qword [rbp + 0x2c0], rdi
mov word [rbp + 0x2b0], di
mov r9, rbx
xor r8d, r8d
lea rdx, [rbp + 0xfe0]
lea rcx, [rbp + 0x2b0]
call fcn.14000e0c0
nop
mov r8d, 6
lea rdx, [rbp + 0x2b0]
call fcn.140078560
nop
cmp qword [rbp + 0xff8], 8
jb 0x1400499d0
mov rcx, qword [rbp + 0xfe0]
call fcn.1401669a0
mov qword [rbp + 0xff8], 7
mov qword [rbp + 0xff0], rdi
mov word [rbp + 0xfe0], di
mov edx, 0x3ea
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r14, rax
mov dword [rbp + 0x458], 2
lea rcx, [rbp + 0xfc0]
cmp qword [rbp + 0xfd8], 8
cmovae rcx, qword [rbp + 0xfc0]
mov qword [rbp + 0x460], rcx
lea r9, [rbp + 0x458]
mov r8, rbx
mov edx, 0x1053
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov r12, rax
cmp eax, 0xffffffff
jne 0x140049a9e
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, rax
mov r8, qword [rsp + 0x30]
mov rcx, r14
call fcn.140047c50
mov rcx, qword [rsp + 0x30]
call fcn.1401693c0
mov rcx, rax
lea rdx, vtable.type_info.0
call fcn.140166f10
test al, al
mov rax, qword [0x14023a1b0]
je 0x140049a8e
or rax, 2
or rax, 1
mov qword [0x14023a1b0], rax
jmp 0x140049309
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140049ab2
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
mov esi, edi
test eax, eax
jle 0x140049309
mov rbx, rdi
nop word [rax + rax]
mov r8, rbx
mov rcx, r14
cmp esi, r12d
jne 0x140049b10
xor r9d, r9d
mov edx, 0x1013
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x80], 3
mov dword [rsp + 0x7c], 3
mov r8, rbx
mov rcx, r14
jmp 0x140049b1b
mov dword [rbp - 0x80], 2
mov dword [rsp + 0x7c], edi
lea r9, [rsp + 0x70]
mov edx, 0x102b
call qword [sym.imp.USER32.dll_SendMessageW]
inc esi
inc rbx
cmp esi, r15d
jl 0x140049ae0
jmp 0x14004839c
mov edx, 0x3ea
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1042
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
cmp eax, 0xffffffff
je case.0x1400485ae.1038
xor edx, edx
lea r8d, [rdx + 0x54]
lea rcx, [rsp + 0x74]
call fcn.140171ae0
mov dword [rsp + 0x74], r15d
mov r14d, 4
mov dword [rsp + 0x70], r14d
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x30], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x1400264f0]
mov r8, rsi
lea edx, [r14 + 0x75]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
test rax, rax
je case.0x1400485ae.1038
or qword [0x14023a1b0], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x68], rax
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x104c
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
mov edx, edi
mov rax, qword [rsp + 0x30]
cmp dword [rax + 0x28], 1
sete dl
add edx, 0x6d
lea rcx, [rbp + 0xfc0]
call fcn.1400091d0
nop
mov dword [rbp - 0x28], 1
lea rax, [rbp + 0xfc0]
cmp qword [rbp + 0xfd8], 8
cmovae rax, qword [rbp + 0xfc0]
mov qword [rbp - 0x18], rax
movsxd r14, r15d
lea r9, [rbp - 0x30]
mov r8, r14
mov edx, 0x1074
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x28], 2
mov rax, qword [rsp + 0x30]
add rax, 8
cmp qword [rax + 0x18], 8
jb 0x140049c76
mov rax, qword [rax]
mov qword [rbp - 0x18], rax
lea r9, [rbp - 0x30]
mov r8, r14
mov edx, 0x1074
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x20], edi
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, qword [rsp + 0x30]
call fcn.140169244
test rax, rax
je 0x140049cd4
mov dword [rbp - 0x28], edi
add rax, 0x30
mov qword [rbp - 0x18], rax
lea r9, [rbp - 0x30]
mov r8, r14
mov edx, 0x1074
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140049d49
mov dword [rsp + 0x20], edi
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, qword [rsp + 0x30]
call fcn.140169244
mov rsi, rax
test rax, rax
je 0x140049d49
mov dword [rbp - 0x28], edi
lea rcx, [rax + 0x30]
cmp qword [rcx + 0x18], 8
jb 0x140049d0b
mov rcx, qword [rcx]
mov qword [rbp - 0x18], rcx
lea r9, [rbp - 0x30]
mov r8, r14
mov edx, 0x1074
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp + 0x14c0]
mov rcx, rsi
call fcn.140045050
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
je 0x140049d49
or qword [0x14023a1b0], 2
jmp 0x14004839c
mov edx, 0x3ea
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1042
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp eax, 0xffffffff
je case.0x1400485ae.1038
xor edx, edx
lea r8d, [rdx + 0x54]
lea rcx, [rsp + 0x74]
call fcn.140171ae0
mov dword [rsp + 0x74], edi
mov r14d, 4
mov dword [rsp + 0x70], r14d
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x104b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x20], rax
lea r9, [0x14003f730]
mov r8, rsi
lea edx, [r14 + 0x77]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, 1
jne case.0x1400485ae.1038
or qword [0x14023a1b0], rax
jmp case.0x1400485ae.1038
xor edi, edi
mov qword [rsp + 0x30], rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x140022850]
mov r8, rsi
lea edx, [rdi + 0x6f]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, 1
jne case.0x1400485ae.1038
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x14003f730]
mov r8, rsi
lea edx, [rdi + 0x7b]
call qword [sym.imp.USER32.dll_DialogBoxParamW]
cmp rax, 1
jne 0x140049e93
mov edx, 0x3ea
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, rax
mov r8, qword [rsp + 0x30]
mov rcx, rbx
call fcn.140047c50
jmp 0x140048f05
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je case.0x1400485ae.1038
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
jmp case.0x1400485ae.1038
mov edx, 0x3ea
call qword [sym.imp.USER32.dll_GetDlgItem]
mov r12, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1032
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je case.0x1400485ae.1038
xor edi, edi
mov word [rbp + 0x18e0], di
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x18e2]
call fcn.140171ae0
xor edx, edx
mov r8d, 0x90
lea rcx, [rbp - 0x28]
call fcn.140171ae0
mov dword [rbp - 0x30], ILFree
mov qword [rbp - 0x28], rsi
lea rax, [rbp + 0x18e0]
mov qword [rbp], rax
lea rax, str.PeerBlock_Text_Lists__.p2p_
mov qword [rbp - 0x18], rax
lea rax, [0x1401c7838]
mov qword [rbp + 0x38], rax
mov dword [rbp + 8], 0x104
mov dword [rbp + 0x30], 0x804
lea rcx, [rbp - 0x30]
call qword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
test eax, eax
je case.0x1400485ae.1038
lea rax, [rsp + 0x38]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rdi
xor r8d, r8d
xor edx, edx
call fcn.14003b410
mov qword [rsp + 0x38], rax
lea r9d, [rdi + 2]
or rbx, 0xffffffffffffffff
mov r8, rbx
mov edx, 0x100c
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
cmp eax, ebx
je 0x14004a18b
lea r14d, [rdi + 4]
nop
xor edx, edx
lea r8d, [rdx + 0x54]
lea rcx, [rsp + 0x74]
call fcn.140171ae0
mov dword [rsp + 0x74], r15d
mov dword [rsp + 0x70], r14d
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, 0x104b
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov rsi, qword [rbp - 0x68]
mov dword [rsp + 0x20], edi
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, rsi
call fcn.140169244
test rax, rax
je 0x14004a093
lea r9, [rbp + 0x990]
lea rdx, [rax + 0x30]
lea rcx, [rbp + 0x990]
mov rax, rdx
or rax, rcx
and eax, 0xf
jne 0x14004a079
mov rax, r14
nop dword [rax]
movaps xmm0, xmmword [rdx]
movaps xmmword [rcx], xmm0
movaps xmm1, xmmword [rdx + 0x10]
movaps xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [rdx + 0x20]
movaps xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [rdx + 0x30]
movaps xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [rdx + 0x40]
movaps xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [rdx + 0x50]
movaps xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [rdx + 0x60]
movaps xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movaps xmm1, xmmword [rdx + 0x70]
movaps xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
dec rax
jne 0x14004a020
mov rax, qword [rdx]
mov qword [rcx], rax
jmp 0x14004a087
mov r8d, 0x208
mov rcx, r9
call fcn.1401669c0
lea rcx, [rbp + 0x990]
jmp 0x14004a15e
mov dword [rsp + 0x20], edi
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, rsi
call fcn.140169244
test rax, rax
je 0x14004a168
lea rdx, [rbp + 0xba0]
mov rcx, rax
call fcn.140045050
mov rdx, rax
lea r9, [rbp + 0x780]
lea rcx, [rbp + 0x780]
or rax, rcx
and eax, 0xf
jne 0x14004a149
mov rax, r14
nop word [rax + rax]
movaps xmm0, xmmword [rdx]
movaps xmmword [rcx], xmm0
movaps xmm1, xmmword [rdx + 0x10]
movaps xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [rdx + 0x20]
movaps xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [rdx + 0x30]
movaps xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [rdx + 0x40]
movaps xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [rdx + 0x50]
movaps xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [rdx + 0x60]
movaps xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movaps xmm1, xmmword [rdx + 0x70]
movaps xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
dec rax
jne 0x14004a0f0
mov rax, qword [rdx]
mov qword [rcx], rax
jmp 0x14004a157
mov r8d, 0x208
mov rcx, r9
call fcn.1401669c0
lea rcx, [rbp + 0x780]
lea rdx, [rsp + 0x38]
call fcn.140040f30
movsxd r8, r15d
mov edx, 0x100c
mov r9d, 2
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15d, eax
cmp eax, 0xffffffff
jne 0x140049fa0
lea rcx, [rsp + 0x38]
call fcn.140116c10
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140117440
mov qword [rbp + 0x1018], rdi
mov qword [rbp + 0x1020], rdi
mov qword [rbp + 0x1020], 7
mov qword [rbp + 0x1018], rdi
mov word [rbp + 0x1008], di
cmp word [rbp + 0x18e0], 0
jne 0x14004a1d7
mov rbx, rdi
jmp 0x14004a1ea
lea rax, [rbp + 0x18e0]
nop
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14004a1e0
mov r8, rbx
lea rdx, [rbp + 0x18e0]
lea rcx, [rbp + 0x1008]
call fcn.14000dc20
nop
lea rdx, [rbp + 0x1008]
lea rcx, [rbp + 0x1068]
call fcn.14000e330
nop
mov r8d, edi
cmp dword [rbp - 4], 1
setne r8b
inc r8d
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140116840
nop
cmp qword [rbp + 0x1080], 0x10
jb 0x14004a247
mov rcx, qword [rbp + 0x1068]
call fcn.1401669a0
mov qword [rbp + 0x1080], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1078], rdi
mov byte [rbp + 0x1068], 0
cmp qword [rbp + 0x1020], 8
jb 0x14004a276
mov rcx, qword [rbp + 0x1008]
call fcn.1401669a0
mov qword [rbp + 0x1020], 7
mov qword [rbp + 0x1018], rdi
mov word [rbp + 0x1008], di
lea rax, [rsp + 0x38]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x38]
call fcn.14003b4d0
nop
mov rcx, qword [rsp + 0x38]
call fcn.1401669a0
mov rcx, qword [rbp + 0x1af0]
xor rcx, rsp
call fcn.140166980
lea r11, [rsp + 0x1c00]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret