Function at 0x456eec
Capabilities:
Get proxy

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 8], rcx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x230
xorps xmm0, xmm0
lea rcx, [0x004e0f30]
xor eax, eax
movups xmmword [0x004e0f30], xmm0
mov qword [0x004e0f50], rax
movups xmmword [0x004e0f40], xmm0
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor ebx, ebx
mov dword [0x004e14d8], 0xa8
mov edx, 0x288
mov dword [0x004e1460], ebx
lea rax, [0x0048d7a8]
mov dword [0x004e1488], edx
mov qword [0x004e1468], rax
mov r8d, 0xf8
mov qword [0x004e1490], rax
lea ecx, [rbx + 0x40]
mov dword [0x004e148c], ecx
lea rax, [0x0048d7a8]
mov qword [0x004e14b8], rax
lea rax, [0x0048d7a8]
mov qword [0x004e14e0], rax
lea rax, [0x0048d7a8]
mov dword [0x004e14b4], ecx
lea ecx, [rbx + 0x20]
mov qword [0x004e19d8], rax
lea rax, [0x0048d8d0]
mov dword [0x004e14b0], edx
xor edx, edx
mov dword [0x004e14dc], ecx
mov dword [0x004e19fc], ecx
lea rcx, [0x004e0f58]
mov qword [0x004e1a10], rax
mov qword [0x004e1478], rbx
mov qword [0x004e1480], rbx
mov qword [0x004e14a0], rbx
mov qword [0x004e14a8], rbx
mov qword [0x004e14c8], rbx
mov qword [0x004e14d0], rbx
mov qword [0x004e14f0], rbx
mov qword [0x004e14f8], rbx
mov dword [0x004e1500], 0x84
mov dword [0x004e1504], 8
mov qword [0x004e19e8], rbx
mov qword [0x004e19f0], rbx
mov dword [0x004e19f8], 0x2c8
mov byte [0x004e1a00], bl
mov qword [0x004e1a08], rbx
mov qword [0x004e1a18], rbx
mov qword [0x004e1a20], rbx
mov byte [0x004e1a28], bl
mov byte [0x004e1a29], bl
call fcn.00424830
lea rax, [rbp + 0x160]
mov word [0x004e1050], bx
mov edi, 0x20119
mov qword [rsp + 0x20], rax
lea rsi, str.SOFTWAREMetaQuotes_Software
mov word [0x004e1258], bx
mov r14, 0xffffffff80000001
mov byte [0x004e1814], bl
mov r9d, edi
mov byte [0x004e1914], bl
mov rdx, rsi
mov byte [0x004e1954], bl
mov rcx, r14
mov qword [rbp + 0x160], rbx
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4570d0
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4570db
mov rdx, rsi
mov rcx, r14
call fcn.00404678
mov r9d, edi
mov qword [rbp + 0x160], rbx
lea rax, [rbp + 0x160]
mov rdi, 0xffffffff80000002
mov rcx, rdi
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, rsi
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x45711a
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x457125
mov rdx, rsi
mov rcx, rdi
call fcn.00404678
xor edx, edx
lea rcx, [0x004e1508]
mov r8d, 0x30c
call fcn.00424830
mov r12d, 0x100
lea r9, [rsp + 0x30]
mov dword [rsp + 0x28], r12d
lea r8, str.Proxy.Type
mov rdx, rsi
mov dword [rsp + 0x20], 0x1fe
mov rcx, r14
call fcn.00404704
mov edi, 3
test al, al
je 0x457181
lea rcx, [rsp + 0x30]
call fcn.00436ec0
cmp eax, edi
cmova eax, ebx
mov dword [0x004e1508], eax
lea r15, [0x004e150c]
mov dword [rsp + 0x28], r12d
mov r9, r15
mov dword [rsp + 0x20], 0xfe
lea r8, [0x0048f9f0]
mov rdx, rsi
mov rcx, r14
call fcn.00404704
test al, al
jne 0x4571b5
mov word [0x004e150c], bx
mov dword [rsp + 0x28], r12d
lea r9, [0x004e160c]
lea r8, str.Proxy.Login
mov dword [rsp + 0x20], 0x7e
mov rdx, rsi
mov rcx, r14
call fcn.00404704
test al, al
jne 0x4571e6
mov word [0x004e160c], bx
mov dword [rsp + 0x28], r12d
lea r9, [0x004e168c]
lea r8, str.Proxy.Password
mov dword [rsp + 0x20], 0x7e
mov rdx, rsi
mov rcx, r14
call fcn.00404704
test al, al
jne 0x457217
mov word [0x004e168c], bx
cmp word [0x004e150c], bx
jne 0x457320
mov dword [rsp + 0x28], r12d
lea r9, [rsp + 0x30]
lea r8, str.ProxyServer
mov dword [rsp + 0x20], 0x1fe
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov rcx, r14
call fcn.00404704
test al, al
je 0x457320
lea rdx, str.https
lea rcx, [rsp + 0x30]
call fcn.00423b70
test rax, rax
jne 0x457284
lea rdx, str.http
lea rcx, [rsp + 0x30]
call fcn.00423b70
test rax, rax
je 0x457320
lea rdx, [0x0048fae4]
mov rcx, rax
call fcn.00423b70
add rax, 2
mov r8d, 0x7f
sub rax, r15
mov rdx, r15
lea rcx, [r8 + 0x7fffff7f]
test rcx, rcx
je 0x4572c5
movzx ecx, word [rax + rdx]
test cx, cx
je 0x4572c5
mov word [rdx], cx
add rdx, 2
sub r8, 1
jne 0x4572a3
lea rax, [rdx - 2]
test r8, r8
mov rcx, r15
cmovne rax, rdx
lea rdx, [0x0048fae8]
mov word [rax], bx
call fcn.00423b70
test rax, rax
je 0x4572ea
mov word [rax], bx
or rax, 0xffffffffffffffff
inc rax
cmp word [r15 + rax*2], bx
jne 0x4572ee
cmp rax, rdi
jbe 0x457319
lea rdx, [0x0048d7b8]
mov rcx, r15
call fcn.00423b70
test rax, rax
je 0x457319
mov dword [0x004e1508], edi
jmp 0x457320
mov word [0x004e150c], bx
call fcn.00452e0c
mov r8d, edi
lea rdx, str.c.mql5.com
call fcn.004573fc
mov r8d, edi
lea rdx, str.api1.mql5.top
call fcn.004573fc
mov r8d, edi
lea rdx, str.download.metatrader.com
call fcn.004573fc
mov r8d, edi
lea rdx, str.content.mql5.com
call fcn.004573fc
mov r8d, edi
lea rdx, str.content.finteza.com
call fcn.004573fc
mov ebx, 1
mov r9d, ebx
lea r8, str.api_u.mql5.net
mov edx, 0xff
lea rcx, [rsp + 0x30]
call fcn.0040457c
mov r8d, 2
lea rdx, [rsp + 0x30]
call fcn.004573fc
cmp ebx, 0xe
je 0x4573ac
inc ebx
cmp ebx, 0xf
jae 0x4573b9
jmp 0x457375
mov r8d, edi
lea rdx, [rsp + 0x30]
call fcn.004573fc
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x38]
lea rax, [0x004e0f30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret