Function at 0x43e32a
Capabilities:
Get memory capacity
Identify system language via api

Disassembly:
sub esp, 0x5a8
cmp dword [esp + 0x5b0], 0
push ebx
push ebp
push esi
push edi
je 0x43e9b0
mov esi, dword [esp + 0x5c4]
test esi, esi
je 0x43e9b0
xor ebp, ebp
cmp word [esi], bp
je 0x43e9b0
mov edi, dword [esp + 0x5c8]
test edi, edi
je 0x43e9b0
cmp word [edi], bp
je 0x43e9b0
push str.content.mql5.com
push 0x7f
pop edx
mov ecx, 0x4ae1da
call fcn.00403b43
push dword [esp + 0x5c0]
mov ecx, 0x4ae2da
push 0x7f
pop edx
call fcn.00403b43
push esi
push 0x27
pop edx
mov ecx, 0x4ae3da
call fcn.00403b43
push edi
push 0x7f
pop edx
mov ecx, 0x4ae42a
call fcn.00403b43
xor eax, eax
xorps xmm0, xmm0
mov edi, str.SOFTWAREMetaQuotes_Software
mov word [0x4b2dd6], ax
movlpd qword [0x4b3030], xmm0
mov word [0x4b2ed6], ax
mov word [0x4b2f26], ax
cmp word [0x4ae52a], ax
jne 0x43e6d0
cmp byte [esp + 0x5cc], al
je 0x43e6d0
push 0x103
lea eax, [esp + 0x164]
mov dword [esp + 0x18], 0x4628f8
push eax
or esi, 0xffffffff
push ebp
mov dword [esp + 0x24], esi
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
test eax, eax
je 0x43e6b7
cmp word [esp + 0x160], bp
je 0x43e6b7
push ecx
mov ebx, 0x4ae52a
lea eax, [esp + 0x164]
push ebx
push eax
lea ecx, [esp + 0x20]
call fcn.0045895c
test al, al
je 0x43e6b3
push ebp
push ebx
call fcn.0043dca0
push 0x80
lea eax, [esp + 0x24]
push ebp
push eax
call fcn.0041c3f0
add esp, 0xc
lea eax, [esp + 0x20]
push 0x3f
push eax
push str.utm_cookie
push ebx
call fcn.0043b9ea
test al, al
je 0x43e4b0
lea ecx, [esp + 0x20]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bp
jne 0x43e484
sub ecx, edx
sar ecx, 1
cmp ecx, 8
jb 0x43e4b0
lea eax, [esp + 0x20]
push eax
call fcn.00429dc0
pop ecx
cmp edx, ebp
jg 0x43e4b7
jl 0x43e4b0
cmp eax, 0x2710
jae 0x43e4b7
xor eax, eax
mov word [esp + 0x20], ax
push 0x103
lea eax, [esp + 0x164]
push eax
push str.utm_cookie_expiration
push ebx
call fcn.0043b9ea
test al, al
je 0x43e533
cmp word [esp + 0x160], bp
je 0x43e533
lea eax, [esp + 0x160]
push eax
call fcn.00429dc0
pop ecx
push ebp
mov esi, eax
mov edi, edx
call fcn.00429e44
mov ebx, eax
mov eax, edx
pop ecx
mov ecx, ebx
sub ecx, 0x1c20
sbb eax, ebp
cmp edi, eax
jl 0x43e529
jg 0x43e50e
cmp esi, ecx
jb 0x43e529
cmp edi, edx
jl 0x43e518
jg 0x43e529
cmp esi, ebx
ja 0x43e529
mov ax, word [esp + 0x20]
mov ebx, 0x4ae52a
mov edi, str.SOFTWAREMetaQuotes_Software
jmp 0x43e53a
mov ebx, 0x4ae52a
mov edi, str.SOFTWAREMetaQuotes_Software
xor eax, eax
mov word [esp + 0x20], ax
test ax, ax
je 0x43e6b3
push 0x80
lea eax, [esp + 0xe4]
push ebp
push eax
call fcn.0041c3f0
add esp, 0xc
lea eax, [esp + 0xe0]
mov esi, 0x467fd0
mov edx, edi
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
push 0x100
push 0x7e
push eax
push esi
call fcn.00403acb
add esp, 0x10
test al, al
je 0x43e59c
lea eax, [esp + 0xe0]
push eax
call fcn.00429dc0
pop ecx
cmp edx, ebp
jg 0x43e5da
jl 0x43e59c
cmp eax, 0x2710
jae 0x43e5da
push 0x100
push 0x7e
lea eax, [esp + 0xe8]
mov edx, edi
push eax
push esi
mov ecx, SysReAllocStringLen
call fcn.00403acb
add esp, 0x10
test al, al
je 0x43e5e4
lea eax, [esp + 0xe0]
push eax
call fcn.00429dc0
pop ecx
cmp edx, ebp
jg 0x43e5da
jl 0x43e5e4
cmp eax, 0x2710
jb 0x43e5e4
mov ax, word [esp + 0xe0]
jmp 0x43e5ee
xor eax, eax
mov word [esp + 0xe0], ax
test ax, ax
je 0x43e613
push 0x103
lea eax, [esp + 0x164]
push eax
push 0x4674f0
push ebx
call fcn.0043b9ea
test al, al
je 0x43e6b3
lea ecx, [esp + 0x20]
lea eax, [esp + 0xe0]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43e644
test dx, dx
je 0x43e640
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43e644
add eax, 4
add ecx, 4
test dx, dx
jne 0x43e61e
mov eax, ebp
jmp 0x43e649
sbb eax, eax
or eax, 1
test eax, eax
je 0x43e6b3
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.00403a97
test al, al
jne 0x43e669
push ecx
mov edx, edi
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.00403a3f
pop ecx
push ecx
lea eax, [esp + 0x24]
mov edx, edi
push eax
push ecx
push esi
mov ecx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.004039b8
add esp, 0x10
mov ecx, SysReAllocStringLen
call fcn.00403a97
test al, al
jne 0x43e69c
push ecx
mov edx, edi
mov ecx, SysReAllocStringLen
call fcn.00403a3f
pop ecx
push ecx
lea eax, [esp + 0x24]
mov edx, edi
push eax
push ecx
push esi
mov ecx, SysReAllocStringLen
call fcn.004039b8
add esp, 0x10
mov esi, dword [esp + 0x18]
mov dword [esp + 0x14], 0x4628f8
cmp esi, 0xffffffff
je 0x43e6d0
push esi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
or dword [esp + 0x18], 0xffffffff
cmp word [0x4af52a], bp
jne 0x43e9a5
lea ecx, [esp + 0x3a8]
call fcn.0040117c
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], 0x40
push eax
call dword [sym.imp.KERNEL32.DLL_GlobalMemoryStatusEx]
test eax, eax
jne 0x43e70c
mov dword [esp + 0x1c], ebp
jmp 0x43e722
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0xac]
shrd ecx, eax, 0x14
mov dword [esp + 0x1c], ecx
push ecx
lea eax, [esp + 0x36c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetUserDefaultUILanguage]
movzx ecx, ax
call fcn.0044380d
pop ecx
pop ecx
lea edx, [esp + 0x3a8]
lea ecx, [esp + 0x368]
call fcn.00440870
mov ebx, dword [esp + 0x3ac]
call fcn.00403930
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebp, eax
push 1
call esi
push 0
mov edi, eax
call esi
mov ecx, eax
mov eax, dword [esp + 0x1c]
push ebx
add eax, 0xff
mov ebx, 0x1ff
and eax, 0xfffff00
push eax
push ebp
push edi
push ecx
push str.modeldesktopscr_res_dx_dcpu_umemory_ul_s
push ebx
mov ebp, 0x4af52a
push ebp
call fcn.0040397c
push 0x100
lea esi, [ebx + 7]
mov edi, reloc.OLEAUT32.dll_SysReAllocString
push esi
lea eax, [esp + 0x188]
mov edx, str.HARDWAREDESCRIPTIONSystemBIOS
push eax
push str.SystemManufacturer
mov ecx, edi
call fcn.00403acb
add esp, 0x30
test al, al
je 0x43e808
lea eax, [esp + 0x160]
push eax
call fcn.0043b71f
cmp eax, 3
jbe 0x43e808
lea edx, [esp + 0x3a8]
lea ecx, [esp + 0x160]
call fcn.00440870
push str.model_vendor
mov edx, ebx
mov ecx, ebp
call fcn.004038fe
push dword [esp + 0x3ac]
mov edx, ebx
mov ecx, ebp
call fcn.004038fe
push 0x100
push esi
lea eax, [esp + 0x168]
mov edx, str.HARDWAREDESCRIPTIONSystemBIOS
push eax
push 0x467f2c
mov ecx, edi
call fcn.00403acb
add esp, 0x10
test al, al
je 0x43e871
lea eax, [esp + 0x160]
push eax
call fcn.0043b71f
cmp eax, 3
jbe 0x43e871
lea edx, [esp + 0x3a8]
lea ecx, [esp + 0x160]
call fcn.00440870
push str.model_device
mov edx, ebx
mov ecx, ebp
call fcn.004038fe
push dword [esp + 0x3ac]
mov edx, ebx
mov ecx, ebp
call fcn.004038fe
push 0
call fcn.00429e44
mov ebx, eax
mov dword [esp], 0x100
push 0x206
lea eax, [esp + 0x168]
mov ebp, edx
push eax
push str.Install.Time
mov edx, str.SOFTWAREMetaQuotes_Software
mov ecx, SysReAllocStringLen
mov esi, ebx
mov edi, ebp
call fcn.00403acb
add esp, 0x10
test al, al
je 0x43e8f5
cmp word [esp + 0x160], 0
je 0x43e8f5
lea eax, [esp + 0x160]
push eax
call fcn.00429dc0
mov edi, edx
mov esi, eax
pop ecx
cmp edi, ebp
jl 0x43e8da
jg 0x43e8d6
cmp esi, ebx
jbe 0x43e8da
mov esi, ebx
mov edi, ebp
mov ecx, esi
mov eax, edi
add ecx, 0x128a1800
adc eax, 0
cmp eax, ebp
jg 0x43e8f5
jl 0x43e8f1
cmp ecx, ebx
jae 0x43e8f5
mov esi, ebx
mov edi, ebp
push edi
push esi
push str.fv_date_I64d
lea eax, [esp + 0x16c]
push 0x103
push eax
call fcn.0040397c
add esp, 0x14
lea eax, [esp + 0x160]
mov esi, 0x1ff
mov edi, 0x4af52a
mov edx, esi
mov ecx, edi
push eax
call fcn.004038fe
push 0x100
push 0x206
lea eax, [esp + 0x168]
mov edx, str.SOFTWAREMicrosoftWindowsCurrentVersionAdvertisingInfo
push eax
push 0x46762c
mov ecx, SysReAllocStringLen
call fcn.00403acb
add esp, 0x10
test al, al
jne 0x43e98a
lea eax, [esp + 0x160]
push eax
call fcn.0043b71f
cmp eax, 0x10
jbe 0x43e98a
push str.advid
mov edx, esi
mov ecx, edi
call fcn.004038fe
lea eax, [esp + 0x160]
mov edx, esi
push eax
mov ecx, edi
call fcn.004038fe
and dword [esp + 0x3ac], 0
and dword [esp + 0x3b0], 0
mov dword [esp + 0x3a8], 0x460424
mov byte [0x4ae1d8], 1
mov al, 1
jmp 0x43e9b2
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5a8
ret 0x14