Function at 0x43b2a8
Capabilities:
Get memory capacity

Disassembly:
push 0x180
mov eax, 0x5bf52f
call fcn.00580bb4
push str.SystemInfo_
lea eax, [ebp - 0x138]
push eax
call fcn.0040852d
and dword [ebp - 4], 0
lea esi, [ebp - 0x13c]
call fcn.0041da4e
mov byte [ebp - 4], 1
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
mov byte [ebp - 4], 0
mov ecx, esi
call fcn.0040856e
push 0x67e0c0
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
call fcn.0041ef1c
mov esi, eax
lea eax, [ebp - 0x148]
push eax
call fcn.004084d7
mov byte [ebp - 4], 2
push esi
push 0x67e0c4
lea eax, [ebp - 0x148]
call fcn.004175e6
mov eax, dword [ebp - 0x148]
pop ecx
pop ecx
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e0d4
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
lea eax, [ebp - 0x18c]
push eax
mov dword [ebp - 0x18c], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
lea eax, [ebp - 0x140]
push eax
call fcn.004084d7
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x180]
shrd eax, ecx, 0x14
shr ecx, 0x14
push ecx
push eax
push 0x67e0d8
lea eax, [ebp - 0x140]
call fcn.004175e6
mov eax, dword [ebp - 0x140]
add esp, 0xc
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e0e4
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x178]
shrd eax, ecx, 0x14
shr ecx, 0x14
push ecx
push eax
push 0x67e0e8
lea eax, [ebp - 0x140]
call fcn.004175e6
mov eax, dword [ebp - 0x140]
add esp, 0xc
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e0f4
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
lea eax, [ebp - 0x134]
push eax
mov dword [ebp - 0x134], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x67e0f8
lea eax, [ebp - 0x144]
push eax
call fcn.0040852d
mov byte [ebp - 4], 4
cmp byte [ebp - 0x1a], 2
jne 0x43b45e
push str.Domain_Controller
lea eax, [ebp - 0x144]
push eax
call fcn.004085d2
cmp byte [ebp - 0x1a], 3
jne 0x43b475
push str.Server
lea eax, [ebp - 0x144]
push eax
call fcn.004085d2
mov eax, dword [ebp - 0x144]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push str._t_t_t_t_t_t_t_t
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
mov eax, dword [0x6d68b8]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e148
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
mov eax, dword [0x6d68bc]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e14c
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
mov eax, dword [0x6d68c0]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e150
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
mov eax, dword [0x6d68c4]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e154
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
mov eax, dword [0x6d68c8]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e158
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
lea edi, [ebp - 0x13c]
call fcn.0041de0f
mov byte [ebp - 4], 5
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
mov byte [ebp - 4], 4
mov ecx, edi
call fcn.0040856e
push 0x67e15c
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
lea eax, [ebp - 0x13c]
push eax
call fcn.0041dae0
pop ecx
mov byte [ebp - 4], 6
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x13c]
call fcn.0040856e
push 0x67e160
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
mov eax, dword [0x6d68cc]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cde8
push 0x67e164
lea eax, [ebp - 0x138]
push eax
call fcn.004085f0
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x13c], esp
lea ecx, [ebp - 0x138]
push ecx
push eax
call fcn.004084fe
mov byte [ebp - 4], 7
mov byte [ebp - 4], 4
mov ecx, dword [ebp + 8]
call fcn.004389c2
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x144]
call fcn.0040856e
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x140]
call fcn.0040856e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x148]
call fcn.0040856e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.0040856e
call fcn.00580c37
ret 4