Function at 0x43aa16
Capabilities:
Get memory capacity

Disassembly:
push 0x180
mov eax, 0x5c71ac
call fcn.005870c4
push str.SystemInfo_
lea eax, [ebp - 0x138]
push eax
call fcn.00408518
and dword [ebp - 4], 0
lea esi, [ebp - 0x13c]
call fcn.0041d917
mov byte [ebp - 4], 1
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
mov byte [ebp - 4], 0
mov ecx, esi
call fcn.00408559
push 0x685ab0
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
call fcn.0041edc7
mov esi, eax
lea eax, [ebp - 0x148]
push eax
call fcn.004084c2
mov byte [ebp - 4], 2
push esi
push 0x685ab4
lea eax, [ebp - 0x148]
call fcn.00417a4d
mov eax, dword [ebp - 0x148]
pop ecx
pop ecx
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685ac4
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
lea eax, [ebp - 0x18c]
push eax
mov dword [ebp - 0x18c], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
lea eax, [ebp - 0x140]
push eax
call fcn.004084c2
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x180]
shrd eax, ecx, 0x14
shr ecx, 0x14
push ecx
push eax
push 0x685ac8
lea eax, [ebp - 0x140]
call fcn.00417a4d
mov eax, dword [ebp - 0x140]
add esp, 0xc
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685ad4
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x178]
shrd eax, ecx, 0x14
shr ecx, 0x14
push ecx
push eax
push 0x685ad8
lea eax, [ebp - 0x140]
call fcn.00417a4d
mov eax, dword [ebp - 0x140]
add esp, 0xc
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685ae4
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
lea eax, [ebp - 0x134]
push eax
mov dword [ebp - 0x134], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0x685ae8
lea eax, [ebp - 0x144]
push eax
call fcn.00408518
mov byte [ebp - 4], 4
cmp byte [ebp - 0x1a], 2
jne 0x43abcc
push str.Domain_Controller
lea eax, [ebp - 0x144]
push eax
call fcn.004085bd
cmp byte [ebp - 0x1a], 3
jne 0x43abe3
push str.Server
lea eax, [ebp - 0x144]
push eax
call fcn.004085bd
mov eax, dword [ebp - 0x144]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push str._t_t_t_t_t_t_t_t
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
mov eax, dword [0x6de96c]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685b38
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
mov eax, dword [0x6de970]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685b3c
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
mov eax, dword [0x6de974]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685b40
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
mov eax, dword [0x6de978]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685b44
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
mov eax, dword [0x6de97c]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685b48
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
lea edi, [ebp - 0x13c]
call fcn.0041dcd8
mov byte [ebp - 4], 5
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
mov byte [ebp - 4], 4
mov ecx, edi
call fcn.00408559
push 0x685b4c
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
lea eax, [ebp - 0x13c]
push eax
call fcn.0041d9a9
pop ecx
mov byte [ebp - 4], 6
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x13c]
call fcn.00408559
push 0x685b50
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
mov eax, dword [0x6de980]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cf35
push 0x685b54
lea eax, [ebp - 0x138]
push eax
call fcn.004085db
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x13c], esp
lea ecx, [ebp - 0x138]
push ecx
push eax
call fcn.004084e9
mov byte [ebp - 4], 7
mov byte [ebp - 4], 4
mov ecx, dword [ebp + 8]
call fcn.00438131
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x144]
call fcn.00408559
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x140]
call fcn.00408559
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x148]
call fcn.00408559
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.00408559
call fcn.00587147
ret 4