Function at 0x44b9c3
Capabilities:
Get memory capacity

Disassembly:
push 0x180
mov eax, 0x5cff6a
call fcn.0058ec94
push str.SystemInfo_
lea eax, [ebp - 0x138]
push eax
call fcn.004085b5
and dword [ebp - 4], 0
lea esi, [ebp - 0x13c]
call fcn.004227cc
mov byte [ebp - 4], 1
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
mov byte [ebp - 4], 0
mov ecx, esi
call fcn.004085f6
mov esi, 0x68abf4
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
call fcn.00423b0e
mov edi, eax
lea eax, [ebp - 0x148]
push eax
call fcn.0040855f
mov byte [ebp - 4], 2
push edi
push str._i_MHz
lea eax, [ebp - 0x148]
call fcn.004310f7
mov eax, dword [ebp - 0x148]
pop ecx
pop ecx
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
lea eax, [ebp - 0x18c]
push eax
mov dword [ebp - 0x18c], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
lea eax, [ebp - 0x140]
push eax
call fcn.0040855f
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x180]
shrd eax, ecx, 0x14
shr ecx, 0x14
push ecx
push eax
mov edi, str._i_MB
push edi
lea eax, [ebp - 0x140]
call fcn.004310f7
mov eax, dword [ebp - 0x140]
add esp, 0xc
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x178]
shrd eax, ecx, 0x14
shr ecx, 0x14
push ecx
push eax
push edi
lea eax, [ebp - 0x140]
call fcn.004310f7
mov eax, dword [ebp - 0x140]
add esp, 0xc
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
lea eax, [ebp - 0x134]
push eax
mov dword [ebp - 0x134], 0x11c
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push str.Workstation
lea eax, [ebp - 0x144]
push eax
call fcn.004085b5
mov byte [ebp - 4], 4
cmp byte [ebp - 0x1a], 2
jne 0x44bb6b
push str.Domain_Controller
lea eax, [ebp - 0x144]
push eax
call fcn.0040865a
cmp byte [ebp - 0x1a], 3
jne 0x44bb82
push str.Server
lea eax, [ebp - 0x144]
push eax
call fcn.0040865a
mov eax, dword [ebp - 0x144]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
mov eax, dword [0x6de144]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
mov eax, dword [0x6de148]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
mov eax, dword [0x6de14c]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
mov eax, dword [0x6de150]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
mov eax, dword [0x6de154]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
lea edi, [ebp - 0x13c]
call fcn.00422b8d
mov byte [ebp - 4], 5
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
mov byte [ebp - 4], 4
mov ecx, edi
call fcn.004085f6
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
lea eax, [ebp - 0x13c]
push eax
call fcn.0042285e
pop ecx
mov byte [ebp - 4], 6
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x13c]
call fcn.004085f6
push esi
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
mov eax, dword [0x6de158]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x138]
call fcn.0040cdd5
push 0x6889e0
lea eax, [ebp - 0x138]
push eax
call fcn.00408678
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x13c], esp
lea ecx, [ebp - 0x138]
push ecx
push eax
call fcn.00408586
mov byte [ebp - 4], 7
mov byte [ebp - 4], 4
mov ecx, dword [ebp + 8]
call fcn.00448e36
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x144]
call fcn.004085f6
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x140]
call fcn.004085f6
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x148]
call fcn.004085f6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.004085f6
call fcn.0058ed17
ret 4