Function at 0x7ddefac9
Capabilities:
Get memory capacity

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x60
lea eax, [ebp - 0x10]
push esi
push edi
xor edi, edi
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], edi
mov dword [ebp - 8], edi
cmp dword [ebp + 8], edi
jne 0x7ddefb05
push 0x57
call dword [sym.imp.ntdll.dll_RtlSetLastWin32Error]
jmp 0x7ddefcf9
push ebx
push edi
push edi
push edi
mov esi, 0x52534d42
push esi
call sym.KERNEL32.dll_GetSystemFirmwareTable
mov ebx, eax
cmp ebx, edi
je 0x7ddefcf8
push ebx
push 8
call fcn.7dd714c0
mov edi, dword [sym.imp.ntdll.dll_RtlAllocateHeap]
push eax
call edi
mov dword [ebp - 8], eax
test eax, eax
je 0x7ddefcf8
push ebx
push eax
push 0
push esi
call sym.KERNEL32.dll_GetSystemFirmwareTable
test eax, eax
je 0x7ddefcf8
mov ecx, dword [ebp - 8]
lea esi, [ecx + 8]
lea ebx, [eax + ecx]
jmp 0x7ddefc20
lea eax, [esi + 4]
cmp eax, ebx
ja 0x7ddefcf0
cmp byte [esi], 0x10
jne 0x7ddefbb4
mov al, byte [esi + 1]
cmp al, 6
jb 0x7ddefcf0
movzx eax, al
add eax, esi
cmp eax, ebx
ja 0x7ddefcf0
cmp byte [esi + 5], 3
jne 0x7ddefbb4
push 0xc
push 8
call fcn.7dd714c0
push eax
call edi
test eax, eax
je 0x7ddefcf8
mov cx, word [esi + 2]
mov word [eax + 8], cx
mov ecx, dword [ebp - 0xc]
lea edx, [ebp - 0x10]
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [ecx], eax
mov dword [ebp - 0xc], eax
cmp byte [esi], 0x11
jne 0x7ddefc05
mov al, byte [esi + 1]
cmp al, 0x15
jb 0x7ddefcf0
movzx eax, al
add eax, esi
cmp eax, ebx
ja 0x7ddefcf0
push 0xc
push 8
call fcn.7dd714c0
push eax
call edi
test eax, eax
je 0x7ddefcf8
mov cx, word [esi + 0xc]
mov word [eax + 0xa], cx
mov cx, word [esi + 4]
mov word [eax + 8], cx
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x18]
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [ecx], eax
mov dword [ebp - 0x14], eax
movzx eax, byte [esi + 1]
add esi, eax
cmp esi, ebx
jae 0x7ddefcf0
cmp word [esi], 0
je 0x7ddefc1e
inc esi
cmp esi, ebx
jb 0x7ddefc13
inc esi
inc esi
cmp esi, ebx
jb 0x7ddefb5a
jne 0x7ddefcf0
xor edi, edi
cmp word [esi - 2], di
jne 0x7ddefcf0
mov edx, dword [ebp - 0x18]
lea eax, [ebp - 0x18]
cmp edx, eax
je 0x7ddefcf0
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10]
cmp eax, ecx
je 0x7ddefca0
movzx ecx, word [edx + 8]
cmp cx, word [eax + 8]
je 0x7ddefc65
mov eax, dword [eax]
lea esi, [ebp - 0x10]
cmp eax, esi
jne 0x7ddefc56
lea ecx, [ebp - 0x10]
cmp eax, ecx
je 0x7ddefca0
movzx eax, word [edx + 0xa]
mov ecx, 0xffff
cmp ax, cx
je 0x7ddefccf
cmp ax, di
je 0x7ddefca0
test eax, 0x8000
je 0x7ddefc8d
and eax, 0x7fff
jmp 0x7ddefc93
movzx eax, ax
shl eax, 0xa
add dword [ebp - 0x20], eax
mov dword [ebp - 4], 1
adc dword [ebp - 0x1c], edi
mov edx, dword [edx]
lea eax, [ebp - 0x18]
cmp edx, eax
jne 0x7ddefc48
cmp dword [ebp - 4], edi
je 0x7ddefcf8
mov eax, dword [ebp - 0x20]
or eax, dword [ebp - 0x1c]
je 0x7ddefcf0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x60], 0x40
call fcn.7dd9bf49
test eax, eax
jne 0x7ddefcd4
and dword [ebp - 4], edi
jmp 0x7ddefcf8
mov dword [ebp - 4], edi
jmp 0x7ddefcf0
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
shrd ecx, eax, 0xa
shr eax, 0xa
cmp eax, dword [ebp - 0x1c]
jb 0x7ddefcf8
ja 0x7ddefced
cmp ecx, dword [ebp - 0x20]
jbe 0x7ddefcf8
and dword [ebp - 4], edi
push 0xd
call dword [sym.imp.ntdll.dll_RtlSetLastWin32Error]
pop ebx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 4]
mov esi, dword [sym.imp.ntdll.dll_RtlFreeHeap]
lea edx, [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov dword [eax], edx
mov eax, ecx
cmp ecx, edx
je 0x7ddefd37
xor edi, edi
push eax
push edi
call fcn.7dd714c0
push eax
call esi
mov eax, dword [ebp - 0x14]
mov ecx, eax
mov eax, dword [eax + 4]
lea edx, [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov dword [eax], edx
mov eax, ecx
cmp ecx, edx
je 0x7ddefd45
jmp 0x7ddefd15
xor edi, edi
jmp 0x7ddefd45
push eax
push edi
call fcn.7dd714c0
push eax
call esi
mov eax, dword [ebp - 0xc]
mov ecx, eax
mov eax, dword [eax + 4]
lea edx, [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov dword [eax], edx
mov eax, ecx
cmp ecx, edx
jne 0x7ddefd3b
cmp dword [ebp - 8], edi
je 0x7ddefd7f
push dword [ebp - 8]
push edi
call fcn.7dd714c0
push eax
call esi
cmp dword [ebp - 4], edi
je 0x7ddefd7f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp + 8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 4]
pop edi
pop esi
leave
ret 4