

If nothing else, you should easily be able to determine the amount of RAM by watching during POST (might need to press esc/tab/etc. if there’s just a fullscreen logo or something) or by entering the BIOS/UEFI (check mfg site for specific button, but usually delete or an F-key).
Depending on the friend’s willingness and aptitude there’s also the option of booting a live linux environment with a flash drive (or disc) and using its tools to profile all the detected hardware.

I’m guessing it wouldn’t be a valid legal argument, but I liked the thought experiment of claiming that it can’t be piracy if the rights holder is intentionally publicly sharing the content. Like trying to charge trick-or-treaters for theft when they took candy out of the bowl you left out with a “Free!” sign attached.