Function at 0x1400771cf
Capabilities:
Get memory capacity

Disassembly:
jmp 0x14007c650
push rbp
push rdi
sub rsp, 0x238
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x56
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0x208], rax
lea rcx, [0x1401b2027]
call fcn.1400782aa
nop
mov qword [rbp + 8], 0
mov qword [rbp + 0x28], 0
lea rax, [rbp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 0x40
rep stosb byte [rdi], al
mov ecx, 0xa
call fcn.1400787c8
nop
lea rcx, str._____________________________________________________________._________________________________________n
call fcn.14007681a
nop
lea rcx, str._____________________________________________.__.________________________________________________n
call fcn.14007681a
nop
lea rcx, str._____________________________________________________________________________________n
call fcn.14007681a
nop
lea rcx, str._________Y____________Y_Y___________________________________________________________n
call fcn.14007681a
nop
lea rcx, str.________________________________________________________________________________________n
call fcn.14007681a
nop
lea rcx, str.____________________________________________________________________________________________n
call fcn.14007681a
nop
mov ecx, 7
call fcn.1400787c8
nop
lea rcx, [0x14016c4ac]
call fcn.14007681a
nop
lea rcx, str.____wmccli___Windows_Memory_Cleaner__n
call fcn.14007681a
nop
lea rcx, str._____Command_line_interface_version__n
call fcn.14007681a
nop
lea rcx, str.____Version_1.0.0.1_n
call fcn.14007681a
nop
lea rcx, [0x14016c4ac]
call fcn.14007681a
nop
lea rcx, str.____Copyright__c__by_https:__windowsmemorycleaner.com__n
call fcn.14007681a
nop
lea rcx, str.____All_rights_reserved._n
call fcn.14007681a
nop
lea rcx, [0x14016c4ac]
call fcn.14007681a
nop
mov dword [rbp + 0x50], 0x40
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
nop
mov r8d, dword [rbp + 0x54]
mov edx, 7
lea rcx, str.____Before____Memory_in_use:__ld____n
call fcn.140075217
nop
mov dword [rbp + 0xa4], 0
jmp 0x14007c7be
mov eax, dword [rbp + 0xa4]
add rax, 4
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0x4e1c
jae 0x14007c8ca
mov r8d, dword [rbp + 0xa4]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0xc8], rax
cmp qword [rbp + 0xc8], 0
jne 0x14007c80e
mov r8d, dword [rbp + 0xa4]
xor edx, edx
mov ecx, 0x1510
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0xc8], rax
cmp qword [rbp + 0xc8], 0
je 0x14007c8c5
lea rax, [rbp + 0xf0]
mov rdi, rax
xor eax, eax
mov ecx, 0x48
rep stosb byte [rdi], al
mov dword [rbp + 0xf0], 0x48
mov r8d, 0x48
lea rdx, [rbp + 0xf0]
mov rcx, qword [rbp + 0xc8]
call fcn.140075b7c
nop
mov rax, qword [rbp + 0x100]
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 0xc8]
call fcn.140075ebf
cmp eax, 1
jne 0x14007c8c5
mov r8d, 0x48
xor edx, edx
lea rcx, [rbp + 0xf0]
call fcn.1400775d0
nop
mov r8d, 0x48
lea rdx, [rbp + 0xf0]
mov rcx, qword [rbp + 0xc8]
call fcn.140075b7c
nop
mov rax, qword [rbp + 0x100]
mov rcx, qword [rbp + 8]
sub rcx, rax
mov rax, rcx
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov rcx, qword [rbp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x28], rax
jmp 0x14007c7ae
xor edx, edx
mov rax, qword [rbp + 0x28]
mov ecx, 0xf4240
div rcx
mov r8, rax
mov edx, 7
lea rcx, str.____Memory_freed:__ld_MB_n
call fcn.140075217
nop
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov r8d, 0x40
xor edx, edx
lea rcx, [rbp + 0x50]
call fcn.1400775d0
nop
mov dword [rbp + 0x50], 0x40
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
nop
mov r8d, dword [rbp + 0x54]
mov edx, 7
lea rcx, str.____After____Memory_in_use:__ld____n
call fcn.140075217
nop
lea rcx, [0x14016c4b4]
call fcn.14007681a
nop
lea rcx, [0x14016c698]
call fcn.14007681a
nop
lea rcx, str.pause
call fcn.1400767c0
nop
xor eax, eax
mov edi, eax
lea rcx, [rbp - 0x20]
lea rdx, [0x14016c170]
call fcn.1400779c2
mov eax, edi
mov rcx, qword [rbp + 0x208]
xor rcx, rbp
call fcn.1400768a6
lea rsp, [rbp + 0x218]
pop rdi
pop rbp
ret