Function at 0x14000116c
Capabilities:
Check for time delay via queryperformancecounter
Check if file exists
Get file attributes
Get mac address on windows
Get memory capacity

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
movdqa xmm0, xmmword [0x14001cd00]
movdqu xmmword [rsp + 0x30], xmm0
mov eax, 0x80000002
xor ecx, ecx
cpuid
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], ebx
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x3c], edx
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor edi, edi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea esi, [rdi + 0x10]
mov r8d, esi
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.140001ab4
nop
mov eax, 0x80000003
xor ecx, ecx
cpuid
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], ebx
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x3c], edx
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov r8d, esi
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.140001ab4
nop
lea r9, [rsp + 0x70]
mov rsi, qword [rsp + 0x70]
mov r15, qword [rbp - 0x78]
cmp r15, 0xf
cmova r9, rsi
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
sub rax, rcx
mov r14, qword [rbp - 0x80]
cmp r14, rax
ja 0x14000126d
lea rax, [r14 + rcx]
mov qword [rsp + 0x60], rax
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rbx, qword [rsp + 0x50]
add rbx, rcx
mov r8, r14
mov rdx, r9
mov rcx, rbx
call fcn.140013a50
mov byte [r14 + rbx], dil
jmp 0x140001288
mov qword [rsp + 0x20], r14
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.140001bc4
mov r15, qword [rbp - 0x78]
mov rsi, qword [rsp + 0x70]
mov r13d, 0x1000
cmp r15, 0xf
jbe 0x1400012c1
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, r13
jb 0x1400012b9
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001630
mov rcx, rsi
call fcn.140001e8c
mov eax, 0x80000004
xor ecx, ecx
cpuid
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], ebx
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x3c], edx
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
mov r8d, 0x10
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.140001ab4
nop
lea r9, [rsp + 0x70]
mov rsi, qword [rsp + 0x70]
mov r15, qword [rbp - 0x78]
cmp r15, 0xf
cmova r9, rsi
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
sub rax, rcx
mov r14, qword [rbp - 0x80]
cmp r14, rax
ja 0x14000135d
lea rax, [r14 + rcx]
mov qword [rsp + 0x60], rax
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rbx, qword [rsp + 0x50]
add rbx, rcx
mov r8, r14
mov rdx, r9
mov rcx, rbx
call fcn.140013a50
mov byte [r14 + rbx], dil
jmp 0x140001378
mov qword [rsp + 0x20], r14
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.140001bc4
mov r15, qword [rbp - 0x78]
mov rsi, qword [rsp + 0x70]
cmp r15, 0xf
jbe 0x1400013ab
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, r13
jb 0x1400013a3
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001630
mov rcx, rsi
call fcn.140001e8c
lea rdx, str.VMware
lea rcx, [rsp + 0x50]
call fcn.14000199c
cmp rax, 0xffffffffffffffff
jne 0x14000159b
lea rdx, str.VirtualBox
lea rcx, [rsp + 0x50]
call fcn.14000199c
cmp rax, 0xffffffffffffffff
jne 0x14000159b
lea rax, str.C:windows_system32drivers_vmmouse.sys
mov qword [rbp - 0x70], rax
lea rax, str.C:windows_system32drivers_vmhgfs.sys
mov qword [rbp - 0x68], rax
lea rax, str.C:windows_system32drivers_vm3dmp.sys
mov qword [rbp - 0x60], rax
lea rax, str.C:windows_system32driversVBoxMouse.sys
mov qword [rbp - 0x58], rax
lea rax, str.C:windows_system32driversVBoxGuest.sys
mov qword [rbp - 0x50], rax
lea rax, str.C:windows_system32driversVBoxSF.sys
mov qword [rbp - 0x48], rax
lea rax, str.C:windows_system32driversVBoxVideo.sys
mov qword [rbp - 0x40], rax
lea rbx, [rbp - 0x70]
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x14000159b
add rbx, 8
lea rax, [rbp - 0x38]
cmp rbx, rax
jne 0x140001432
mov esi, 0x2c0
mov ecx, esi
call fcn.140007d14
mov rbx, rax
mov dword [rbp + 0x50], esi
lea rdx, [rbp + 0x50]
mov rcx, rax
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x140001480
mov ecx, dword [rbp + 0x50]
call fcn.140007d14
mov rbx, rax
lea rdx, [rbp + 0x50]
mov rcx, rbx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x140001519
mov rsi, rbx
test rbx, rbx
je 0x140001519
cmp dword [rsi + 0x194], 6
jne 0x140001511
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 6
mov qword [rsp + 0x48], 0xf
mov eax, dword [rsi + 0x198]
mov dword [rsp + 0x30], eax
movzx eax, word [rsi + 0x19c]
mov word [rsp + 0x34], ax
mov byte [rsp + 0x36], dil
lea rdx, [0x14001cba4]
lea rcx, [rsp + 0x30]
call fcn.14000199c
cmp rax, 0xffffffffffffffff
jne 0x1400015e8
lea rdx, [0x14001cba8]
lea rcx, [rsp + 0x30]
call fcn.14000199c
cmp rax, 0xffffffffffffffff
jne 0x1400015e8
mov rsi, qword [rsi]
test rsi, rsi
jne 0x14000149d
mov rcx, rbx
call fcn.14000787c
mov dword [rbp - 0x30], 0x40
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov eax, 0x80000000
cmp qword [rbp - 0x28], rax
jb 0x14000159b
lea rcx, [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbp + 0x58]
sub rax, qword [rbp + 0x60]
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp + 0x68]
divsd xmm2, xmm0
movsd xmm1, qword [0x14001cce8]
comisd xmm1, xmm2
ja 0x14000159b
comisd xmm2, xmmword [0x14001ccf0]
jbe 0x14000159e
mov dil, 1
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400015d3
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, r13
jb 0x1400015ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001636
call fcn.140001e8c
mov al, dil
add rsp, 0x110
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, rbx
call fcn.14000787c
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000159b
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, r13
jb 0x140001620
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000162a
call fcn.140001e8c
jmp 0x14000159b
call fcn.140007c9c
int3
call fcn.140007c9c
nop
call fcn.140007c9c
int3