Function at 0x1801bcd00
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x50
mov rbx, rcx
mov r10d, r8d
movzx ecx, byte [rdx + 0xc]
mov rdi, rdx
sub ecx, 3
je 0x1801bce85
cmp ecx, 1
je 0x1801bcd8f
mov ecx, 0x880010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
test rax, rax
je 0x1801bcd7a
xor r8d, r8d
lea rcx, str.int___cdecl_EMHistoryExec_struct_VMCPU__const_struct_EMEXITREC__unsigned_int_
mov qword [rsp + 0x38], r8
lea r9, str.AssertLogRel__s__d___s:__s_n
mov qword [rsp + 0x30], rcx
lea rcx, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxVMMVMMAllEMAll.cpp
mov dword [rsp + 0x28], 0x1f4
lea edx, [r8 + 0x10]
mov qword [rsp + 0x20], rcx
lea r8d, [rdx + 0x78]
mov rcx, rax
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov eax, 0xfffffb83
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret
rdtsc
movzx r8d, word [rdi + 0xe]
mov rcx, rbx
movzx r9d, word [rbx + 0x33d3c]
shl rdx, 0x20
or rax, rdx
mov edx, r10d
mov rsi, rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
call sym.VBoxVMM.dll_IEMExecForExits
mov ecx, 0xffff
mov r9d, eax
mov word [rbx + 0x33d38], cx
mov ecx, dword [rsp + 0x40]
cmp eax, 0xffffeb4c
je 0x1801bcde3
cmp eax, 0xffffeaf2
jne 0x1801bcdec
xor r8d, r8d
test ecx, ecx
cmovne r9d, r8d
mov eax, dword [rsp + 0x44]
cmp eax, 1
jbe 0x1801bce0d
lea ecx, [rax - 1]
mov rax, qword [rbx + 0x33d68]
add rcx, rax
mov qword [rbx + 0x33d68], rcx
mov ecx, dword [rsp + 0x40]
mov rax, qword [rbx + 0x33d70]
add rcx, rax
mov qword [rbx + 0x33d70], rcx
rdtsc
mov rcx, qword [rbx + 0x33d50]
shl rdx, 0x20
or rdx, rax
sub rdx, rsi
add rcx, rdx
mov qword [rbx + 0x33d50], rcx
mov rcx, qword [rbx + 0x33d48]
inc rcx
mov qword [rbx + 0x33d48], rcx
mov rcx, qword [rbx + 0x33d58]
cmp rcx, rdx
jae 0x1801bce5f
mov qword [rbx + 0x33d58], rdx
mov rax, qword [rbx + 0x33d60]
cmp rax, rdx
jbe 0x1801bce72
mov qword [rbx + 0x33d60], rdx
mov eax, r9d
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret
rdtsc
movzx ecx, word [rbx + 0x33d40]
movzx r9d, word [rbx + 0x33d3c]
movzx r8d, word [rbx + 0x33d3e]
shl rdx, 0x20
or rax, rdx
mov edx, r10d
mov rsi, rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov rcx, rbx
call sym.VBoxVMM.dll_IEMExecForExits
cmp dword [rsp + 0x44], 2
mov ecx, 0xffff
mov word [rbx + 0x33d38], cx
mov r8d, eax
jb 0x1801bcefb
test eax, eax
js 0x1801bcefb
movzx ecx, word [rsp + 0x48]
mov word [rdi + 0xe], cx
mov byte [rdi + 0xc], 4
mov rax, qword [rbx + 0x33d90]
inc rax
mov qword [rbx + 0x33d90], rax
jmp 0x1801bcf2c
mov byte [rdi + 0xc], 2
mov word [rbx + 0x33d38], cx
mov rax, qword [rbx + 0x33d88]
inc rax
mov qword [rbx + 0x33d88], rax
cmp r8d, 0xffffeb4c
je 0x1801bcf29
cmp r8d, 0xffffeaf2
jne 0x1801bcf2c
xor r8d, r8d
mov rcx, qword [rbx + 0x33d80]
mov eax, dword [rsp + 0x40]
add rcx, rax
mov qword [rbx + 0x33d80], rcx
rdtsc
mov rcx, qword [rbx + 0x33da8]
shl rdx, 0x20
or rdx, rax
sub rdx, rsi
add rcx, rdx
mov qword [rbx + 0x33da8], rcx
mov rcx, qword [rbx + 0x33da0]
inc rcx
mov qword [rbx + 0x33da0], rcx
mov rcx, qword [rbx + 0x33db0]
cmp rcx, rdx
jae 0x1801bcf82
mov qword [rbx + 0x33db0], rdx
mov rax, qword [rbx + 0x33db8]
cmp rax, rdx
jbe 0x1801bcf95
mov qword [rbx + 0x33db8], rdx
mov rbx, qword [rsp + 0x60]
mov eax, r8d
mov rsi, qword [rsp + 0x68]
add rsp, 0x50
pop rdi
ret