Function at 0x140001be0
Capabilities:
Create service
Modify service

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x2a0
mov rax, qword [0x140012068]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov rdi, rcx
xor ebx, ebx
xor edx, edx
xor ecx, ecx
lea r8d, [rbx + 2]
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rbp, rax
test rax, rax
je 0x140001eff
lea r14, [rdi + 8]
mov rcx, rax
mov rdx, r14
lea r8d, [rbx + 1]
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
je 0x140001c52
mov rcx, rax
mov ebx, 1
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140001f87
mov r8d, 0x104
lea rdx, [rsp + 0x82]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, eax
dec eax
cmp eax, 0x102
ja 0x140001e6a
mov edx, 0x22
lea ecx, [rsi + 2]
add rcx, rcx
mov word [rsp + 0x80], dx
lea eax, [rsi + 1]
mov word [rsp + rax*2 + 0x80], dx
cmp rcx, 0x20c
jae 0x140001fb1
mov qword [rsp + 0x60], rbx
lea rax, str.RPCSS
mov qword [rsp + 0x58], rbx
lea r9d, [rdx - 0x20]
mov qword [rsp + 0x50], rax
lea r8, [rdi + 0x208]
mov qword [rsp + 0x48], rbx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rbx
mov rdx, r14
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 1
mov word [rsp + rcx + 0x80], bx
mov rcx, rbp
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], reloc.OLEAUT32.dll_SafeArrayGetDim
call qword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov rsi, rax
test rax, rax
je 0x140001dd4
lea rax, [rdi + 0x408]
mov edx, 1
lea r8, [rsp + 0x70]
mov qword [rsp + 0x70], rax
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_ChangeServiceConfig2W]
test eax, eax
jne 0x140001dc1
mov ecx, 0x1470010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rcx, rax
test rax, rax
je 0x140001d89
mov qword [rsp + 0x38], rbx
lea rax, str.int___cdecl_CWindowsServiceModule::installService_void__noexcept
mov qword [rsp + 0x30], rax
lea r9, str.AssertLogRel__s__d___s:__s_n
lea rax, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxMain_src_globalwinVBoxSDS.cpp
mov dword [rsp + 0x28], 0x19f
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov qword [rsp + 0x20], rax
mov r8d, 0x147
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov ecx, 0x1470010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rbx, rax
test rax, rax
je 0x140001dc1
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9, str.Error:_could_not_set_service_description:__u_n
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, 0x147
mov dword [rsp + 0x20], eax
mov rcx, rbx
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov rcx, rsi
mov ebx, 1
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140001f87
mov ecx, 0x1470010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rcx, rax
test rax, rax
je 0x140001e24
mov qword [rsp + 0x38], rbx
lea rax, str.int___cdecl_CWindowsServiceModule::installService_void__noexcept
mov qword [rsp + 0x30], rax
lea r9, str.AssertLogRel__s__d___s:__s_n
lea rax, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxMain_src_globalwinVBoxSDS.cpp
mov dword [rsp + 0x28], 0x1a6
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov qword [rsp + 0x20], rax
mov r8d, 0x147
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov ecx, 0x1470010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rdi, rax
test rax, rax
je 0x140001f87
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
lea r9, str.Error:_Could_not_create_service__ls:__u_n
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov qword [rsp + 0x20], r14
mov r8d, 0x147
mov rcx, rdi
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
jmp 0x140001f87
mov ecx, 0x1470010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rcx, rax
test rax, rax
je 0x140001eba
mov qword [rsp + 0x38], rbx
lea rax, str.int___cdecl_CWindowsServiceModule::installService_void__noexcept
mov qword [rsp + 0x30], rax
lea r9, str.AssertLogRel__s__d___s:__s_n
lea rax, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxMain_src_globalwinVBoxSDS.cpp
mov dword [rsp + 0x28], 0x1a9
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov qword [rsp + 0x20], rax
mov r8d, 0x147
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov ecx, 0x1470010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rdi, rax
test rax, rax
je 0x140001f87
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
lea r9, str.Error:_GetModuleFileNameW_returned__u:__u_n
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov dword [rsp + 0x20], esi
mov r8d, 0x147
mov rcx, rdi
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
jmp 0x140001f87
mov ecx, 0x1470010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rcx, rax
test rax, rax
je 0x140001f4f
mov qword [rsp + 0x38], rbx
lea rax, str.int___cdecl_CWindowsServiceModule::installService_void__noexcept
mov qword [rsp + 0x30], rax
lea r9, str.AssertLogRel__s__d___s:__s_n
lea rax, str.C:DevelAntidetect4PersonalVirtualBox_srcVBoxMain_src_globalwinVBoxSDS.cpp
mov dword [rsp + 0x28], 0x1ad
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov qword [rsp + 0x20], rax
mov r8d, 0x147
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov ecx, 0x1470010
call qword [sym.imp.VBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rdi, rax
test rax, rax
je 0x140001f87
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9, str.Error:_Could_not_open_the_service_control_manager:__u_n
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
mov r8d, 0x147
mov dword [rsp + 0x20], eax
mov rcx, rdi
call qword [sym.imp.VBoxRT.dll_RTLogLoggerEx]
mov eax, ebx
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.140006d20
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
call fcn.140006a04
int3