Function at 0x140001060
Capabilities:
Read file via mapping

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x230
xor esi, esi
mov dword [rcx + 0x17914], 1
lea rax, vtable.DetachGpuTray.0
mov dword [rcx + 0x170ac], esi
mov qword [rcx], rax
mov rbx, rcx
mov dword [rcx + 0x170c0], esi
xor edx, edx
mov dword [rcx + 0x174a4], esi
mov r8d, 0x3d0
mov qword [rcx + 0x174a8], rsi
mov word [rcx + 0x17510], si
mov byte [rcx + 0x17912], sil
add rcx, 0x170c8
call fcn.140010040
xor eax, eax
lea rcx, [rbx + 0x174f8]
mov qword [rbx + 8], rax
lea rdx, str.GlobalTray_Icon_Memory_Map_Mutex
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x17068], rsi
mov qword [rbx + 0x17070], rsi
mov qword [rbx + 0x17078], rsi
mov qword [rbx + 0x17080], rsi
mov qword [rbx + 0x17088], rsi
mov qword [rbx + 0x17090], rsi
mov qword [rbx + 0x17098], rsi
mov qword [rbx + 0x170a0], rsi
mov dword [rbx + 0x170a8], esi
call fcn.140004930
test eax, eax
je 0x14000136b
lea r8, str.GlobalDGTrayIconMemoryMap
xor edx, edx
lea ecx, [rsi + 6]
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [rbx + 0x174b0], rax
test rax, rax
jne 0x140001173
mov rcx, qword [0x140071d50]
test rcx, rcx
je 0x14000136b
lea r9, str.OpenFileMappingA_failed.
mov edx, 0x60004008
mov r8d, 1
call fcn.1400069c0
jmp 0x14000136b
xor r9d, r9d
mov qword [rsp + 0x20], 0x17ec0
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rcx, rax
test rax, rax
jne 0x1400011b0
mov rcx, qword [0x140071d50]
test rcx, rcx
je 0x14000136b
lea r9, str.MapViewOfFile_failed.
jmp 0x14000115e
mov qword [rbx + 0x174b8], rcx
add rax, 0x2fd8
mov qword [rbx + 0x174c0], rax
xor edx, edx
lea rax, [rcx + 0x5fb0]
mov qword [rbx + 0x174c8], rax
lea rax, [rcx + 0x8f88]
mov qword [rbx + 0x174d0], rax
lea rax, [rcx + 0xbf60]
mov qword [rbx + 0x174d8], rax
lea rax, [rcx + 0xef38]
mov qword [rbx + 0x174e0], rax
lea rax, [rcx + 0x11f10]
mov qword [rbx + 0x174e8], rax
lea rax, [rcx + 0x14ee8]
lea rcx, [rbx + 0x17500]
mov qword [rbx + 0x174f0], rax
call fcn.1400048e0
test eax, eax
je 0x14000136b
lea rdx, str.GlobalAMDSafeRemoveEvent
lea rcx, [rbx + 0x174a8]
call fcn.1400049e0
test eax, eax
je 0x14000136b
xor edx, edx
mov dword [rsp + 0x240], esi
mov r8d, 0x200
mov dword [rsp + 0x248], 4
lea rcx, [rsp + 0x30]
call fcn.140010040
movups xmm0, xmmword [str.SYSTEMCurrentControlSetServices]
movzx eax, word [0x14005b9f8]
lea rcx, [rsp + 0x30]
movups xmm1, xmmword [0x14005b9e8]
dec rcx
mov word [rsp + 0x50], ax
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x40], xmm1
nop dword [rax]
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x1400012a0
movzx eax, word [0x14005b9fc]
mov word [rcx], ax
lea rcx, [rsp + 0x30]
dec rcx
nop dword [rax]
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x1400012c0
movzx eax, byte [0x14005ba08]
lea r8, str.SurpriseRemovalType
movsd xmm0, qword [str.AMDKMDAP]
lea rdx, [rsp + 0x30]
movsd qword [rcx], xmm0
xor r9d, r9d
mov byte [rcx + 8], al
lea rax, [rsp + 0x248]
mov qword [rsp + 0x28], rax
mov rcx, 0xffffffff80000002
lea rax, [rsp + 0x240]
mov qword [rsp + 0x20], rax
call fcn.1400079f0
cmp eax, 1
jne 0x140001329
mov eax, dword [rsp + 0x240]
mov dword [rbx + 0x17914], eax
jmp 0x140001346
mov rcx, qword [0x140071d50]
test rcx, rcx
je 0x140001346
lea r8, str.Surprise_removal_type_regkey_is_not_available_
mov edx, 0x8000
call fcn.140006c80
lea rcx, [0x14005ba58]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea rcx, str.atimuixx.dll
mov qword [rbx + 0x20], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rbx + 0x17508], rax
lea r11, [rsp + 0x230]
mov rax, rbx
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret