Function at 0x4b5b30
Capabilities:
Unmount volume via ioctl

Disassembly:
push 0xffffffffffffffff
push 0x52f15b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x124
mov eax, dword [0x6634b0]
mov ecx, dword [0x6634b4]
mov edx, dword [0x6634b8]
push ebx
push ebp
mov dword [esp + 0x1c], eax
mov ax, word [0x6634bc]
mov dword [esp + 0x20], ecx
mov ecx, dword [0x66f704]
xor ebp, ebp
push esi
push edi
mov dword [esp + 0x2c], edx
mov word [esp + 0x30], ax
xor esi, esi
mov dword [esp + 0x18], 0x80000000
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ecx
mov edi, dword [esp + 0x150]
mov dword [esp + 0x13c], ebp
cmp edi, ebp
je 0x4b5ba8
mov dword [edi], ebp
mov dword [edi + 4], ebp
cmp dword [0x760b28], 2
jl 0x4b5d52
mov dword [esp + 0x18], 0xc0000000
cmp dword [esp + 0x154], ebp
je 0x4b5bd1
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [esp + 0x14c]
lea eax, [esp + 0x34]
push edx
push 0x665b38
push eax
call fcn.004f5dd2
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea edx, [esp + 0x34]
push ebp
push ebp
push 3
push ebp
push 3
push ecx
push edx
call dword [0x671a1c]
mov esi, eax
cmp esi, 0xffffffff
jne 0x4b5c10
xor esi, esi
jmp 0x4b5d5a
push esi
call fcn.004b5f00
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x148]
add esp, 4
cmp eax, ebp
mov dword [esp + 0x20], edx
je 0x4b5d41
push 0x68cb64
push 0x68cb68
push esi
call fcn.004a4440
mov eax, dword [0x68cb64]
add esp, 0xc
cmp eax, ebp
jg 0x4b5c57
lea eax, [esp + 0x10]
push ebp
push eax
jmp 0x4b5d31
push esi
call fcn.004b6a60
mov eax, dword [0x68cb64]
add esp, 4
cmp eax, ebp
jle 0x4b5d07
mov ebx, 0x68cae4
mov edi, 0x68cb68
mov cx, word [edi]
push 0
push 0
push 3
push 0
push 3
lea edx, [esp + 0x38]
push 0xc0000000
push edx
mov word [esp + 0x48], cx
mov dword [ebx], 0
call dword [0x671a1c]
mov esi, eax
cmp esi, 0xffffffff
je 0x4b5cec
lea eax, [esp + 0x10]
push 0
push eax
push 0
push 0
push 0
push 0
push 0x90018
push esi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
lea ecx, [esp + 0x10]
push 0
push ecx
push 0
push 0
push 0
push 0
push 0x90020
push esi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dx, word [edi]
push 0
push edx
call fcn.004f4e20
add esp, 8
mov dword [ebx], esi
mov eax, dword [0x68cb64]
inc ebp
add edi, 2
add ebx, 4
cmp ebp, eax
jl 0x4b5c77
mov edi, dword [esp + 0x150]
xor ebp, ebp
lea eax, [esp + 0x34]
push ebp
push ebp
push 3
push ebp
push 3
push 0xc0000000
push eax
call dword [0x671a1c]
mov esi, eax
cmp esi, 0xffffffff
jne 0x4b5d2b
xor esi, esi
jmp 0x4b5d5a
lea ecx, [esp + 0x10]
push ebp
push ecx
push ebp
push ebp
push ebp
push ebp
push 0x90018
push esi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp edi, ebp
je 0x4b5d52
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov dword [edi], edx
mov dword [edi + 4], eax
cmp esi, ebp
jne 0x4b5e00
mov eax, dword [esp + 0x154]
cmp eax, ebp
jle 0x4b5d7d
mov edx, eax
push ebp
dec edx
mov dword [esp + 0x158], edx
call fcn.004b5e30
add esp, 4
jmp 0x4b5bbd
call fcn.004b42f0
mov edi, eax
mov eax, dword [esp + 0x148]
cmp eax, ebp
push edi
jne 0x4b5d9b
lea ecx, [esp + 0x18]
call fcn.0050e13f
jmp 0x4b5dae
push eax
lea ecx, [esp + 0x1c]
push 0x60e094
push ecx
call fcn.0050b108
add esp, 0x10
cmp dword [0x6d7700], ebp
jne 0x4b5dd8
cmp dword [0x68ca44], ebp
jne 0x4b5dd8
cmp dword [0x613554], 0xffffffff
jne 0x4b5dd8
mov edx, dword [esp + 0x14]
push 0x10
push edx
call fcn.004b4a10
add esp, 8
jmp 0x4b5df7
push edi
push str.Error_opening_USB_drive:__s.
push 0x1083
call fcn.004dd120
add esp, 8
push eax
push 1
push ebp
call fcn.004d8f20
add esp, 0x10
push ebp
call fcn.004b42c0
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x13c], 0xffffffff
call fcn.0050dfa8
mov ecx, dword [esp + 0x134]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x130
ret