Function at 0x42b860
Capabilities:
Log keystrokes via polling

Disassembly:
push 0xffffffffffffffff
push 0x481700
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a4a28]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x38]
push esi
push str.ProcessActionMode
push str.CActionDoc
call fcn.00420fc0
add esp, 0xc
call fcn.00442c05
xor ecx, ecx
xor ebx, ebx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x42b8bc
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], ebx
call fcn.00442c05
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x42b8ea
push 0x80004005
call fcn.00402720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0x20], 1
push esi
lea edi, [esp + 0x2c]
mov eax, 1
mov dword [ebp + 0x10], ebx
call fcn.00425b70
add esp, 4
mov ecx, edi
mov edi, dword [esp + 0x30]
push ecx
push edi
call fcn.004296d0
mov edx, dword [esp + 0x28]
push edx
mov ecx, edi
call fcn.0042c770
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x30]
add esp, 4
cmp eax, ebx
je 0x42b93f
mov ebx, dword [eax + 0x20]
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jge 0x42b959
mov eax, dword [esp + 0x28]
push eax
push esi
mov ecx, edi
call fcn.0042caf0
mov eax, dword [esp + 0x30]
add eax, 0xffffffff
cmp eax, 0x12
ja case.0x42b969.9
jmp dword [eax*4 + 0x42be54]
push str.ActionModeName
mov esi, str.QUIT
call fcn.00421450
add esp, 4
mov esi, ebp
call fcn.0042b830
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.DIALOGBOX
call fcn.00421450
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0x20]
add esp, 4
push 0
push 0
push 0x7f23
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0x18c]
test cl, 0x10
jne 0x42b9c7
test cl, 8
je 0x42b9cb
test eax, eax
jne 0x42b9e1
mov edx, dword [esp + 0x28]
push edx
push esi
push ebp
mov ebx, edi
call fcn.0042bea0
test eax, eax
je case.0x42b969.9
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0x18]
call fcn.00404e00
push eax
call fcn.0042c880
add esp, 4
test eax, eax
je case.0x42b969.9
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x20]
push ecx
push 0
push 0x7f19
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.DIAGNOSTIC
call fcn.00421450
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
add esp, 4
lea eax, [esp + 0x14]
push eax
push ecx
push edi
push esi
push ebp
call fcn.0042c310
test eax, eax
je 0x42ba81
mov edx, dword [esp + 0x38]
push edx
lea ecx, [esp + 0x18]
call fcn.00404e00
push eax
call fcn.0042c880
add esp, 4
test eax, eax
je case.0x42b969.9
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x20]
push eax
push 0
push 0x7f19
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x42b969.9
mov edx, dword [esp + 0x14]
cmp dword [edx - 0xc], 0
je case.0x42b969.9
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x42baa7
cmp word [eax], 0
je 0x42baa7
push eax
lea ecx, [esp + 0x18]
call fcn.00409260
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x20]
push eax
push 0
push 0x7f18
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.RETRY
call fcn.00421450
add esp, 4
mov eax, ebp
call fcn.0042b810
test eax, eax
je case.0x42b969.9
mov ebp, dword [ebp + 4]
mov dword [ebp + 0x1c], 1
mov ebp, dword [ebp + 0x18]
test ebp, ebp
je case.0x42b969.9
push ebp
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.PROCEED
call fcn.00421450
add esp, 4
mov eax, ebp
call fcn.0042b810
test eax, eax
je 0x42bb39
mov ebp, dword [ebp + 4]
mov dword [ebp + 0x1c], 2
mov ebp, dword [ebp + 0x18]
test ebp, ebp
je 0x42bb39
push ebp
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, dword [esp + 0x38]
push edx
lea ecx, [esp + 0x18]
call fcn.00404e00
push eax
call fcn.0042c880
add esp, 4
test eax, eax
je case.0x42b969.9
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x20]
push eax
push 0
push 0x7f18
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.REBOOT
call fcn.00421450
add esp, 4
mov esi, ebp
call fcn.0042b7f0
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x20]
push 0
push 1
push 0x7f1d
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push ebp
call fcn.0042c9f0
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.MESSAGE
call fcn.00421450
mov eax, dword [edi + 0x1c]
add esp, 4
mov ecx, edi
call fcn.00401090
mov esi, eax
mov edx, dword [esi]
mov eax, dword [esp + 0x28]
mov edx, dword [edx + 0x1c]
push str.MessageValue
push eax
mov ecx, esi
call edx
test eax, eax
je case.0x42b969.9
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
lea ecx, [esp + 0x14]
push ecx
push 1
mov ecx, esi
call edx
test eax, eax
je case.0x42b969.9
lea eax, [esp + 0x14]
push eax
push edi
call fcn.004296d0
mov ecx, dword [esp + 0x14]
push ecx
call fcn.004256a0
mov edx, dword [esp + 0x3c]
add esp, 4
push edx
push edi
mov esi, ebp
call fcn.0042d150
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.EXECUTE
call fcn.00421450
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
add esp, 4
push eax
push edi
push esi
push ebp
call fcn.0042c130
mov ecx, dword [esp + 0x38]
push ecx
lea ecx, [esp + 0x18]
call fcn.00404e00
push eax
call fcn.0042c880
add esp, 4
test eax, eax
je case.0x42b969.9
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 0x20]
push edx
push 0
push 0x7f19
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.ALLINSTALL
call fcn.00421450
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add esp, 4
push ecx
push edx
push edi
push eax
mov esi, ebp
mov dword [ebp + 0xc], 5
call fcn.0042c5c0
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.SINGLEINSTALL
call fcn.00421450
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add esp, 4
push ecx
push edx
push edi
push eax
mov esi, ebp
mov dword [ebp + 0xc], 6
call fcn.0042c690
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.BROWSEFOLDER
call fcn.00421450
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 4
push ecx
push edi
push edx
push ebp
call fcn.0042cd50
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.COPYFILE
call fcn.00421450
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 4
push eax
push edi
push ecx
mov esi, ebp
call fcn.0042d080
jmp case.0x42b969.9
push str.ActionModeName
mov esi, str.WEBDOWNLOAD
call fcn.00421450
mov dword [ebp + 0xc], 0xf
jmp 0x42bdbb
push str.ActionModeName
mov esi, str.CHKFIRMWARE
call fcn.00421450
mov dword [ebp + 0xc], 0x10
jmp 0x42bdbb
push str.ActionModeName
mov esi, str.UPDFIRMWARE
call fcn.00421450
mov dword [ebp + 0xc], 0x11
jmp 0x42bdbb
push str.ActionModeName
mov esi, str.CFGMAILPRINT
call fcn.00421450
mov dword [ebp + 0xc], 0x12
jmp 0x42bdbb
push str.ActionModeName
mov esi, str.WEBINSTALL
call fcn.00421450
mov dword [ebp + 0xc], 0x13
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 4
push edx
push eax
push edi
push ecx
mov edi, ebp
call fcn.0042d290
mov esi, dword [esp + 0x30]
push esi
push str.ProcessActionMode
push str.CActionDoc
call fcn.00421170
mov byte [esp + 0x2c], 0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 0xc
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42be11
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x20], 0xffffffff
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42be39
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x18