Function at 0x4376d0
Capabilities:
Log keystrokes via polling

Disassembly:
push 0xffffffffffffffff
push 0x495590
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4bea30]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x38]
push esi
push str.ProcessActionMode
push str.CActionDoc
call fcn.0042afe0
add esp, 0xc
call fcn.0045525d
xor ecx, ecx
xor ebx, ebx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x43772c
push 0x80004005
call fcn.004022b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], ebx
call fcn.0045525d
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x43775a
push 0x80004005
call fcn.004022b0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov byte [esp + 0x20], 1
push esi
lea edi, [esp + 0x2c]
mov eax, 1
mov dword [ebp + 0x14], ebx
call fcn.00430810
add esp, 4
mov ecx, edi
mov edi, dword [esp + 0x30]
push ecx
push edi
call fcn.00435540
mov edx, dword [esp + 0x28]
push edx
mov ecx, edi
call fcn.00438680
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x30]
add esp, 4
cmp eax, ebx
je 0x4377af
mov ebx, dword [eax + 0x20]
push 0x10
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jge 0x4377c9
mov eax, dword [esp + 0x28]
push eax
push esi
mov ecx, edi
call fcn.00438a00
mov eax, dword [esp + 0x30]
add eax, 0xffffffff
cmp eax, 0x14
ja case.0x4377d9.9
jmp dword [eax*4 + 0x437d4c]
push str.ActionModeName
mov esi, str.QUIT
call fcn.0042b470
add esp, 4
mov esi, ebp
call fcn.004376a0
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.DIALOGBOX
call fcn.0042b470
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0x20]
add esp, 4
push 0
push 0
push 0x7f25
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [edi + 0x190]
test cl, 0x10
jne 0x437837
test cl, 8
je 0x43783b
test eax, eax
jne 0x437851
mov edx, dword [esp + 0x28]
push edx
push esi
push ebp
mov ebx, edi
call fcn.00437da0
test eax, eax
je case.0x4377d9.9
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0x18]
call fcn.00404a80
push eax
call fcn.00438790
add esp, 4
test eax, eax
je case.0x4377d9.9
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x20]
push ecx
push 0
push 0x7f1b
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.DIAGNOSTIC
call fcn.0042b470
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
add esp, 4
lea eax, [esp + 0x14]
push eax
push ecx
push esi
push ebp
mov ebx, edi
call fcn.00438210
test eax, eax
je 0x4378f2
mov edx, dword [esp + 0x38]
push edx
lea ecx, [esp + 0x18]
call fcn.00404a80
push eax
call fcn.00438790
add esp, 4
test eax, eax
je case.0x4377d9.9
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x20]
push eax
push 0
push 0x7f1b
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4377d9.9
mov edx, dword [esp + 0x14]
cmp dword [edx - 0xc], 0
je case.0x4377d9.9
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x437918
cmp word [eax], 0
je 0x437918
push eax
lea ecx, [esp + 0x18]
call fcn.00409c40
mov eax, dword [esp + 0x14]
mov ecx, dword [esi + 0x20]
push eax
push 0
push 0x7f1a
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.RETRY
call fcn.0042b470
add esp, 4
mov eax, ebp
call fcn.00437680
test eax, eax
je case.0x4377d9.9
mov ebp, dword [ebp + 4]
mov dword [ebp + 0x1c], 1
mov ebp, dword [ebp + 0x18]
test ebp, ebp
je case.0x4377d9.9
push ebp
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.PROCEED
call fcn.0042b470
add esp, 4
mov eax, ebp
call fcn.00437680
test eax, eax
je 0x4379aa
mov ebp, dword [ebp + 4]
mov dword [ebp + 0x1c], 2
mov ebp, dword [ebp + 0x18]
test ebp, ebp
je 0x4379aa
push ebp
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, dword [esp + 0x38]
push edx
lea ecx, [esp + 0x18]
call fcn.00404a80
push eax
call fcn.00438790
add esp, 4
test eax, eax
je case.0x4377d9.9
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x20]
push eax
push 0
push 0x7f1a
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.REBOOT
call fcn.0042b470
add esp, 4
mov esi, ebp
call fcn.00437660
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x20]
push 0
push 1
push 0x7f1f
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push ebp
call fcn.00438900
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.MESSAGE
call fcn.0042b470
mov eax, dword [edi + 0x1c]
add esp, 4
mov ecx, edi
call fcn.00401000
mov esi, eax
mov edx, dword [esi]
mov eax, dword [esp + 0x28]
mov edx, dword [edx + 0x1c]
push str.MessageValue
push eax
mov ecx, esi
call edx
test eax, eax
je case.0x4377d9.9
mov eax, dword [esi]
mov edx, dword [eax + 0x78]
lea ecx, [esp + 0x14]
push ecx
push 1
mov ecx, esi
call edx
test eax, eax
je case.0x4377d9.9
lea eax, [esp + 0x14]
push eax
push edi
call fcn.00435540
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00430640
mov edx, dword [esp + 0x3c]
add esp, 4
push edx
push edi
mov esi, ebp
call fcn.00439070
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.EXECUTE
call fcn.0042b470
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
add esp, 4
push eax
push edi
push esi
push ebp
call fcn.00438030
mov ecx, dword [esp + 0x38]
push ecx
lea ecx, [esp + 0x18]
call fcn.00404a80
push eax
call fcn.00438790
add esp, 4
test eax, eax
je case.0x4377d9.9
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 0x20]
push edx
push 0
push 0x7f1b
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.ALLINSTALL
call fcn.0042b470
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add esp, 4
push ecx
push edx
push edi
push eax
mov ebx, ebp
mov dword [ebp + 0x10], 5
call fcn.004384c0
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.SINGLEINSTALL
call fcn.0042b470
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add esp, 4
push ecx
push edx
push edi
push eax
mov ebx, ebp
mov dword [ebp + 0x10], 6
call fcn.004385a0
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.BROWSEFOLDER
call fcn.0042b470
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 4
push ecx
push edi
push edx
push ebp
call fcn.00438c60
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.COPYFILE
call fcn.0042b470
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 4
push eax
push edi
push ecx
mov ebx, ebp
call fcn.00438f90
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.WEBDOWNLOAD
call fcn.0042b470
mov dword [ebp + 0x10], 0xf
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
add esp, 4
push edx
push eax
push edi
push ecx
push ebp
call fcn.004391b0
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.CHKFIRMWARE
call fcn.0042b470
mov dword [ebp + 0x10], 0x10
jmp 0x437bcc
push str.ActionModeName
mov esi, str.UPDFIRMWARE
call fcn.0042b470
mov dword [ebp + 0x10], 0x11
jmp 0x437bcc
push str.ActionModeName
mov esi, str.CFGMAILPRINT
call fcn.0042b470
mov dword [ebp + 0x10], 0x12
jmp 0x437bcc
push str.ActionModeName
mov esi, str.WEBINSTALL
call fcn.0042b470
mov dword [ebp + 0x10], 0x13
jmp 0x437bcc
push str.ActionModeName
mov esi, str.MODELSELECT
call fcn.0042b470
mov edx, dword [esp + 0x3c]
add esp, 4
push edx
lea ecx, [esp + 0x18]
mov dword [ebp + 0x10], 0x14
call fcn.00404a80
mov ebx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x2c]
push eax
push edi
call fcn.004392b0
test eax, eax
je case.0x4377d9.9
mov ecx, dword [esp + 0x14]
mov edx, dword [ebx + 0x20]
push ecx
push 0
push 0x7f1b
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x4377d9.9
push str.ActionModeName
mov esi, str.PRINTERPROBE
call fcn.0042b470
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
add esp, 4
push eax
push ecx
push edi
push edx
mov esi, ebp
mov dword [ebp + 0x10], 0x15
call fcn.00439450
mov esi, dword [esp + 0x30]
push esi
push str.ProcessActionMode
push str.CActionDoc
call fcn.0042b190
mov byte [esp + 0x2c], 0
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x437d09
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x20], 0xffffffff
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x437d31
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x18