Function at 0x4292c0
Capabilities:
Delete registry key
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b1716
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x503074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x288], ebx
push 0x4c965c
push str.hpqUnRegisterBIOSEvent
push 0
call fcn.00422b80
push eax
call fcn.0047bd80
xor esi, esi
add esp, 0x10
mov dword [ebp - 0x290], esi
mov dword [ebp - 4], esi
call fcn.00422b80
mov al, byte [eax + 0x38]
test al, al
je 0x42935b
push 0x28
call fcn.00475970
mov esi, eax
add esp, 4
mov dword [ebp - 0x28c], esi
push str.hpqUnRegisterBIOSEvent
mov byte [ebp - 4], 1
call fcn.00422b80
push eax
mov ecx, esi
call fcn.00477bf0
mov esi, eax
mov byte [ebp - 4], 0
mov dword [ebp - 0x290], esi
test ebx, ebx
jne 0x429369
mov edi, 0x80070057
jmp 0x4295ea
push 0x208
lea eax, [ebp - 0x258]
push 0
push eax
call fcn.0048b3f0
add esp, 8
mov ebx, 0x104
mov edx, ebx
push str.SoftwareHP_
push ecx
lea ecx, [ebp - 0x258]
call fcn.004304d0
mov edi, eax
test edi, edi
js 0x4295ea
lea eax, [ebp - 0x284]
mov edx, ebx
push eax
lea ecx, [ebp - 0x258]
call fcn.00430480
test eax, eax
js 0x4293d8
mov eax, dword [ebp - 0x284]
mov edx, ebx
push ecx
push str.20ED5D44_3C74_4E20_B62A_4FB59ED919B0
push ecx
lea ecx, [ebp - 0x258]
sub edx, eax
lea ecx, [ecx + eax*2]
call fcn.004304d0
mov edi, dword [ebp - 0x288]
lea eax, [ebp - 0x258]
push edi
push eax
push str.szKey:__s__strEventName:__s
push str.hpqUnRegisterBIOSEvent
push 2
call fcn.00422b80
push eax
call fcn.0047bd80
lea eax, [ebp - 0x284]
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x34], eax
add esp, 0x18
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], vtable.std::_Func_impl_class__lambda_78b2b3e6708b3e7c31dc4fee868967d2___class_std::allocator_int___void___.0
mov dword [ebp - 0x14], eax
push eax
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 2
call fcn.00402280
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x429453
mov edx, dword [ecx]
lea eax, [ebp - 0x38]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x284]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
lea eax, [ebp - 0x258]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x4294cb
push eax
push str.RegCreateKeyEx_returns_lRet__0x_08X
push str.hpqUnRegisterBIOSEvent
push 2
call fcn.00422b80
push eax
call fcn.0047bd80
add esp, 0x14
push edi
push dword [ebp - 0x284]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push eax
push str.RegDeleteKey_returns_lRet__0x_08X
push str.hpqUnRegisterBIOSEvent
push 2
call fcn.00422b80
push eax
call fcn.0047bd80
add esp, 0x14
push ecx
push str.SoftwareHP_
push ecx
mov edx, ebx
lea ecx, [ebp - 0x258]
call fcn.004304d0
mov edi, eax
test edi, edi
js 0x4295db
lea eax, [ebp - 0x288]
mov edx, ebx
push eax
lea ecx, [ebp - 0x258]
call fcn.00430480
test eax, eax
js 0x429520
mov eax, dword [ebp - 0x288]
sub ebx, eax
push ecx
push str.20ED5D44_3C74_4E20_B62A_4FB59ED919B0
push ecx
lea ecx, [ebp - 0x258]
mov edx, ebx
lea ecx, [ecx + eax*2]
call fcn.004304d0
lea eax, [ebp - 0x258]
push eax
push str.szKey:__s
push str.hpqUnRegisterBIOSEvent
push 2
call fcn.00422b80
push eax
call fcn.0047bd80
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [ebp - 0x284]
add esp, 0x14
push eax
push 0xf003f
push 0
lea eax, [ebp - 0x258]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
mov edi, eax
test edi, edi
jne 0x4295db
push 0x40
push eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x28c], 0x20
push eax
call fcn.0048b3f0
add esp, 0xc
lea eax, [ebp - 0x29c]
push eax
push edi
push edi
push edi
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x50]
push eax
push edi
push dword [ebp - 0x284]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
cmp edi, 0x103
jne 0x4295db
lea eax, [ebp - 0x284]
push eax
push 0xf003f
push 0
push str.SoftwareHP_
push reloc.OLEAUT32.dll_SysReAllocString
call ebx
push str.20ED5D44_3C74_4E20_B62A_4FB59ED919B0
push dword [ebp - 0x284]
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
mov edi, eax
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0
call fcn.00402190
push edi
push str.lRet:__ld_
push str.hpqUnRegisterBIOSEvent
push 1
call fcn.00422b80
push eax
call fcn.0047bd80
add esp, 0x14
test esi, esi
je 0x42961b
mov ecx, esi
call fcn.00478c00
push 0x28
push esi
call fcn.00475d73
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004756da
mov esp, ebp
pop ebp
ret