Function at 0x417c30
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2688
call fcn.00463a10
push ebx
mov ebx, edx
mov dword [ebp - 0x1c], ebx
push esi
push edi
test ecx, ecx
je 0x418326
mov esi, dword [ecx]
mov dword [ebp - 8], esi
test esi, esi
je 0x418326
mov eax, dword [esi + 0xc]
test eax, eax
je 0x418326
push 0x1c
lea ecx, [ebp - 0x38]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
push 0x400
mov edi, eax
lea eax, [ebp - 0x87c]
push 0
push eax
call fcn.0043d050
add esp, 0xc
lea eax, [ebp - 0x1684]
push 0x800
push 0
push eax
call fcn.0043d050
mov esi, dword [esi + 0xc]
lea eax, [ebp - 0x7c]
add esp, 0xc
push 0x40
push 0
push eax
call fcn.0043d050
add esp, 0xc
lea eax, [ebp - 0x7c]
push esi
push str.0x_08X
push 0x40
push eax
call fcn.00421520
add esp, 0x10
cmp edi, 0x1c
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
jne 0x418129
push 0x104
lea eax, [ebp - 0xe84]
push eax
push dword [ebp - 0x34]
call edi
test eax, eax
je 0x418129
push 0x400
lea eax, [ebp - 0x47c]
push 0
push eax
call fcn.0043d050
add esp, 0xc
lea eax, [ebp - 0x87c]
push 0x200
push eax
lea eax, [ebp - 0xe84]
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
push ecx
lea eax, [ebp - 0x47c]
push eax
lea edx, [ebp - 0x47c]
lea ecx, [ebp - 0x87c]
call fcn.0041b300
lea eax, [ebp - 0x47c]
push str.rzchromasdk
push eax
call fcn.0043c475
add esp, 0x10
test eax, eax
je 0x417dbf
push 0x800
push str.Razer_Synapse_has_crashed_Wallpaper_Engine._n_nThe_Razer_Chroma_plugin_will_be_disabled_to_fix_this_crash._You_can_re_enable_it_in_the_Wallpaper_Engine_plugin_settings.
push ebx
call fcn.0044482c
add esp, 0xc
lea eax, [ebp - 0xc]
push eax
push 0xf003f
push 0
push str.SoftwareWallpaperEngine_
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4181c2
push 4
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 1
push eax
push 4
push 0
push str.disablePlugins
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 8]
push 0x800
push 0x476a68
jmp 0x418269
lea eax, [ebp - 0x47c]
push str.precisionx
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x417de6
push 0x800
push str.PRECISION_X_hacked_and_crashed_Wallpaper_Engine._Update_PRECISION_X_or_disable_its_overlay_hack.
jmp 0x4181b9
lea eax, [ebp - 0x47c]
push str.nvumdshim
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x417e0d
push 0x800
push str.LIKELY_SOLUTION:_Update_Intel_Graphics_drivers.
jmp 0x4181b9
lea eax, [ebp - 0x47c]
push str.nvwgf2um
push eax
call fcn.0043c475
add esp, 8
test eax, eax
jne 0x4181af
lea eax, [ebp - 0x47c]
push str.nvd3dum
push eax
call fcn.0043c475
add esp, 8
test eax, eax
jne 0x4181af
lea eax, [ebp - 0x47c]
push str.rtsshooks
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x417e6c
push 0x800
push str.Rivatuner_Statistics_Server_hacked_and_crashed_Wallpaper_Engine._Exclude_Wallpaper_Engine_in_RivaTuner_to_stop_it_from_crashing_it.
jmp 0x4181b9
lea eax, [ebp - 0x47c]
push str.msigamingosd
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x417e93
push 0x800
push str.The_MSI_Gaming_App_hacked_and_crashed_Wallpaper_Engine._Update_it_or_disable_its_overlay_hack.
jmp 0x4181b9
lea eax, [ebp - 0x47c]
push str.radeonpro
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x417eba
push 0x800
push str.RadeonPro_hacked_and_crashed_Wallpaper_Engine._Update_it_or_disable_its_overlay_hack.
jmp 0x4181b9
lea eax, [ebp - 0x47c]
push str.kernelbase
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x4180a7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x417eea
xor cl, cl
jmp 0x41808d
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x475b04
call esi
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x417f05
xor cl, cl
jmp 0x41808d
push str.EnumProcessModules
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
test edi, edi
jne 0x417f43
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push str.kernel32.dll
call esi
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x417f35
xor cl, cl
jmp 0x41808d
push str.EnumProcessModules
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
xor esi, esi
test edi, edi
je 0x41807f
push 0x800
lea eax, [ebp - 0x2684]
push esi
push eax
call fcn.0043d050
add esp, 0xc
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
push eax
push 0x200
lea eax, [ebp - 0x2684]
push eax
push dword [ebp - 0x18]
call edi
cmp eax, 1
jne 0x41807f
xor edi, edi
test dword [ebp - 0x14], 0xfffffffc
jbe 0x41807f
xor ebx, ebx
nop dword [eax]
nop dword [eax + eax]
push 0x400
lea eax, [ebp - 0x1a84]
push 0
push eax
call fcn.0043d050
add esp, 0xc
lea eax, [ebp - 0xc7c]
push 0x400
push 0
push eax
call fcn.0043d050
add esp, 0xc
lea eax, [ebp - 0x1e84]
push 0x400
push 0
push eax
call fcn.0043d050
add esp, 0xc
lea eax, [ebp - 0x1a84]
push 0x400
push eax
push dword [ebp + edi*4 - 0x2684]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x200
lea eax, [ebp - 0xc7c]
push eax
lea eax, [ebp - 0x1a84]
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
xor esi, esi
nop word [eax + eax]
movzx eax, word [ebp + esi - 0xc7c]
push eax
call fcn.004447fc
mov word [ebp + esi - 0x1e84], ax
lea ecx, [ebp - 0x87c]
add esi, 2
lea eax, [ebp - 0xc7c]
add eax, esi
add esp, 4
cmp eax, ecx
jne 0x418020
lea eax, [ebp - 0x1e84]
push str.atcuf
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x418067
inc ebx
mov eax, dword [ebp - 0x14]
inc edi
shr eax, 2
cmp edi, eax
jb 0x417fa0
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x10]
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test esi, esi
setg cl
test cl, cl
mov eax, str.Wallpaper_Engine_crashed_in_the_Windows_System.
mov edx, str.BitDefender_hacked_and_possibly_crashed_Wallpaper_Engine_through_its_Advanced_Threat_Defense._Try_excluding_Wallpaper_Engine_there_or_disabling_it.
push 0x800
cmovne eax, edx
push eax
jmp 0x4181b9
lea eax, [ebp - 0x47c]
push str.audioses
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x4180ce
push 0x800
push str.Your_audio_driver_crashed_Wallpaper_Engine._Try_setting_Other_application_playing_audio_to_keep_running_in_the_Wallpaper_Engine_settings.
jmp 0x4181b9
lea eax, [ebp - 0x47c]
push str.overlay.x86.dll
push eax
call fcn.0043c475
add esp, 8
test eax, eax
jne 0x4181a3
lea eax, [ebp - 0x47c]
push str.overlay.x64.dll
push eax
call fcn.0043c475
add esp, 8
test eax, eax
jne 0x4181a3
mov eax, dword [0x47f024]
test eax, eax
je 0x418176
push eax
lea eax, [ebp - 0x47c]
push eax
call fcn.0043c475
add esp, 8
test eax, eax
je 0x418176
mov eax, dword [ebp + 8]
mov byte [eax], 0
mov esi, dword [ebp - 8]
lea ecx, [ebp - 0x1684]
call fcn.004175a0
push 0x800
test al, al
je 0x4181d4
push str.Wallpaper_Engine_was_likely_crashed_by_the_following_application._Try_closing_or_updating_this_application:_n
push ebx
call fcn.0044482c
add esp, 0xc
lea eax, [ebp - 0x1684]
push 0x800
push eax
push ebx
call fcn.0044482c
add esp, 0xc
push 0x800
push 0x474d3c
jmp 0x418269
mov esi, dword [ebp - 8]
cmp dword [esi], 0xc06d007e
jne 0x41812c
push 0x800
push str.Module_not_found__If_you_have_Windows_N_and_you_are_trying_to_play_a_video__install_the_latest_Media_Feature_Pack.
push ebx
call fcn.0044482c
add esp, 0xc
push 0x800
push 0x476a68
jmp 0x418269
push 0x800
push str.LIKELY_SOLUTION:_Disable_Discord_overlay_for_Wallpaper_Engine.
jmp 0x4181b9
push 0x800
push str.Your_Nvidia_graphics_card_drivers_have_crashed_Wallpaper_Engine._Try_reinstalling_the_NEWEST_Nvidia_drivers_or_install_OLDER__STABLE_drivers.
push ebx
call fcn.0044482c
add esp, 0xc
mov esi, dword [ebp - 8]
push 0x800
push 0x476a68
jmp 0x418269
cmp word [ebp - 0x87c], 0
je 0x418264
lea eax, [ebp - 0x2684]
push 0
push eax
call fcn.0043d050
add esp, 0xc
lea eax, [ebp - 0x2684]
push 0x400
push eax
push 0
call edi
push 0x400
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x2684]
push eax
call fcn.00444871
add esp, 0xc
test eax, eax
je 0x418257
push 0x800
push str.Wallpaper_Engine_was_likely_crashed_by_another_application__
push ebx
call fcn.0044482c
add esp, 0xc
lea eax, [ebp - 0x87c]
push 0x800
push eax
push ebx
call fcn.0044482c
add esp, 0xc
mov eax, str._._n_n
push 0x800
push eax
jmp 0x418269
mov eax, str.Wallpaper_Engine_has_crashed._n_n
push 0x800
push eax
jmp 0x418269
push str.Wallpaper_Engine_has_crashed._n_n
push ebx
call fcn.0044482c
add esp, 0xc
push 0x800
push str.Go_here_for_help:_n_nhelp.wallpaperengine.io_crash
push ebx
call fcn.0044482c
add esp, 0xc
cmp word [ebp - 0x87c], 0
je 0x418339
push dword [esi]
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x1684]
push str._n_nCrash_caused_by:__s._Error_code:_0x_08X.
push eax
call edi
push 0x800
lea eax, [ebp - 0x1684]
push eax
push ebx
call fcn.0044482c
add esp, 0x1c
cmp dword [esi], 0xc0000005
jne 0x418339
cmp dword [esi + 0x10], 1
jbe 0x418339
push dword [esi + 0x18]
lea eax, [ebp - 0x7c]
push str.0x_08X
push 0x40
push eax
call fcn.00421520
cmp dword [esi + 0x14], 0
lea eax, [ebp - 0x7c]
push eax
mov ecx, str.write_to
mov eax, str.read_from
cmovne eax, ecx
push eax
lea eax, [ebp - 0x1684]
push str._Access_violation:_trying_to__S_address__S.
push eax
call edi
push 0x800
lea eax, [ebp - 0x1684]
push eax
push ebx
call fcn.0044482c
add esp, 0x2c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x800
push str.Go_here_for_help:_n_nhelp.wallpaperengine.io_crash
push ebx
call fcn.0044482c
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret