Function at 0x4098e0
Capabilities:
Check if process is running under wine

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov dword [ebp - 0xc], ecx
push 0x45124c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], str.GASgJgQIKxvW0jtGfarO8J80tWTaxgArJBtV6wKfsOA1juMyIRJuGrV02twWrvkgtuBVvOtR5YomT7DPEWr7lY0xIATycIAz09BhOC8F0eWG3UBJ3QJWagGRzRJG6NUtK6XWSJPxpY2bAwILfG1fnzjXs0mv2BkmuxsXHrC6kI8yWtrGWcQ
cmp dword [ebp - 4], 0
je 0x409948
mov dword [ebp - 0x14], str.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
mov dword [ebp - 0x18], str.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
mov dword [ebp - 0x1c], str.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
push str.wine_get_unix_file_name
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x409935
mov dword [ebp - 8], 1
jmp 0x40993c
mov dword [ebp - 8], 0
mov al, byte [ebp - 8]
jmp 0x40994a
xor al, al
mov esp, ebp
pop ebp
ret