Function at 0x401b3d
Capabilities:
Check if process is running under wine
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1018
call sub.ntdll.dll__chkstk
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
cmp eax, 0x110
jg 0x401a13
lea ecx, [eax - 2]
cmp ecx, 0x22
ja case.0x4019ff.3
jmp dword [ecx*4 + section..rdata]
push 0
call dword [sym.imp.user32.dll_PostQuitMessage]
jmp 0x401d4b
cmp eax, 0x218
jg 0x401a58
cmp eax, 0x111
je 0x401cbf
cmp eax, 0x117
jne case.0x4019ff.3
mov ebx, esi
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push 0
push 0
push 0x229
push dword [0x414024]
call esi
push ebx
push edi
push 0x117
push eax
call esi
jmp 0x401d4b
cmp eax, 0x219
je 0x401d38
cmp eax, 0xbf83
jne case.0x4019ff.3
push ebx
call dword [sym.imp.user32.dll_IsIconic]
test eax, eax
je 0x401d6e
mov dword [ebp - 0x824], 0x2c
lea eax, [ebp - 0x824]
push eax
push ebx
call dword [sym.imp.user32.dll_GetWindowPlacement]
mov dword [esi + 4], 0
mov dword [esi], 0
mov ebx, dword [ebp - 0x800]
sub ebx, dword [ebp - 0x808]
mov edi, dword [sym.imp.user32.dll_GetSystemMetrics]
push 0x20
call edi
mov esi, eax
push 0x2d
call edi
add eax, esi
add eax, eax
sub ebx, eax
mov eax, dword [ebp + 0x14]
mov dword [eax + 8], ebx
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x7fc]
push 0x21
call edi
mov esi, eax
push 0x2e
call edi
add eax, esi
add eax, eax
sub ebx, eax
push 4
call edi
mov esi, eax
push 0x37
call edi
add esi, dword [ebp - 0x20]
add esi, eax
sub ebx, esi
mov esi, dword [ebp + 0x14]
mov dword [esi + 0xc], ebx
jmp 0x401d76
mov eax, esi
shr eax, 0x10
movzx ecx, si
mov dword [ebp - 0x824], 0
mov dword [ebp - 0x820], 0
mov dword [ebp - 0x81c], ecx
mov dword [ebp - 0x818], eax
lea ecx, [ebp - 0x824]
call sym._resize_frame_rect
jmp 0x401d4b
cmp dword [0x41484c], 0
je 0x401c6c
mov dword [ebp - 0x1024], 0x3c
lea eax, [ebp - 0x1024]
push eax
push dword [0x41400c]
call dword [sym.imp.user32.dll_GetWindowInfo]
mov eax, dword [ebp - 0x1018]
mov ecx, dword [ebp - 0x1014]
sub eax, dword [ebp - 0x1020]
mov dword [ebp - 0x1c], eax
sub ecx, dword [ebp - 0x101c]
mov dword [ebp - 0x24], ecx
lea esi, [ebp - 0x14]
push esi
push 2
push 0
push str.SoftwareWineWineFile
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExW]
test eax, eax
je 0x401be1
sub esp, 0x24
mov dword [esp + 0x1c], esi
movaps xmm0, xmmword [0x4096b0]
movups xmmword [esp + 8], xmm0
mov dword [esp + 0x20], 0
mov dword [esp + 0x18], 0
mov dword [esp + 4], str.SoftwareWineWineFile
mov dword [esp], 0x80000001
call dword [sym.imp.advapi32.dll_RegCreateKeyExW]
test eax, eax
jne 0x401c6c
lea eax, [ebp - 0x1020]
lea edi, [ebp - 0x101c]
mov esi, dword [sym.imp.advapi32.dll_RegSetValueExW]
push 4
push eax
push 4
push 0
push str.startX
push dword [ebp - 0x14]
call esi
push 4
push edi
push 4
push 0
push str.startY
push dword [ebp - 0x14]
call esi
lea eax, [ebp - 0x1c]
push 4
push eax
push 4
push 0
push str.width
push dword [ebp - 0x14]
call esi
lea eax, [ebp - 0x24]
push 4
push eax
push 4
push 0
push str.height
push dword [ebp - 0x14]
call esi
lea edi, [ebp - 0x824]
push edi
push 0x5c
push dword [0x414034]
call dword [sym.imp.gdi32.dll_GetObjectW]
push 0x5c
push edi
push 3
push 0
push str.logfont
push dword [ebp - 0x14]
call esi
push dword [ebp - 0x14]
call dword [sym.imp.advapi32.dll_RegCloseKey]
push ebx
call dword [sym.imp.user32.dll_DestroyWindow]
mov dword [0x414010], 0
mov dword [0x41401c], 0
mov dword [0x414020], 0
mov dword [0x41400c], 0
mov dword [0x414024], 0
mov dword [0x414030], 0
jmp 0x401d4b
shl dword [esi + 0x20], 1
shl dword [esi + 0x24], 1
jmp 0x401d4b
mov esi, dword [sym.imp.user32.dll_SendMessageW]
push 0
push 0
push 0x229
push dword [0x414024]
call esi
push dword [ebp + 0x14]
push edi
push 0xbf80
push eax
call esi
xor ecx, ecx
test eax, eax
jne 0x401d4d
movzx eax, di
lea edx, [eax - 0x9002]
cmp edx, 0xff
ja 0x401e14
test edx, edx
je 0x401ec0
add eax, 0xffff6ffd
and edx, 3
je 0x401ec7
xor ebx, ebx
mov edi, 0x414048
mov ecx, eax
nop dword [eax]
cmp word [edi], 0
lea edi, [edi + 2]
jne 0x401d20
add ecx, 0xffffffff
add ebx, 1
cmp ebx, edx
jne 0x401d20
jmp 0x401ece
push 0
push 0x6a8
push 0x111
push ebx
call dword [sym.imp.user32.dll_SendMessageW]
xor ecx, ecx
mov eax, ecx
add esp, 0x1018
pop esi
pop edi
pop ebx
pop ebp
ret 0x10
push esi
push edi
push eax
push dword [0x414024]
push ebx
call dword [sym.imp.user32.dll_DefFrameProcW]
jmp 0x401d4f
push esi
push ebx
call dword [sym.imp.user32.dll_GetClientRect]
push dword [0x41402c]
call dword [sym.imp.user32.dll_IsWindowVisible]
test eax, eax
je 0x401daa
lea eax, [ebp - 0x824]
push eax
push dword [0x41402c]
call dword [sym.imp.user32.dll_GetClientRect]
mov eax, dword [ebp - 0x818]
mov ecx, dword [esi + 4]
add eax, ecx
add eax, 2
mov dword [esi + 4], eax
push dword [0x414030]
call dword [sym.imp.user32.dll_IsWindowVisible]
test eax, eax
je 0x401dde
lea eax, [ebp - 0x824]
push eax
push dword [0x414030]
call dword [sym.imp.user32.dll_GetClientRect]
mov eax, dword [ebp - 0x818]
mov ecx, dword [esi + 4]
add eax, ecx
add eax, 2
mov dword [esi + 4], eax
push dword [0x414028]
call dword [sym.imp.user32.dll_IsWindowVisible]
test eax, eax
je 0x401e0a
lea eax, [ebp - 0x824]
push eax
push dword [0x414028]
call dword [sym.imp.user32.dll_GetClientRect]
mov eax, dword [ebp - 0x818]
sub dword [esi + 0xc], eax
mov ecx, 1
jmp 0x401d4d
movsx ecx, di
cmp ecx, 0xfb
jg 0x401e88
cmp ecx, 0xffffe12f
jle 0x402061
lea ecx, [edi + 0x1ed0]
cmp cx, 0x16
ja case.default.0x401e3e
movzx ecx, cx
jmp dword [ecx*4 + 0x40908c]
mov edi, ebx
lea ebx, [ebp - 0x824]
push ebx
push 0x104
call dword [sym.imp.kernel32.dll_GetCurrentDirectoryW]
mov ecx, ebx
xor edx, edx
push edi
call sym._alloc_child_window
add esp, 4
mov edi, eax
mov ecx, eax
call sym._create_child_window
test eax, eax
jne 0x401d4b
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1024], eax
jmp 0x402025
cmp ecx, 0x1f6
jle 0x40210d
lea ecx, [edi - 0x1f7]
cmp cx, 8
ja case.default.0x401ea7
movzx ecx, cx
jmp dword [ecx*4 + 0x4090e8]
mov ecx, ebx
mov edx, 0x1f7
push dword [0x414028]
jmp 0x4022ba
mov edi, 0x414048
jmp 0x401f23
mov edi, 0x414048
mov ecx, eax
cmp eax, 3
jb 0x401f23
nop word cs:[eax + eax]
nop dword [eax]
cmp word [edi], 0
lea edi, [edi + 2]
jne 0x401ee0
nop dword [eax]
cmp word [edi], 0
lea edi, [edi + 2]
jne 0x401ef0
nop dword [eax]
cmp word [edi], 0
lea edi, [edi + 2]
jne 0x401f00
nop dword [eax]
cmp word [edi], 0
lea edi, [edi + 2]
jne 0x401f10
lea eax, [ecx - 4]
cmp ecx, 3
mov ecx, eax
jne 0x401ee0
lea eax, [ebp - 0x1024]
push 0
push 0
push 0
push eax
push edi
call dword [sym.imp.ucrtbase.dll__wsplitpath]
add esp, 0x14
push 5
push dword [0x414024]
call dword [sym.imp.user32.dll_GetWindow]
test eax, eax
je 0x401fc8
mov ebx, eax
jmp 0x401f5f
push 2
push ebx
call dword [sym.imp.user32.dll_GetWindow]
mov ebx, eax
test eax, eax
je 0x401fc8
push 0xffffffffffffffeb
push ebx
call dword [sym.imp.user32.dll_GetWindowLongW]
test eax, eax
je 0x401f50
add eax, 0x828
push 0
push 0
push 0
lea esi, [ebp - 0x14]
push esi
push eax
call dword [sym.imp.ucrtbase.dll__wsplitpath]
add esp, 0x14
lea eax, [ebp - 0x1024]
push eax
push esi
call dword [sym.imp.kernel32.dll_lstrcmpiW]
test eax, eax
jne 0x401f50
push 0
push ebx
push 0x222
push dword [0x414024]
call dword [sym.imp.user32.dll_SendMessageW]
push ebx
call dword [sym.imp.user32.dll_IsIconic]
test eax, eax
je 0x401d4b
push 1
push ebx
call dword [sym.imp.user32.dll_ShowWindow]
jmp 0x401d4b
lea ebx, [ebp - 0x1c]
push 0
push 0
push 0
push ebx
push edi
call dword [sym.imp.ucrtbase.dll__wsplitpath]
add esp, 0x14
push ebx
call dword [sym.imp.kernel32.dll_SetCurrentDirectoryW]
test eax, eax
je 0x40203f
lea ebx, [ebp - 0x824]
push ebx
push 0x104
call dword [sym.imp.kernel32.dll_GetCurrentDirectoryW]
mov ecx, ebx
xor edx, edx
push dword [ebp + 8]
call sym._alloc_child_window
add esp, 4
mov edi, eax
mov ecx, eax
call sym._create_child_window
test eax, eax
jne 0x401d4b
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1024], eax
mov eax, dword [ebp - 0x1024]
mov eax, dword [eax + 0x30]
push edi
push 0
push dword [eax + 0x18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x401d4b
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1024], eax
mov eax, dword [ebp - 0x1024]
mov edx, dword [eax + 0x34]
mov ecx, dword [ebp + 8]
call sym._display_error
jmp 0x401d4b
movzx ecx, di
cmp ecx, 0x8004
je 0x4022ef
cmp ecx, 0x9001
jne case.0x401ea7.1
lea ebx, [ebp - 0x824]
push 0x400
push ebx
push 0x4b5
push dword [section..data]
call dword [sym.imp.user32.dll_LoadStringW]
mov ecx, ebx
call sym._activate_fs_window
test eax, eax
jne 0x401d4b
lea ebx, [ebp - 0x1024]
push ebx
push 0x104
call dword [sym.imp.kernel32.dll_GetCurrentDirectoryW]
mov eax, dword [0x414850]
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
lea edi, [ebp - 0x1c]
push 0
push edx
push edi
push ebx
push 0
push dword [ebp + 8]
push eax
call dword [ecx + 0xc]
xor edx, edx
test eax, eax
js 0x4020de
mov edx, dword [ebp - 0x14]
mov ecx, ebx
push dword [ebp + 8]
call sym._alloc_child_window
add esp, 4
mov edi, eax
mov ecx, eax
call sym._create_child_window
test eax, eax
jne 0x401d4b
mov eax, dword fs:[0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
jmp 0x40202b
movzx ecx, di
cmp ecx, 0xfc
je 0x402317
cmp ecx, 0xfd
jne case.0x401ea7.1
push 1
push ebx
call sub.mpr.dll_WNetDisconnectDialog
jmp 0x40231f
cmp di, 0x69
je 0x40233d
cmp di, 0x73
jne case.0x401ea7.1
push 0
push 0
push 0x10
jmp 0x401d44
movzx ecx, di
cmp ecx, 0x6a8
je 0x402333
cmp ecx, 0x70b
jne case.0x401ea7.1
mov eax, dword [section..data]
sub esp, 0x18
movaps xmm0, xmmword [0x4096a0]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x14], 0x8000
call dword [sym.imp.user32.dll_LoadImageW]
mov esi, ebx
mov ebx, eax
lea edi, [ebp - 0x824]
push 0x400
push edi
push 0x4b0
push dword [section..data]
call dword [sym.imp.user32.dll_LoadStringW]
push ebx
push 0
push edi
push esi
call dword [sym.imp.shell32.dll_ShellAboutW]
jmp 0x401d4b
lea ecx, [eax - 0xc100]
cmp ecx, 0xfffffeff
ja 0x402223
add eax, 0xffff0edf
cmp eax, 0xfffffede
ja 0x402223
lea eax, [ebp - 0x824]
mov ebx, dword [sym.imp.user32.dll_LoadStringW]
push 0x400
push eax
push 0x4b0
push dword [section..data]
call ebx
lea esi, [ebp - 0x1024]
push 0x400
push esi
push 0x4b7
push dword [section..data]
call ebx
mov ebx, dword [ebp + 8]
push 0
lea eax, [ebp - 0x824]
push eax
push esi
push ebx
call dword [sym.imp.user32.dll_MessageBoxW]
push dword [ebp + 0x14]
push edi
push 0x111
push dword [0x414024]
push ebx
call dword [sym.imp.user32.dll_DefFrameProcW]
mov ecx, eax
jmp 0x401d4d
push 0
push 0
push 0x228
jmp 0x402265
push 0
push 0
push 0x227
jmp 0x402265
push 0
push 1
jmp 0x402260
push 0
push 0
push 0x226
push dword [0x414024]
jmp 0x401d45
lea edi, [ebp - 0x824]
push 0x400
push edi
push 0x4b0
push dword [section..data]
call dword [sym.imp.user32.dll_LoadStringW]
push 0
push 3
push edi
push ebx
call dword [sym.imp.user32.dll_WinHelpW]
jmp 0x401d4b
mov ecx, ebx
mov edx, 0x1fb
push dword [0x414030]
jmp 0x4022ba
mov ecx, ebx
mov edx, 0x1fc
push dword [0x41402c]
call sym._toggle_child
add esp, 4
jmp 0x401d4b
mov ecx, ebx
call sym._choose_font
jmp 0x401d4b
xor eax, eax
cmp dword [0x41484c], 0
sete al
mov dword [0x41484c], eax
shl eax, 3
push eax
push 0x1ff
jmp 0x402306
mov ecx, ebx
call sym._toggle_fullscreen
xor ecx, ecx
test eax, eax
setne cl
shl ecx, 3
push ecx
push 0x8004
push dword [0x414020]
call dword [sym.imp.user32.dll_CheckMenuItem]
jmp 0x401d4b
push 1
push ebx
call sub.mpr.dll_WNetConnectionDialog
cmp eax, 0xffffffff
je 0x401d4b
cmp eax, 0x4b8
je 0x402349
test eax, eax
jne 0x402355
call sym._refresh_drives
jmp 0x401d4b
mov ecx, ebx
call sym._WineFile_OnRun
jmp 0x401d4b
mov ecx, ebx
call sym._display_network_error
jmp 0x401d4b
mov ecx, ebx
mov edx, eax
call sym._display_error
jmp 0x401d4b