Function at 0x402260
Capabilities:
Check if process is running under wine

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 0xc], ecx
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], str.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
cmp dword [ebp - 4], 0
je 0x4022ac
push str.wine_get_unix_file_name
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x4022a0
mov dword [ebp - 8], 1
jmp 0x4022a7
mov dword [ebp - 8], 0
mov al, byte [ebp - 8]
jmp 0x4022b5
mov dword [ebp - 0x14], str.ORfQdh0Vcp9Dj41kiUHioVyzFTyJm4xQrbDB39uzg7kTpRwW2EGS62dM18ElGzGEzWl8sqIlt6t5D5QBInM7o6Dj1xuIejUKGdSS1U8sjxY2ynL5
xor al, al
mov esp, ebp
pop ebp
ret