Function at 0x4099c0
Capabilities:
Check if process is running under wine

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], str.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
mov dword [ebp - 0x14], str.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
mov dword [ebp - 0x18], str.pIcMlDsh1dazcibHnHXpUNXnNgzL3iqP56GXqgDQoCFq6CIEybqtHHDwYFohlXTJaWD7dDrGJ303x1ws4fcOnFHFpR86FwQAC0d36AgCzUG9nDL4Qo5p9C2ahMKRqXKAQ0moCB04i8zI7RIqe4H2na5WHMswHw50zBNBrT6Yd2LaRgADREnjwBJyEGKjbCkcWq2XnotXtpB7sCCOTvfGfWt53LlQfT1Ax3hAmGA7cwJCgU7dNWasiVfdBKg3Q9EHf0zrt7pbj53Ynjl6rcMJzWwc2OMaErN8pLFhXFqrGdGTtdAS5txqa9iRQArLV02wJL9Gd7CM5y6lUbcYoWAjdm5Evb3MAgSDkoi6HRwE8bWDG3tYqJSY55Twl6FraRXjF0bM53a6lydrpMMr
push 0x456740
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x409a1a
push str.wine_get_unix_file_name
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x409a0e
mov dword [ebp - 8], 1
jmp 0x409a15
mov dword [ebp - 8], 0
mov al, byte [ebp - 8]
jmp 0x409a1c
xor al, al
mov esp, ebp
pop ebp
ret