Function at 0x401a90
Capabilities:
Accept command line arguments
Check if process is running under wine
Query environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov dword [ebp - 0x2c], eax
mov eax, edx
mov dword [ebp - 0x38], edx
call fcn.00401000
mov dword [ebp - 0x34], eax
test eax, eax
je 0x401c74
mov dword [esp], str.ORIG_LD_LIBRARY_PATH
call dword [sym.imp.ucrtbase.dll_getenv]
test eax, eax
je 0x401aec
mov dword [esp + 4], eax
mov dword [esp], str.LD_LIBRARY_PATH
call sub.ntdll.dll___wine_set_unix_env
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], str.ORIG_LD_LIBRARY_PATH
call sub.ntdll.dll___wine_set_unix_env
sub esp, 8
mov eax, dword [ebp - 0x2c]
cmp word [eax], 0
je 0x401d89
lea esi, [esi]
lea eax, [ebp - 0x1c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
call dword [sym.imp.shell32.dll_CommandLineToArgvW]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov esi, eax
lea eax, [ecx*4 + 8]
mov dword [ebp - 0x30], ecx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_malloc]
mov ecx, dword [ebp - 0x30]
test eax, eax
mov ebx, eax
je 0x401d89
test ecx, ecx
jle 0x401b5d
xor edi, edi
lea esi, [esi]
mov eax, dword [esi + edi*4]
call fcn.00401000
mov ecx, dword [ebp - 0x1c]
mov dword [ebx + edi*4], eax
add edi, 1
cmp ecx, edi
jg 0x401b48
mov eax, dword [ebp - 0x34]
mov dword [ebx + ecx*4 + 4], 0
mov dword [ebx + ecx*4], eax
movzx eax, byte [section..data]
test al, 8
jne 0x401cb8
mov esi, dword [ebp - 0x1c]
test esi, esi
js 0x401be3
xor esi, esi
jmp 0x401b90
add esi, 1
cmp dword [ebp - 0x1c], esi
jl 0x401bdb
mov edx, eax
and edx, 8
je 0x401b88
mov eax, dword [ebx + esi*4]
add esi, 1
call fcn.004013a0
mov dword [esp + 0xc], 0x405146
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0x40546c
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401670
movzx eax, byte [section..data]
mov edx, eax
and edx, 8
cmp dword [ebp - 0x1c], esi
jge 0x401b90
test dl, dl
jne 0x401c88
mov dword [esp + 4], 0
mov dword [esp], ebx
call sub.ntdll.dll___wine_unix_spawnvp
sub esp, 8
test eax, eax
je 0x401d94
mov eax, dword [ebp - 0x1c]
mov edi, dword [sym.imp.ucrtbase.dll_free]
xor esi, esi
test eax, eax
jle 0x401c24
lea esi, [esi]
mov eax, dword [ebx + esi*4]
add esi, 1
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_free]
cmp dword [ebp - 0x1c], esi
jg 0x401c10
mov dword [esp], ebx
call edi
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 0
mov eax, ecx
je 0x401d00
lea esi, [esi]
nop
add eax, 2
cmp word [eax], 0
jne 0x401c40
sub eax, dword [ebp - 0x2c]
add eax, 2
add dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 0
jne 0x401b00
test byte [section..data], 2
jne 0x401d0a
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
call edi
lea esp, [ebp - 0xc]
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0xc], 0x40514a
mov dword [esp + 8], 0x40546c
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401670
jmp 0x401be3
mov dword [esp + 0xc], str.Trying
mov dword [esp + 8], 0x40546c
mov dword [esp + 4], 0x404000
mov dword [esp], 3
call fcn.00401670
movzx eax, byte [section..data]
mov ecx, dword [ebp - 0x1c]
mov edx, eax
and edx, 8
test ecx, ecx
jns 0x401b81
test dl, dl
je 0x401be3
jmp 0x401c88
mov eax, 2
jmp 0x401c4f
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x401d82
shr eax, 0x10
je 0x401d6c
mov ebx, dword [ebp - 0x38]
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x401d3f
mov eax, ebx
call fcn.00401160
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.could_not_find_a_suitable_app_to_open__s_n
mov dword [esp + 8], 0x40546c
mov dword [esp + 4], 0x404000
mov dword [esp], 1
call fcn.00401670
jmp 0x401c6c
movzx eax, word [ebp - 0x38]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401340
jmp 0x401d3f
mov eax, str._null_
jmp 0x401d3f
mov edi, dword [sym.imp.ucrtbase.dll_free]
jmp 0x401c5f
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_ExitProcess]