Another win32 implementation: hiweedlayer?
dmitry at codeweavers.com
Sat Mar 24 11:41:18 CDT 2007
"Dan Kegel" <dank at kegel.com> wrote:
> http://hiweed.com/node/798 offers "hiweedlayer" for download.
> It is supposedly a Windows layer like Wine.
> Running strings on their single executable, I see
> messages like
> %s is being traced!
> location has changed!
> abnormal behavior!
> shell has changed!
> %s has expired!
> Please contact your provider
> which look like they're from this little bit of malware:
> but perhaps they're just trying to keep people from reverse-engineering
> their code (or finding out that they have Wine code inside?).
Exactly. Remove everything up to class.tgz.BEGIN in hiweedlayer and untar
it somewhere, what we see (reminds me something):
and inside of lib\
wine\ (with all Wine dll.so files)
More information about the wine-devel