haloceded.exe (modded by rec0, dunno what he did)
haloceded_extended.exe (the app)
strings.dll (custom strings file by rec0 that silently executes the app, and reroutes stuff to the real strings)
strings__.dll (the real strings file, renamed.)
haloceded --> strings.dll --> haloceded_extended.exe --> strings__.dll
so... dedi starts, goes for the strings file, loads the app..
its really a terrible way to do things, looking at termys app how it injects a dll without messing with any other files is far more effective, and stable.
Bookmarks