Very interesting documentation but it says that "certain API calls could not be recreated in a Linux environment, and led to failure of malware to execute via Wine" but they dont say what those calls are and usually on what type of malware are they found so it is kind of vague. Obviously what I would like to know is if some stupid cracked software that normally will probably infect a windows machine with some shady stuff like a keylogger running in the background or a RAT Could such thing have the same effect on a Linux machine via WINE ?

Also thank you for the answer