[ktRolster]

Looks like they are launching ELF files, then translating the linux syscalls to WIN32API calls at runtime.

[sp332]

The link you posted is the original article at the top of this HN thread.

[ktRolster]

Oh, you're right, I messed up.