From the mobile phone in the C:\windows\system32\aow folder, you can see that most of the components of the AOW, including the AoW’s session manager, Linux OpenGLES compatible library, and a AOW.wim mirror. After unpacking AOW.wim mirror, you can see Android 4.4.4 mirror is actually a nearly complete, includes most of the Android core files.
In C:\windows\system32\drivers, you can find 2 AOW-related kernel driver: ADSS.sys and LXCore.sys.
ADSS.sys from the file name guessing is short for AnDroid SubSystem, file size is very small, which references LXCore.sys.
LXCore.sys from the file name guessing is short for LinuX Core, using 16 opens the binary editor, you can see some interesting strings.
- initrd=/initrd.img root=/dev/ram0 rw androidboot.hardware=hyperv console=tty0 console=ttyS0 video=hyperv_fb:1024×768 BOOT_IMAGE=/kernel
- Linux version 3.4.0-Microsoft (Microsoft@Microsoft.com) (gcc version 4.7 (GCC) ) #1 SMP PREEMPT Wed Dec 31 14:42:53 PST 2014
Use 7zip to arbitrary files (#) to open the LXCore.sys you can see it also contains a Linux-gate.so. Guess LXCore is a modified, can be in the form of modules running in the Windows kernel Linux unified kernel. Volume from a file, the kernel package only the traditional Linux system call forwarding, and finally calls the Windows kernel corresponds to the complete function, not in the traditional sense of the Linux kernel.