The game client would be unmodified, with it running on an API layer that maps windows system calls to to their Linux equivalents. Their ant-cheat software finds this "suspicious" and boots the players.