He just generated a series of normal full-length private keys with good PRNG, and then manually masked (XOR-ed) them to required length one by one.
i know. i wanna know a env where this process was doing.
He almost certainly used some env with good entropy, he obviously knew what he was doing. Zero chance that these random numbers have a weakness on PRNG side.