https://bugs.winehq.org/show_bug.cgi?id=55967 Paul Gofman <pgofman(a)codeweavers.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |pgofman(a)codeweavers.com --- Comment #6 from Paul Gofman <pgofman(a)codeweavers.com> --- I think it doesn't actually compute any address from those 32 bytes it reads. It reads syscall thunk for NtQueryInformationProcess somewhere and plainly calls that. Which would fail on Windows for any 32 bit syscall as those need relocation (unless ntdll is not relocated)... but turns out NtQueryInformationProcess is some way special and works this way. I sent a possible fix upstream: https://gitlab.winehq.org/wine/wine/-/merge_requests/4705. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.