On Mon Feb 9 15:23:32 2026 +0000, Paul Gofman wrote:
Won't this thread be app visible this way (appear in server's thread list and thus appear in NtGetNextThread or other ways to query threads in the system)? That has to be not app visible. At least, there are DRMs that will check the start address of each thread and will break if that is not a PE start address which they can attribute to valid dll. It will be visible, though we can maybe try to hide it. Regarding its entry point it has the same entry point as the main thread, as this is initialized when mapping the main executable. The new application main thread is initialized as any other thread and also has `main_image_info.TransferAddress` as entry point. Idk if this is likely to cause any confusion, and whether we should try to use a different address?
-- https://gitlab.winehq.org/wine/wine/-/merge_requests/10058#note_129197