https://bugs.winehq.org/show_bug.cgi?id=57669
--- Comment #6 from Roman Pišl rpisl@seznam.cz --- (In reply to Alexandre Julliard from comment #5)
The 0x7ffffe320000 pointer is truncated. Is the parent a 32-bit process?
Good catch, yes, the parent process is a 32bit MSBuild.exe. Maybe the previous call to NtAllocateVirtualMemory() returns a 64bit address to a 32bit process?