http://bugs.winehq.org/show_bug.cgi?id=13915
--- Comment #57 from Myk Taylor myk002@yahoo.com 2010-08-24 10:15:51 --- I have engaged the original developer (Ian Patterson) regarding this issue and pointed him to Anastasius's comments. Here is what he had to say:
"I've tried EnumProcessModules (plus various other psapi calls), CreateToolhelp32Snapshot, plus just some basic stuff like querying the main thread's current eip, but none of them work. A process created with CREATE_SUSPENDED set is halted before DLLs are loaded, so there's no way of knowing where anything will end up unless the load address is guaranteed to be the same for every process (true for a few core DLLs including kernel32). http://www.nynaeve.net/?p=198 has some more details."
Do you have any tips for him?