https://bugs.winehq.org/show_bug.cgi?id=55967
Paul Gofman pgofman@codeweavers.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |pgofman@codeweavers.com
--- Comment #6 from Paul Gofman pgofman@codeweavers.com --- I think it doesn't actually compute any address from those 32 bytes it reads. It reads syscall thunk for NtQueryInformationProcess somewhere and plainly calls that. Which would fail on Windows for any 32 bit syscall as those need relocation (unless ntdll is not relocated)... but turns out NtQueryInformationProcess is some way special and works this way. I sent a possible fix upstream: https://gitlab.winehq.org/wine/wine/-/merge_requests/4705.