Does it exactly a forward / redirect on Windows? As I read winedump output, it is not. In this case, I guess it might still be possible to temporary fix things by redirecting the function to shell32, even if that is the other way around on Windows, but I think it is better to use '@stdcall -import' way instead of forward. The latter is known to trip various hotpatchers and DRMs querying exports, so unless it is the same on Windows is best avoided.