[Bug 4160] New: WinME wordpad.exe crashes after drawing window

[Wine Bugs]

http://bugs.winehq.org/show_bug.cgi?id=4160

Summary: WinME wordpad.exe crashes after drawing window
           Product: Wine
           Version: 0.9.3.
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: wine-misc
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

While trying to find a test case for a riched20.dll problem,
I gave winME's wordpad.exe a shot.  It crashes shortly
after displaying its main window, whether I set wine-0.9.4
to emulate win2K or winME.  Here's the stack dump:

Unhandled exception: page fault on read access to 0x0000000c in 32-bit code
(0x7b7f1416).
In 32 bit mode.
Register dump:
 CS:0073 SS:007b DS:007b ES:007b FS:003b GS:0033
 EIP:7b7f1416 ESP:7faca920 EBP:7faca928 EFLAGS:00010246(   - 00      -RIZP1)
 EAX:7beff680 EBX:7b805520 ECX:00000000 EDX:00000000
 ESI:00000000 EDI:00000003
Stack dump:
0x7faca920:  7b805520 7bc30660 7faca948 7b7fef5a
0x7faca930:  7b7d0000 00000003 00000000 7bef5690
0x7faca940:  7bc30660 7bc30650 7faca968 7bec357d
0x7faca950:  7b7d0000 00000003 00000000 7bec2723
0x7faca960:  7bc30020 7bef5690 7faca9ec 7bec618b
0x7faca970:  7b7fef34 7b7d0000 00000003 00000000
Backtrace:
=>1 0x7b7f1416 DllMain+0x156(hinstDLL=0x7b7d0000, fdwReason=0x3,
lpvReserved=0x0) [/home/dank/wine/dlls/msvcrt/../../include/winbase.h:2250] in
msvcrt (0x7b7f1416)
  2 0x7b7fef5a __wine_spec_dll_entry(inst=0x7b7d0000, reason=0x3, reserved=0x0)
[/home/dank/wine/dlls/winecrt0/dll_entry.c:42] in msvcrt (0x7b7fef5a)
trace:richedit:RichEditANSIWndProc hWnd 0x1002c msg 043a (EM_GETCHARFORMAT)
00000001 7bca181c
trace:richedit:RichEditANSIWndProc hWnd 0x1002c msg 043d (EM_GETPARAFORMAT)
00000000 7bca1780
trace:richedit:RichEditANSIWndProc hWnd 0x1002c msg 000e () 00000000 00000000
trace:richedit:RichEditANSIWndProc hWnd 0x1002c msg 0434 (EM_EXGETSEL) 00000000
7b91fb28
trace:richedit:RichEditANSIWndProc EM_EXGETSEL = (0,0)
trace:richedit:RichEditANSIWndProc hWnd 0x1002c msg 0434 (EM_EXGETSEL) 00000000
7b91fb28
trace:richedit:RichEditANSIWndProc EM_EXGETSEL = (0,0)
trace:richedit:RichEditANSIWndProc hWnd 0x1002c msg 00c6 () 00000000 00000000
trace:richedit:RichEditANSIWndProc hWnd 0x1002c msg 00b2 (EM_GETRECT) 00000000
7b91fc84
trace:richedit:RichEditANSIWndProc hWnd 0x1002c msg 0363 () 00000001 00000000
  3 0x7bec357d call_dll_entry_point in ntdll (0x7bec357d)
  4 0x7bec618b MODULE_InitDLL(lpReserved=0x0)
[/home/dank/wine/dlls/ntdll/loader.c:821] in ntdll (0x7bec618b)
  5 0x7bec6f20 LdrShutdownThread [/home/dank/wine/dlls/ntdll/loader.c:1770] in
ntdll (0x7bec6f20)
  6 0x7beddd1d RtlExitUserThread(status=0x0)
[/home/dank/wine/dlls/ntdll/thread.c:352] in ntdll (0x7beddd1d)
  7 0x7bbb7e80 TerminateThread(handle=0x0, exit_code=0x68)
[/home/dank/wine/dlls/kernel/thread.c:233] in kernel32 (0x7bbb7e80)
  8 0x7b7f9d8b _endthreadex(retval=0x0)
[/home/dank/wine/dlls/msvcrt/thread.c:134] in msvcrt (0x7b7f9d8b)
fixme:dbghelp:sffip_cb NIY on 'E:\8665\vc98\mfc\mfc.bbt\src\mfc42.pdb'
  9 0x5f410240 341+0xc54 in mfc42 (0x5f410240)
  10 0x7bbb7fc3 THREAD_Start+0xf3(ptr=0x7bc86f10)
[/home/dank/wine/dlls/kernel/thread.c:77] in kernel32 (0x7bbb7fc3)
  11 0x7bedd8e2 start_thread+0x172(info=0x7bc86c88)
[/home/dank/wine/dlls/ntdll/thread.c:233] in ntdll (0x7bedd8e2)
  12 0xf6fb3341 (0xf6fb3341)
  13 0xf6f4afee (0xf6f4afee)
0x7b7f1416 DllMain+0x156
[/home/dank/wine/dlls/msvcrt/../../include/winbase.h:2250] in msvcrt: pushl
0xc(%esi)