http://bugs.winehq.org/show_bug.cgi?id=22077
--- Comment #6 from Nikolay Sivov bunglehead@gmail.com 2010-06-10 07:34:41 --- Yes, looks Listview related. First message box doesn't display btw:
--- 001b:trace:listview:LISTVIEW_GetItemT (lpLVItem={iItem=1, iSubItem=0, state=0, stateMask=ffff, pszText="Y", cchTextMax=1024, iImage=0}, isW=0) 001b:trace:listview:ranges_contain (nItem=1) 001b:trace:listview:ranges_assert *** Checking ranges_contain:3067:before contain *** 001b:trace:listview:ranges_assert --- Done checking--- 001b:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7ee14d6b ip=7ee14d6b tid=001b 001b:trace:seh:raise_exception info[0]=19930520 001b:trace:seh:raise_exception info[1]=002f99e0 001b:trace:seh:raise_exception info[2]=782a01d8 001b:trace:seh:raise_exception eax=7ee043c1 ebx=7ee609fc ecx=00000000 edx=002f99c4 esi=002f99c4 edi=00e60d40 001b:trace:seh:raise_exception ebp=002f9998 esp=002f9934 cs=0073 ds=007b es=007b fs=0033 gs=003b flags=00200216 001b:trace:seh:call_vectored_handlers calling handler at 0x7e0f06c0 code=e06d7363 flags=1 001b:trace:seh:call_vectored_handlers handler at 0x7e0f06c0 returned 0 001b:trace:seh:call_stack_handlers calling handler at 0x7829bf68 code=e06d7363 flags=1 001b:trace:seh:call_stack_handlers handler at 0x7829bf68 returned 1 001b:trace:seh:call_stack_handlers calling handler at 0x7829bc0b code=e06d7363 flags=1 001b:trace:seh:__regs_RtlUnwind code=e06d7363 flags=3 001b:trace:seh:__regs_RtlUnwind calling handler at 0x7efb8b10 code=e06d7363 flags=3 001b:trace:seh:__regs_RtlUnwind handler at 0x7efb8b10 returned 1 001b:trace:seh:__regs_RtlUnwind calling handler at 0x7829bf68 code=e06d7363 flags=3 001b:trace:seh:__regs_RtlUnwind handler at 0x7829bf68 returned 1 001b:trace:msgbox:MSGBOX_OnInit L"An invalid argument was encountered." ---
and the second one does:
--- 001b:trace:listview:LISTVIEW_GetItemT (lpLVItem={iItem=1, iSubItem=0, state=2, stateMask=ffff, pszText="Y", cchTextMax=1024}, isW=0) 001b:trace:listview:ranges_contain (nItem=1) 001b:trace:listview:ranges_assert *** Checking ranges_contain:3067:before contain *** 001b:trace:listview:ranges_dump [0, 1] 001b:trace:listview:ranges_assert --- Done checking--- 001b:trace:listview:ranges_cmp range1=[1, 2], range2=[0, 1], cmp=1 001b:trace:listview:LISTVIEW_WindowProc (hwnd=0x203ae uMsg=1032 wParam=0 lParam=0) 001b:trace:listview:LISTVIEW_GetSelectedCount nSelectedCount=1 001b:trace:msgbox:MSGBOX_OnInit L"Invalid selection: 1 != 0" ---
First number in "Invalid selection" is a returned selected count from previous message. So application expect it to be zero at this point I guess.
P.S. I'm able to run this only with +seh. Also I see some crashes in native msvcr80, switching to builtin crashes very early - a separate bug filed for that.