https://bugs.winehq.org/show_bug.cgi?id=47089
--- Comment #12 from Fabian Maurer dark.shadow4@web.de --- It's a bit suspicious that the string that is passed to the crashing DrawTextW comes from GetProcAddress..
FWIW, Windows doesn't crash when passed invalid text, it exits as soon as it notices the DC being invalid. Don't think that's a proper solution though.