https://bugs.winehq.org/show_bug.cgi?id=38405
--- Comment #1 from grodrigues grodrigues.math@gmail.com --- Sorry, pasted the wrong line in the above comment.
Replace:
"So, to my untrained eye, it seems that d3d is trying to decrease the refcount (that is, accessing) an already freed object."
"So, to my untrained eye, it seems that it is when d3d is trying to free 0x1b4f68 that it crashes".