http://bugs.winehq.org/show_bug.cgi?id=30513
--- Comment #4 from Nikolay Sivov bunglehead@gmail.com 2012-04-26 14:34:10 CDT --- So I guess I found a reason for that crash, here is a patch http://www.winehq.org/pipermail/wine-patches/2012-April/113739.html
It fixes a crash and msxml starts reporting CDATA callbacks, but application still exits early. Native msxml3/6 do not help, so problem is probably somewhere else.