https://bugs.winehq.org/show_bug.cgi?id=44329
--- Comment #7 from Nikolay Sivov bunglehead@gmail.com --- The problem is not that wrong state is returned, but actually state field is not touched at all when requesting subitem data. I'll send a fix for that after code freeze.
P.S. running your test exe is problematic, it needs mfc140, but after installing vcrun2015, it still crashes because of some ucrtbase vs api-ms-* forwards. If possible please rebuild it with older Visual Studio.