https://bugs.winehq.org/show_bug.cgi?id=47748
--- Comment #7 from Andrey Gusev andrey.goosev@gmail.com --- Created attachment 75384 --> https://bugs.winehq.org/attachment.cgi?id=75384 +msvcp
Demo doesn't reproduce this crash.
Removing the trace output gives a crash with condition below.
if(assign->size < pos)