http://bugs.winehq.org/show_bug.cgi?id=20553
--- Comment #1 from Nikolay Sivov bunglehead@gmail.com 2009-11-02 10:25:50 --- Hi, Dan.
Does your test free imagelists before ListView destruction? How LVS_SHAREIMAGELISTS is used?
The cause here is a dereference to himl->magic (or whatever it's called), himl isn't null obviously, but is in freed memory block.
(I'm not able to download it currently, it's to fat for my connection)