http://bugs.winehq.org/show_bug.cgi?id=10437
--- Comment #12 from Jevgeni j.zolotarjov@gmail.com 2007-12-04 06:39:31 --- Created an attachment (id=9484) --> (http://bugs.winehq.org/attachment.cgi?id=9484) crash_log
And this is the part of log without any patches. The major difference starts at line 160180. Obviously this is where richedit control starts painting itself. I hope, this helps you to find the problem and solve it. If you need something else from me, just tell me.