https://bugs.winehq.org/show_bug.cgi?id=50801
--- Comment #2 from Esme Povirk madewokherd@gmail.com --- Yep, looks like the crashing instruction is a movl %ecx,(%rax).
From disassembling the function:
0x000000000295115b: movq %gs:0x00000000000014e8,%r15 0x0000000002951164: leaq 0x0000000000000498(%r15),%rax 0x000000000295116b: movl $0x200000001,%rcx 0x0000000002951170: movl %ecx,(%rax)
So it has to do with our inability to set %gs maybe?