MENU_TrackMenu trouble

Hello,

I'm struggling to make recent Chessbase applications such as Fritz 9 and 10 
work with wine.  A free download which shows the same symptoms described 
below is available here:

http://fritzserver.org/download/CBLightEnglishSetup.exe

I have tried to look into this and this is what I've found:

The application uses TrackPopupMenuEx() (user32/menu.c) which in wine is 
just a call to TrackPopupMenu(). The latter function calls MENU_TrackMenu() 
and that's where things seem to go wrong.

In the loop going through the message queue the application will crash (see 
output below) whenever the following message is sent:

SendMessageW( mt.hOwnerWnd, WM_ENTERIDLE, MSGF_MENU, (LPARAM)win );

If I uncomment that line, the application will stay alive but I will obviously 
experience weird menu behaviour.

I'm stuck trying to find out what the problem is and would really appreciate 
any help on how to proceed with this

Thanks and best regards,

Nicholai

-------------------------------------------------------------------------------------------------------------------------------
wine: Unhandled page fault on read access to 0x00000020 at address 0x15a60c5 
(thread 03da), starting debugger...
Unhandled exception: page fault on read access to 0x00000020 in 32-bit code 
(0x015a60c5).
Register dump:
 CS:0073 SS:007b DS:007b ES:007b FS:0033 GS:003b
 EIP:015a60c5 ESP:0034ea64 EBP:0034eb10 EFLAGS:00010246(   - 00      -RIZP1)
 EAX:00000000 EBX:00000000 ECX:0272e930 EDX:782ba9e0
 ESI:015a60c0 EDI:0272e930
Stack dump:
0x0034ea64:  015a60c0 782021cb 00000002 00000000
0x0034ea74:  62a7f85f 00000121 0272e930 00138218
0x0034ea84:  00000000 00000000 015cfe20 782bafa4
0x0034ea94:  7fffffff 7bc3f3de 00000000 00000000
0x0034eaa4:  00000090 7bc326a1 00000000 00000010
0x0034eab4:  0034eb04 7bc40bff 00110014 7bc8443c
Backtrace:
=>1 0x015a60c5 in sviewnet (+0x760c5) (0x0034eb10)
  2 0x78201ca1 in mfc80 (+0x31ca1) (0x0034eb30)
  3 0x78200a43 in mfc80 (+0x30a43) (0x0034eb98)
  4 0x78200c53 in mfc80 (+0x30c53) (0x0034ebbc)
  5 0x781fedad in mfc80 (+0x2edad) (0x0034ec04)
  6 0x7ed63b8a WINPROC_wrapper+0x1a() in user32 (0x0034ec34)
  7 0x7ed6429e in user32 (+0xa429e) (0x0034ec74)
  8 0x7ed685db in user32 (+0xa85db) (0x0034f144)
  9 0x7ed69a0b WINPROC_call_window+0x15b() in user32 (0x0034f184)
  10 0x7ed3036c in user32 (+0x7036c) (0x0034f1f4)
  11 0x7ed340a2 in user32 (+0x740a2) (0x0034f254)
  12 0x7ed3451a SendMessageW+0x4a() in user32 (0x0034f294)
  13 0x7ed2d327 in user32 (+0x6d327) (0x0034f354)
  14 0x7ed2e0af TrackPopupMenu+0x11f() in user32 (0x0034f394)
  15 0x7ed2e14e TrackPopupMenuEx+0x5e() in user32 (0x0034f3c4)
  16 0x015a757a in sviewnet (+0x7757a) (0x000005f0)
  17 0x00000000 (0x00000000)