Crash in cfgrelayex, Analyzed 2 dumps, total processed 24, rate equals 8.33%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

02edf64c 02058bfd CfgRelayEx!CConfigCenterStub::UnregisterClient+0x1a
02edf80c 0209fab2 base!ConfigMgrImpl::ConfigUninit+0x17d
02edf904 020a01fc base!CMainWnd::OnClose+0x172
02edf914 0203311c base!CMainWnd::ProcessWindowMessage+0x4c
02edf964 7538c4e7 base!ATL::CWindowImplBaseT<ATL::CWindow,ATL::CWinTraits<1442840576,0> >::WindowProc+0x6c
02edf990 7538c5e7 user32!InternalCallWinProc+0x23
02edfa08 7538cc19 user32!UserCallWinProcCheckWow+0x14b
02edfa68 7538cc70 user32!DispatchMessageWorker+0x35e
02edfa78 0200adc3 user32!DispatchMessageW+0xf
02edfc74 0200ca6f base!CBasicTrayClient::MainEntry+0x343
02edfc7c 0219f4d3 base!CBasicTrayClient::ThreadProc+0xf
02edfcb8 7548ef6c base!thread_start<unsigned int (__stdcall*)(void *)>+0x57
02edfcc4 76dd3618 kernel32!BaseThreadInitThunk+0xe
02edfd04 76dd35eb ntdll!__RtlUserThreadStart+0x70
02edfd1c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03fae4c8 759c22d6 gdi32full!LoadFont+0x15
03fae4ec 759c2af9 gdi32full!FindOrCreateFaceCache+0x98
03fae5f0 759c9eb4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03fae998 759c82b6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
03faee04 759c73af gdi32full!ScriptStringAnalyse+0xa16
03faefa4 759c6c00 gdi32full!LpkCharsetDraw+0x60f
03faefd0 76d7d36d gdi32full!LpkDrawTextEx+0x30
03faf02c 76d7d204 user32!DT_DrawStr+0x5f
03faf08c 76d7cd3b user32!DT_GetLineBreak+0xa2
03faf15c 76d7cb3e user32!DrawTextExWorker+0x1f9
03faf178 6dace71a user32!DrawTextExW+0x1e
03faf1dc 6dacdd84 uxtheme!CTextDraw::GetTextExtent+0xa4
03faf224 6dac43e9 uxtheme!GetThemeTextExtent+0x74
03faf278 6dad0fc7 uxtheme!_GetNcCaptionTextSize+0x61
03faf36c 6dad297c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
03faf418 6dad2a2f uxtheme!_WindowPosChangedWorker+0x7c
03faf424 6dacf595 uxtheme!OnOwpPostWindowPosChanged+0x1f
03faf474 76d88473 uxtheme!ThemePostWndProc+0x355
03faf55c 76d8804a user32!UserCallWinProcCheckWow+0x363
03faf5c0 76d8f467 user32!DispatchClientMessage+0xea
03faf600 77824fbd user32!__fnINLPWINDOWPOS+0x37
03faf650 75ff124c ntdll!KiUserCallbackDispatcher+0x4d
03faf654 6daed6cf win32u!NtUserSetWindowPos+0xc
03faf680 6dad012f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03faf6dc 76d8841f uxtheme!ThemePreWndProc+0x43f
03faf7c4 76d861ba user32!UserCallWinProcCheckWow+0x30f
03faf838 76d85f80 user32!DispatchMessageWorker+0x22a
03faf844 568af5a1 user32!DispatchMessageW+0x10
03faf868 568af2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03faf8c8 568b196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03faf8d4 568cffcb CfgRelayEx!CThread::ThreadProc+0x1f
03faf910 767d00f9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03faf920 77817bbe kernel32!BaseThreadInitThunk+0x19
03faf97c 77817b8e ntdll!__RtlUserThreadStart+0x2f
03faf98c 00000000 ntdll!_RtlUserThreadStart+0x1b