Crash in cfgrelayex, Analyzed 2 dumps, total processed 33, rate equals 6.06%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
04aefaa8 7773bfdf ntdll!LdrpUpdateLoadCount2+0x40
04aefb28 7773c13a ntdll!LdrpUnloadDll+0x9c
04aefb6c 75641956 ntdll!LdrUnloadDll+0x4a
04aefb80 75e1d57a KERNELBASE!FreeLibraryAndExitThread+0x28
04aefb90 5333007e kernel32!FreeLibraryAndExitThreadStub+0x10
04aefba4 5333015a CfgRelayEx!common_end_thread+0x56
04aefbb0 5332ffd0 CfgRelayEx!_endthreadex+0xd
04aefbec 75e0336a CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x5c
04aefbf8 77739902 kernel32!BaseThreadInitThunk+0xe
04aefc38 777398d5 ntdll!__RtlUserThreadStart+0x70
04aefc50 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
040de588 767a29fc gdi32full!LoadFont+0x15
040de5ac 767a34f3 gdi32full!FindOrCreateFaceCache+0x98
040de6b0 767aadf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
040dea58 767a91f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
040deec4 767a82ef gdi32full!ScriptStringAnalyse+0xa16
040df03c 767a8718 gdi32full!LpkCharsetDraw+0x60f
040df108 767b0092 gdi32full!GetTextMetricsW+0x108
040df13c 76b1cd4b gdi32full!IntersectClipRectImpl+0x42
040df20c 76b1cb4e user32!DrawTextExWorker+0x1f9
040df228 6176e6ca user32!DrawTextExW+0x1e
040df28c 6176dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
040df2d4 617643c9 uxtheme!GetThemeTextExtent+0x74
040df328 61770f87 uxtheme!_GetNcCaptionTextSize+0x61
040df418 6177293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
040df4c4 617729ef uxtheme!_WindowPosChangedWorker+0x7c
040df4d0 6176f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
040df520 76b27ff3 uxtheme!ThemePostWndProc+0x355
040df60c 76b27bca user32!UserCallWinProcCheckWow+0x363
040df670 76b2fc37 user32!DispatchClientMessage+0xea
040df6b0 777354ed user32!__fnINLPWINDOWPOS+0x37
040df700 7657124c ntdll!KiUserCallbackDispatcher+0x4d
040df704 6178d44f win32u!NtUserSetWindowPos+0xc
040df730 617700ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
040df78c 76b27f9f uxtheme!ThemePreWndProc+0x43f
040df878 76b26901 user32!UserCallWinProcCheckWow+0x30f
040df8f4 76b26420 user32!DispatchMessageWorker+0x4d1
040df900 50c0f5a1 user32!DispatchMessageW+0x10
040df924 50c0f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
040df984 50c1196f CfgRelayEx!CConfigCenterStub::Process+0xa7
040df990 50c2ffcb CfgRelayEx!CThread::ThreadProc+0x1f
040df9cc 775afcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
040df9dc 777280ce kernel32!BaseThreadInitThunk+0x19
040dfa38 7772809e ntdll!__RtlUserThreadStart+0x2f
040dfa48 00000000 ntdll!_RtlUserThreadStart+0x1b