Crash in cfgrelayex, Analyzed 4 dumps, total processed 88, rate equals 4.55%

Top 1: Version = 2.7224.1000.620, Total count = 4

dump count = 2

043bf4d0 7749f4eb gdi32full!LpkDrawTextEx+0x203
043bf56c 7599c902 user32!DT_DrawStr+0x69
043bf678 71c90174 gdi32!IntersectClipRect+0x22
043bf6dc 71c9616a uxtheme!CTextDraw::GetTextExtent+0x109
043bf724 71c8796d uxtheme!GetThemeTextExtent+0x8a
043bf778 71c5686a uxtheme!_GetNcCaptionTextSize+0x61
043bf8f0 71c57bae uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
043bf9d4 71c5c2df uxtheme!_WindowPosChangedWorker+0x73
043bf9e0 71c59090 uxtheme!OnOwpPostWindowPosChanged+0x1f
043bfa48 774945c0 uxtheme!ThemePostWndProc+0x340
043bfb44 7749401a user32!UserCallWinProcCheckWow+0x4f0
043bfba8 774a13f7 user32!DispatchClientMessage+0xea
043bfbe8 776a919d user32!__fnINLPWINDOWPOS+0x37
043bfc38 76d012ac ntdll!KiUserCallbackDispatcher+0x4d
043bfc3c 71c85bef win32u!NtUserSetWindowPos+0xc
043bfc68 71c5a428 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
043bfd98 776a6bdc uxtheme!ThemePreWndProc+0x988
043bfe20 76d010dc ntdll!ZwCallbackReturn+0xc
043bfe6c 5336f5a1 win32u!NtUserGetMessage+0xc
043bfef0 5337196f CfgRelayEx!WTL::CMessageLoop::Run+0xc1
043bfefc 5338ffcb CfgRelayEx!CThread::ThreadProc+0x1f
043bff38 75ae7ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
043bff48 7769c10b kernel32!BaseThreadInitThunk+0x19
043bffa0 7769c08f ntdll!__RtlUserThreadStart+0x2b
043bffb0 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04e2fa44 74ca14ad ntdll!RtlFreeHeap+0x3a
04e2fa58 52e72d01 kernel32!HeapFree+0x14
04e2fa6c 52e72a8f CfgRelayEx!_free_base+0x1c
04e2fa7c 52e72a68 CfgRelayEx!destroy_ptd+0x19
04e2fa88 770393e1 CfgRelayEx!destroy_fls+0x13
04e2faa4 7705214f ntdll!RtlProcessFlsData+0x57
04e2fb3c 770523e3 ntdll!LdrShutdownThread+0x35
04e2fb4c 750019e8 ntdll!RtlExitUserThread+0x2a
04e2fb60 74dcd783 KERNELBASE!FreeLibraryAndExitThread+0x5f
04e2fb78 74ca343d ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x2f
04e2fb84 77039812 kernel32!BaseThreadInitThunk+0xe
04e2fbc4 770397e5 ntdll!__RtlUserThreadStart+0x70
04e2fbdc 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
042fe258 77180504 gdi32full!GetFontRealizationInfo+0x15
042fe808 77181066 gdi32full!LoadFont+0x76
042fe82c 771815f0 gdi32full!FindOrCreateFaceCache+0x98
042fe930 77188164 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
042fecd8 77186566 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
042ff144 7718565f gdi32full!ScriptStringAnalyse+0xa16
042ff2dc 77184eb0 gdi32full!LpkCharsetDraw+0x60f
042ff308 757aa6dd gdi32full!LpkDrawTextEx+0x30
042ff364 757aa574 user32!DT_DrawStr+0x5f
042ff3c4 757aa0ab user32!DT_GetLineBreak+0xa2
042ff494 757a9eae user32!DrawTextExWorker+0x1f9
042ff4b0 66fee8ba user32!DrawTextExW+0x1e
042ff514 66fedf54 uxtheme!CTextDraw::GetTextExtent+0xa4
042ff55c 66fe4429 uxtheme!GetThemeTextExtent+0x74
042ff5b0 66ff1167 uxtheme!_GetNcCaptionTextSize+0x61
042ff6a4 66ff2b1c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
042ff750 66ff2bcf uxtheme!_WindowPosChangedWorker+0x7c
042ff75c 66fef735 uxtheme!OnOwpPostWindowPosChanged+0x1f
042ff7ac 757b5203 uxtheme!ThemePostWndProc+0x355
042ff894 757b4dda user32!UserCallWinProcCheckWow+0x363
042ff8f8 757bc267 user32!DispatchClientMessage+0xea
042ff938 7750338d user32!__fnINLPWINDOWPOS+0x37
042ff988 76e8124c ntdll!KiUserCallbackDispatcher+0x4d
042ff98c 6700d7bf win32u!NtUserSetWindowPos+0xc
042ff9b8 66ff02cf uxtheme!OnOwpPreDwmCompositionChanged+0x4f
042ffa14 757b51af uxtheme!ThemePreWndProc+0x43f
042ffafc 757b350a user32!UserCallWinProcCheckWow+0x30f
042ffb70 757b32d0 user32!DispatchMessageWorker+0x22a
042ffb7c 7c01f5a1 user32!DispatchMessageW+0x10
042ffba0 7c01f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
042ffc00 7c02196f CfgRelayEx!CConfigCenterStub::Process+0xa7
042ffc0c 7c03ffcb CfgRelayEx!CThread::ThreadProc+0x1f
042ffc48 76bcf989 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
042ffc58 774f5de4 kernel32!BaseThreadInitThunk+0x19
042ffcb4 774f5db4 ntdll!__RtlUserThreadStart+0x2f
042ffcc4 00000000 ntdll!_RtlUserThreadStart+0x1b