Crash in cfgrelayex, Analyzed 3 dumps, total processed 124, rate equals 2.42%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
0521e060 75a85d29 gdi32full!pcfLocateCFONT+0x6d
0521e3e0 75af1f6f gdi32full!GetFontRealizationInfo+0x109
0521e990 75ae7e0b gdi32full!LoadFont+0x70
0521e9b4 75ae7f62 gdi32full!FindOrCreateFaceCache+0xc7
0521eac0 75a86ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
0521ee68 75a874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
0521ef84 75a88863 gdi32full!ScriptStringAnalyse+0x3eb
0521f128 75a86723 gdi32full!LpkCharsetDraw+0xa93
0521f168 74f6f57b gdi32full!LpkDrawTextEx+0x203
0521f1cc 74f6f481 user32!DT_DrawStr+0x69
0521f224 74f6f07e user32!DT_GetLineBreak+0xf8
0521f2f4 74fdcb2e user32!DrawTextExWorker+0x1c4
0521f310 66c809c4 user32!DrawTextExW+0x1e
0521f374 66c869aa uxtheme!CTextDraw::GetTextExtent+0x109
0521f3bc 66c781bd uxtheme!GetThemeTextExtent+0x8a
0521f410 66c4689a uxtheme!_GetNcCaptionTextSize+0x61
0521f588 66c47bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
0521f66c 66c4c30f uxtheme!_WindowPosChangedWorker+0x73
0521f678 66c490c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
0521f6e0 74f64630 uxtheme!ThemePostWndProc+0x340
0521f7dc 74f6408a user32!UserCallWinProcCheckWow+0x4f0
0521f840 74f71487 user32!DispatchClientMessage+0xea
0521f880 76fb91bd user32!__fnINLPWINDOWPOS+0x37
0521f8d0 74df12ac ntdll!KiUserCallbackDispatcher+0x4d
0521f8d4 66c7643f win32u!NtUserSetWindowPos+0xc
0521f900 66c4a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0521f984 74f645d8 uxtheme!ThemePreWndProc+0x988
0521fa80 74f62ec5 user32!UserCallWinProcCheckWow+0x498
0521fafc 74f62a10 user32!DispatchMessageWorker+0x4a5
0521fb08 797ff5a1 user32!DispatchMessageW+0x10
0521fb2c 797ff2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0521fb8c 7980196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0521fb98 7981ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0521fbd4 76737ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0521fbe4 76fac11b kernel32!BaseThreadInitThunk+0x19
0521fc3c 76fac09f ntdll!__RtlUserThreadStart+0x2b
0521fc4c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0452e018 774c79fc gdi32full!pcfLocateCFONT+0x8
0452e398 774c1bde gdi32full!GetFontRealizationInfo+0xdc
0452e948 774c29fc gdi32full!LoadFont+0x76
0452e96c 774c34f3 gdi32full!FindOrCreateFaceCache+0x98
0452ea70 774cadf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0452ee18 774c91f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0452f284 774c82ef gdi32full!ScriptStringAnalyse+0xa16
0452f43c 774c7b40 gdi32full!LpkCharsetDraw+0x60f
0452f468 779dd37d gdi32full!LpkDrawTextEx+0x30
0452f4c4 779dd214 user32!DT_DrawStr+0x5f
0452f524 779dcd4b user32!DT_GetLineBreak+0xa2
0452f5f4 779dcb4e user32!DrawTextExWorker+0x1f9
0452f610 707ee6ca user32!DrawTextExW+0x1e
0452f674 707edd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0452f6bc 707e43c9 uxtheme!GetThemeTextExtent+0x74
0452f710 707f0f87 uxtheme!_GetNcCaptionTextSize+0x61
0452f800 707f293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0452f8ac 707f29ef uxtheme!_WindowPosChangedWorker+0x7c
0452f8b8 707ef545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0452f908 779e7ff3 uxtheme!ThemePostWndProc+0x355
0452f9f4 779e7bca user32!UserCallWinProcCheckWow+0x363
0452fa58 779efc37 user32!DispatchClientMessage+0xea
0452fa98 77d254ed user32!__fnINLPWINDOWPOS+0x37
0452fae8 77bf124c ntdll!KiUserCallbackDispatcher+0x4d
0452faec 7080d44f win32u!NtUserSetWindowPos+0xc
0452fb18 707f00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0452fb74 779e7f9f uxtheme!ThemePreWndProc+0x43f
0452fc60 779e6901 user32!UserCallWinProcCheckWow+0x30f
0452fcdc 779e6420 user32!DispatchMessageWorker+0x4d1
0452fce8 619ff5a1 user32!DispatchMessageW+0x10
0452fd0c 619ff2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0452fd6c 61a0196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0452fd78 61a1ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0452fdb4 75e3fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0452fdc4 77d180ce kernel32!BaseThreadInitThunk+0x19
0452fe20 77d1809e ntdll!__RtlUserThreadStart+0x2f
0452fe30 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b