Crash in cfgrelayex, Analyzed 2 dumps, total processed 181, rate equals 1.10%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

04d7fe18 760e386d CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04d7fe24 77ae96f2 kernel32!BaseThreadInitThunk+0xe
04d7fe64 77ae96c5 ntdll!__RtlUserThreadStart+0x70
04d7fe7c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
046ae260 774ff929 ntdll!_SEH_prolog4_GS+0x1a
046ae2fc 774ffa15 ntdll!LdrpGetDelayloadExportDll+0x80
046ae5ac 774fcbfb ntdll!LdrpHandleProtectedDelayload+0x95
046ae604 7737f6c8 ntdll!LdrResolveDelayLoadedAPI+0x17b
046ae624 77380ecd gdi32full!__delayLoadHelper2+0x28
046ae750 77370f35 gdi32full!_tailMerge_textshaping_dll+0xd
046aecf8 77371806 gdi32full!LoadFont+0x307
046aed1c 77372029 gdi32full!FindOrCreateFaceCache+0x98
046aee20 7737770b gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
046af284 773768ef gdi32full!ScriptStringAnalyse+0x92b
046af40c 77376140 gdi32full!LpkCharsetDraw+0x60f
046af438 76a1f3bd gdi32full!LpkDrawTextEx+0x30
046af494 76a1f254 user32!DT_DrawStr+0x5f
046af4f4 76a1ed8b user32!DT_GetLineBreak+0xa2
046af5c4 76a1eb8e user32!DrawTextExWorker+0x1f9
046af5e0 73c4e77a user32!DrawTextExW+0x1e
046af644 73c4de14 uxtheme!CTextDraw::GetTextExtent+0xa4
046af68c 73c443e9 uxtheme!GetThemeTextExtent+0x74
046af6e0 73c51027 uxtheme!_GetNcCaptionTextSize+0x61
046af7d4 73c529dc uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
046af880 73c52a8f uxtheme!_WindowPosChangedWorker+0x7c
046af88c 73c4f5f5 uxtheme!OnOwpPostWindowPosChanged+0x1f
046af8dc 76a2a453 uxtheme!ThemePostWndProc+0x355
046af9c4 76a2a02a user32!UserCallWinProcCheckWow+0x363
046afa28 76a31467 user32!DispatchClientMessage+0xea
046afa68 77524e9d user32!__fnINLPWINDOWPOS+0x37
046afab8 75ba124c ntdll!KiUserCallbackDispatcher+0x4d
046afabc 73c6de9f win32u!NtUserSetWindowPos+0xc
046afae8 73c5018f uxtheme!OnOwpPreDwmCompositionChanged+0x4f
046afb44 76a2a3ff uxtheme!ThemePreWndProc+0x43f
046afc2c 76a2819a user32!UserCallWinProcCheckWow+0x30f
046afca0 76a27f60 user32!DispatchMessageWorker+0x22a
046afcac 7a0bf5a1 user32!DispatchMessageW+0x10
046afcd0 7a0bf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
046afd30 7a0c196f CfgRelayEx!CConfigCenterStub::Process+0xa7
046afd3c 7a0dffcb CfgRelayEx!CThread::ThreadProc+0x1f
046afd78 76ddfa29 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
046afd88 77517a9e kernel32!BaseThreadInitThunk+0x19
046afde4 77517a6e ntdll!__RtlUserThreadStart+0x2f
046afdf4 00000000 ntdll!_RtlUserThreadStart+0x1b