Crash in cfgrelayex, Analyzed 3 dumps, total processed 113, rate equals 2.65%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
045be0ac 77bb8ae1 ntdll!sxsisol_SearchActCtxForDllName+0x26
045be214 77bba52c ntdll!RtlDosApplyFileIsolationRedirection_Ustr+0x2e1
045be278 77bb771e ntdll!LdrpPreprocessDllName+0x27c
045be500 77bb6a02 ntdll!LdrpLoadForwardedDll+0xdd
045be59c 77bb6559 ntdll!LdrpGetDelayloadExportDll+0x82
045be838 77bb52f4 ntdll!LdrpHandleProtectedDelayload+0x79
045be888 76b38dbd ntdll!LdrResolveDelayLoadedAPI+0x1e4
045be8a8 76ac4cc3 gdi32full!__delayLoadHelper2+0x28
045be9b8 76b140aa gdi32full!_tailMerge_textshaping_dll+0xd
045be9f8 76ad6209 gdi32full!ScriptShape+0xda
045bea70 76abcc14 gdi32full!RenderItemNoFallback+0x194c9
045beaa8 76abcb28 gdi32full!RenderItemWithFallback+0xb4
045bead8 76abc9fc gdi32full!RenderItem+0x28
045beb30 76ab98d6 gdi32full!ScriptStringAnalyzeGlyphs+0x1bc
045bec44 76aba873 gdi32full!ScriptStringAnalyse+0x7e6
045bedf0 76ab8733 gdi32full!LpkCharsetDraw+0xa93
045bee30 764df04b gdi32full!LpkDrawTextEx+0x203
045bee94 764def51 user32!DT_DrawStr+0x69
045beeec 764deb4e user32!DT_GetLineBreak+0xf8
045befbc 7654c74e user32!DrawTextExWorker+0x1c4
045befd8 71ed0fe4 user32!DrawTextExW+0x1e
045bf03c 71ed6fca uxtheme!CTextDraw::GetTextExtent+0x109
045bf084 71ec87dd uxtheme!GetThemeTextExtent+0x8a
045bf0d8 71e968ba uxtheme!_GetNcCaptionTextSize+0x61
045bf250 71e97bfe uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
045bf334 71e9c32f uxtheme!_WindowPosChangedWorker+0x73
045bf340 71e990e0 uxtheme!OnOwpPostWindowPosChanged+0x1f
045bf3a8 764d40f0 uxtheme!ThemePostWndProc+0x340
045bf4a4 764d3b4a user32!UserCallWinProcCheckWow+0x4f0
045bf508 764e0f57 user32!DispatchClientMessage+0xea
045bf548 77be916d user32!__fnINLPWINDOWPOS+0x37
045bf598 767312ac ntdll!KiUserCallbackDispatcher+0x4d
045bf59c 71ec6a5f win32u!NtUserSetWindowPos+0xc
045bf5c8 71e9a478 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
045bf648 764d4098 uxtheme!ThemePreWndProc+0x988
045bf744 764d2985 user32!UserCallWinProcCheckWow+0x498
045bf7c0 764d24d0 user32!DispatchMessageWorker+0x4a5
045bf7cc 5787f5a1 user32!DispatchMessageW+0x10
045bf7f0 5787f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
045bf850 5788196f CfgRelayEx!CConfigCenterStub::Process+0xa7
045bf85c 5789ffcb CfgRelayEx!CThread::ThreadProc+0x1f
045bf898 76837ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
045bf8a8 77bdc0cb kernel32!BaseThreadInitThunk+0x19
045bf900 77bdc04f ntdll!__RtlUserThreadStart+0x2b
045bf910 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03a8e0a4 777eb0cf ntdll!RtlpAllocateHeap+0x1e
03a8e140 777eae8e ntdll!RtlpAllocateHeapInternal+0x22f
03a8e15c 76945de1 ntdll!RtlAllocateHeap+0x3e
03a8e294 76943238 KERNELBASE!LocalBaseRegEnumValue+0x28c
03a8e310 753d7d7b KERNELBASE!RegEnumValueW+0xc8
03a8e428 753d7aa8 gdi32full!CacheFontLinkingData+0x199
03a8e448 753d9748 gdi32full!IsFontRegLinked+0x28
03a8e9f0 753dc46d gdi32full!LoadFont+0x24b
03a8ea14 753dafad gdi32full!FindOrCreateFaceCache+0x98
03a8eb18 753a91cd gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03a8eeb8 753a95b6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x27d
03a8efc4 753a762a gdi32full!ScriptStringAnalyse+0x3a6
03a8f14c 753a6880 gdi32full!LpkCharsetDraw+0x62a
03a8f178 75cfde42 gdi32full!LpkDrawTextEx+0x30
03a8f204 75cfd83d user32!DT_GetLineBreak+0x122
03a8f2c4 75d2320e user32!DrawTextExWorker+0x1ed
03a8f2e0 7105b6c6 user32!DrawTextExW+0x1e
03a8f740 7105de2b uxtheme!CThemeWnd::GetNcWindowMetrics+0x8b6
03a8f7ec 7105debf uxtheme!_WindowPosChangedWorker+0x77
03a8f7f8 7105a525 uxtheme!OnOwpPostWindowPosChanged+0x1f
03a8f84c 75d05043 uxtheme!ThemePostWndProc+0x405
03a8f934 75d04b2a user32!UserCallWinProcCheckWow+0x463
03a8f998 75d0e9c7 user32!DispatchClientMessage+0xea
03a8f9d8 7782427d user32!__fnINLPWINDOWPOS+0x37
03a8fa28 75f62ddc ntdll!KiUserCallbackDispatcher+0x4d
03a8fa2c 7108379f win32u!NtUserSetWindowPos+0xc
03a8fa58 7105ac20 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03a8fab4 75d05016 uxtheme!ThemePreWndProc+0x610
03a8fb9c 75d040de user32!UserCallWinProcCheckWow+0x436
03a8fc10 75d03ec0 user32!DispatchMessageWorker+0x20e
03a8fc1c 7a7af5a1 user32!DispatchMessageW+0x10
03a8fc40 7a7af2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03a8fca0 7a7b196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03a8fcac 7a7cffcb CfgRelayEx!CThread::ThreadProc+0x1f
03a8fce8 75c16359 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03a8fcf8 77817c14 kernel32!BaseThreadInitThunk+0x19
03a8fd54 77817be4 ntdll!__RtlUserThreadStart+0x2f
03a8fd64 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b