(2a38.4e94): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=093ea130 ebx=00000000 ecx=0058ebdc edx=000004d0 esi=093ea130 edi=00000001
eip=7522f957 esp=0058ebb4 ebp=0058ebb4 iopl=0         nv up ei pl nz ac pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010216
USP10!otlLigCaretListTable::coverage+0x7:
7522f957 668b08          mov     cx,word ptr [eax]        ds:002b:093ea130=????
0:000> kb
ChildEBP RetAddr  Args to Child              
0058ebb4 7522f9db 0058ebe0 093ea000 000004d0 USP10!otlLigCaretListTable::coverage+0x7
0058ebd0 7523a48a 0058ec24 093ea130 093ea000 USP10!FindLigGlyph+0x4b
0058ec14 75239676 0058efe8 0058f00c 0058eefc USP10!SubstituteNtoM+0x29a
0058ec54 75231393 0058efe8 0058f00c 0058eefc USP10!otlMultiSubstLookup::apply+0xf6
0058ecb8 752335e1 00000000 0058efe8 0058f00c USP10!ApplyLookup+0x183
0058eebc 7522f29f 42555347 0058f024 0058efe8 USP10!ApplyFeatures+0x481
0058ef08 7522f710 00000000 093ea000 093e9b58 USP10!SubstituteOtlGlyphs+0x1bf
0058ef44 752213c0 0058efc0 0058eff8 0058f024 USP10!SubstituteOtlChars+0x220
0058f1c0 7521548a 0058f2cc 0058f2f8 0058f2e0 USP10!HebrewEngineGetGlyphs+0x690
0058f280 7521253f 0058f2cc 0058f2f8 0058f2e0 USP10!ShapingGetGlyphs+0x36a
0058f368 751e5c6f 06012a76 093c6124 093c6318 USP10!ShlShape+0x2ef
0058f3ac 751f167a 06012a76 093c6124 093c6318 USP10!ScriptShape+0x15f
0058f40c 751f2b14 00000000 00000000 0058f48c USP10!RenderItemNoFallback+0xfa
0058f438 751f2da2 00000000 00000000 0058f48c USP10!RenderItemWithFallback+0x104
0058f45c 751f4339 00000000 0058f48c 093c6124 USP10!RenderItem+0x22
0058f4a0 751e7a04 000004a0 00000400 06012a76 USP10!ScriptStringAnalyzeGlyphs+0x1e9
0058f4b8 76ca5465 06012a76 093c6040 0000000a USP10!ScriptStringAnalyse+0x284
0058f504 76ca5172 06012a76 0058f8ec 0000000a LPK!LpkStringAnalyse+0xe5
0058f600 76ca1410 06012a76 00000000 00000000 LPK!LpkCharsetDraw+0x332
0058f634 763c18b0 06012a76 00000000 00000000 LPK!LpkDrawTextEx+0x40
0058f674 763c22bf 06012a76 00000f90 00000000 USER32!DT_DrawStr+0x13c
0058f6c0 763c21f2 06012a76 0058f8ec 0058f900 USER32!DT_GetLineBreak+0x78
0058f76c 763c14d4 06012a76 00000000 0000000a USER32!DrawTextExWorker+0x255
0058f790 763c2475 06012a76 0058f8ec ffffffff USER32!DrawTextExW+0x1e
0058f7c4 00306a5c 06012a76 0058f8ec ffffffff USER32!DrawTextW+0x4d
[...]
