(15a0.1f88): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00000062 ebx=09886ffc ecx=001aefb8 edx=0981c03c esi=00000000 edi=001a0001
eip=752304a9 esp=001aeef8 ebp=001aef00 iopl=0         nv up ei pl nz na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010206
USP10!otlTableCacheData::FindLookupList+0x9:
752304a9 0fb77304        movzx   esi,word ptr [ebx+4]     ds:002b:09887000=????
0:000> kb
ChildEBP RetAddr  Args to Child              
001aef00 75231e25 00000062 001af27c 001af238 USP10!otlTableCacheData::FindLookupList+0x9
001aef20 752333fa 00000002 00000001 001af238 USP10!otlCacheManager::GetNextLookup+0xc5
001af104 7522f4a1 534f5047 001af27c 001af244 USP10!ApplyFeatures+0x29a
001af150 7522b10b 00000000 00000000 001af27c USP10!RePositionOtlGlyphs+0x1c1
001af184 75227c73 001af21c 001af268 001af27c USP10!ShapingLibraryInternal::RePositionOtlGlyphsWithLanguageFallback+0x2b
001af3f0 75215a9e 001af540 001af548 001af52c USP10!GenericEngineGetGlyphPositions+0x8a3
001af4c4 75212b8a 001af540 001af548 001af52c USP10!ShapingGetGlyphPositions+0x40e
001af5bc 751e5e45 49010eef 09816124 098163e0 USP10!ShlPlace+0x20a
001af600 751f186d 49010eef 09816124 098163e0 USP10!ScriptPlace+0x165
001af65c 751f2b14 00000001 00000002 001af6dc USP10!RenderItemNoFallback+0x2ed
001af688 751f2da2 00000001 00000002 001af6dc USP10!RenderItemWithFallback+0x104
001af6ac 751f4339 00000002 001af6dc 09816124 USP10!RenderItem+0x22
001af6f0 751e7a04 000004a0 00000400 49010eef USP10!ScriptStringAnalyzeGlyphs+0x1e9
001af708 76ca5465 49010eef 09816040 0000000a USP10!ScriptStringAnalyse+0x284
001af754 76ca5172 49010eef 001afb3c 0000000a LPK!LpkStringAnalyse+0xe5
001af850 76ca1410 49010eef 00000000 00000000 LPK!LpkCharsetDraw+0x332
001af884 763c18b0 49010eef 00000000 00000000 LPK!LpkDrawTextEx+0x40
001af8c4 763c22bf 49010eef 00000080 00000000 USER32!DT_DrawStr+0x13c
001af910 763c21f2 49010eef 001afb3c 001afb50 USER32!DT_GetLineBreak+0x78
001af9bc 763c14d4 49010eef 00000000 0000000a USER32!DrawTextExWorker+0x255
001af9e0 763c2475 49010eef 001afb3c ffffffff USER32!DrawTextExW+0x1e
001afa14 00376a5c 49010eef 001afb3c ffffffff USER32!DrawTextW+0x4d
[...]
