Crash in cfgrelayex, Analyzed 3 dumps, total processed 32, rate equals 9.38%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
0028f45c 77e5e0c3 ntdll!RtlpLowFragHeapFree+0xc5
0028f474 75ba14ad ntdll!RtlFreeHeap+0x105
0028f488 742f2d01 kernel32!HeapFree+0x14
0028f49c 742fb21e CfgRelayEx!_free_base+0x1c
0028f4b4 742fb4e3 CfgRelayEx!free_crt_array_internal+0x2e
0028f4e0 742f8c3a CfgRelayEx!__acrt_locale_free_time+0x3a
0028f4f0 742f8b7e CfgRelayEx!__acrt_locale_free_lc_time_if_unreferenced+0x25
0028f50c 742f2b55 CfgRelayEx!__acrt_free_locale+0xdc
0028f51c 742f28d2 CfgRelayEx!replace_current_thread_locale_nolock+0x36
0028f554 742f29b0 CfgRelayEx!__crt_seh_guarded_call<void>::operator()<<lambda_5b71d36f03204c0beab531769a5b5694>,<lambda_be2b3da3f62db62e9dad5dc70221a656> &,<lambda_8f9ce462984622f9bf76b59e2aaaf805> >+0x29
0028f574 742f2b18 CfgRelayEx!__acrt_lock_and_call<<lambda_be2b3da3f62db62e9dad5dc70221a656> >+0x24
0028f5b4 742f2a68 CfgRelayEx!destroy_ptd+0xa2
0028f5c0 77e895c5 CfgRelayEx!destroy_fls+0x13
0028f5e0 75cb3fad ntdll!RtlFlsFree+0xa0
0028f5ec 742f6c1b KERNELBASE!FlsFree+0xe
0028f600 742f2cdb CfgRelayEx!__acrt_FlsFree+0x3d
0028f608 742f12f7 CfgRelayEx!__acrt_uninitialize_ptd+0x10
0028f614 742d8dfd CfgRelayEx!__acrt_uninitialize_critical+0xd
0028f61c 742d931e CfgRelayEx!__scrt_dllmain_uninitialize_critical+0x7
0028f620 742d92f4 CfgRelayEx!dllmain_crt_process_detach+0x80
0028f654 742d918f CfgRelayEx!dllmain_crt_process_detach+0x56
0028f660 742d93df CfgRelayEx!dllmain_crt_dispatch+0x4e
0028f6a0 742d947d CfgRelayEx!dllmain_dispatch+0xaf
0028f6b4 77e69264 CfgRelayEx!_DllMainCRTStartup+0x1c
0028f6d4 77e88fa8 ntdll!LdrpCallInitRoutine+0x14
0028f778 77e88e4a ntdll!LdrShutdownProcess+0x1aa
0028f78c 75ba7a2c ntdll!RtlExitUserProcess+0x74
0028f7a0 0009275a kernel32!ExitProcessStub+0x12
0028f7ac 000926ef srvhost!exit_or_terminate_process+0x40
0028f7e4 00092895 srvhost!common_exit+0xee
0028f7f8 00087e90 srvhost!exit+0x11
0028f838 75ba343d srvhost!__scrt_common_main_seh+0x179
0028f844 77e69802 kernel32!BaseThreadInitThunk+0xe
0028f884 77e697d5 ntdll!__RtlUserThreadStart+0x70
0028f89c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03a5f8ac 7c0c345d ntdll!RtlInitUnicodeString+0x1b
03a5f8f4 7c0c3c0f CfgRelayEx!CChannelImpl::Run+0x3d
03a5f8fc 7c0dffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
03a5f938 77116359 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03a5f948 775b7b74 kernel32!BaseThreadInitThunk+0x19
03a5f9a4 775b7b44 ntdll!__RtlUserThreadStart+0x2f
03a5f9b4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0484e1c8 773ee6f2 ntdll!LdrpPreprocessDllName+0x18
0484e450 773edfd1 ntdll!LdrpLoadForwardedDll+0xd6
0484e4ec 773ed9e9 ntdll!LdrpGetDelayloadExportDll+0x80
0484e788 773ff6ee ntdll!LdrpHandleProtectedDelayload+0x79
0484e7d8 770e3a1c ntdll!LdrResolveDelayLoadedAPI+0x1ee
0484e7f8 770ebd53 gdi32full!__delayLoadHelper2+0x28
0484e908 770e88fb gdi32full!_tailMerge_textshaping_dll+0xd
0484e948 770bd3a0 gdi32full!ScriptShape+0x16b
0484e9c8 770bcaab gdi32full!RenderItemNoFallback+0x5e0
0484ea08 770bc948 gdi32full!RenderItemWithFallback+0x12b
0484ea30 770bc6ce gdi32full!RenderItem+0x28
0484ea80 770ba5ab gdi32full!ScriptStringAnalyzeGlyphs+0x1be
0484eb84 770b790b gdi32full!ScriptStringAnalyse+0x7fb
0484ecf4 770b7170 gdi32full!LpkCharsetDraw+0x53b
0484ed20 756fc903 gdi32full!LpkDrawTextEx+0x30
0484eda4 756fc2fd user32!DT_GetLineBreak+0x113
0484ee64 7571698e user32!DrawTextExWorker+0x1ed
0484ee80 6320ee89 user32!DrawTextExW+0x1e
0484f31c 6320c349 uxtheme!CThemeWnd::GetNcWindowMetrics+0x809
0484f468 756f70c3 uxtheme!_ThemeDefWindowProc+0x899
0484f55c 756f6b2a user32!UserCallWinProcCheckWow+0x4d3
0484f5c0 75700217 user32!DispatchClientMessage+0xea
0484f600 774271dc user32!__fnINLPWINDOWPOS+0x37
0484f650 6323b77f ntdll!KiUserCallbackDispatcher+0x4c
0484f67c 6320dd73 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0484f6d8 756f706a uxtheme!ThemePreWndProc+0x413
0484f7cc 756f59c8 user32!UserCallWinProcCheckWow+0x47a
0484f848 756f5500 user32!DispatchMessageWorker+0x4b8
0484f854 5c11f5a1 user32!DispatchMessageW+0x10
0484f878 5c11f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0484f8d8 5c12196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0484f8e4 5c13ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0484f920 764e6839 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0484f930 7741906f kernel32!BaseThreadInitThunk+0x19
0484f988 7741903d ntdll!__RtlUserThreadStart+0x2b
0484f998 00000000 ntdll!_RtlUserThreadStart+0x1b