Crash in cfgrelayex, Analyzed 3 dumps, total processed 54, rate equals 5.56%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
0371fb58 7afa345d ntdll!RtlInitUnicodeString+0x1b
0371fba0 7afa3c0f CfgRelayEx!CChannelImpl::Run+0x3d
0371fba8 7afbffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
0371fbe4 75336739 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0371fbf4 773e8fd2 kernel32!BaseThreadInitThunk+0x19
0371fc4c 773e8f9d ntdll!__RtlUserThreadStart+0x2b
0371fc5c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
048fe0dc 77261870 ntdll!RtlpAllocateHeap+0x1e
048fe180 772613fe ntdll!RtlpAllocateHeapInternal+0x460
048fe19c 755f0f09 ntdll!RtlAllocateHeap+0x3e
048fe2d4 755f0428 KERNELBASE!LocalBaseRegEnumValue+0x2cd
048fe350 76343cfd KERNELBASE!RegEnumValueW+0xc8
048fe468 763435a3 gdi32full!CacheFontLinkingData+0x199
048fe488 76357e8c gdi32full!IsFontRegLinked+0x28
048fea28 76345404 gdi32full!LoadFont+0x32c
048fea4c 763457f2 gdi32full!FindOrCreateFaceCache+0x98
048feb50 7634c284 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
048feef8 7634a66a gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
048ff004 76349161 gdi32full!ScriptStringAnalyse+0x76a
048ff1a4 76348990 gdi32full!LpkCharsetDraw+0x611
048ff1d0 74991912 gdi32full!LpkDrawTextEx+0x30
048ff25c 7499130d user32!DT_GetLineBreak+0x122
048ff31c 7499110e user32!DrawTextExWorker+0x1ed
048ff338 6bae480c user32!DrawTextExW+0x1e
048ff788 6bae6f4b uxtheme!CThemeWnd::GetNcWindowMetrics+0x87c
048ff834 6bae6fdf uxtheme!_WindowPosChangedWorker+0x77
048ff840 6bae3686 uxtheme!OnOwpPostWindowPosChanged+0x1f
048ff894 74997273 uxtheme!ThemePostWndProc+0x406
048ff97c 74996d4a user32!UserCallWinProcCheckWow+0x463
048ff9e0 749a3f27 user32!DispatchClientMessage+0xea
048ffa20 772921ad user32!__fnINLPWINDOWPOS+0x37
048ffa70 74942d6c ntdll!KiUserCallbackDispatcher+0x4d
048ffa74 6bb0419f win32u!NtUserSetWindowPos+0xc
048ffaa0 6bae3d7e uxtheme!OnOwpPreDwmCompositionChanged+0x4f
048ffafc 74997246 uxtheme!ThemePreWndProc+0x60e
048ffbe4 749962eb user32!UserCallWinProcCheckWow+0x436
048ffc58 749960c0 user32!DispatchMessageWorker+0x21b
048ffc64 536af5a1 user32!DispatchMessageW+0x10
048ffc88 536af2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
048ffce8 536b196f CfgRelayEx!CConfigCenterStub::Process+0xa7
048ffcf4 536cffcb CfgRelayEx!CThread::ThreadProc+0x1f
048ffd30 7585fe09 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
048ffd40 7728607d kernel32!BaseThreadInitThunk+0x19
048ffd9c 7728604d ntdll!__RtlUserThreadStart+0x2f
048ffdac 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04c7fa40 76f5023a ntdll!RtlpWaitOnCriticalSection+0x93
04c7fa78 76f50089 ntdll!RtlpEnterCriticalSectionContended+0x1aa
04c7fa80 5cdef170 ntdll!RtlEnterCriticalSection+0x49
04c7fa8c 5cdf34d7 CfgRelayEx!_BaseModule::CCriticalSection::Lock+0x10
04c7fad0 5cdf3c0f CfgRelayEx!CChannelImpl::Run+0xb7
04c7fad8 5ce0ffcb CfgRelayEx!CChannelImpl::ThreadImpl+0xf
04c7fb14 7634fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04c7fb24 76f780ce kernel32!BaseThreadInitThunk+0x19
04c7fb80 76f7809e ntdll!__RtlUserThreadStart+0x2f
04c7fb90 00000000 ntdll!_RtlUserThreadStart+0x1b