Crash in cfgrelayex, Analyzed 2 dumps, total processed 87, rate equals 2.30%

Top 1: Version = 2.7224.1000.620, Total count = 2

dump count = 1

ChildEBP RetAddr  
0052fb88 7787e143 ntdll!RtlpLowFragHeapFree+0xc5
0052fba0 769a14bd ntdll!RtlFreeHeap+0x105
0052fbb4 5c712d01 kernel32!HeapFree+0x14
0052fbc8 5c718b22 CfgRelayEx!_free_base+0x1c
0052fbe8 5c712b55 CfgRelayEx!__acrt_free_locale+0x80
0052fbf8 5c7128d2 CfgRelayEx!replace_current_thread_locale_nolock+0x36
0052fc30 5c7129b0 CfgRelayEx!__crt_seh_guarded_call<void>::operator()<<lambda_5b71d36f03204c0beab531769a5b5694>,<lambda_be2b3da3f62db62e9dad5dc70221a656> &,<lambda_8f9ce462984622f9bf76b59e2aaaf805> >+0x29
0052fc50 5c712b18 CfgRelayEx!__acrt_lock_and_call<<lambda_be2b3da3f62db62e9dad5dc70221a656> >+0x24
0052fc90 5c712a68 CfgRelayEx!destroy_ptd+0xa2
0052fc9c 7789fb85 CfgRelayEx!destroy_fls+0x13
0052fcbc 75744008 ntdll!RtlFlsFree+0xa0
0052fcc8 5c716c1b KERNELBASE!FlsFree+0xe
0052fcdc 5c712cdb CfgRelayEx!__acrt_FlsFree+0x3d
0052fce4 5c7112f7 CfgRelayEx!__acrt_uninitialize_ptd+0x10
0052fcf0 5c6f8dfd CfgRelayEx!__acrt_uninitialize_critical+0xd
0052fcf8 5c6f931e CfgRelayEx!__scrt_dllmain_uninitialize_critical+0x7
0052fcfc 5c6f92f4 CfgRelayEx!dllmain_crt_process_detach+0x80
0052fd30 5c6f918f CfgRelayEx!dllmain_crt_process_detach+0x56
0052fd3c 5c6f93df CfgRelayEx!dllmain_crt_dispatch+0x4e
0052fd7c 5c6f947d CfgRelayEx!dllmain_dispatch+0xaf
0052fd90 778892c0 CfgRelayEx!_DllMainCRTStartup+0x1c
0052fdb0 7789f567 ntdll!LdrpCallInitRoutine+0x14
0052fe54 7789f409 ntdll!LdrShutdownProcess+0x1aa
0052fe68 769a7a7c ntdll!RtlExitUserProcess+0x74
0052fe7c 002d275a kernel32!ExitProcessStub+0x12
0052fe88 002d26ef srvhost!exit_or_terminate_process+0x40
0052fec0 002d2895 srvhost!common_exit+0xee
0052fed4 002c7e90 srvhost!exit+0x11
0052ff14 769a347d srvhost!__scrt_common_main_seh+0x179
0052ff20 77889852 kernel32!BaseThreadInitThunk+0xe
0052ff60 77889825 ntdll!__RtlUserThreadStart+0x70
0052ff78 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

04fdf390 74bdf4eb gdi32full!LpkDrawTextEx+0x203
04fdf42c 76c6c902 user32!DT_DrawStr+0x69
04fdf538 729b0174 gdi32!IntersectClipRect+0x22
04fdf59c 729b616a uxtheme!CTextDraw::GetTextExtent+0x109
04fdf5e4 729a796d uxtheme!GetThemeTextExtent+0x8a
04fdf638 7297686a uxtheme!_GetNcCaptionTextSize+0x61
04fdf7b0 72977bae uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04fdf894 7297c2df uxtheme!_WindowPosChangedWorker+0x73
04fdf8a0 72979090 uxtheme!OnOwpPostWindowPosChanged+0x1f
04fdf908 74bd45c0 uxtheme!ThemePostWndProc+0x340
04fdfa04 74bd401a user32!UserCallWinProcCheckWow+0x4f0
04fdfa68 74be13f7 user32!DispatchClientMessage+0xea
04fdfaa8 76f6919d user32!__fnINLPWINDOWPOS+0x37
04fdfaf8 753912ac ntdll!KiUserCallbackDispatcher+0x4d
04fdfafc 729a5bef win32u!NtUserSetWindowPos+0xc
04fdfb28 7297a428 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04fdfc58 76f66bdc uxtheme!ThemePreWndProc+0x988
04fdfc88 76f6919d ntdll!ZwCallbackReturn+0xc
04fdfce0 753910dc ntdll!KiUserCallbackDispatcher+0x4d
04fdfce4 74be09a0 win32u!NtUserGetMessage+0xc
04fdfd2c 6ab4f5a1 user32!GetMessageW+0x30
04fdfd50 6ab4f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04fdfdb0 6ab5196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04fdfdbc 6ab6ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04fdfdf8 76337ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04fdfe08 76f5c10b kernel32!BaseThreadInitThunk+0x19
04fdfe60 76f5c08f ntdll!__RtlUserThreadStart+0x2b
04fdfe70 00000000 ntdll!_RtlUserThreadStart+0x1b