Crash in cfgrelayex, Analyzed 4 dumps, total processed 125, rate equals 3.20%

Top 1: Version = 2.7224.1000.620, Total count = 4

dump count = 1

ChildEBP RetAddr  
002ff654 77e8e0f3 ntdll!RtlpLowFragHeapFree+0xc5
002ff66c 77e94906 ntdll!RtlFreeHeap+0x105
002ff680 77e93e85 ntdll!RtlpFreeDebugInfo+0x3c
002ff6c0 54fac99f ntdll!RtlDeleteCriticalSection+0xd6
002ff6d8 54fa513d CfgRelayEx!__acrt_lowio_destroy_handle_array+0x22
002ff6e4 54fa81c5 CfgRelayEx!__acrt_uninitialize_lowio+0x15
002ff6fc 54fa12e7 CfgRelayEx!__acrt_execute_uninitializers+0x2f
002ff708 54f88fac CfgRelayEx!__acrt_uninitialize+0xf
002ff714 54f892fe CfgRelayEx!__scrt_uninitialize_crt+0x1a
002ff750 54f8918f CfgRelayEx!dllmain_crt_process_detach+0x60
002ff75c 54f893df CfgRelayEx!dllmain_crt_dispatch+0x4e
002ff79c 54f8947d CfgRelayEx!dllmain_dispatch+0xaf
002ff7b0 77e99280 CfgRelayEx!_DllMainCRTStartup+0x1c
002ff7d0 77eb8f88 ntdll!LdrpCallInitRoutine+0x14
002ff874 77eb8e2a ntdll!LdrShutdownProcess+0x1aa
002ff888 75627a3c ntdll!RtlExitUserProcess+0x74
002ff89c 0035275a kernel32!ExitProcessStub+0x12
002ff8a8 003526ef srvhost!exit_or_terminate_process+0x40
002ff8e0 00352895 srvhost!common_exit+0xee
002ff8f4 00347e90 srvhost!exit+0x11
002ff934 7562343d srvhost!__scrt_common_main_seh+0x179
002ff940 77e99812 kernel32!BaseThreadInitThunk+0xe
002ff980 77e997e5 ntdll!__RtlUserThreadStart+0x70
002ff998 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
043de30c 762060a7 gdi32full!bGetRealizationInfoInternal+0x15
043de340 76234e13 gdi32full!GetFontRealizationInfo+0xd7
043de8f0 7623734f gdi32full!LoadFont+0x70
043de914 76235e19 gdi32full!FindOrCreateFaceCache+0x98
043dea18 762090bc gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
043dedb8 762094e6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2ac
043deec4 76206d7b gdi32full!ScriptStringAnalyse+0x3e6
043df034 762065e0 gdi32full!LpkCharsetDraw+0x53b
043df060 76cac923 gdi32full!LpkDrawTextEx+0x30
043df0e4 76cac31d user32!DT_GetLineBreak+0x113
043df1a4 76cc69be user32!DrawTextExWorker+0x1ed
043df1c0 700ceeb9 user32!DrawTextExW+0x1e
043df65c 700cc379 uxtheme!CThemeWnd::GetNcWindowMetrics+0x809
043df7a8 76ca70e3 uxtheme!_ThemeDefWindowProc+0x899
043df89c 76ca6b4a user32!UserCallWinProcCheckWow+0x4d3
043df900 76cb0237 user32!DispatchClientMessage+0xea
043df940 76ed710c user32!__fnINLPWINDOWPOS+0x37
043df990 700fb9cf ntdll!KiUserCallbackDispatcher+0x4c
043df9bc 700cdda3 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
043dfa18 76ca708a uxtheme!ThemePreWndProc+0x413
043dfb0c 76ca59e8 user32!UserCallWinProcCheckWow+0x47a
043dfb88 76ca5520 user32!DispatchMessageWorker+0x4b8
043dfb94 50f5f5a1 user32!DispatchMessageW+0x10
043dfbb8 50f5f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
043dfc18 50f6196f CfgRelayEx!CConfigCenterStub::Process+0xa7
043dfc24 50f7ffcb CfgRelayEx!CThread::ThreadProc+0x1f
043dfc60 75d86ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
043dfc70 76ec8f9f kernel32!BaseThreadInitThunk+0x19
043dfcc8 76ec8f6d ntdll!__RtlUserThreadStart+0x2b
043dfcd8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04f9e298 75891bde gdi32full!GetFontRealizationInfo+0x15
04f9e848 758929fc gdi32full!LoadFont+0x76
04f9e86c 758934f3 gdi32full!FindOrCreateFaceCache+0x98
04f9e970 7589adf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
04f9ed18 758991f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
04f9f184 758982ef gdi32full!ScriptStringAnalyse+0xa16
04f9f30c 75897b40 gdi32full!LpkCharsetDraw+0x60f
04f9f338 75a8d37d gdi32full!LpkDrawTextEx+0x30
04f9f394 75a8d214 user32!DT_DrawStr+0x5f
04f9f3f4 75a8cd4b user32!DT_GetLineBreak+0xa2
04f9f4c4 75a8cb4e user32!DrawTextExWorker+0x1f9
04f9f4e0 5a9ae6ca user32!DrawTextExW+0x1e
04f9f544 5a9add34 uxtheme!CTextDraw::GetTextExtent+0xa4
04f9f58c 5a9a43c9 uxtheme!GetThemeTextExtent+0x74
04f9f5e0 5a9b0f87 uxtheme!_GetNcCaptionTextSize+0x61
04f9f6d0 5a9b293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04f9f77c 5a9b29ef uxtheme!_WindowPosChangedWorker+0x7c
04f9f788 5a9af545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04f9f7d8 75a97ff3 uxtheme!ThemePostWndProc+0x355
04f9f8c4 75a97bca user32!UserCallWinProcCheckWow+0x363
04f9f928 75a9fc37 user32!DispatchClientMessage+0xea
04f9f968 777554ed user32!__fnINLPWINDOWPOS+0x37
04f9f9b8 5a9cd44f ntdll!KiUserCallbackDispatcher+0x4d
04f9f9e4 5a9b00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04f9fa40 75a97f9f uxtheme!ThemePreWndProc+0x43f
04f9fb2c 75a96901 user32!UserCallWinProcCheckWow+0x30f
04f9fba8 75a96420 user32!DispatchMessageWorker+0x4d1
04f9fbb4 79d2f5a1 user32!DispatchMessageW+0x10
04f9fbd8 79d2f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04f9fc38 79d3196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04f9fc44 79d4ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04f9fc80 764efcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04f9fc90 777480ce kernel32!BaseThreadInitThunk+0x19
04f9fcec 7774809e ntdll!__RtlUserThreadStart+0x2f
04f9fcfc 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04ebe1a0 771f1f6f gdi32full!GetFontRealizationInfo+0x1c
04ebe750 771e7e0b gdi32full!LoadFont+0x70
04ebe774 771e7f62 gdi32full!FindOrCreateFaceCache+0xc7
04ebe880 77186ad5 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x128
04ebec28 771874cb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2a5
04ebed44 77188863 gdi32full!ScriptStringAnalyse+0x3eb
04ebeec0 77186723 gdi32full!LpkCharsetDraw+0xa93
04ebef00 7574f57b gdi32full!LpkDrawTextEx+0x203
04ebef64 7574f481 user32!DT_DrawStr+0x69
04ebefbc 7574f07e user32!DT_GetLineBreak+0xf8
04ebf08c 757bcb2e user32!DrawTextExWorker+0x1c4
04ebf0a8 714c09c4 user32!DrawTextExW+0x1e
04ebf10c 714c69aa uxtheme!CTextDraw::GetTextExtent+0x109
04ebf154 714b81bd uxtheme!GetThemeTextExtent+0x8a
04ebf1a8 7148689a uxtheme!_GetNcCaptionTextSize+0x61
04ebf320 71487bde uxtheme!CThemeWnd::GetNcWindowMetrics+0x26a
04ebf404 7148c30f uxtheme!_WindowPosChangedWorker+0x73
04ebf410 714890c0 uxtheme!OnOwpPostWindowPosChanged+0x1f
04ebf478 75744630 uxtheme!ThemePostWndProc+0x340
04ebf574 7574408a user32!UserCallWinProcCheckWow+0x4f0
04ebf5d8 75751487 user32!DispatchClientMessage+0xea
04ebf618 772e91bd user32!__fnINLPWINDOWPOS+0x37
04ebf668 76e412ac ntdll!KiUserCallbackDispatcher+0x4d
04ebf66c 714b643f win32u!NtUserSetWindowPos+0xc
04ebf698 7148a458 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04ebf718 757445d8 uxtheme!ThemePreWndProc+0x988
04ebf814 75742ec5 user32!UserCallWinProcCheckWow+0x498
04ebf890 75742a10 user32!DispatchMessageWorker+0x4a5
04ebf89c 77ebf5a1 user32!DispatchMessageW+0x10
04ebf8c0 77ebf2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04ebf920 77ec196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04ebf92c 77edffcb CfgRelayEx!CThread::ThreadProc+0x1f
04ebf968 76c57ba9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04ebf978 772dc11b kernel32!BaseThreadInitThunk+0x19
04ebf9d0 772dc09f ntdll!__RtlUserThreadStart+0x2b
04ebf9e0 00000000 ntdll!_RtlUserThreadStart+0x1b