Crash in cfgrelayex, Analyzed 3 dumps, total processed 287, rate equals 1.05%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
0039fa5c 77d4e163 ntdll!RtlpLowFragHeapFree+0xc5
0039fa74 770514bd ntdll!RtlFreeHeap+0x105
0039fa88 5a2d2d01 kernel32!HeapFree+0x14
0039fa9c 5a2dafbb CfgRelayEx!_free_base+0x1c
0039faac 5a2d8b0d CfgRelayEx!__acrt_locale_free_numeric+0x53
0039facc 5a2d2b55 CfgRelayEx!__acrt_free_locale+0x6b
0039fadc 5a2d28d2 CfgRelayEx!replace_current_thread_locale_nolock+0x36
0039fb14 5a2d29b0 CfgRelayEx!__crt_seh_guarded_call<void>::operator()<<lambda_5b71d36f03204c0beab531769a5b5694>,<lambda_be2b3da3f62db62e9dad5dc70221a656> &,<lambda_8f9ce462984622f9bf76b59e2aaaf805> >+0x29
0039fb34 5a2d2b18 CfgRelayEx!__acrt_lock_and_call<<lambda_be2b3da3f62db62e9dad5dc70221a656> >+0x24
0039fb74 5a2d2a68 CfgRelayEx!destroy_ptd+0xa2
0039fb80 77d6fb85 CfgRelayEx!destroy_fls+0x13
0039fba0 75e34008 ntdll!RtlFlsFree+0xa0
0039fbac 5a2d6c1b KERNELBASE!FlsFree+0xe
0039fbc0 5a2d2cdb CfgRelayEx!__acrt_FlsFree+0x3d
0039fbc8 5a2d12f7 CfgRelayEx!__acrt_uninitialize_ptd+0x10
0039fbd4 5a2b8dfd CfgRelayEx!__acrt_uninitialize_critical+0xd
0039fbdc 5a2b931e CfgRelayEx!__scrt_dllmain_uninitialize_critical+0x7
0039fbe0 5a2b92f4 CfgRelayEx!dllmain_crt_process_detach+0x80
0039fc14 5a2b918f CfgRelayEx!dllmain_crt_process_detach+0x56
0039fc20 5a2b93df CfgRelayEx!dllmain_crt_dispatch+0x4e
0039fc60 5a2b947d CfgRelayEx!dllmain_dispatch+0xaf
0039fc74 77d591c4 CfgRelayEx!_DllMainCRTStartup+0x1c
0039fc94 77d6f567 ntdll!LdrpCallInitRoutine+0x14
0039fd38 77d6f409 ntdll!LdrShutdownProcess+0x1aa
0039fd4c 77057a7c ntdll!RtlExitUserProcess+0x74
0039fd54 77e8f3b0 kernel32!ExitProcessStub+0x12
0039fd60 0026275a ntdll!___PchSym_ <PERF> (ntdll+0x16f3b0)
0039fd6c 002626ef srvhost!exit_or_terminate_process+0x40
0039fda4 00262895 srvhost!common_exit+0xee
0039fdb8 00257e90 srvhost!exit+0x11
0039fdf8 7705347d srvhost!__scrt_common_main_seh+0x179
0039fe04 77d59762 kernel32!BaseThreadInitThunk+0xe
0039fe44 77d59735 ntdll!__RtlUserThreadStart+0x70
0039fe5c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04dee034 77d4eab0 ntdll!RtlAnsiStringToUnicodeString+0x1b
04dee060 77d4eb95 ntdll!LdrpAppendAnsiStringToFilenameBuffer+0x66
04dee2e0 77d4fa39 ntdll!LdrpLoadForwardedDll+0x75
04dee37c 77d4fb25 ntdll!LdrpGetDelayloadExportDll+0x80
04dee628 77d4cd0b ntdll!LdrpHandleProtectedDelayload+0x95
04dee680 76641280 ntdll!LdrResolveDelayLoadedAPI+0x17b
04dee6a0 76642b7d gdi32full!__delayLoadHelper2+0x28
04dee7b0 7663d21c gdi32full!_tailMerge_textshaping_dll+0xd
04dee7f0 7663c6e9 gdi32full!ScriptShape+0x17c
04dee868 7663be19 gdi32full!RenderItemNoFallback+0x5f9
04dee8a0 7663bcd8 gdi32full!RenderItemWithFallback+0x119
04dee8c8 7663ba5e gdi32full!RenderItem+0x28
04dee920 76638e18 gdi32full!ScriptStringAnalyzeGlyphs+0x1be
04deed84 766381ef gdi32full!ScriptStringAnalyse+0x738
04deef1c 76637a40 gdi32full!LpkCharsetDraw+0x60f
04deef48 75c8d4ed gdi32full!LpkDrawTextEx+0x30
04deefa4 75c8d384 user32!DT_DrawStr+0x5f
04def004 75c8cebb user32!DT_GetLineBreak+0xa2
04def0d4 75c8ccbe user32!DrawTextExWorker+0x1f9
04def0f0 723ae6ca user32!DrawTextExW+0x1e
04def154 723add34 uxtheme!CTextDraw::GetTextExtent+0xa4
04def19c 723a43c9 uxtheme!GetThemeTextExtent+0x74
04def1f0 723b0f87 uxtheme!_GetNcCaptionTextSize+0x61
04def2e0 723b293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
04def38c 723b29ef uxtheme!_WindowPosChangedWorker+0x7c
04def398 723af545 uxtheme!OnOwpPostWindowPosChanged+0x1f
04def3e8 75c97eb3 uxtheme!ThemePostWndProc+0x355
04def4d4 75c97a8a user32!UserCallWinProcCheckWow+0x363
04def538 75c9f7d7 user32!DispatchClientMessage+0xea
04def578 77d754bd user32!__fnINLPWINDOWPOS+0x37
04def5c8 779c124c ntdll!KiUserCallbackDispatcher+0x4d
04def5cc 723cd44f win32u!NtUserSetWindowPos+0xc
04def5f8 723b00ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
04def654 75c97e5f uxtheme!ThemePreWndProc+0x43f
04def740 75c967c1 user32!UserCallWinProcCheckWow+0x30f
04def7bc 75c962e0 user32!DispatchMessageWorker+0x4d1
04def7c8 50cef5a1 user32!DispatchMessageW+0x10
04def7ec 50cef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
04def84c 50cf196f CfgRelayEx!CConfigCenterStub::Process+0xa7
04def858 50d0ffcb CfgRelayEx!CThread::ThreadProc+0x1f
04def894 77aafcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
04def8a4 77d6809e kernel32!BaseThreadInitThunk+0x19
04def900 77d6806e ntdll!__RtlUserThreadStart+0x2f
04def910 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
041fe588 74c7945c gdi32full!LoadFont+0x15
041fe5ac 74c79852 gdi32full!FindOrCreateFaceCache+0x98
041fe6b0 74c818c4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
041fea58 74c7fcbb gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
041feec4 74c7e501 gdi32full!ScriptStringAnalyse+0xa1b
041ff03c 7542f04c gdi32full!LpkCharsetDraw+0x611
041ff06c 74c7dd30 gdi32!_imp__GetLayout
041ff098 7549ebd2 gdi32full!LpkDrawTextEx+0x30
041ff124 7549e5cd user32!DT_GetLineBreak+0x122
041ff1e4 7549e3ce user32!DrawTextExWorker+0x1ed
041ff200 6d053c4c user32!DrawTextExW+0x1e
041ff650 6d05638b uxtheme!CThemeWnd::GetNcWindowMetrics+0x87c
041ff6fc 6d05641f uxtheme!_WindowPosChangedWorker+0x77
041ff708 6d052ae6 uxtheme!OnOwpPostWindowPosChanged+0x1f
041ff75c 75496983 uxtheme!ThemePostWndProc+0x406
041ff844 7549646a user32!UserCallWinProcCheckWow+0x463
041ff8a8 754a3ae7 user32!DispatchClientMessage+0xea
041ff8e8 778b3e8d user32!__fnINLPWINDOWPOS+0x37
041ff938 6d07415f ntdll!KiUserCallbackDispatcher+0x4d
041ff964 6d0531de uxtheme!OnOwpPreDwmCompositionChanged+0x4f
041ff9c0 75496956 uxtheme!ThemePreWndProc+0x60e
041ffaa8 75495a0b user32!UserCallWinProcCheckWow+0x436
041ffb1c 754957e0 user32!DispatchMessageWorker+0x21b
041ffb28 502af5a1 user32!DispatchMessageW+0x10
041ffb4c 502af2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
041ffbac 502b196f CfgRelayEx!CConfigCenterStub::Process+0xa7
041ffbb8 502cffcb CfgRelayEx!CThread::ThreadProc+0x1f
041ffbf4 775605c9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
041ffc04 778a7c5d kernel32!BaseThreadInitThunk+0x19
041ffc60 778a7c2d ntdll!__RtlUserThreadStart+0x2f
041ffc70 00000000 ntdll!_RtlUserThreadStart+0x1b