Crash in cfgrelayex, Analyzed 4 dumps, total processed 290, rate equals 1.38%

Top 1: Version = 2.7224.1000.620, Total count = 4

dump count = 1

ChildEBP RetAddr  
003bfaf8 0fa8aaed CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x35
003bfb10 0faa4e83 CfgRelayEx!std::_Tree<std::_Tmap_traits<enum CommonProductType,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > >,std::less<enum CommonProductType>,std::allocator<std::pair<enum CommonProductType const ,ATL::CStringT<wchar_t,ATL::StrTraitATL<wchar_t,ATL::ChTraitsCRT<wchar_t> > > > >,0> >::_Erase+0x1d
003bfb34 0fa90f53 CfgRelayEx!ATL::`dynamic atexit destructor for '_AtlBaseModule''+0x449
003bfb60 0fa90e31 CfgRelayEx!<lambda_275893d493268fdec8709772e3fcec0e>::operator()+0x89
003bfb94 0fa90e7f CfgRelayEx!__crt_seh_guarded_call<int>::operator()<<lambda_995298e7d72eb4c2aab26c0585b3abe5>,<lambda_275893d493268fdec8709772e3fcec0e> &,<lambda_293819299cbf9a7022e18b56a874bb5c> >+0x27
003bfbb4 0fa91158 CfgRelayEx!__acrt_lock_and_call<<lambda_275893d493268fdec8709772e3fcec0e> >+0x24
003bfbc8 0fa90714 CfgRelayEx!_execute_onexit_table+0x17
003bfc00 0fa90895 CfgRelayEx!common_exit+0xa1
003bfc10 0fa792d7 CfgRelayEx!_cexit+0xb
003bfc44 0fa7918f CfgRelayEx!dllmain_crt_process_detach+0x39
003bfc50 0fa793df CfgRelayEx!dllmain_crt_dispatch+0x4e
003bfc90 0fa7947d CfgRelayEx!dllmain_dispatch+0xaf
003bfca4 77149170 CfgRelayEx!_DllMainCRTStartup+0x1c
003bfcc4 7715f527 ntdll!LdrpCallInitRoutine+0x14
003bfd68 7715f3c9 ntdll!LdrShutdownProcess+0x1aa
003bfd7c 755f7a3c ntdll!RtlExitUserProcess+0x74
003bfd90 00fb275a kernel32!ExitProcessStub+0x12
003bfd9c 00fb26ef srvhost!exit_or_terminate_process+0x40
003bfdd4 00fb2895 srvhost!common_exit+0xee
003bfde8 00fa7e90 srvhost!exit+0x11
003bfe28 755f343d srvhost!__scrt_common_main_seh+0x179
003bfe34 77149732 kernel32!BaseThreadInitThunk+0xe
003bfe74 77149705 ntdll!__RtlUserThreadStart+0x70
003bfe8c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
047ce0a0 76b03c37 KERNELBASE!LocalBaseRegOpenKey+0x106
047ce108 76b03aec KERNELBASE!RegOpenKeyExInternalW+0x137
047ce12c 769278cf KERNELBASE!RegOpenKeyExW+0x1c
047ce588 76929187 gdi32full!InitUnistor+0x5b
047ceb30 7692ba9d gdi32full!LoadFont+0x35a
047ceb54 7692a6bd gdi32full!FindOrCreateFaceCache+0x98
047cec58 768f906d gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
047ceff8 768f9456 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x27d
047cf104 768f74ca gdi32full!ScriptStringAnalyse+0x3a6
047cf28c 768f6730 gdi32full!LpkCharsetDraw+0x62a
047cf2b8 74dce3b2 gdi32full!LpkDrawTextEx+0x30
047cf344 74dcddad user32!DT_GetLineBreak+0x122
047cf404 74df36ae user32!DrawTextExWorker+0x1ed
047cf420 70acb6c6 user32!DrawTextExW+0x1e
047cf880 70acde2b uxtheme!CThemeWnd::GetNcWindowMetrics+0x8b6
047cf92c 70acdebf uxtheme!_WindowPosChangedWorker+0x77
047cf938 70aca525 uxtheme!OnOwpPostWindowPosChanged+0x1f
047cf98c 74dd61f3 uxtheme!ThemePostWndProc+0x405
047cfa74 74dd5cda user32!UserCallWinProcCheckWow+0x463
047cfad8 74ddeed7 user32!DispatchClientMessage+0xea
047cfb18 76fd40ed user32!__fnINLPWINDOWPOS+0x37
047cfb68 76ce2ddc ntdll!KiUserCallbackDispatcher+0x4d
047cfb6c 70af362f win32u!NtUserSetWindowPos+0xc
047cfb98 70acac20 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
047cfbf4 74dd61c6 uxtheme!ThemePreWndProc+0x610
047cfcdc 74dd528e user32!UserCallWinProcCheckWow+0x436
047cfd50 74dd5070 user32!DispatchMessageWorker+0x20e
047cfd5c 7b39f5a1 user32!DispatchMessageW+0x10
047cfd80 7b39f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
047cfde0 7b3a196f CfgRelayEx!CConfigCenterStub::Process+0xa7
047cfdec 7b3bffcb CfgRelayEx!CThread::ThreadProc+0x1f
047cfe28 76c16359 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
047cfe38 76fc7a94 kernel32!BaseThreadInitThunk+0x19
047cfe94 76fc7a64 ntdll!__RtlUserThreadStart+0x2f
047cfea4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
02a4f000 734e98a5 uxtheme!CDpiCache<CInternalNonclientMetrics>::Get+0x8b
02a4f018 734e9384 uxtheme!NcGetNonclientMetrics+0x25
02a4f228 734e5257 uxtheme!_LoadNcThemeSysMetrics+0x24
02a4f244 734d9670 uxtheme!_LoadNcThemeMetrics+0x259
02a4f968 734d6569 uxtheme!CThemeWnd::GetNcWindowMetrics+0x12e0
02a4fa20 734d64df uxtheme!_WindowPosChangedWorker+0x7c
02a4fa2c 734dc8af uxtheme!OnOwpPostWindowPosChanged+0x1f
02a4fa84 76ef9e2c uxtheme!ThemePostWndProc+0x46f
02a4fb20 76ef9af5 user32!UserCallWinProcCheckWow+0x2bc
02a4fb7c 76f06bfa user32!DispatchClientMessage+0xb5
02a4fbac 77aa1376 user32!__fnINLPWINDOWPOS+0x3a
02a4fbf8 734f0f23 ntdll!KiUserCallbackDispatcher+0x36
02a4fc24 734dcfaf uxtheme!OnOwpPreDwmCompositionChanged+0x43
02a4fc84 76ef9d9a uxtheme!ThemePreWndProc+0x59f
02a4fd20 76ef9860 user32!UserCallWinProcCheckWow+0x22a
02a4fd80 76ef96b0 user32!DispatchMessageWorker+0x1a0
02a4fd8c 0247f5a1 user32!DispatchMessageW+0x10
02a4fdb0 0247f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
02a4fe10 0248196f CfgRelayEx!CConfigCenterStub::Process+0xa7
02a4fe1c 0249ffcb CfgRelayEx!CThread::ThreadProc+0x1f
02a4fe58 754395f4 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
02a4fe6c 77a3241a kernel32!BaseThreadInitThunk+0x24
02a4feb4 77a323e9 ntdll!__RtlUserThreadStart+0x2b
02a4fec4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
03f0e008 7793bd9f ntdll!RtlRunOnceExecuteOnce+0xa
03f0e030 77923412 ntdll!RtlRandomEx+0x1f
03f0e04c 77935c85 ntdll!RtlpHeapGenerateRandomValue32+0xa2
03f0e060 77914ec4 ntdll!RtlpLfhIncrementDataSlot+0x4b
03f0e0e0 77914a7e ntdll!RtlpAllocateHeapInternal+0x434
03f0e0fc 75bea638 ntdll!RtlAllocateHeap+0x3e
03f0e11c 75be92b7 ucrtbase!_malloc_base+0x28
03f0e154 7667aed3 ucrtbase!__crt_state_management::wrapped_invoke<void * (__cdecl*)(unsigned int),unsigned int,void *>+0x57
03f0e160 766a1795 gdi32full!operator new+0x1c
03f0e168 76680564 gdi32full!std::_Allocate<8,std::_Default_allocate_traits,0>+0x16
03f0e184 766828a6 gdi32full!std::basic_string<unsigned char,std::char_traits<unsigned char>,std::allocator<unsigned char> >::_Reallocate_for<<lambda_ff37b06ff976d8f20f9ef35c3f580b99>,unsigned char const *>+0x22
03f0e1a0 76683047 gdi32full!std::basic_string<unsigned char,std::char_traits<unsigned char>,std::allocator<unsigned char> >::assign+0x42
03f0e21c 7667d60d gdi32full!InsertCFontCache+0x43
03f0e290 76647cc2 gdi32full!plfCreateLOCALFONT+0xf2
03f0e2a4 76646bbf gdi32full!CreateFontIndirectExW+0x32
03f0e46c 766743ec gdi32full!CreateFontIndirectWImpl+0x6f
03f0e568 766740a2 gdi32full!CacheFontLinkingData+0x204
03f0e588 76674c6f gdi32full!IsFontRegLinked+0x28
03f0eb30 76676f9f gdi32full!LoadFont+0x27c
03f0eb54 76675a69 gdi32full!FindOrCreateFaceCache+0x98
03f0ec58 76649d6c gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03f0eff8 7664a196 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x2ac
03f0f104 7664790b gdi32full!ScriptStringAnalyse+0x3e6
03f0f254 76647170 gdi32full!LpkCharsetDraw+0x53b
03f0f280 75d0c903 gdi32full!LpkDrawTextEx+0x30
03f0f304 75d0c2fd user32!DT_GetLineBreak+0x113
03f0f3c4 75d2698e user32!DrawTextExWorker+0x1ed
03f0f3e0 7236ee89 user32!DrawTextExW+0x1e
03f0f87c 7236c349 uxtheme!CThemeWnd::GetNcWindowMetrics+0x809
03f0f9c8 75d070c3 uxtheme!_ThemeDefWindowProc+0x899
03f0fabc 75d06b2a user32!UserCallWinProcCheckWow+0x4d3
03f0fb20 75d10217 user32!DispatchClientMessage+0xea
03f0fb60 779471dc user32!__fnINLPWINDOWPOS+0x37
03f0fbb0 75ad129c ntdll!KiUserCallbackDispatcher+0x4c
03f0fbb4 7239b77f win32u!NtUserSetWindowPos+0xc
03f0fbe0 7236dd73 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03f0fc3c 75d0706a uxtheme!ThemePreWndProc+0x413
03f0fd30 75d059c8 user32!UserCallWinProcCheckWow+0x47a
03f0fdac 75d05500 user32!DispatchMessageWorker+0x4b8
03f0fdb8 7ce8f5a1 user32!DispatchMessageW+0x10
03f0fddc 7ce8f2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03f0fe3c 7ce9196f CfgRelayEx!CConfigCenterStub::Process+0xa7
03f0fe48 7ceaffcb CfgRelayEx!CThread::ThreadProc+0x1f
03f0fe84 76996839 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03f0fe94 7793906f kernel32!BaseThreadInitThunk+0x19
03f0feec 7793903d ntdll!__RtlUserThreadStart+0x2b
03f0fefc 00000000 ntdll!_RtlUserThreadStart+0x1b