Crash in cfgrelayex, Analyzed 3 dumps, total processed 201, rate equals 1.49%

Top 1: Version = 2.7224.1000.620, Total count = 3

dump count = 1

ChildEBP RetAddr  
003bf9a0 76f5e0c3 ntdll!RtlpLowFragHeapFree+0xc5
003bf9b8 765d14bd ntdll!RtlFreeHeap+0x105
003bf9cc 67dc2d01 kernel32!HeapFree+0x14
003bf9e0 67dc0cf2 CfgRelayEx!_free_base+0x1c
003bf9f4 67dc0da6 CfgRelayEx!free_environment<wchar_t>+0x1a
003bf9fc 67dc11f3 CfgRelayEx!__dcrt_uninitialize_environments_nolock+0x29
003bfa00 67dc81c5 CfgRelayEx!uninitialize_environment+0x5
003bfa18 67dc12e7 CfgRelayEx!__acrt_execute_uninitializers+0x2f
003bfa24 67da8fac CfgRelayEx!__acrt_uninitialize+0xf
003bfa30 67da92fe CfgRelayEx!__scrt_uninitialize_crt+0x1a
003bfa6c 67da918f CfgRelayEx!dllmain_crt_process_detach+0x60
003bfa78 67da93df CfgRelayEx!dllmain_crt_dispatch+0x4e
003bfab8 67da947d CfgRelayEx!dllmain_dispatch+0xaf
003bfacc 76f69264 CfgRelayEx!_DllMainCRTStartup+0x1c
003bfaec 76f88fa8 ntdll!LdrpCallInitRoutine+0x14
003bfb90 76f88e4a ntdll!LdrShutdownProcess+0x1aa
003bfba4 765d7a3c ntdll!RtlExitUserProcess+0x74
003bfbb8 0103275a kernel32!ExitProcessStub+0x12
003bfbc4 010326ef srvhost!exit_or_terminate_process+0x40
003bfbfc 01032895 srvhost!common_exit+0xee
003bfc10 01027e90 srvhost!exit+0x11
003bfc50 765d344d srvhost!__scrt_common_main_seh+0x179
003bfc5c 76f69802 kernel32!BaseThreadInitThunk+0xe
003bfc9c 76f697d5 ntdll!__RtlUserThreadStart+0x70
003bfcb4 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0515e19c 772f6f5c ntdll!RtlpAllocateHeap+0x2b
0515e238 772f5efe ntdll!RtlpAllocateHeapInternal+0x104c
0515e254 76ba683c ntdll!RtlAllocateHeap+0x3e
0515e38c 76b61eda KERNELBASE!BaseRegEnumValueOld+0x1ca
0515e3ac 76b61012 KERNELBASE!LocalBaseRegEnumValue+0x1a
0515e428 760f464c KERNELBASE!RegEnumValueW+0xd2
0515e540 760efed1 gdi32full!CacheFontLinkingData+0x1c8
0515e560 760f1d6e gdi32full!IsFontRegLinked+0x28
0515eb08 760f28dc gdi32full!LoadFont+0x336
0515eb2c 760f33e3 gdi32full!FindOrCreateFaceCache+0x98
0515ec30 760facf4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0515efd8 760f90f6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0515f444 760f81ef gdi32full!ScriptStringAnalyse+0xa16
0515f5f4 760f7a40 gdi32full!LpkCharsetDraw+0x60f
0515f620 7544d3cd gdi32full!LpkDrawTextEx+0x30
0515f67c 7544d264 user32!DT_DrawStr+0x5f
0515f6dc 7544cd9b user32!DT_GetLineBreak+0xa2
0515f7ac 7544cb9e user32!DrawTextExWorker+0x1f9
0515f7c8 71a2e6ca user32!DrawTextExW+0x1e
0515f82c 71a2dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0515f874 71a243c9 uxtheme!GetThemeTextExtent+0x74
0515f8c8 71a30f87 uxtheme!_GetNcCaptionTextSize+0x61
0515f9b8 71a3293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0515fa64 71a329ef uxtheme!_WindowPosChangedWorker+0x7c
0515fa70 71a2f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0515fac0 75457d93 uxtheme!ThemePostWndProc+0x355
0515fbac 7545796a user32!UserCallWinProcCheckWow+0x363
0515fc10 7545f6b7 user32!DispatchClientMessage+0xea
0515fc50 773254bd user32!__fnINLPWINDOWPOS+0x37
0515fca0 76ff124c ntdll!KiUserCallbackDispatcher+0x4d
0515fca4 71a4d44f win32u!NtUserSetWindowPos+0xc
0515fcd0 71a300ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0515fd2c 75457d3f uxtheme!ThemePreWndProc+0x43f
0515fe18 754566a1 user32!UserCallWinProcCheckWow+0x30f
0515fe94 754561c0 user32!DispatchMessageWorker+0x4d1
0515fea0 7c2ef5a1 user32!DispatchMessageW+0x10
0515fec4 7c2ef2f7 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0515ff24 7c2f196f CfgRelayEx!CConfigCenterStub::Process+0xa7
0515ff30 7c30ffcb CfgRelayEx!CThread::ThreadProc+0x1f
0515ff6c 76e8fcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0515ff7c 7731809e kernel32!BaseThreadInitThunk+0x19
0515ffd8 7731806e ntdll!__RtlUserThreadStart+0x2f
0515ffe8 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
049af790 5b70d245 CfgRelayEx!try_get_function+0xe
049af7ac 5b70c045 CfgRelayEx!__vcrt_FlsGetValue+0x1a
049af7bc 5b70bf84 CfgRelayEx!__vcrt_freeptd+0x1b
049af7c4 5b6f8d9c CfgRelayEx!__vcrt_thread_detach+0x7
049af7c8 5b6f9165 CfgRelayEx!__scrt_dllmain_crt_thread_detach+0xa
049af7d0 5b6f93df CfgRelayEx!dllmain_crt_dispatch+0x24
049af810 5b6f947d CfgRelayEx!dllmain_dispatch+0xaf
049af824 77029264 CfgRelayEx!_DllMainCRTStartup+0x1c
049af844 7704221c ntdll!LdrpCallInitRoutine+0x14
049af8e8 77042403 ntdll!LdrShutdownThread+0xe6
049af8f8 7704f5ca ntdll!RtlExitUserThread+0x2a
049afa44 761d344d ntdll!TppWorkerThread+0x846
049afa50 77029802 kernel32!BaseThreadInitThunk+0xe
049afa90 770297d5 ntdll!__RtlUserThreadStart+0x70
049afaa8 00000000 ntdll!_RtlUserThreadStart+0x1b