Crash in cfgrelayex, Analyzed 3 dumps, total processed 849, rate equals 0.35%

Top 1: Version = 2.8325.1000.113, Total count = 3

dump count = 1

ChildEBP RetAddr  
03ebe064 772a09ba ntdll!RtlpAllocateHeap+0x1e
03ebe100 7729f94e ntdll!RtlpAllocateHeapInternal+0x105a
03ebe11c 77066391 ntdll!RtlAllocateHeap+0x3e
03ebe254 770637d8 KERNELBASE!LocalBaseRegEnumValue+0x28c
03ebe2d0 75607de3 KERNELBASE!RegEnumValueW+0xc8
03ebe3e8 75607ac8 gdi32full!CacheFontLinkingData+0x1c8
03ebe408 75609808 gdi32full!IsFontRegLinked+0x28
03ebe9b0 7560c50d gdi32full!LoadFont+0x24b
03ebe9d4 7560b04d gdi32full!FindOrCreateFaceCache+0x98
03ebead8 755d923d gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
03ebee78 755d9626 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x27d
03ebef84 755d769a gdi32full!ScriptStringAnalyse+0x3a6
03ebf134 755d6900 gdi32full!LpkCharsetDraw+0x62a
03ebf160 75e5e162 gdi32full!LpkDrawTextEx+0x30
03ebf1ec 75e5db5d user32!DT_GetLineBreak+0x122
03ebf2ac 75e8356e user32!DrawTextExWorker+0x1ed
03ebf2c8 67beb6c6 user32!DrawTextExW+0x1e
03ebf728 67bede2b uxtheme!CThemeWnd::GetNcWindowMetrics+0x8b6
03ebf7d4 67bedebf uxtheme!_WindowPosChangedWorker+0x77
03ebf7e0 67bea525 uxtheme!OnOwpPostWindowPosChanged+0x1f
03ebf834 75e65363 uxtheme!ThemePostWndProc+0x405
03ebf91c 75e64e4a user32!UserCallWinProcCheckWow+0x463
03ebf980 75e6ed27 user32!DispatchClientMessage+0xea
03ebf9c0 772c537d user32!__fnINLPWINDOWPOS+0x37
03ebfa10 76892ddc ntdll!KiUserCallbackDispatcher+0x4d
03ebfa14 67c1379f win32u!NtUserSetWindowPos+0xc
03ebfa40 67beac20 uxtheme!OnOwpPreDwmCompositionChanged+0x4f
03ebfa9c 75e65336 uxtheme!ThemePreWndProc+0x610
03ebfb84 75e643fe user32!UserCallWinProcCheckWow+0x436
03ebfbf8 75e641e0 user32!DispatchMessageWorker+0x20e
03ebfc04 5b5524f1 user32!DispatchMessageW+0x10
03ebfc28 5b552247 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
03ebfc88 5b5548bf CfgRelayEx!CConfigCenterStub::Process+0xa7
03ebfc94 5b57b53b CfgRelayEx!CThread::ThreadProc+0x1f
03ebfcd0 77176359 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
03ebfce0 772b8944 kernel32!BaseThreadInitThunk+0x19
03ebfd3c 772b8914 ntdll!__RtlUserThreadStart+0x2f
03ebfd4c 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
0489e0d8 76013f6f gdi32full!GetFontRealizationInfo+0x15
0489e688 76014d9c gdi32full!LoadFont+0x76
0489e6ac 76015893 gdi32full!FindOrCreateFaceCache+0x98
0489e7b0 7601d1a4 gdi32full!FindOrCreateSizeCacheWithoutRealizationID+0x7f
0489eb58 7601b5a6 gdi32full!FindOrCreateSizeCacheUsingRealizationID+0x284
0489efc4 7601a68f gdi32full!ScriptStringAnalyse+0xa16
0489f164 76019ee0 gdi32full!LpkCharsetDraw+0x60f
0489f190 762cd4fd gdi32full!LpkDrawTextEx+0x30
0489f1ec 762cd394 user32!DT_DrawStr+0x5f
0489f24c 762ccecb user32!DT_GetLineBreak+0xa2
0489f31c 762cccce user32!DrawTextExWorker+0x1f9
0489f338 6f01e6ca user32!DrawTextExW+0x1e
0489f39c 6f01dd34 uxtheme!CTextDraw::GetTextExtent+0xa4
0489f3e4 6f0143c9 uxtheme!GetThemeTextExtent+0x74
0489f438 6f020f87 uxtheme!_GetNcCaptionTextSize+0x61
0489f528 6f02293c uxtheme!CThemeWnd::GetNcWindowMetrics+0x307
0489f5d4 6f0229ef uxtheme!_WindowPosChangedWorker+0x7c
0489f5e0 6f01f545 uxtheme!OnOwpPostWindowPosChanged+0x1f
0489f630 762d7f43 uxtheme!ThemePostWndProc+0x355
0489f71c 762d7b30 user32!UserCallWinProcCheckWow+0x363
0489f780 762df897 user32!DispatchClientMessage+0x190
0489f7c0 77c656cd user32!__fnINLPWINDOWPOS+0x37
0489f810 6f03d44f ntdll!KiUserCallbackDispatcher+0x4d
0489f83c 6f0200ef uxtheme!OnOwpPreDwmCompositionChanged+0x4f
0489f898 762d7eef uxtheme!ThemePreWndProc+0x43f
0489f984 762d67c0 user32!UserCallWinProcCheckWow+0x30f
0489fa00 762d62f0 user32!DispatchMessageWorker+0x4c0
0489fa0c 627d24f1 user32!DispatchMessageW+0x10
0489fa30 627d2247 CfgRelayEx!WTL::CMessageLoop::Run+0xc1
0489fa90 627d48bf CfgRelayEx!CConfigCenterStub::Process+0xa7
0489fa9c 627fb53b CfgRelayEx!CThread::ThreadProc+0x1f
0489fad8 761cfcc9 CfgRelayEx!thread_start<unsigned int (__stdcall*)(void *)>+0x57
0489fae8 77c582ae kernel32!BaseThreadInitThunk+0x19
0489fb44 77c5827e ntdll!__RtlUserThreadStart+0x2f
0489fb54 00000000 ntdll!_RtlUserThreadStart+0x1b

dump count = 1

ChildEBP RetAddr  
04e7f8a4 7796e0c3 ntdll!RtlpLowFragHeapFree+0xc5
04e7f8bc 773614bd ntdll!RtlFreeHeap+0x105
04e7f8d0 5e11e271 kernel32!HeapFree+0x14
04e7f8e4 5e11dfe0 CfgRelayEx!_free_base+0x1c
04e7f8f4 779793c5 CfgRelayEx!destroy_fls+0x1b
04e7f910 7799216f ntdll!RtlProcessFlsData+0x57
04e7f9a8 77992403 ntdll!LdrShutdownThread+0x35
04e7f9b8 7799f5ca ntdll!RtlExitUserThread+0x2a
04e7fb04 7736344d ntdll!TppWorkerThread+0x846
04e7fb10 77979802 kernel32!BaseThreadInitThunk+0xe
04e7fb50 779797d5 ntdll!__RtlUserThreadStart+0x70
04e7fb68 00000000 ntdll!_RtlUserThreadStart+0x1b