Windows 10 creates crash dump on OBS Studio v.v.27.2.4, 28.1.2 & 29.0 exit if plugin Instant Replay (for OBS 28+ & legacy (on OBS 27.2.4) installed

[Seamas73]

When I exit OBS Studio (no matter wether it is v.27.2.4, 28.1.2 or 29.0) with Instant Replay installed on Windows 10, application presumed close correctly (no errors in application log) but Windows creates in %User_Profile%\AppData\Local\CrashDumps dump file with name obs64.exe.####(#).dmp. If I open dump file in WinDbg I see approximately this kind of text:

Microsoft (R) Windows Debugger Version 10.0.25200.1003 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.

Loading` Dump File [%USER_PROFILE%\AppData\Local\CrashDumps\obs64.exe.17652.dmp]
User Mini Dump File: Only registers, stack and portions of memory are available

************* Path validation summary **************

Response Time (ms) Location
Deferred srv*
Symbol search path is: srv*
Executable search path is:
Windows 10 Version 19045 MP (4 procs) Free x64
Product: WinNt, suite: SingleUserTS
Edition build lab: 19041.1.amd64fre.vb_release.191206-1406
Machine Name:
Debug session time: Thu Jan 12 16:46:51.000 2023 (UTC + 3:00)
System Uptime: not available
Process Uptime: 0 days 0:03:34.000
................................................................
................................................................
................................................................
................................................................
.....................................................
Loading unloaded module list
..........................................
This dump file has an exception of interest stored in it.
The stored exception information can be accessed via .ecxr.
(44f4.45c): Security check failure or stack buffer overrun - code c0000409 (first/second chance not available)
Subcode: 0x7 FAST_FAIL_FATAL_APP_EXIT
For analysis of this file, run !analyze -v
ucrtbase!abort+0x4e:
00007ff9`b594286e cd29 int 29h
0:000> !analyze -v

---

•                                                                         *
  

•                    Exception Analysis                                   *
  

•                                                                         *
  

---

KEY_VALUES_STRING: 1

Key  : Analysis.CPU.mSec
Value: 1530

Key  : Analysis.DebugAnalysisManager
Value: Create

Key  : Analysis.Elapsed.mSec
Value: 1616

Key  : Analysis.IO.Other.Mb
 Value: 0

Key : Analysis.IO.Read.Mb
Value: 0

Key : Analysis.IO.Write.Mb
Value: 0

Key : Analysis.Init.CPU.mSec
Value: 405

Key : Analysis.Init.Elapsed.mSec
Value: 4570

Key : Analysis.Memory.CommitPeak.Mb
Value: 117

Key : FailFast.Name
Value: FATAL_APP_EXIT

Key : FailFast.Type
Value: 7

Key : Timeline.Process.Start.DeltaSec
Value: 214

Key : WER.OS.Branch
Value: vb_release

Key : WER.OS.Timestamp
Value: 2019-12-06T14:06:00Z

Key : WER.OS.Version
Value: 10.0.19041.1

Key : WER.Process.Version
Value: 27.2.4.0

FILE_IN_CAB: obs64.exe.17652.dmp

NTGLOBALFLAG: 0

PROCESS_BAM_CURRENT_THROTTLED: 0

PROCESS_BAM_PREVIOUS_THROTTLED: 0

APPLICATION_VERIFIER_FLAGS: 0

CONTEXT: (.ecxr)
rax=0000000000000001 rbx=000002030a0b80a8 rcx=0000000000000007
rdx=000000000000000f rsi=000002030a0b8090 rdi=0000e752a9fc8994
rip=00007ff9b594286e rsp=000000e3238ff3f0 rbp=000002030a0b80b0
r8=0000000000000002 r9=000000e3238ff398 r10=0000000000000013
r11=cc08000000000000 r12=00007ff9a3e940fc r13=0000000000000000
r14=000000e3238ff548 r15=000002030a0b8090
iopl=0 nv up ei pl nz na pe nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202
ucrtbase!abort+0x4e:
00007ff9`b594286e cd29 int 29h
Resetting default scope

EXCEPTION_RECORD: (.exr -1)
ExceptionAddress: 00007ff9b594286e (ucrtbase!abort+0x000000000000004e)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000007
Subcode: 0x7 FAST_FAIL_FATAL_APP_EXIT

PROCESS_NAME: obs64.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 - .

EXCEPTION_CODE_STR: c0000409

EXCEPTION_PARAMETER1: 0000000000000007

FAULTING_THREAD: 0000045c

STACK_TEXT:
000000e3238ff3f0 00007ff9b5941f9f : 0000020300000003 0000000000000003 0000e752a9fc8994 00007ff9b80a0800 : ucrtbase!abort+0x4e
000000e3238ff420 00007ff9a3e94fb3 : 000000e3238ff4d0 000000e3238ff800 000002030a0b8090 00007ff9b5e0005b : ucrtbase!terminate+0x1f
000000e3238ff450 000000e3238ff4d0 : 000000e3238ff800 000002030a0b8090 00007ff9b5e0005b 000002030a0b80b0 : InstantReplay+0x4fb3
000000e3238ff458 000000e3238ff800 : 000002030a0b8090 00007ff9b5e0005b 000002030a0b80b0 00007ff9b58e42d6 : 0x000000e3238ff4d0 000000e3238ff460 000002030a0b8090 : 00007ff9b5e0005b 000002030a0b80b0 00007ff9b58e42d6 0000d52c1ae19224 : 0x000000e3238ff800
000000e3238ff468 00007ff9b5e0005b : 000002030a0b80b0 00007ff9b58e42d6 0000d52c1ae19224 00007ff9b58e60ae : 0x000002030a0b8090 000000e3238ff470 00007ff9b58e60ae : fffffffffffffffe 0000000000000000 0000000000000001 00007ff9a3e90000 : KERNELBASE!FlsGetValue+0x1b 000000e3238ff4a0 00007ff9b58e41fb : 0000000000000000 000000e3238ff548 000000e3238ff800 00007ff9b59c0e40 : ucrtbase!__crt_state_management::is_os_call+0x6a 000000e3238ff4d0 00007ff9b58e41b4 : 0000000000000000 0000000000000001 0000000000000000 000000e3238ff538 : ucrtbase!__crt_seh_guarded_call<int>::operator()<<lambda_7777bce6b2f8c936911f934f8298dc43>,<lambda_f03950bc5685219e0bcd2087efbe011e> &,<lambda_3883c3dff614d5e0c5f61bb1ac94921c> >+0x3b 000000e3238ff500 00007ff9a3e93f7a : 00007ff9a3e9d400 000000e300000002 0000000000000002 000000e3238ff530 : ucrtbase!execute_onexit_table+0x34 000000e3238ff530 00007ff9a3e9d400 : 000000e300000002 0000000000000002 000000e3238ff530 0000000000000000 : InstantReplay+0x3f7a 000000e3238ff538 000000e300000002 : 0000000000000002 000000e3238ff530 0000000000000000 00007ff9a3e94070 : InstantReplay+0xd400 000000e3238ff540 0000000000000002 : 000000e3238ff530 0000000000000000 00007ff9a3e94070 0000000000000001 : 0x000000e300000002
000000e3238ff548 000000e3238ff530 : 0000000000000000 00007ff9a3e94070 0000000000000001 0000000000000000 : 0x2
000000e3238ff550 0000000000000000 : 00007ff9a3e94070 0000000000000001 0000000000000000 0000000000000001 : 0x000000e3`238ff530

STACK_COMMAND: ~0s ; .cxr ; kb

SYMBOL_NAME: ucrtbase!abort+4e

MODULE_NAME: ucrtbase

IMAGE_NAME: ucrtbase.dll

FAILURE_BUCKET_ID: FAIL_FAST_FATAL_APP_EXIT_c0000409_ucrtbase.dll!abort

OS_VERSION: 10.0.19041.1

BUILDLAB_STR: vb_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

IMAGE_VERSION: 10.0.19041.789

FAILURE_ID_HASH: {e31753ac-c98a-8055-3663-47e707543d20}

Followup: MachineOwner

Dump files examples: https://1drv.ms/u/s!Am9vuEBrD-qEgokG3HEmbpNOwx38eg?e=7qmfFg

When I remove Instant Replay from OBS, application is closing correctly and Windows 10 doesn't create no crash dumps.
OBS27.2.4_2023-01-12 16-43-17.txt
OBS28+_2023-01-12 14-48-24.txt
OBS28+_2023-01-12 14-44-55.txt
OBS27.2.4_2023-01-12 16-40-40.txt