How to debug CTD

*h38fh2mf* · June 26, 2015

Unticking all mods Would cause a crash, just interested in the RaceMenu specifically since it's heavily involved in the crash you posted.

ToxicKin · June 26, 2015

Unticking all mods Would cause a crash, just interested in the RaceMenu specifically since it's heavily involved in the crash you posted.

Hmm, alright. I ran the "no RaceMenu" test one more time, this time making sure all mods and all plugins related to RaceMenu were turned off, but alas, same thing: game freezes at what looks like the end of loading. But thank you very much for your help, it is very useful to know what the crash is related to! If you know anything more, I'm all ears, but I'll also try to see if can't google and troubleshoot it out from here. I'll report back if I find something useful.

*h38fh2mf* · June 26, 2015

If NiOverride DLL (included with RaceMenu) had source code I could maybe tell you more but quick google doesn't show anything so not sure how I could help further.

ToxicKin · June 26, 2015

If NiOverride DLL (included with RaceMenu) had source code I could maybe tell you more but quick google doesn't show anything so not sure how I could help further.

Yeah, you're right that it doesn't seem to be any source code available for the DLL, only for the pex-scripts. There is, however, an ini-file which may contain interesting options...

Do you believe the following passage have any relevance with my (and our fellow modders) CTDs?

[General]

; Changes the way overrides are loaded,

; 0 - Dynamic (delays loading on the first game load of the session, then immediately loads for all subsequent game loads of the session)

; 1 - Always Immediate (will always load overrides immediately)

; 2 - Always Delayed (will always pass overrides to the task manager)

; Previous versions were always set to 2, but I experienced CTD when loading

; subsequent saves of the same game session (like dying and reloading)

iLoadMode=0 ; Default[0]

It's available in SKSE\Plugins\nioverride.ini.

EDIT: Tried it on both 1 and 2, but didn't work anyway. Well, I suppose it would've been a bit to magical to work. It still could be something reliant on those settings that makes the game crash on load of specific save files, but it's hard to tell. Should I ask Expired, the creator of NetImmerse Override, if the source is publicly available? If it could help the community with these crashes, it'd be a huge help in the future.

*h38fh2mf* · June 26, 2015

You can try, INI doesn't help, would need to see how the DLL works, all of it.

ToxicKin · June 28, 2015

Alright, I sent him a message, took him a little time to respond, but here's the response.

It's not publicly available, no. The ctds caused when occasionally loading a save should have been fixed in the latest release.

I believe the latest release and the one bundled with RaceMenu are the same? Hmm.

*b3lisario* · June 30, 2015

Alright, I sent him a message, took him a little time to respond, but here's the response.

It's not publicly available, no. The ctds caused when occasionally loading a save should have been fixed in the latest release.

I believe the latest release and the one bundled with RaceMenu are the same? Hmm.

I have reliable CTDs when loading a savegame.

~~Curiously I can't reproduce them if I downgrade from Racemenu 3.2.2 to 3.1.0~~ No that's not true.

When I delete the skse co-save file there is no CTD. Suspicious I'd say

Here is a bunch of minidumps. Probably they are all the same

Windows 7 Version 7601 (Service Pack 1) MP (8 procs) Free x86 compatible

Product: WinNt, suite: SingleUserTS

kernel32.dll version: 6.1.7601.17514 (win7sp1_rtm.101119-1850)

Machine Name:

Debug session time: Mon Jun 29 19:36:34.000 2015 (UTC - 4:00)

System Uptime: not available

Process Uptime: 0 days 0:04:57.000

Kernel time: 0 days 0:00:15.000

User time: 0 days 0:05:24.000

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\oca.ini, error 2

TRIAGER: Could not open triage file : e:\dump_analysis\program\winxp\triage.ini, error 2

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\user.ini, error 2

*******************************************************************************

* *

* Exception Analysis *

* *

*******************************************************************************

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\guids.ini, error 2

*** WARNING: Unable to verify timestamp for XAudio2_6.dll

*** WARNING: Unable to verify timestamp for nvd3dum.dll

*** ERROR: Module load completed but symbols could not be loaded for nvd3dum.dll

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

FAULTING_IP:

TESV+8ec5ec

00cec5ec 83784000 cmp dword ptr [eax+40h],0

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)

ExceptionAddress: 00cec5ec (TESV+0x008ec5ec)

ExceptionCode: c0000005 (Access violation)

ExceptionFlags: 00000000

NumberParameters: 2

Parameter[0]: 00000000

Parameter[1]: 00000040

Attempt to read from address 00000040

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_READ

PROCESS_NAME: TESV.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 00000040

READ_ADDRESS: 00000040

FOLLOWUP_IP:

TESV+8ec5ec

00cec5ec 83784000 cmp dword ptr [eax+40h],0

FAULTING_THREAD: 00001eac

PRIMARY_PROBLEM_CLASS: NULL_CLASS_PTR_READ

BUGCHECK_STR: APPLICATION_FAULT_NULL_CLASS_PTR_READ

LAST_CONTROL_TRANSFER: from 00000000 to 00cec5ec

STACK_TEXT:

00000000 00000000 00000000 00000000 00000000 TESV+0x8ec5ec

STACK_COMMAND: ~0s; .ecxr ; kb

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: TESV+8ec5ec

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: TESV

IMAGE_NAME: TESV.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 51437ce5

FAILURE_BUCKET_ID: NULL_CLASS_PTR_READ_c0000005_TESV.exe!Unknown

BUCKET_ID: APPLICATION_FAULT_NULL_CLASS_PTR_READ_TESV+8ec5ec

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/TESV_exe/1_9_32_0/51437ce5/TESV_exe/1_9_32_0/51437ce5/c0000005/008ec5ec.htm?Retriage=1

Followup: MachineOwner

---------

This free analysis is provided by OSR Open Systems Resources, Inc.

Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)

Hide DivLoaded Module List

start end module name

00020000 00036000 XINPUT1_3 XINPUT1_3.dll

00400000 01e12000 TESV TESV.exe

0b2d0000 0bbfc000 steamclient steamclient.dll

10000000 10047000 binkw32 binkw32.dll

45880000 459ba000 nvspcap nvspcap.dll

565d0000 568ac000 nvapi nvapi.dll

568b0000 56a01000 gameoverlayrenderer gameoverlayrenderer.dll

56a10000 56cd1000 Steam2 Steam2.dll

56ce0000 56e17000 Steam Steam.dll

570c0000 5714e000 XAudio2_6 XAudio2_6.dll

57150000 571dd000 nioverride nioverride.dll

571e0000 573c5000 D3DX9_42 D3DX9_42.dll

57440000 574cb000 chargen chargen.dll

574d0000 575b5000 skse_1_9_32 skse_1_9_32.dll

5a3d0000 5a42f000 d3dref9 d3dref9.dll

5a430000 5a462000 ConsolePlugin ConsolePlugin.dll

5a470000 5a496000 skse_steam_loader skse_steam_loader.dll

5a4a0000 5a4c8000 steam_api steam_api.dll

5a4d0000 5a500000 dinput8 dinput8.dll

5a5e0000 5a6f5000 dbghelp_5a5e0000 dbghelp.dll

5aae0000 5ab33000 vstdlib_s vstdlib_s.dll

5d960000 5d967000 X3DAudio1_7 X3DAudio1_7.dll

5da50000 5db61000 tier0_s tier0_s.dll

60000000 60021000 CSERHelper CSERHelper.dll

68200000 68336000 nvSCPAPI nvSCPAPI.dll

68340000 69352000 nvd3dum nvd3dum.dll

69360000 69523000 d3d9 d3d9.dll

6c080000 6c088000 secur32 secur32.dll

70e40000 70e79000 MMDevAPI MMDevAPI.dll

71580000 715b6000 AudioSes AudioSes.dll

716a0000 71795000 propsys propsys.dll

71a70000 71af4000 comctl32 comctl32.dll

721c0000 721c9000 hid hid.dll

722d0000 722e3000 dwmapi dwmapi.dll

72800000 72880000 uxtheme uxtheme.dll

73280000 73287000 wsock32 wsock32.dll

73300000 733eb000 dbghelp dbghelp.dll

733f0000 733f7000 winnsi winnsi.dll

73400000 7341c000 IPHLPAPI IPHLPAPI.DLL

74630000 74636000 d3d8thk d3d8thk.dll

74640000 74647000 avrt avrt.dll

755f0000 75615000 powrprof powrprof.dll

75620000 75652000 winmm winmm.dll

75660000 756d2000 dsound dsound.dll

757a0000 757a9000 version version.dll

75870000 7587c000 CRYPTBASE CRYPTBASE.dll

75880000 758e0000 sspicli sspicli.dll

758e0000 7590d000 wintrust wintrust.dll

75910000 7655a000 shell32 shell32.dll

76560000 766fd000 setupapi setupapi.dll

768d0000 76927000 shlwapi shlwapi.dll

76930000 76936000 nsi nsi.dll

76990000 76a3c000 msvcrt msvcrt.dll

76a40000 76a67000 cfgmgr32 cfgmgr32.dll

76a70000 76b80000 kernel32 kernel32.dll

76d80000 76d92000 devobj devobj.dll

76da0000 76e3d000 usp10 usp10.dll

76e50000 76e55000 psapi psapi.dll

76f60000 7702c000 msctf msctf.dll

77030000 7703a000 lpk lpk.dll

77040000 77086000 KERNELBASE KERNELBASE.dll

77090000 77130000 advapi32 advapi32.dll

77190000 772ad000 crypt32 crypt32.dll

772b0000 773a0000 rpcrt4 rpcrt4.dll

773a0000 7741b000 comdlg32 comdlg32.dll

77420000 7744a000 imagehlp imagehlp.dll

77450000 775ac000 ole32 ole32.dll

775b0000 77610000 imm32 imm32.dll

77610000 77645000 ws2_32 ws2_32.dll

77650000 776df000 oleaut32 oleaut32.dll

776e0000 777e0000 user32 user32.dll

777e0000 777f9000 sechost sechost.dll

77800000 77890000 gdi32 gdi32.dll

77890000 77913000 clbcatq clbcatq.dll

77cf0000 77cfc000 msasn1 msasn1.dll

77d20000 77ea0000 ntdll ntdll.dll

Hide DivRaw Stack Contents

Memory access error at 'StackLimit) @@(((ntdll!_NT_TIB *)@$teb)->StackBase)'

Hide DivDump Header Information

----- User Mini Dump Analysis

MINIDUMP_HEADER:

Version A793 (61B1)

NumberOfStreams 8

Flags 0

0000 MiniDumpNormal

Streams:

Stream 0: type ThreadListStream (3), size 00000514, RVA 00000248

27 threads

RVA 0000024C, ID 1EAC, Teb:FFFFFFFFFFFDD000

RVA 0000027C, ID 1F98, Teb:FFFFFFFFFFFDA000

RVA 000002AC, ID 228, Teb:FFFFFFFFFFFD7000

RVA 000002DC, ID 1F08, Teb:FFFFFFFFFFFAF000

RVA 0000030C, ID 1308, Teb:FFFFFFFFFFFAC000

RVA 0000033C, ID A9C, Teb:FFFFFFFFFFFA9000

RVA 0000036C, ID BD8, Teb:FFFFFFFFFFFA6000

RVA 0000039C, ID 464, Teb:FFFFFFFFFFF9A000

RVA 000003CC, ID F24, Teb:FFFFFFFFFFF97000

RVA 000003FC, ID 1058, Teb:FFFFFFFFFFF94000

RVA 0000042C, ID 1664, Teb:FFFFFFFFFFF8B000

RVA 0000045C, ID 1D78, Teb:FFFFFFFFFFF88000

RVA 0000048C, ID BF0, Teb:FFFFFFFFFFF85000

RVA 000004BC, ID 758, Teb:FFFFFFFFFFF82000

RVA 000004EC, ID 608, Teb:FFFFFFFFFFF7F000

RVA 0000051C, ID 5DC, Teb:FFFFFFFFFFF7C000

RVA 0000054C, ID 1E10, Teb:FFFFFFFFFFF79000

RVA 0000057C, ID 1FE4, Teb:FFFFFFFFFFF73000

RVA 000005AC, ID 8D4, Teb:FFFFFFFFFFF6D000

RVA 000005DC, ID 1088, Teb:FFFFFFFFFFF6A000

RVA 0000060C, ID 1F1C, Teb:FFFFFFFFFFF9D000

RVA 0000063C, ID 13DC, Teb:FFFFFFFFFFF67000

RVA 0000066C, ID 103C, Teb:FFFFFFFFFFFA3000

RVA 0000069C, ID 1CD8, Teb:FFFFFFFFFFF64000

RVA 000006CC, ID 1538, Teb:FFFFFFFFFFF61000

RVA 000006FC, ID 139C, Teb:FFFFFFFFFFF5E000

RVA 0000072C, ID 151C, Teb:FFFFFFFFFFFA0000

Stream 1: type ModuleListStream (4), size 00002014, RVA 00000768

76 modules

RVA 0000076C, 00400000 - 01e12000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\TESV.exe'

RVA 000007D8, 77d20000 - 77ea0000: 'C:\Windows\SysWOW64\ntdll.dll'

RVA 00000844, 76a70000 - 76b80000: 'C:\Windows\SysWOW64\kernel32.dll'

RVA 000008B0, 77040000 - 77086000: 'C:\Windows\SysWOW64\KERNELBASE.dll'

RVA 0000091C, 776e0000 - 777e0000: 'C:\Windows\SysWOW64\user32.dll'

RVA 00000988, 77800000 - 77890000: 'C:\Windows\SysWOW64\gdi32.dll'

RVA 000009F4, 77030000 - 7703a000: 'C:\Windows\SysWOW64\lpk.dll'

RVA 00000A60, 76da0000 - 76e3d000: 'C:\Windows\SysWOW64\usp10.dll'

RVA 00000ACC, 76990000 - 76a3c000: 'C:\Windows\SysWOW64\msvcrt.dll'

RVA 00000B38, 77090000 - 77130000: 'C:\Windows\SysWOW64\advapi32.dll'

RVA 00000BA4, 777e0000 - 777f9000: 'C:\Windows\SysWOW64\sechost.dll'

RVA 00000C10, 772b0000 - 773a0000: 'C:\Windows\SysWOW64\rpcrt4.dll'

RVA 00000C7C, 75880000 - 758e0000: 'C:\Windows\SysWOW64\sspicli.dll'

RVA 00000CE8, 75870000 - 7587c000: 'C:\Windows\SysWOW64\CRYPTBASE.dll'

RVA 00000D54, 75910000 - 7655a000: 'C:\Windows\SysWOW64\shell32.dll'

RVA 00000DC0, 768d0000 - 76927000: 'C:\Windows\SysWOW64\shlwapi.dll'

RVA 00000E2C, 77450000 - 775ac000: 'C:\Windows\SysWOW64\ole32.dll'

RVA 00000E98, 5a4a0000 - 5a4c8000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\steam_api.dll'

RVA 00000F04, 5d960000 - 5d967000: 'C:\Windows\System32\X3DAudio1_7.dll'

RVA 00000F70, 571e0000 - 573c5000: 'C:\Windows\System32\D3DX9_42.dll'

RVA 00000FDC, 73280000 - 73287000: 'C:\Windows\System32\wsock32.dll'

RVA 00001048, 77610000 - 77645000: 'C:\Windows\SysWOW64\ws2_32.dll'

RVA 000010B4, 76930000 - 76936000: 'C:\Windows\SysWOW64\nsi.dll'

RVA 00001120, 5a4d0000 - 5a500000: 'C:\Windows\System32\dinput8.dll'

RVA 0000118C, 75620000 - 75652000: 'C:\Windows\System32\winmm.dll'

RVA 000011F8, 10000000 - 10047000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\binkw32.dll'

RVA 00001264, 69360000 - 69523000: 'C:\Windows\System32\d3d9.dll'

RVA 000012D0, 757a0000 - 757a9000: 'C:\Windows\System32\version.dll'

RVA 0000133C, 74630000 - 74636000: 'C:\Windows\System32\d3d8thk.dll'

RVA 000013A8, 722d0000 - 722e3000: 'C:\Windows\System32\dwmapi.dll'

RVA 00001414, 00020000 - 00036000: 'C:\Windows\System32\XINPUT1_3.dll'

RVA 00001480, 76560000 - 766fd000: 'C:\Windows\SysWOW64\setupapi.dll'

RVA 000014EC, 76a40000 - 76a67000: 'C:\Windows\SysWOW64\cfgmgr32.dll'

RVA 00001558, 77650000 - 776df000: 'C:\Windows\SysWOW64\oleaut32.dll'

RVA 000015C4, 76d80000 - 76d92000: 'C:\Windows\SysWOW64\devobj.dll'

RVA 00001630, 775b0000 - 77610000: 'C:\Windows\System32\imm32.dll'

RVA 0000169C, 76f60000 - 7702c000: 'C:\Windows\SysWOW64\msctf.dll'

RVA 00001708, 5a470000 - 5a496000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\skse_steam_loader.dll'

RVA 00001774, 773a0000 - 7741b000: 'C:\Windows\SysWOW64\comdlg32.dll'

RVA 000017E0, 71a70000 - 71af4000: 'C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll'

RVA 0000184C, 76e50000 - 76e55000: 'C:\Windows\SysWOW64\psapi.dll'

RVA 000018B8, 574d0000 - 575b5000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\skse_1_9_32.dll'

RVA 00001924, 73300000 - 733eb000: 'C:\Windows\System32\dbghelp.dll'

RVA 00001990, 57440000 - 574cb000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\chargen.dll'

RVA 000019FC, 5a430000 - 5a462000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\ConsolePlugin.dll'

RVA 00001A68, 57150000 - 571dd000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\nioverride.dll'

RVA 00001AD4, 72800000 - 72880000: 'C:\Windows\System32\uxtheme.dll'

RVA 00001B40, 0b2d0000 - 0bbfc000: 'C:\Program Files (x86)\Steam\steamclient.dll'

RVA 00001BAC, 77190000 - 772ad000: 'C:\Windows\SysWOW64\crypt32.dll'

RVA 00001C18, 77cf0000 - 77cfc000: 'C:\Windows\SysWOW64\msasn1.dll'

RVA 00001C84, 73400000 - 7341c000: 'C:\Windows\System32\IPHLPAPI.DLL'

RVA 00001CF0, 733f0000 - 733f7000: 'C:\Windows\System32\winnsi.dll'

RVA 00001D5C, 77420000 - 7744a000: 'C:\Windows\SysWOW64\imagehlp.dll'

RVA 00001DC8, 5da50000 - 5db61000: 'C:\Program Files (x86)\Steam\tier0_s.dll'

RVA 00001E34, 5aae0000 - 5ab33000: 'C:\Program Files (x86)\Steam\vstdlib_s.dll'

RVA 00001EA0, 6c080000 - 6c088000: 'C:\Windows\System32\secur32.dll'

RVA 00001F0C, 56ce0000 - 56e17000: 'C:\Program Files (x86)\Steam\Steam.dll'

RVA 00001F78, 56a10000 - 56cd1000: 'C:\Program Files (x86)\Steam\Steam2.dll'

RVA 00001FE4, 5a5e0000 - 5a6f5000: 'C:\program files (x86)\Steam\dbghelp.dll'

RVA 00002050, 60000000 - 60021000: 'C:\Program Files (x86)\Steam\CSERHelper.dll'

RVA 000020BC, 568b0000 - 56a01000: 'C:\Program Files (x86)\Steam\gameoverlayrenderer.dll'

RVA 00002128, 721c0000 - 721c9000: 'C:\Windows\System32\hid.dll'

RVA 00002194, 758e0000 - 7590d000: 'C:\Windows\SysWOW64\wintrust.dll'

RVA 00002200, 77890000 - 77913000: 'C:\Windows\SysWOW64\clbcatq.dll'

RVA 0000226C, 570c0000 - 5714e000: 'C:\Windows\SysWOW64\XAudio2_6.dll'

RVA 000022D8, 70e40000 - 70e79000: 'C:\Windows\System32\MMDevAPI.dll'

RVA 00002344, 716a0000 - 71795000: 'C:\Windows\System32\propsys.dll'

RVA 000023B0, 71580000 - 715b6000: 'C:\Windows\System32\AudioSes.dll'

RVA 0000241C, 74640000 - 74647000: 'C:\Windows\System32\avrt.dll'

RVA 00002488, 45880000 - 459ba000: 'C:\Windows\System32\nvspcap.dll'

RVA 000024F4, 5a3d0000 - 5a42f000: 'C:\Windows\System32\d3dref9.dll'

RVA 00002560, 68340000 - 69352000: 'C:\Windows\System32\nvd3dum.dll'

RVA 000025CC, 755f0000 - 75615000: 'C:\Windows\System32\powrprof.dll'

RVA 00002638, 68200000 - 68336000: 'C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll'

RVA 000026A4, 565d0000 - 568ac000: 'C:\Windows\System32\nvapi.dll'

RVA 00002710, 75660000 - 756d2000: 'C:\Windows\System32\dsound.dll'

Stream 2: type MemoryListStream (5), size 00000214, RVA 00009DC0

33 memory ranges

range# RVA Address Size

0 00009FD4 77d3f841 00000100

1 0000A0D4 77d3fd01 00000100

2 0000A1D4 77d400cd 00000100

3 0000A2D4 77d40bb2 00000100

4 0000A3D4 77d41eb6 00000100

5 0000A4D4 00cec56c 00000100

6 0000A5D4 0018e8bc 00001744

7 0000BD18 0438fec4 0000013c

8 0000BE54 0650fec4 0000013c

9 0000BF90 0a6afec4 0000013c

10 0000C0CC 0a7afec4 0000013c

11 0000C208 0a8afec4 0000013c

12 0000C344 0a9afec4 0000013c

13 0000C480 0eccfed8 00000128

14 0000C5A8 0fe0fee4 0000011c

15 0000C6C4 4567fd90 00000270

16 0000C934 0e4bf174 00000e8c

17 0000D7C0 0eacfe80 00000180

18 0000D940 0ecdfe80 00000180

19 0000DAC0 0ecefe80 00000180

20 0000DC40 0fedfe80 00000180

21 0000DDC0 486bfea8 00000158

22 0000DF18 487ffea8 00000158

23 0000E070 49f6fe08 000001f8

24 0000E268 4a2efe24 000001dc

25 0000E444 4a42fdf0 00000210

26 0000E654 0e3cfe70 00000190

27 0000E7E4 4a56fea8 00000158

28 0000E93C 0ffdfe80 00000180

29 0000EABC 0ffefe80 00000180

30 0000EC3C 0ffffe80 00000180

31 0000EDBC 45a8fe80 00000180

32 0000EF3C 573dfe80 00000180

Total memory: 50e8

Stream 3: type ExceptionStream (6), size 000000A8, RVA 000001A0

ThreadID 7852

ExceptionCode C0000005

ExceptionRecord 0

ExceptionAddress cec5ec

Context record RVA 3ffe, size 2cc

Stream 4: type SystemInfoStream (7), size 00000038, RVA 00000080

ProcessorArchitecture 0000 (PROCESSOR_ARCHITECTURE_INTEL)

ProcessorLevel 0006

ProcessorRevision 3C03

NumberOfProcessors 08

MajorVersion 00000006

MinorVersion 00000001

BuildNumber 00001DB1 (7601)

PlatformId 00000002 (VER_PLATFORM_WIN32_NT)

CSDVersionRva 0000277C

Length: 28

Buffer: {'Service Pack 1'}

Product: WinNt, suite: SingleUserTS

Stream 5: type MiscInfoStream (15), size 000000E8, RVA 000000B8

Stream 6: type UnusedStream (0), size 00000000, RVA 00000000

Stream 7: type UnusedStream (0), size 00000000, RVA 00000000

Hide DivStrings

GenuineIntel

Hora est

ndar romance

Hora de verano romance

Service Pack 1

C:\program files (x86)\Steam\steamapps\common\Skyrim\TESV.exe

C:\Windows\SysWOW64\ntdll.dll

C:\Windows\SysWOW64\kernel32.dll

C:\Windows\SysWOW64\KERNELBASE.dll

C:\Windows\SysWOW64\user32.dll

C:\Windows\SysWOW64\gdi32.dll

C:\Windows\SysWOW64\lpk.dll

C:\Windows\SysWOW64\usp10.dll

C:\Windows\SysWOW64\msvcrt.dll

C:\Windows\SysWOW64\advapi32.dll

C:\Windows\SysWOW64\sechost.dll

C:\Windows\SysWOW64\rpcrt4.dll

C:\Windows\SysWOW64\sspicli.dll

C:\Windows\SysWOW64\CRYPTBASE.dll

C:\Windows\SysWOW64\shell32.dll

C:\Windows\SysWOW64\shlwapi.dll

C:\Windows\SysWOW64\ole32.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\steam_api.dll

C:\Windows\System32\X3DAudio1_7.dll

C:\Windows\System32\D3DX9_42.dll

C:\Windows\System32\wsock32.dll

C:\Windows\SysWOW64\ws2_32.dll

C:\Windows\SysWOW64\nsi.dll

C:\Windows\System32\dinput8.dll

C:\Windows\System32\winmm.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\binkw32.dll

C:\Windows\System32\d3d9.dll

C:\Windows\System32\version.dll

C:\Windows\System32\d3d8thk.dll

C:\Windows\System32\dwmapi.dll

C:\Windows\System32\XINPUT1_3.dll

C:\Windows\SysWOW64\setupapi.dll

C:\Windows\SysWOW64\cfgmgr32.dll

C:\Windows\SysWOW64\oleaut32.dll

C:\Windows\SysWOW64\devobj.dll

C:\Windows\System32\imm32.dll

C:\Windows\SysWOW64\msctf.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\skse_steam_loader.dll

C:\Windows\SysWOW64\comdlg32.dll

C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll

C:\Windows\SysWOW64\psapi.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\skse_1_9_32.dll

C:\Windows\System32\dbghelp.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\chargen.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\ConsolePlugin.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\nioverride.dll

C:\Windows\System32\uxtheme.dll

C:\Program Files (x86)\Steam\steamclient.dll

C:\Windows\SysWOW64\crypt32.dll

C:\Windows\SysWOW64\msasn1.dll

C:\Windows\System32\IPHLPAPI.DLL

C:\Windows\System32\winnsi.dll

C:\Windows\SysWOW64\imagehlp.dll

C:\Program Files (x86)\Steam\tier0_s.dll

C:\Program Files (x86)\Steam\vstdlib_s.dll

C:\Windows\System32\secur32.dll

C:\Program Files (x86)\Steam\Steam.dll

C:\Program Files (x86)\Steam\Steam2.dll

C:\program files (x86)\Steam\dbghelp.dll

C:\Program Files (x86)\Steam\CSERHelper.dll

C:\Program Files (x86)\Steam\gameoverlayrenderer.dll

C:\Windows\System32\hid.dll

C:\Windows\SysWOW64\wintrust.dll

C:\Windows\SysWOW64\clbcatq.dll

C:\Windows\SysWOW64\XAudio2_6.dll

C:\Windows\System32\MMDevAPI.dll

C:\Windows\System32\propsys.dll

C:\Windows\System32\AudioSes.dll

C:\Windows\System32\avrt.dll

C:\Windows\System32\nvspcap.dll

C:\Windows\System32\d3dref9.dll

C:\Windows\System32\nvd3dum.dll

C:\Windows\System32\powrprof.dll

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll

C:\Windows\System32\nvapi.dll

C:\Windows\System3

Windows 7 Version 7601 (Service Pack 1) MP (8 procs) Free x86 compatible

Product: WinNt, suite: SingleUserTS

kernel32.dll version: 6.1.7601.17514 (win7sp1_rtm.101119-1850)

Machine Name:

Debug session time: Mon Jun 29 19:38:30.000 2015 (UTC - 4:00)

System Uptime: not available

Process Uptime: 0 days 0:00:19.000

Kernel time: 0 days 0:00:02.000

User time: 0 days 0:00:12.000

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\oca.ini, error 2

TRIAGER: Could not open triage file : e:\dump_analysis\program\winxp\triage.ini, error 2

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\user.ini, error 2

*******************************************************************************

* *

* Exception Analysis *

* *

*******************************************************************************

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\guids.ini, error 2

*** WARNING: Unable to verify timestamp for XAudio2_6.dll

*** WARNING: Unable to verify timestamp for nvd3dum.dll

*** ERROR: Module load completed but symbols could not be loaded for nvd3dum.dll

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

FAULTING_IP:

TESV+7dc33b

00bdc33b 8958f8 mov dword ptr [eax-8],ebx

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)

ExceptionAddress: 00bdc33b (TESV+0x007dc33b)

ExceptionCode: c0000005 (Access violation)

ExceptionFlags: 00000000

NumberParameters: 2

Parameter[0]: 00000001

Parameter[1]: 5bb3bb50

Attempt to write to address 5bb3bb50

DEFAULT_BUCKET_ID: INVALID_POINTER_WRITE

PROCESS_NAME: TESV.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000001

EXCEPTION_PARAMETER2: 5bb3bb50

WRITE_ADDRESS: 5bb3bb50

FOLLOWUP_IP:

TESV+7dc33b

00bdc33b 8958f8 mov dword ptr [eax-8],ebx

FAULTING_THREAD: 00000fb4

PRIMARY_PROBLEM_CLASS: INVALID_POINTER_WRITE

BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_WRITE

LAST_CONTROL_TRANSFER: from 00bde2b0 to 00bdc33b

STACK_TEXT:

WARNING: Stack unwind information not available. Following frames may be wrong.

4879fdc4 00bde2b0 4879fe90 5bb40040 4879fe90 TESV+0x7dc33b

4879fe48 00bb05fa 3596cbf0 3596cc30 3ed91688 TESV+0x7de2b0

4879fe94 77050816 00000660 5bb40010 77050800 TESV+0x7b05fa

77d3f800 77007970 70637363 00735f79 63736377 KERNELBASE!WaitForSingleObjectEx+0x98

77d3f810 006e7073 6c736377 77006e65 636e7363 msctf!__dyn_tls_init_callback (msctf+0xa7970)

77d3f814 6c736377 77006e65 636e7363 77007461 TESV+0x2e7073

77d3f818 77006e65 636e7363 77007461 636e7363 0x6c736377

77d3f81c 636e7363 77007461 636e7363 735f7461 msctf!__dyn_tls_init_callback (msctf+0xa6e65)

77d3f820 77007461 636e7363 735f7461 73637700 0x636e7363

77d3f824 636e7363 735f7461 73637700 706d636e msctf!__dyn_tls_init_callback (msctf+0xa7461)

77d3f828 735f7461 73637700 706d636e 73637700 0x636e7363

77d3f82c 73637700 706d636e 73637700 7970636e 0x735f7461

77d3f830 706d636e 73637700 7970636e 73637700 0x73637700

77d3f834 73637700 7970636e 73637700 7970636e 0x706d636e

77d3f838 7970636e 73637700 7970636e 7700735f 0x73637700

77d3f83c 73637700 7970636e 7700735f 6c6e7363 0x7970636e

77d3f840 7970636e 7700735f 6c6e7363 77006e65 0x73637700

77d3f844 7700735f 6c6e7363 77006e65 62707363 0x7970636e

77d3f848 6c6e7363 77006e65 62707363 77006b72 msctf!__dyn_tls_init_callback (msctf+0xa735f)

77d3f84c 77006e65 62707363 77006b72 63727363 0x6c6e7363

77d3f850 62707363 77006b72 63727363 77007268 msctf!__dyn_tls_init_callback (msctf+0xa6e65)

77d3f854 77006b72 63727363 77007268 70737363 0x62707363

77d3f858 63727363 77007268 70737363 6377006e msctf!__dyn_tls_init_callback (msctf+0xa6b72)

77d3f85c 77007268 70737363 6377006e 72747373 0x63727363

77d3f860 70737363 6377006e 72747373 73637700 msctf!__dyn_tls_init_callback (msctf+0xa7268)

77d3f864 6377006e 72747373 73637700 006c6f74 0x70737363

77d3f868 72747373 73637700 006c6f74 74736377 0x6377006e

77d3f86c 73637700 006c6f74 74736377 73626d6f 0x72747373

77d3f870 006c6f74 74736377 73626d6f 73637700 0x73637700

77d3f874 74736377 73626d6f 73637700 6c756f74 TESV+0x2c6f74

77d3f878 73626d6f 73637700 6c756f74 90909000 0x74736377

77d3f87c 73637700 6c756f74 90909000 90909090 0x73626d6f

77d3f880 6c756f74 90909000 90909090 000000b8 0x73637700

77d3f884 90909000 90909090 000000b8 000ab900 0x6c756f74

77d3f888 90909090 000000b8 000ab900 548d0000 0x90909000

77d3f88c 00000000 000ab900 548d0000 ff640424 0x90909090

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: TESV+7dc33b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: TESV

IMAGE_NAME: TESV.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 51437ce5

STACK_COMMAND: ~18s; .ecxr ; kb

FAILURE_BUCKET_ID: INVALID_POINTER_WRITE_c0000005_TESV.exe!Unknown

BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_WRITE_TESV+7dc33b

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/TESV_exe/1_9_32_0/51437ce5/TESV_exe/1_9_32_0/51437ce5/c0000005/007dc33b.htm?Retriage=1

Followup: MachineOwner

---------

This free analysis is provided by OSR Open Systems Resources, Inc.

Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)

Hide DivLoaded Module List

start end module name

00020000 00036000 XINPUT1_3 XINPUT1_3.dll

00400000 01e12000 TESV TESV.exe

0b580000 0beac000 steamclient steamclient.dll

10000000 10047000 binkw32 binkw32.dll

45840000 4597a000 nvspcap nvspcap.dll

55e40000 5611c000 nvapi nvapi.dll

56610000 5669e000 XAudio2_6 XAudio2_6.dll

566a0000 567f1000 gameoverlayrenderer gameoverlayrenderer.dll

56800000 56ac1000 Steam2 Steam2.dll

56ad0000 56c07000 Steam Steam.dll

56c10000 56c9d000 nioverride nioverride.dll

56ca0000 56d2b000 chargen chargen.dll

56d30000 56e15000 skse_1_9_32 skse_1_9_32.dll

57030000 5708f000 d3dref9 d3dref9.dll

57090000 57275000 D3DX9_42 D3DX9_42.dll

572f0000 57322000 ConsolePlugin ConsolePlugin.dll

5a470000 5a498000 steam_api steam_api.dll

5a4a0000 5a4c6000 skse_steam_loader skse_steam_loader.dll

5a4d0000 5a500000 dinput8 dinput8.dll

5a5e0000 5a6f5000 dbghelp_5a5e0000 dbghelp.dll

5aae0000 5ab33000 vstdlib_s vstdlib_s.dll

5da50000 5db61000 tier0_s tier0_s.dll

60000000 60021000 CSERHelper CSERHelper.dll

61700000 61707000 X3DAudio1_7 X3DAudio1_7.dll

68200000 68336000 nvSCPAPI nvSCPAPI.dll

68340000 69352000 nvd3dum nvd3dum.dll

69360000 69523000 d3d9 d3d9.dll

6c080000 6c088000 secur32 secur32.dll

70e40000 70e79000 MMDevAPI MMDevAPI.dll

71580000 715b6000 AudioSes AudioSes.dll

716a0000 71795000 propsys propsys.dll

71a70000 71af4000 comctl32 comctl32.dll

721c0000 721c9000 hid hid.dll

722d0000 722e3000 dwmapi dwmapi.dll

72800000 72880000 uxtheme uxtheme.dll

73280000 73287000 wsock32 wsock32.dll

73300000 733eb000 dbghelp dbghelp.dll

733f0000 733f7000 winnsi winnsi.dll

73400000 7341c000 IPHLPAPI IPHLPAPI.DLL

74630000 74636000 d3d8thk d3d8thk.dll

74640000 74647000 avrt avrt.dll

755f0000 75615000 powrprof powrprof.dll

75620000 75652000 winmm winmm.dll

75660000 756d2000 dsound dsound.dll

757a0000 757a9000 version version.dll

75870000 7587c000 CRYPTBASE CRYPTBASE.dll

75880000 758e0000 sspicli sspicli.dll

758e0000 7590d000 wintrust wintrust.dll

75910000 7655a000 shell32 shell32.dll

76560000 766fd000 setupapi setupapi.dll

768d0000 76927000 shlwapi shlwapi.dll

76930000 76936000 nsi nsi.dll

76990000 76a3c000 msvcrt msvcrt.dll

76a40000 76a67000 cfgmgr32 cfgmgr32.dll

76a70000 76b80000 kernel32 kernel32.dll

76d80000 76d92000 devobj devobj.dll

76da0000 76e3d000 usp10 usp10.dll

76e50000 76e55000 psapi psapi.dll

76f60000 7702c000 msctf msctf.dll

77030000 7703a000 lpk lpk.dll

77040000 77086000 KERNELBASE KERNELBASE.dll

77090000 77130000 advapi32 advapi32.dll

77190000 772ad000 crypt32 crypt32.dll

772b0000 773a0000 rpcrt4 rpcrt4.dll

773a0000 7741b000 comdlg32 comdlg32.dll

77420000 7744a000 imagehlp imagehlp.dll

77450000 775ac000 ole32 ole32.dll

775b0000 77610000 imm32 imm32.dll

77610000 77645000 ws2_32 ws2_32.dll

77650000 776df000 oleaut32 oleaut32.dll

776e0000 777e0000 user32 user32.dll

777e0000 777f9000 sechost sechost.dll

77800000 77890000 gdi32 gdi32.dll

77890000 77913000 clbcatq clbcatq.dll

77cf0000 77cfc000 msasn1 msasn1.dll

77d20000 77ea0000 ntdll ntdll.dll

Hide DivRaw Stack Contents

Memory access error at 'StackLimit) @@(((ntdll!_NT_TIB *)@$teb)->StackBase)'

Hide DivDump Header Information

----- User Mini Dump Analysis

MINIDUMP_HEADER:

Version A793 (61B1)

NumberOfStreams 8

Flags 0

0000 MiniDumpNormal

Streams:

Stream 0: type ThreadListStream (3), size 000005A4, RVA 00000248

30 threads

RVA 0000024C, ID 724, Teb:FFFFFFFFFFFDD000

RVA 0000027C, ID 1B08, Teb:FFFFFFFFFFFDA000

RVA 000002AC, ID 1C84, Teb:FFFFFFFFFFFD7000

RVA 000002DC, ID 1DE8, Teb:FFFFFFFFFFFAF000

RVA 0000030C, ID 1520, Teb:FFFFFFFFFFFAC000

RVA 0000033C, ID 1C64, Teb:FFFFFFFFFFFA9000

RVA 0000036C, ID 1CE0, Teb:FFFFFFFFFFFA6000

RVA 0000039C, ID 1888, Teb:FFFFFFFFFFF9A000

RVA 000003CC, ID 40C, Teb:FFFFFFFFFFF97000

RVA 000003FC, ID 1E60, Teb:FFFFFFFFFFF94000

RVA 0000042C, ID 750, Teb:FFFFFFFFFFF91000

RVA 0000045C, ID 13C4, Teb:FFFFFFFFFFF8E000

RVA 0000048C, ID 150C, Teb:FFFFFFFFFFF8B000

RVA 000004BC, ID 324, Teb:FFFFFFFFFFF88000

RVA 000004EC, ID 1ED0, Teb:FFFFFFFFFFF85000

RVA 0000051C, ID 1078, Teb:FFFFFFFFFFF82000

RVA 0000054C, ID 16A4, Teb:FFFFFFFFFFF7F000

RVA 0000057C, ID 1CEC, Teb:FFFFFFFFFFF7C000

RVA 000005AC, ID FB4, Teb:FFFFFFFFFFF79000

RVA 000005DC, ID B38, Teb:FFFFFFFFFFF73000

RVA 0000060C, ID 1EF4, Teb:FFFFFFFFFFF70000

RVA 0000063C, ID 1FF8, Teb:FFFFFFFFFFF6D000

RVA 0000066C, ID E60, Teb:FFFFFFFFFFF6A000

RVA 0000069C, ID 1E5C, Teb:FFFFFFFFFFF9D000

RVA 000006CC, ID 1D68, Teb:FFFFFFFFFFF67000

RVA 000006FC, ID 1144, Teb:FFFFFFFFFFFA3000

RVA 0000072C, ID 1334, Teb:FFFFFFFFFFF64000

RVA 0000075C, ID 1ECC, Teb:FFFFFFFFFFF61000

RVA 0000078C, ID 6E0, Teb:FFFFFFFFFFF5E000

RVA 000007BC, ID 1DD8, Teb:FFFFFFFFFFFA0000

Stream 1: type ModuleListStream (4), size 00002014, RVA 000007F8

76 modules

RVA 000007FC, 00400000 - 01e12000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\TESV.exe'

RVA 00000868, 77d20000 - 77ea0000: 'C:\Windows\SysWOW64\ntdll.dll'

RVA 000008D4, 76a70000 - 76b80000: 'C:\Windows\SysWOW64\kernel32.dll'

RVA 00000940, 77040000 - 77086000: 'C:\Windows\SysWOW64\KERNELBASE.dll'

RVA 000009AC, 776e0000 - 777e0000: 'C:\Windows\SysWOW64\user32.dll'

RVA 00000A18, 77800000 - 77890000: 'C:\Windows\SysWOW64\gdi32.dll'

RVA 00000A84, 77030000 - 7703a000: 'C:\Windows\SysWOW64\lpk.dll'

RVA 00000AF0, 76da0000 - 76e3d000: 'C:\Windows\SysWOW64\usp10.dll'

RVA 00000B5C, 76990000 - 76a3c000: 'C:\Windows\SysWOW64\msvcrt.dll'

RVA 00000BC8, 77090000 - 77130000: 'C:\Windows\SysWOW64\advapi32.dll'

RVA 00000C34, 777e0000 - 777f9000: 'C:\Windows\SysWOW64\sechost.dll'

RVA 00000CA0, 772b0000 - 773a0000: 'C:\Windows\SysWOW64\rpcrt4.dll'

RVA 00000D0C, 75880000 - 758e0000: 'C:\Windows\SysWOW64\sspicli.dll'

RVA 00000D78, 75870000 - 7587c000: 'C:\Windows\SysWOW64\CRYPTBASE.dll'

RVA 00000DE4, 75910000 - 7655a000: 'C:\Windows\SysWOW64\shell32.dll'

RVA 00000E50, 768d0000 - 76927000: 'C:\Windows\SysWOW64\shlwapi.dll'

RVA 00000EBC, 77450000 - 775ac000: 'C:\Windows\SysWOW64\ole32.dll'

RVA 00000F28, 5a470000 - 5a498000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\steam_api.dll'

RVA 00000F94, 61700000 - 61707000: 'C:\Windows\System32\X3DAudio1_7.dll'

RVA 00001000, 57090000 - 57275000: 'C:\Windows\System32\D3DX9_42.dll'

RVA 0000106C, 73280000 - 73287000: 'C:\Windows\System32\wsock32.dll'

RVA 000010D8, 77610000 - 77645000: 'C:\Windows\SysWOW64\ws2_32.dll'

RVA 00001144, 76930000 - 76936000: 'C:\Windows\SysWOW64\nsi.dll'

RVA 000011B0, 5a4d0000 - 5a500000: 'C:\Windows\System32\dinput8.dll'

RVA 0000121C, 75620000 - 75652000: 'C:\Windows\System32\winmm.dll'

RVA 00001288, 10000000 - 10047000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\binkw32.dll'

RVA 000012F4, 69360000 - 69523000: 'C:\Windows\System32\d3d9.dll'

RVA 00001360, 757a0000 - 757a9000: 'C:\Windows\System32\version.dll'

RVA 000013CC, 74630000 - 74636000: 'C:\Windows\System32\d3d8thk.dll'

RVA 00001438, 722d0000 - 722e3000: 'C:\Windows\System32\dwmapi.dll'

RVA 000014A4, 00020000 - 00036000: 'C:\Windows\System32\XINPUT1_3.dll'

RVA 00001510, 76560000 - 766fd000: 'C:\Windows\SysWOW64\setupapi.dll'

RVA 0000157C, 76a40000 - 76a67000: 'C:\Windows\SysWOW64\cfgmgr32.dll'

RVA 000015E8, 77650000 - 776df000: 'C:\Windows\SysWOW64\oleaut32.dll'

RVA 00001654, 76d80000 - 76d92000: 'C:\Windows\SysWOW64\devobj.dll'

RVA 000016C0, 775b0000 - 77610000: 'C:\Windows\System32\imm32.dll'

RVA 0000172C, 76f60000 - 7702c000: 'C:\Windows\SysWOW64\msctf.dll'

RVA 00001798, 5a4a0000 - 5a4c6000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\skse_steam_loader.dll'

RVA 00001804, 773a0000 - 7741b000: 'C:\Windows\SysWOW64\comdlg32.dll'

RVA 00001870, 71a70000 - 71af4000: 'C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll'

RVA 000018DC, 76e50000 - 76e55000: 'C:\Windows\SysWOW64\psapi.dll'

RVA 00001948, 56d30000 - 56e15000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\skse_1_9_32.dll'

RVA 000019B4, 73300000 - 733eb000: 'C:\Windows\System32\dbghelp.dll'

RVA 00001A20, 56ca0000 - 56d2b000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\chargen.dll'

RVA 00001A8C, 572f0000 - 57322000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\ConsolePlugin.dll'

RVA 00001AF8, 56c10000 - 56c9d000: 'C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\nioverride.dll'

RVA 00001B64, 72800000 - 72880000: 'C:\Windows\System32\uxtheme.dll'

RVA 00001BD0, 0b580000 - 0beac000: 'C:\Program Files (x86)\Steam\steamclient.dll'

RVA 00001C3C, 77190000 - 772ad000: 'C:\Windows\SysWOW64\crypt32.dll'

RVA 00001CA8, 77cf0000 - 77cfc000: 'C:\Windows\SysWOW64\msasn1.dll'

RVA 00001D14, 73400000 - 7341c000: 'C:\Windows\System32\IPHLPAPI.DLL'

RVA 00001D80, 733f0000 - 733f7000: 'C:\Windows\System32\winnsi.dll'

RVA 00001DEC, 77420000 - 7744a000: 'C:\Windows\SysWOW64\imagehlp.dll'

RVA 00001E58, 5da50000 - 5db61000: 'C:\Program Files (x86)\Steam\tier0_s.dll'

RVA 00001EC4, 5aae0000 - 5ab33000: 'C:\Program Files (x86)\Steam\vstdlib_s.dll'

RVA 00001F30, 6c080000 - 6c088000: 'C:\Windows\System32\secur32.dll'

RVA 00001F9C, 56ad0000 - 56c07000: 'C:\Program Files (x86)\Steam\Steam.dll'

RVA 00002008, 56800000 - 56ac1000: 'C:\Program Files (x86)\Steam\Steam2.dll'

RVA 00002074, 5a5e0000 - 5a6f5000: 'C:\program files (x86)\Steam\dbghelp.dll'

RVA 000020E0, 60000000 - 60021000: 'C:\Program Files (x86)\Steam\CSERHelper.dll'

RVA 0000214C, 566a0000 - 567f1000: 'C:\Program Files (x86)\Steam\gameoverlayrenderer.dll'

RVA 000021B8, 721c0000 - 721c9000: 'C:\Windows\System32\hid.dll'

RVA 00002224, 758e0000 - 7590d000: 'C:\Windows\SysWOW64\wintrust.dll'

RVA 00002290, 77890000 - 77913000: 'C:\Windows\SysWOW64\clbcatq.dll'

RVA 000022FC, 56610000 - 5669e000: 'C:\Windows\SysWOW64\XAudio2_6.dll'

RVA 00002368, 70e40000 - 70e79000: 'C:\Windows\System32\MMDevAPI.dll'

RVA 000023D4, 716a0000 - 71795000: 'C:\Windows\System32\propsys.dll'

RVA 00002440, 71580000 - 715b6000: 'C:\Windows\System32\AudioSes.dll'

RVA 000024AC, 74640000 - 74647000: 'C:\Windows\System32\avrt.dll'

RVA 00002518, 45840000 - 4597a000: 'C:\Windows\System32\nvspcap.dll'

RVA 00002584, 57030000 - 5708f000: 'C:\Windows\System32\d3dref9.dll'

RVA 000025F0, 68340000 - 69352000: 'C:\Windows\System32\nvd3dum.dll'

RVA 0000265C, 755f0000 - 75615000: 'C:\Windows\System32\powrprof.dll'

RVA 000026C8, 68200000 - 68336000: 'C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll'

RVA 00002734, 55e40000 - 5611c000: 'C:\Windows\System32\nvapi.dll'

RVA 000027A0, 75660000 - 756d2000: 'C:\Windows\System32\dsound.dll'

Stream 2: type MemoryListStream (5), size 00000264, RVA 0000A6B4

38 memory ranges

range# RVA Address Size

0 0000A918 77d3f841 00000134

1 0000AA4C 77d3fd01 00000100

2 0000AB4C 77d400cd 00000100

3 0000AC4C 77d40bb2 00000100

4 0000AD4C 77d41d8e 00000100

5 0000AE4C 77d41eb6 00000100

6 0000AF4C 00d4cb41 00000100

7 0000B04C 00bdc2bb 00000100

8 0000B14C 0018fc20 000003e0

9 0000B52C 043dfec4 0000013c

10 0000B668 045bf3fc 00000c04

11 0000C26C 0a70fb18 000004e8

12 0000C754 0a80fec4 0000013c

13 0000C890 0a90fec4 0000013c

14 0000C9CC 0aa0fec4 0000013c

15 0000CB08 0eadfee4 0000011c

16 0000CC24 0fe2fed8 00000128

17 0000CD4C 0ffafd90 00000270

18 0000CFBC 4567ff54 000000ac

19 0000D068 4577fe24 000001dc

20 0000D244 0dfbf174 00000e8c

21 0000E0D0 0dfcfe80 00000180

22 0000E250 0ecefe80 00000180

23 0000E3D0 0ecffe80 00000180

24 0000E550 0ed0fe80 00000180

25 0000E6D0 4865fea8 00000158

26 0000E828 4879ed94 0000126c

27 0000FA94 49edfe08 000001f8

28 0000FC8C 4a11fe24 000001dc

29 0000FE68 4a25fe24 000001dc

30 00010044 4a39fdf0 00000210

31 00010254 0e39fd10 000002f0

32 00010544 4a4dfea8 00000158

33 0001069C 4b5efe80 00000180

34 0001081C 4b63fe80 00000180

35 0001099C 4b68fe80 00000180

36 00010B1C 4b6dfe80 00000180

37 00010C9C 0adefe80 00000180

Total memory: 6504

Stream 3: type ExceptionStream (6), size 000000A8, RVA 000001A0

ThreadID 4020

ExceptionCode C0000005

ExceptionRecord 0

ExceptionAddress bdc33b

Context record RVA 408e, size 2cc

Stream 4: type SystemInfoStream (7), size 00000038, RVA 00000080

ProcessorArchitecture 0000 (PROCESSOR_ARCHITECTURE_INTEL)

ProcessorLevel 0006

ProcessorRevision 3C03

NumberOfProcessors 08

MajorVersion 00000006

MinorVersion 00000001

BuildNumber 00001DB1 (7601)

PlatformId 00000002 (VER_PLATFORM_WIN32_NT)

CSDVersionRva 0000280C

Length: 28

Buffer: {'Service Pack 1'}

Product: WinNt, suite: SingleUserTS

Stream 5: type MiscInfoStream (15), size 000000E8, RVA 000000B8

Stream 6: type UnusedStream (0), size 00000000, RVA 00000000

Stream 7: type UnusedStream (0), size 00000000, RVA 00000000

Hide DivStrings

GenuineIntel

Hora est

ndar romance

Hora de verano romance

Service Pack 1

C:\program files (x86)\Steam\steamapps\common\Skyrim\TESV.exe

C:\Windows\SysWOW64\ntdll.dll

C:\Windows\SysWOW64\kernel32.dll

C:\Windows\SysWOW64\KERNELBASE.dll

C:\Windows\SysWOW64\user32.dll

C:\Windows\SysWOW64\gdi32.dll

C:\Windows\SysWOW64\lpk.dll

C:\Windows\SysWOW64\usp10.dll

C:\Windows\SysWOW64\msvcrt.dll

C:\Windows\SysWOW64\advapi32.dll

C:\Windows\SysWOW64\sechost.dll

C:\Windows\SysWOW64\rpcrt4.dll

C:\Windows\SysWOW64\sspicli.dll

C:\Windows\SysWOW64\CRYPTBASE.dll

C:\Windows\SysWOW64\shell32.dll

C:\Windows\SysWOW64\shlwapi.dll

C:\Windows\SysWOW64\ole32.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\steam_api.dll

C:\Windows\System32\X3DAudio1_7.dll

C:\Windows\System32\D3DX9_42.dll

C:\Windows\System32\wsock32.dll

C:\Windows\SysWOW64\ws2_32.dll

C:\Windows\SysWOW64\nsi.dll

C:\Windows\System32\dinput8.dll

C:\Windows\System32\winmm.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\binkw32.dll

C:\Windows\System32\d3d9.dll

C:\Windows\System32\version.dll

C:\Windows\System32\d3d8thk.dll

C:\Windows\System32\dwmapi.dll

C:\Windows\System32\XINPUT1_3.dll

C:\Windows\SysWOW64\setupapi.dll

C:\Windows\SysWOW64\cfgmgr32.dll

C:\Windows\SysWOW64\oleaut32.dll

C:\Windows\SysWOW64\devobj.dll

C:\Windows\System32\imm32.dll

C:\Windows\SysWOW64\msctf.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\skse_steam_loader.dll

C:\Windows\SysWOW64\comdlg32.dll

C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll

C:\Windows\SysWOW64\psapi.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\skse_1_9_32.dll

C:\Windows\System32\dbghelp.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\chargen.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\ConsolePlugin.dll

C:\program files (x86)\Steam\steamapps\common\Skyrim\Data\SKSE\Plugins\nioverride.dll

C:\Windows\System32\uxtheme.dll

C:\Program Files (x86)\Steam\steamclient.dll

C:\Windows\SysWOW64\crypt32.dll

C:\Windows\SysWOW64\msasn1.dll

C:\Windows\System32\IPHLPAPI.DLL

C:\Windows\System32\winnsi.dll

C:\Windows\SysWOW64\imagehlp.dll

C:\Program Files (x86)\Steam\tier0_s.dll

C:\Program Files (x86)\Steam\vstdlib_s.dll

C:\Windows\System32\secur32.dll

C:\Program Files (x86)\Steam\Steam.dll

C:\Program Files (x86)\Steam\Steam2.dll

C:\program files (x86)\Steam\dbghelp.dll

C:\Program Files (x86)\Steam\CSERHelper.dll

C:\Program Files (x86)\Steam\gameoverlayrenderer.dll

C:\Windows\System32\hid.dll

C:\Windows\SysWOW64\wintrust.dll

C:\Windows\SysWOW64\clbcatq.dll

C:\Windows\SysWOW64\XAudio2_6.dll

C:\Windows\System32\MMDevAPI.dll

C:\Windows\System32\propsys.dll

C:\Windows\System32\AudioSes.dll

C:\Windows\System32\avrt.dll

C:\Windows\System32\nvspcap.dll

C:\Windows\System32\d3dref9.dll

C:\Windows\System32\nvd3dum.dll

C:\Windows\System32\powrprof.dll

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll

C:\Windows\System32\nvapi.dll

C:\Windows\System3

Windows 7 Version 7601 (Service Pack 1) MP (8 procs) Free x86 compatible

Product: WinNt, suite: SingleUserTS

kernel32.dll version: 6.1.7601.17514 (win7sp1_rtm.101119-1850)

Machine Name:

Debug session time: Mon Jun 29 19:41:01.000 2015 (UTC - 4:00)

System Uptime: not available

Process Uptime: 0 days 0:00:11.000

Kernel time: 0 days 0:00:02.000

User time: 0 days 0:00:10.000

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\oca.ini, error 2

TRIAGER: Could not open triage file : e:\dump_analysis\program\winxp\triage.ini, error 2

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\user.ini, error 2

*******************************************************************************

* *

* Exception Analysis *

* *

*******************************************************************************

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\guids.ini, error 2

*** WARNING: Unable to verify timestamp for XAudio2_6.dll

*** WARNING: Unable to verify timestamp for nvd3dum.dll

*** ERROR: Module load completed but symbols could not be loaded for nvd3dum.dll

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

FAULTING_IP:

TESV+7dc33b

00bdc33b 8958f8 mov dword ptr [eax-8],ebx

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)

ExceptionAddress: 00bdc33b (TESV+0x007dc33b)

ExceptionCode: c0000005 (Access violation)

ExceptionFlags: 00000000

NumberParameters: 2

Parameter[0]: 00000001

Parameter[1]: 5727a660

Attempt to write to address 5727a660

DEFAULT_BUCKET_ID: INVALID_POINTER_WRITE

PROCESS_NAME: TESV.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000001

EXCEPTION_PARAMETER2: 5727a660

WRITE_ADDRESS: 5727a660

FOLLOWUP_IP:

TESV+7dc33b

00bdc33b 8958f8 mov dword ptr [eax-8],ebx

FAULTING_THREAD: 00001308

PRIMARY_PROBLEM_CLASS: INVALID_POINTER_WRITE

BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_WRITE

LAST_CONTROL_TRANSFER: from 00bde2b0 to 00bdc33b

STACK_TEXT:

WARNING: Stack unwind information not available. Following frames may be wrong.

4880fdc4 00bde2b0 4880fe90 57280040 4880fe90 TESV+0x7dc33b

4880fe48 00bb05fa 3596d7b0 3596d7a0 3f428f5d TESV+0x7de2b0

4880fe94 77050816 000005b8 57280010 77050800 TESV+0x7b05fa

77d3f800 77007970 70637363 00735f79 63736377 KERNELBASE!WaitForSingleObjectEx+0x98

77d3f810 006e7073 6c736377 77006e65 636e7363 msctf!__dyn_tls_init_callback (msctf+0xa7970)

77d3f814 6c736377 77006e65 636e7363 77007461 TESV+0x2e7073

77d3f818 77006e65 636e7363 77007461 636e7363 0x6c736377

77d3f81c 636e7363 77007461 636e7363 735f7461 msctf!__dyn_tls_init_callback (msctf+0xa6e65)

77d3f820 77007461 636e7363 735f7461 73637700 0x636e7363

77d3f824 636e7363 735f7461 73637700 706d636e msctf!__dyn_tls_init_callback (msctf+0xa7461)

77d3f828 735f7461 73637700 706d636e 73637700 0x636e7363

77d3f82c 73637700 706d636e 73637700 7970636e 0x735f7461

77d3f830 706d636e 73637700 7970636e 73637700 0x73637700

77d3f834 73637700 7970636e 73637700 7970636e 0x706d636e

77d3f838 7970636e 73637700 7970636e 7700735f 0x73637700

77d3f83c 73637700 7970636e 7700735f 6c6e7363 0x7970636e

77d3f840 7970636e 7700735f 6c6e7363 77006e65 0x73637700

77d3f844 7700735f 6c6e7363 77006e65 62707363 0x7970636e

77d3f848 6c6e7363 77006e65 62707363 77006b72 msctf!__dyn_tls_init_callback (msctf+0xa735f)

77d3f84c 77006e65 62707363 77006b72 63727363 0x6c6e7363

77d3f850 62707363 77006b72 63727363 77007268 msctf!__dyn_tls_init_callback (msctf+0xa6e65)

77d3f854 77006b72 63727363 77007268 70737363 0x62707363

77d3f858 63727363 77007268 70737363 6377006e msctf!__dyn_tls_init_callback (msctf+0xa6b72)

77d3f85c 77007268 70737363 6377006e 72747373 0x63727363

77d3f860 70737363 6377006e 72747373 73637700 msctf!__dyn_tls_init_callback (msctf+0xa7268)

77d3f864 6377006e 72747373 73637700 006c6f74 0x70737363

77d3f868 72747373 73637700 006c6f74 74736377 0x6377006e

77d3f86c 73637700 006c6f74 74736377 73626d6f 0x72747373

77d3f870 006c6f74 74736377 73626d6f 73637700 0x73637700

77d3f874 74736377 73626d6f 73637700 6c756f74 TESV+0x2c6f74

77d3f878 73626d6f 73637700 6c756f74 90909000 0x74736377

77d3f87c 73637700 6c756f74 90909000 90909090 0x73626d6f

77d3f880 6c756f74 90909000 90909090 000000b8 0x73637700

77d3f884 90909000 90909090 000000b8 000ab900 0x6c756f74

77d3f888 90909090 000000b8 000ab900 548d0000 0x90909000

77d3f88c 00000000 000ab900 548d0000 ff640424 0x90909090

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: TESV+7dc33b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: TESV

IMAGE_NAME: TESV.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 51437ce5

STACK_COMMAND: ~18s; .ecxr ; kb

FAILURE_BUCKET_ID: INVALID_POINTER_WRITE_c0000005_TESV.exe!Unknown

BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_WRITE_TESV+7dc33b

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/TESV_exe/1_9_32_0/51437ce5/TESV_exe/1_9_32_0/51437ce5/c0000005/007dc33b.htm?Retriage=1

Followup: MachineOwner

---------

This free analysis is provided by OSR Open Systems Resources, Inc.

Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)

Hide DivLoaded Module List

start end module name

00020000 00036000 XINPUT1_3 XINPUT1_3.dll

00400000 01e12000 TESV TESV.exe

0b490000 0bdbc000 steamclient steamclient.dll

10000000 10047000 binkw32 binkw32.dll

45860000 4599a000 nvspcap nvspcap.dll

55530000 5580c000 nvapi nvapi.dll

565d0000 5662f000 d3dref9 d3dref9.dll

56630000 566be000 XAudio2_6 XAudio2_6.dll

566c0000 56811000 gameoverlayrenderer gameoverlayrenderer.dll

56820000 56ae1000 Steam2 Steam2.dll

56af0000 56c27000 Steam Steam.dll

56c30000 56e15000 D3DX9_42 D3DX9_42.dll

57070000 570fd000 nioverride nioverride.dll

57100000 5718b000 chargen chargen.dll

57190000 57275000 skse_1_9_32 skse_1_9_32.dll

5a430000 5a462000 ConsolePlugin ConsolePlugin.dll

5a470000 5a496000 skse_steam_loader skse_steam_loader.dll

5a4a0000 5a4c8000 steam_api steam_api.dll

5a4d0000 5a500000 dinput8 dinput8.dll

5a5e0000 5a6f5000 dbghelp_5a5e0000 dbghelp.dll

5aae0000 5ab33000 vstdlib_s vstdlib_s.dll

5cab0000 5cab7000 X3DAudio1_7 X3DAudio1_7.dll

5da50000 5db61000 tier0_s tier0_s.dll

60000000 60021000 CSERHelper CSERHelper.dll

68200000 68336000 nvSCPAPI nvSCPAPI.dll

68340000 69352000 nvd3dum nvd3dum.dll

69360000 69523000 d3d9 d3d9.dll

6c080000 6c088000 secur32 secur32.dll

70e40000 70e79000 MMDevAPI MMDevAPI.dll

71580000 715b6000 AudioSes AudioSes.dll

716a0000 71795000 propsys propsys.dll

71a70000 71af4000 comctl32 comctl32.dll

721c0000 721c9000 hid hid.dll

722d0000 722e3000 dwmapi dwmapi.dll

72800000 72880000 uxtheme uxtheme.dll

73280000 73287000 wsock32 wsock32.dll

73300000 733eb000 dbghelp dbghelp.dll

733f0000 733f7000 winnsi winnsi.dll

73400000 7341c000 IPHLPAPI IPHLPAPI.DLL

74630000 74636000 d3d8thk d3d8thk.dll

74640000 74647000 avrt avrt.dll

755f0000 75615000 powrprof powrprof.dll

75620000 75652000 winmm winmm.dll

75660000 756d2000 dsound dsound.dll

757a0000 757a9000 version version.dll

75870000 7587c000 CRYPTBASE CRYPTBASE.dll

75880000 758e0000 sspicli sspicli.dll

758e0000 7590d000 wintrust wintrust.dll

75910000 7655a000 shell32 shell32.dll

76560000 766fd000 setupapi setupapi.dll

768d0000 76927000 shlwapi shlwapi.dll

76930000 76936000 nsi nsi.dll

76990000 76a3c000 msvcrt msvcrt.dll

76a40000 76a67000 cfgmgr32 cfgmgr32.dll

76a70000 76b80000 kernel32 kernel32.dll

76d80000 76d92000 devobj devobj.dll

76da0000 76e3d000 usp10 usp10.dll

76e50000 76e55000 psapi psapi.dll

76f60000 7702c000 msctf msctf.dll

77030000 7703a000 lpk lpk.dll

77040000 77086000 KERNELBASE KERNELBASE.dll

77090000 77130000 advapi32 advapi32.dll

77190000 772ad000 crypt32 crypt32.dll

772b0000 773a0000 rpcrt4 rpcrt4.dll

773a0000 7741b000 comdlg32 comdlg32.dll

77420000 7744a000 imagehlp imagehlp.dll

77450000 775ac000 ole32 ole32.dll

775b0000 77610000 imm32 imm32.dll

77610000 77645000 ws2_32 ws2_32.dll

77650000 776df000 oleaut32 oleaut32.dll

776e0000 777e0000 user32 user32.dll

777e0000 777f9000 sechost sechost.dll

77800000 77890000 gdi32 gdi32.dll

77890000 77913000 clbcatq clbcatq.dll

77cf0000 77cfc000 msasn1 msasn1.dll

77d20000 77ea0000 ntdll ntdll.dll

Hide DivRaw Stack Contents

Memory access error at 'StackLimit) @@(((ntdll!_NT_TIB *)@$teb)->StackBase)'

Hide DivDump Header Information

----- User Mini Dump Analysis

MINIDUMP_HEADER:

Version A793 (61B1)

NumberOfStreams 8

Flags 0

0000 MiniDumpNormal

Streams:

Stream 0: type ThreadListStream (3), size 000005A4, RVA 00000248

30 threads

RVA 0000024C, ID 6E4, Teb:FFFFFFFFFFFDD000

RVA 0000027C, ID 7DC, Teb:FFFFFFFFFFFDA000

RVA 000002AC, ID 1804, Teb:FFFFFFFFFFFD7000

RVA 000002DC, ID 64C, Teb:FFFFFFFFFFFAF000

RVA 0000030C, ID EE0, Teb:FFFFFFFFFFFAC000

RVA 0000033C, ID BC4, Teb:FFFFFFFFFFFA9000

RVA 0000036C, ID 79C, Teb:FFFFFFFFFFFA6000

RVA 0000039C, ID 11D0, Teb:FFFFFFFFFFF9A000

RVA 000003CC, ID 208, Teb:FFFFFFFFFFF97000

RVA 000003FC, ID 14BC, Teb:FFFFFFFFFFF94000

RVA 0000042C, ID 960, Teb:FFFFFFFFFFF91000

RVA 0000045C, ID 1EE8, Teb:FFFFFFFFFFF8E000

RVA 0000048C, ID 464, Teb:FFFFFFFFFFF8B000

RVA 000004BC, ID 608, Teb:FFFFFFFFFFF88000

RVA 000004EC, ID 1D18, Teb:FFFFFFFFFFF85000

RVA 0000051C, ID FF0, Teb:FFFFFFFFFFF82000

RVA 0000054C, ID 1E3C, Teb:FFFFFFFFFFF7F000

RVA 0000057C, ID 1F08, Teb:FFFFFFFFFFF7C000

RVA 000005AC, ID 1308, Teb:FFFFFFFFFFF79000

RVA 000005DC, ID 1014, Teb:FFFFFFFFFFF73000

RVA 0000060C, ID 5DC, Teb:FFFFFFFFFFF70000

RVA 0000063C, ID 1538, Teb:FFFFFFFFFFF6D000

RVA 0000066C, ID 139C, Teb:FFFFFFFFFFF6A000

RVA 0000069C, ID 1EFC, Teb:FFFFFFFFFFF9D000

RVA 000006CC, ID 1D9C, Teb:FFFFFFFFFFF67000

RVA 000006FC, ID 5F0, Teb:FFFFFFFFFFFA3000

RVA 0000072C, ID 1024, Teb:FFFFFFFFFFF64000

RVA 0000075C, ID EAC, Teb:FFFFFFFFFFF61000

RVA 0000078C, ID 1074, Teb:FFFFFFFFFFF5E000

RVA 000007BC, ID 1D3C, Teb:FFFFFFFFFFFA0000