How to debug CTD

Sanks · August 15, 2015

I seem to CTD every time I fast travel lately

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.comfor more information
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
kernel32.dll version: 6.1.7601.18933 (win7sp1_gdr.150715-0600)
Machine Name:
Debug session time: Fri Aug 14 22:24:34.000 2015 (UTC - 4:00)
System Uptime: not available
Process Uptime: 0 days 0:00:57.000
Kernel time: 0 days 0:00:04.000
User time: 0 days 0:00:39.000
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\oca.ini, error 2
TRIAGER: Could not open triage file : e:\dump_analysis\program\winxp\triage.ini, error 2
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\user.ini, error 2
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: ntdll!_HEAP_FAILURE_INFORMATION ***
*** ***
*************************************************************************
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\guids.ini, error 2
*** WARNING: Unable to verify timestamp for XAudio2_6.dll
*** WARNING: Unable to verify timestamp for atiumdag.dll
*** ERROR: Module load completed but symbols could not be loaded for atiumdag.dll
*** WARNING: Unable to verify timestamp for JContainers.dll
*** ERROR: Module load completed but symbols could not be loaded for JContainers.dll
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

FAULTING_IP:
TESV+66b184
00a6b184 8a8437f4010000 mov al,byte ptr [edi+esi+1F4h]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00a6b184 (TESV+0x0066b184)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 30f5d5b0
Attempt to read from address 30f5d5b0

DEFAULT_BUCKET_ID: INVALID_POINTER_READ

PROCESS_NAME: TESV.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 30f5d5b0

READ_ADDRESS: 30f5d5b0

FOLLOWUP_IP:
TESV+66b184
00a6b184 8a8437f4010000 mov al,byte ptr [edi+esi+1F4h]

FAULTING_THREAD: 00001fd0

PRIMARY_PROBLEM_CLASS: INVALID_POINTER_READ

BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ

LAST_CONTROL_TRANSFER: from 00000000 to 00a6b184

STACK_TEXT:
00000000 00000000 00000000 00000000 00000000 TESV+0x66b184

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: TESV+66b184

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: TESV

IMAGE_NAME: TESV.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 51437ce5

STACK_COMMAND: ~20s; .ecxr ; kb

FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_TESV.exe!Unknown

BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_TESV+66b184

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/TESV_exe/1_9_32_0/51437ce5/TESV_exe/1_9_32_0/51437ce5/c0000005/0066b184.htm?Retriage=1

Followup: MachineOwner

start end module name
00020000 00036000 XINPUT1_3 XINPUT1_3.dll
00400000 01e12000 TESV TESV.exe
0c7d0000 0c8b7000 SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
10000000 10047000 binkw32 binkw32.dll
38000000 38999000 steamclient steamclient.dll
587e0000 58aa1000 Steam2 Steam2.dll
58ab0000 58be7000 Steam Steam.dll
58bf0000 58e1b000 JContainers JContainers.dll
5b550000 5b5de000 XAudio2_6 XAudio2_6.dll
5b670000 5b855000 D3DX9_42 D3DX9_42.dll
5b8b0000 5b9c5000 dbghelp_5b8b0000 dbghelp.dll
5b9d0000 5bb21000 gameoverlayrenderer gameoverlayrenderer.dll
60000000 60021000 CSERHelper CSERHelper.dll
60310000 60411000 DeviousDevices DeviousDevices.dll
606d0000 60797000 StorageUtil StorageUtil.dll
608c0000 609a5000 skse_1_9_32 skse_1_9_32.dll
609b0000 61149000 atiumdva atiumdva.dll
61150000 6185c000 atiumdag atiumdag.dll
620a0000 620f3000 SchlongsOfSkyrim SchlongsOfSkyrim.dll
656e0000 65734000 vstdlib_s vstdlib_s.dll
671d0000 672e1000 tier0_s tier0_s.dll
67ce0000 67ce9000 hid hid.dll
67df0000 67e1b000 SexLabUtil SexLabUtil.dll
67e20000 67ead000 nioverride nioverride.dll
67f50000 67fdd000 AcLayers AcLayers.dll
68060000 6809c000 MfgConsole MfgConsole.dll
680a0000 680d5000 Fuz_Ro_D_oh Fuz Ro D'oh.dll
69ef0000 69f16000 skse_steam_loader skse_steam_loader.dll
69f20000 69f48000 steam_api steam_api.dll
6a6b0000 6a6e6000 AudioSes AudioSes.dll
6b2d0000 6b3bb000 dbghelp dbghelp.dll
6b410000 6b422000 mpr mpr.dll
6dbb0000 6dbe9000 MMDevAPI MMDevAPI.dll
6dda0000 6de95000 propsys propsys.dll
6df30000 6df60000 dinput8 dinput8.dll
6df60000 6dfd2000 dsound dsound.dll
6f460000 6f467000 avrt avrt.dll
6f470000 6f495000 powrprof powrprof.dll
6f960000 6fa86000 aticfx32 aticfx32.dll
708e0000 70964000 comctl32 comctl32.dll
71b40000 71b8c000 apphelp apphelp.dll
721f0000 72241000 winspool winspool.drv
72250000 72258000 secur32 secur32.dll
72270000 722a2000 winmm winmm.dll
72480000 72500000 uxtheme uxtheme.dll
73070000 73077000 X3DAudio1_7 X3DAudio1_7.dll
73710000 73719000 version version.dll
73720000 73727000 winnsi winnsi.dll
73730000 7374c000 IPHLPAPI IPHLPAPI.DLL
73750000 73757000 wsock32 wsock32.dll
73bc0000 73bdc000 atiu9pag atiu9pag.dll
73d90000 73da3000 dwmapi dwmapi.dll
73db0000 73db6000 d3d8thk d3d8thk.dll
73df0000 73fb3000 d3d9 d3d9.dll
74c80000 74c8c000 CRYPTBASE CRYPTBASE.dll
74c90000 74cf0000 sspicli sspicli.dll
74cf0000 74cfb000 profapi profapi.dll
74d10000 74ead000 setupapi setupapi.dll
74eb0000 74f33000 clbcatq clbcatq.dll
74f50000 74f69000 sechost sechost.dll
74f70000 74f9f000 wintrust wintrust.dll
75010000 75037000 cfgmgr32 cfgmgr32.dll
75040000 75161000 crypt32 crypt32.dll
754b0000 754c7000 userenv userenv.dll
754d0000 7555f000 oleaut32 oleaut32.dll
75560000 7560c000 msvcrt msvcrt.dll
75850000 7585c000 msasn1 msasn1.dll
75880000 75892000 devobj devobj.dll
758a0000 759b0000 kernel32 kernel32.dll
759b0000 759b5000 psapi psapi.dll
759c0000 7660b000 shell32 shell32.dll
76610000 766dc000 msctf msctf.dll
766e0000 767d0000 rpcrt4 rpcrt4.dll
767d0000 7692c000 ole32 ole32.dll
76930000 7693a000 lpk lpk.dll
76940000 76a40000 user32 user32.dll
76a50000 76a56000 nsi nsi.dll
76a60000 76af0000 gdi32 gdi32.dll
76af0000 76b1b000 imagehlp imagehlp.dll
76bb0000 76c4d000 usp10 usp10.dll
76c50000 76cb0000 imm32 imm32.dll
76cb0000 76d2b000 comdlg32 comdlg32.dll
76d30000 76dd1000 advapi32 advapi32.dll
76de0000 76e15000 ws2_32 ws2_32.dll
76e20000 76e67000 KERNELBASE KERNELBASE.dll
76ec0000 76f17000 shlwapi shlwapi.dll
77320000 774a0000 ntdll ntdll.dll

Heres another instance of TESV+0x0006ecf5 too. Happens when I shapeshift using other mods, figured another dump can help find the problem in the future

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com)
Online Crash Dump Analysis Service
See http://www.osronline.comfor more information
Windows 7 Version 7601 (Service Pack 1) MP (4 procs) Free x86 compatible
Product: WinNt, suite: SingleUserTS
kernel32.dll version: 6.1.7601.18933 (win7sp1_gdr.150715-0600)
Machine Name:
Debug session time: Fri Aug 14 22:28:46.000 2015 (UTC - 4:00)
System Uptime: not available
Process Uptime: 0 days 0:00:38.000
Kernel time: 0 days 0:00:03.000
User time: 0 days 0:00:29.000
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\oca.ini, error 2
TRIAGER: Could not open triage file : e:\dump_analysis\program\winxp\triage.ini, error 2
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\user.ini, error 2
*******************************************************************************
* *
* Exception Analysis *
* *
*******************************************************************************

*************************************************************************
*** ***
*** ***
*** Either you specified an unqualified symbol, or your debugger ***
*** doesn't have full symbol information. Unqualified symbol ***
*** resolution is turned off by default. Please either specify a ***
*** fully qualified symbol module!symbolname, or enable resolution ***
*** of unqualified symbols by typing ".symopt- 100". Note that ***
*** enabling unqualified symbol resolution with network symbol ***
*** server shares in the symbol path may cause the debugger to ***
*** appear to hang for long periods of time when an incorrect ***
*** symbol name is typed or the network symbol server is down. ***
*** ***
*** For some commands to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: ntdll!_HEAP_FAILURE_INFORMATION ***
*** ***
*************************************************************************
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\guids.ini, error 2
*** WARNING: Unable to verify timestamp for XAudio2_6.dll
*** WARNING: Unable to verify timestamp for atiumdag.dll
*** ERROR: Module load completed but symbols could not be loaded for atiumdag.dll
*** WARNING: Unable to verify timestamp for JContainers.dll
*** ERROR: Module load completed but symbols could not be loaded for JContainers.dll
TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

FAULTING_IP:
TESV+6ecf5
0046ecf5 8baeb4000000 mov ebp,dword ptr [esi+0B4h]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0046ecf5 (TESV+0x0006ecf5)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 000000b4
Attempt to read from address 000000b4

PROCESS_NAME: TESV.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 000000b4

READ_ADDRESS: 000000b4

FOLLOWUP_IP:
TESV+6ecf5
0046ecf5 8baeb4000000 mov ebp,dword ptr [esi+0B4h]

FAULTING_THREAD: 00002228

BUGCHECK_STR: APPLICATION_FAULT_NULL_CLASS_PTR_READ_AFTER_CALL

PRIMARY_PROBLEM_CLASS: NULL_CLASS_PTR_READ_AFTER_CALL

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_READ_AFTER_CALL

LAST_CONTROL_TRANSFER: from 00000000 to 0046ecf5

STACK_TEXT:
0018f634 00000000 0018f6a0 13814850 24aa5d00 TESV+0x6ecf5

STACK_COMMAND: ~0s; .ecxr ; kb

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: TESV+6ecf5

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: TESV

IMAGE_NAME: TESV.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 51437ce5

FAILURE_BUCKET_ID: NULL_CLASS_PTR_READ_AFTER_CALL_c0000005_TESV.exe!Unknown

BUCKET_ID: APPLICATION_FAULT_NULL_CLASS_PTR_READ_AFTER_CALL_TESV+6ecf5

WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/TESV_exe/1_9_32_0/51437ce5/TESV_exe/1_9_32_0/51437ce5/c0000005/0006ecf5.htm?Retriage=1

Followup: MachineOwner

start end module name
00020000 00036000 XINPUT1_3 XINPUT1_3.dll
00400000 01e12000 TESV TESV.exe
04330000 04417000 SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
10000000 10047000 binkw32 binkw32.dll
38000000 38999000 steamclient steamclient.dll
58790000 588e1000 gameoverlayrenderer gameoverlayrenderer.dll
588f0000 58a05000 dbghelp_588f0000 dbghelp.dll
58a10000 58cd1000 Steam2 Steam2.dll
58ce0000 58e17000 Steam Steam.dll
5b630000 5b85b000 JContainers JContainers.dll
5b8b0000 5b93e000 XAudio2_6 XAudio2_6.dll
5b940000 5bb25000 D3DX9_42 D3DX9_42.dll
60000000 60021000 CSERHelper CSERHelper.dll
60350000 60417000 StorageUtil StorageUtil.dll
606b0000 60795000 skse_1_9_32 skse_1_9_32.dll
608a0000 609a1000 DeviousDevices DeviousDevices.dll
609b0000 61149000 atiumdva atiumdva.dll
61150000 6185c000 atiumdag atiumdag.dll
656e0000 65734000 vstdlib_s vstdlib_s.dll
671d0000 672e1000 tier0_s tier0_s.dll
67ce0000 67ce9000 hid hid.dll
67e20000 67e4b000 SexLabUtil SexLabUtil.dll
67e50000 67ea3000 SchlongsOfSkyrim SchlongsOfSkyrim.dll
67f50000 67fdd000 nioverride nioverride.dll
68060000 68095000 Fuz_Ro_D_oh Fuz Ro D'oh.dll
680a0000 680dc000 MfgConsole MfgConsole.dll
69ef0000 69f18000 steam_api steam_api.dll
69f20000 69f46000 skse_steam_loader skse_steam_loader.dll
6a6b0000 6a6e6000 AudioSes AudioSes.dll
6b2d0000 6b3bb000 dbghelp dbghelp.dll
6dbb0000 6dbe9000 MMDevAPI MMDevAPI.dll
6dda0000 6de95000 propsys propsys.dll
6df30000 6df60000 dinput8 dinput8.dll
6df60000 6dfd2000 dsound dsound.dll
6f460000 6f467000 avrt avrt.dll
6f470000 6f495000 powrprof powrprof.dll
6f960000 6fa86000 aticfx32 aticfx32.dll
708e0000 70964000 comctl32 comctl32.dll
72250000 72258000 secur32 secur32.dll
72270000 722a2000 winmm winmm.dll
72480000 72500000 uxtheme uxtheme.dll
73060000 73067000 X3DAudio1_7 X3DAudio1_7.dll
73710000 73719000 version version.dll
73720000 73727000 winnsi winnsi.dll
73730000 7374c000 IPHLPAPI IPHLPAPI.DLL
73750000 73757000 wsock32 wsock32.dll
73bc0000 73bdc000 atiu9pag atiu9pag.dll
73d90000 73da3000 dwmapi dwmapi.dll
73db0000 73db6000 d3d8thk d3d8thk.dll
73df0000 73fb3000 d3d9 d3d9.dll
74c80000 74c8c000 CRYPTBASE CRYPTBASE.dll
74c90000 74cf0000 sspicli sspicli.dll
74d10000 74ead000 setupapi setupapi.dll
74eb0000 74f33000 clbcatq clbcatq.dll
74f50000 74f69000 sechost sechost.dll
74f70000 74f9f000 wintrust wintrust.dll
75010000 75037000 cfgmgr32 cfgmgr32.dll
75040000 75161000 crypt32 crypt32.dll
754d0000 7555f000 oleaut32 oleaut32.dll
75560000 7560c000 msvcrt msvcrt.dll
75850000 7585c000 msasn1 msasn1.dll
75880000 75892000 devobj devobj.dll
758a0000 759b0000 kernel32 kernel32.dll
759b0000 759b5000 psapi psapi.dll
759c0000 7660b000 shell32 shell32.dll
76610000 766dc000 msctf msctf.dll
766e0000 767d0000 rpcrt4 rpcrt4.dll
767d0000 7692c000 ole32 ole32.dll
76930000 7693a000 lpk lpk.dll
76940000 76a40000 user32 user32.dll
76a50000 76a56000 nsi nsi.dll
76a60000 76af0000 gdi32 gdi32.dll
76af0000 76b1b000 imagehlp imagehlp.dll
76bb0000 76c4d000 usp10 usp10.dll
76c50000 76cb0000 imm32 imm32.dll
76cb0000 76d2b000 comdlg32 comdlg32.dll
76d30000 76dd1000 advapi32 advapi32.dll
76de0000 76e15000 ws2_32 ws2_32.dll
76e20000 76e67000 KERNELBASE KERNELBASE.dll
76ec0000 76f17000 shlwapi shlwapi.dll
77320000 774a0000 ntdll ntdll.dll

nafeasonto · August 15, 2015

Anyone know what this points to:

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)

ExceptionAddress: 004d4eb9 (TESV+0x000d4eb9)

ExceptionCode: c0000005 (Access violation)

ExceptionFlags: 00000000

NumberParameters: 2

Parameter[0]: 00000000

Parameter[1]: 00000074

Attempt to read from address 00000074

start end module name
003e0000 003f6000 XINPUT1_3 XINPUT1_3.dll
00400000 01d88000 TESV TESV.exe
02270000 02cc4000 d3d9 d3d9.dll
0a3e0000 0a4c7000 SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
10000000 10047000 binkw32 binkw32.dll
3b400000 3b41e000 steam_api steam_api.dll
52310000 5275a000 D3DX9_40 D3DX9_40.dll
54dd0000 550c9000 nvapi nvapi.dll
550d0000 55d2b000 nvd3dum nvd3dum.dll
59b40000 59c6e000 nvSCPAPI nvSCPAPI.dll
59c70000 59cfe000 XAudio2_6 XAudio2_6.dll
59d00000 59d8d000 nioverride nioverride.dll
59d90000 59fbb000 JContainers JContainers.dll
59fc0000 5ab80000 hdtPhysicsExtensions hdtPhysicsExtensions.dll
5ab80000 5ac9e000 fiss fiss.dll
5e490000 5e522000 comctl32 comctl32.dll
67440000 6746f000 d3d9_smaa d3d9_smaa.dll
68690000 6885c000 d3d9_68690000 d3d9.dll
68c00000 68c12000 enbhelper enbhelper.dll
68c20000 68c3e000 UltimateDragons UltimateDragons.dll
68c40000 68c9a000 hdtSkyrimMemPatch hdtSkyrimMemPatch.dll
68ca0000 68d2b000 chargen chargen.dll
68d30000 68e15000 skse_1_9_32 skse_1_9_32.dll
68e20000 6901f000 D3DX9_43 D3DX9_43.dll
695e0000 69603000 MemoryBlocksLog MemoryBlocksLog.dll
69610000 69659000 hdtHighHeelNative hdtHighHeelNative.dll
69660000 69686000 skse_steam_loader skse_steam_loader.dll
69690000 69875000 D3DX9_42 D3DX9_42.dll
6e9b0000 6e9b7000 X3DAudio1_7 X3DAudio1_7.dll
6ed60000 6ed96000 dinput8 dinput8.dll
6f040000 6f094000 MMDevAPI MMDevAPI.dll
6f0a0000 6f165000 WinTypes WinTypes.dll
6f170000 6f1d8000 AudioSes AudioSes.dll
6faf0000 6fb76000 dsound dsound.dll
70260000 70269000 avrt avrt.dll
704b0000 704c6000 usp10 usp10.dll
711d0000 711f1000 dbgcore dbgcore.dll
71200000 7133f000 dbghelp dbghelp.dll
713d0000 71512000 propsys propsys.dll
72bd0000 72bda000 hid hid.dll
72c90000 72d05000 uxtheme uxtheme.dll
73650000 7366d000 dwmapi dwmapi.dll
73a50000 73a58000 wsock32 wsock32.dll
73a90000 73b21000 apphelp apphelp.dll
74010000 74033000 WINMMBASE WINMMBASE.dll
741e0000 74204000 winmm winmm.dll
74a40000 74a61000 devobj devobj.dll
74b00000 74b08000 version version.dll
74b10000 74b69000 bcryptPrimitives bcryptPrimitives.dll
74b70000 74b7a000 CRYPTBASE CRYPTBASE.dll
74b80000 74b9e000 sspicli sspicli.dll
74ba0000 74c32000 oleaut32 oleaut32.dll
74c40000 74db6000 KERNELBASE KERNELBASE.dll
74dc0000 74e03000 sechost sechost.dll
74e10000 74ece000 msvcrt msvcrt.dll
74ee0000 74ee7000 nsi nsi.dll
74f50000 74fac000 ws2_32 ws2_32.dll
74fb0000 7516a000 combase combase.dll
75210000 75385000 crypt32 crypt32.dll
75390000 7547a000 ole32 ole32.dll
75480000 7550d000 SHCore SHCore.dll
75590000 75a6c000 windows_storage windows.storage.dll
75a70000 75ab4000 shlwapi shlwapi.dll
75ac0000 75b3b000 advapi32 advapi32.dll
75b40000 75c60000 msctf msctf.dll
75c60000 7701e000 shell32 shell32.dll
77020000 77062000 wintrust wintrust.dll
77070000 77076000 psapi psapi.dll
77080000 771c0000 user32 user32.dll
771c0000 771cf000 profapi profapi.dll
771d0000 7731d000 gdi32 gdi32.dll
77320000 7734b000 imm32 imm32.dll
77350000 773fc000 rpcrt4 rpcrt4.dll
77400000 77482000 clbcatq clbcatq.dll
77490000 7749e000 msasn1 msasn1.dll
774a0000 774e4000 powrprof powrprof.dll
774f0000 774fc000 kernel_appcore kernel.appcore.dll
77500000 775f0000 kernel32 kernel32.dll
77760000 77905000 setupapi setupapi.dll
77970000 77a2e000 comdlg32 comdlg32.dll
77a30000 77a66000 cfgmgr32 cfgmgr32.dll
77a70000 77be9000 ntdll ntdll.dll

*h38fh2mf* · August 15, 2015

@Sanks

The crash happens in some kind of keyboard input class. Not sure how to help further.

@nafeasonto

The crash happens in a function where object reference does this:

(this->baseForm->flags & 0x80000) != 0

Except that baseForm is NULL, this is possibly due to this method being called in the wrong place such as constructor or destructor. Can't help further since no stack was provided.

YFeyn · August 15, 2015

I get a ctd when I load my save and it would be awesome if you could look into it.

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00d573a8 (TESV+0x009573a8)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000

DEFAULT_BUCKET_ID: NULL_POINTER_READ

PROCESS_NAME: TESV.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 00000000

READ_ADDRESS: 00000000

FOLLOWUP_IP:
TESV+9573a8
00d573a8 8a01 mov al,byte ptr [ecx]

FAULTING_THREAD: 0000189c

PRIMARY_PROBLEM_CLASS: NULL_POINTER_READ

BUGCHECK_STR: APPLICATION_FAULT_NULL_POINTER_READ

LAST_CONTROL_TRANSFER: from 00bf2fb8 to 00d573a8

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
4f55fc20 00bf2fb8 00000000 158216c0 4f55fde0 TESV+0x9573a8
4f55fd44 00bc638e 4f55fde0 3e29fbe8 3ac1d7e0 TESV+0x7f2fb8
4f55fd48 4f55fde0 3e29fbe8 3ac1d7e0 00000000 TESV+0x7c638e
4f55fd4c 3e29fbe8 3ac1d7e0 00000000 4c1fe490 0x4f55fde0
4f55fde0 1e67cd60 00000000 00000000 00000000 0x3e29fbe8
4f55fde4 00000000 00000000 00000000 00000000 0x1e67cd60

start end module name
00020000 00029000 d3dx9_42 d3dx9_42.dll
003b0000 003c6000 XINPUT1_3 XINPUT1_3.dll
00400000 01e12000 TESV TESV.exe
02140000 02b95000 d3d9 d3d9.dll
0f850000 0f937000 SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
10000000 10047000 binkw32 binkw32.dll
40900000 414c0000 hdtPhysicsExtensions hdtPhysicsExtensions.dll
42000000 42999000 steamclient steamclient.dll
452c0000 45343000 clbcatq clbcatq.dll
4c9f0000 4cb4c000 nvspcap nvspcap.dll
50020000 50042000 zzEstrusUtil zzEstrusUtil.dll
50050000 50072000 showRaceMenu_preCacheKiller showRaceMenu_preCacheKiller.dll
50080000 500c9000 hdtHighHeelNative hdtHighHeelNative.dll
500d0000 5015b000 chargen chargen.dll
504d0000 50597000 StorageUtil StorageUtil.dll
505a0000 505f3000 SchlongsOfSkyrim SchlongsOfSkyrim.dll
50600000 5082b000 JContainers JContainers.dll
53ba0000 53bcb000 SexLabUtil SexLabUtil.dll
53bd0000 53c0c000 OneTweak OneTweak.dll
53c10000 53c4c000 MfgConsole MfgConsole.dll
53c50000 53c85000 Fuz_Ro_D_oh Fuz Ro D'oh.dll
55730000 55746000 ItemChargePlugin ItemChargePlugin.dll
55750000 557ae000 FirstPersonPlugin FirstPersonPlugin.dll
557b0000 557ec000 EnchArsenal EnchArsenal.dll
557f0000 558f1000 DeviousDevices DeviousDevices.dll
55900000 55931000 AddItemMenu AddItemMenu.dll
55940000 559a1000 AHZmoreHUDPlugin AHZmoreHUDPlugin.dll
559b0000 55a95000 skse_1_9_32 skse_1_9_32.dll
55aa0000 55c9f000 D3DX9_43 D3DX9_43.dll
56950000 56976000 skse_steam_loader skse_steam_loader.dll
56980000 56a3f000 msvcr100 msvcr100.dll
56a40000 56aa9000 msvcp100 msvcp100.dll
56ad0000 56aef000 DoubleJumpPlugin DoubleJumpPlugin.dll
56af0000 56b18000 steam_api steam_api.dll
56b20000 56b9a000 hook hook.dll
5aca0000 5acf4000 vstdlib_s vstdlib_s.dll
5bb90000 5bb97000 X3DAudio1_7 X3DAudio1_7.dll
5c040000 5c0cd000 AcLayers AcLayers.dll
5c680000 5c791000 tier0_s tier0_s.dll
5cbf0000 5cc62000 dsound dsound.dll
60000000 60021000 CSERHelper CSERHelper.dll
63480000 635af000 nvSCPAPI nvSCPAPI.dll
635b0000 6419c000 nvd3dum nvd3dum.dll
641a0000 64363000 d3d9_641a0000 d3d9.dll
663c0000 664b5000 propsys propsys.dll
6ac40000 6ac70000 dinput8 dinput8.dll
6ac80000 6ac92000 mpr mpr.dll
6b950000 6b959000 hid hid.dll
6b970000 6b9a9000 MMDevAPI MMDevAPI.dll
6b9b0000 6b9e6000 AudioSes AudioSes.dll
6bc50000 6bf6c000 nvapi nvapi.dll
6c2e0000 6c360000 uxtheme uxtheme.dll
6d650000 6d663000 dwmapi dwmapi.dll
6d670000 6d6bc000 apphelp apphelp.dll
712b0000 712d5000 powrprof powrprof.dll
71590000 71598000 secur32 secur32.dll
71dd0000 71dd6000 d3d8thk d3d8thk.dll
71fb0000 72034000 comctl32 comctl32.dll
72260000 72267000 avrt avrt.dll
726f0000 727db000 dbghelp dbghelp.dll
72970000 729a2000 winmm winmm.dll
736e0000 736e7000 winnsi winnsi.dll
736f0000 7370c000 IPHLPAPI IPHLPAPI.DLL
73780000 737cf000 webio webio.dll
737d0000 73828000 winhttp winhttp.dll
748f0000 748f7000 wsock32 wsock32.dll
74970000 749c1000 winspool winspool.drv
749d0000 749d9000 version version.dll
74aa0000 74aac000 CRYPTBASE CRYPTBASE.dll
74ab0000 74b10000 sspicli sspicli.dll
74b10000 74b70000 imm32 imm32.dll
74b70000 74c1c000 msvcrt msvcrt.dll
74c30000 74d30000 user32 user32.dll
74d30000 74dd1000 advapi32 advapi32.dll
74de0000 74e07000 cfgmgr32 cfgmgr32.dll
74e10000 74f00000 rpcrt4 rpcrt4.dll
74f00000 74f0b000 profapi profapi.dll
74f20000 74f4f000 wintrust wintrust.dll
74f50000 74fed000 usp10 usp10.dll
75150000 75167000 userenv userenv.dll
75350000 75397000 KERNELBASE KERNELBASE.dll
753a0000 753aa000 lpk lpk.dll
753b0000 753b6000 nsi nsi.dll
753c0000 753cc000 msasn1 msasn1.dll
753d0000 7552c000 ole32 ole32.dll
75540000 75661000 crypt32 crypt32.dll
75670000 756c7000 shlwapi shlwapi.dll
756d0000 756e9000 sechost sechost.dll
756f0000 7588d000 setupapi setupapi.dll
75ad0000 75afb000 imagehlp imagehlp.dll
75b00000 75b90000 gdi32 gdi32.dll
75be0000 75cac000 msctf msctf.dll
75cc0000 75cd2000 devobj devobj.dll
75ce0000 75d6f000 oleaut32 oleaut32.dll
75d70000 75deb000 comdlg32 comdlg32.dll
75df0000 75e25000 ws2_32 ws2_32.dll
75ed0000 75fe0000 kernel32 kernel32.dll
76070000 76075000 psapi psapi.dll
760e0000 76d2b000 shell32 shell32.dll
77130000 772b0000 ntdll ntdll.dll
772d0000 7735e000 XAudio2_6 XAudio2_6.dll
77370000 774c1000 gameoverlayrenderer gameoverlayrenderer.dll
774d0000 775e5000 dbghelp_774d0000 dbghelp.dll
775f0000 778b1000 Steam2 Steam2.dll
778c0000 779f7000 Steam Steam.dll
77a00000 77a8d000 nioverride nioverride.dll
77a90000 77bae000 fiss fiss.dll
77bb0000 77ffa000 D3DX9_40 D3DX9_40.dll

Bluegunk · August 15, 2015

Out of curiosity - can any of you try re-installing SKSE? I keep getting these kinds of crashes and discovered re-installing SKSE cured them. I wonder if a SKSE dll gets corrupted in mod changes. For instance, I just did a mod merger and a stable game suddenly started CTD with these sorts of errors again. I will reinstall SKSE and I bet the problem will be resolved.

If you find a SKSE reinstall cures your crashes - I'd love to know. We can spread the word.

*h38fh2mf* · August 15, 2015

No it's a placebo effect. There's no such thing as a "DLL corruption".

@YFeyn

your crash is same as in the original post, it's related to skeleton being deleted while another thread is binding animations to it. For me just retrying to load the same save game eventually will allow to load without crash.

fiewiel · August 16, 2015

The crash happens when loading a save around 50% of the time. Its inside a building with 3 npc/me/follower, vram usage is around 1GB. When I first load into qasmoke (a 0 mod save) and than into this damaged (?) save I can load into the game fine.

Exception Record and Address:

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00bfecc1 (TESV+0x007fecc1)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000018
Attempt to read from address 00000018

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_READ

PROCESS_NAME: TESV.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 00000018

READ_ADDRESS: 00000018

FOLLOWUP_IP:
TESV+7fecc1
00bfecc1 0fb70442 movzx eax,word ptr [edx+eax*2]

FAULTING_THREAD: 000019d4

PRIMARY_PROBLEM_CLASS: NULL_CLASS_PTR_READ

BUGCHECK_STR: APPLICATION_FAULT_NULL_CLASS_PTR_READ

IP_ON_HEAP: 1bd4ac30
The fault address in not in any loaded module, please check your build's rebase
log at <releasedir>\bin\build_logs\timebuild\ntrebase.log for module which may
contain the address if it were loaded.

FRAME_ONE_INVALID: 1

LAST_CONTROL_TRANSFER: from 1bd4ac30 to 00bfecc1

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
4c2ffae0 1bd4ac30 4c2ffdd8 4c2ffda0 3a62ed00 TESV+0x7fecc1
4c2ffae4 4c2ffdd8 4c2ffda0 3a62ed00 01d2ab02 0x1bd4ac30
4c2ffae8 4c2ffda0 3a62ed00 01d2ab02 00000000 0x4c2ffdd8
4c2ffe9c 76b32cc7 00000f14 00000000 76b32ce8 0x4c2ffda0
4c2fff80 77547c04 300d4000 77547be0 d84b91d8 KERNELBASE!WaitForSingleObjectEx+0x99
4c2fff94 77d4ad1f 300d4000 d8f7a79f 00000000 kernel32!BaseThreadInitThunk+0x24
4c2fffdc 77d4acea ffffffff 77d30231 00000000 ntdll!__RtlUserThreadStart+0x2f
4c2fffec 00000000 00a4b4a0 300d4000 00000000 ntdll!_RtlUserThreadStart+0x1b

Modulelist:

start end module name
003b0000 003c6000 XINPUT1_3 XINPUT1_3.dll
00400000 01e12000 TESV TESV.exe
021c0000 02c14000 d3d9 d3d9.dll
0e4d0000 0e53d000 SKSE_Elys_AltF4 SKSE_Elys_AltF4.dll
0e560000 0e564000 ToggleWalkRunFix ToggleWalkRunFix.dll
0ea50000 0eb37000 SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
10000000 10047000 binkw32 binkw32.dll
41a90000 42429000 steamclient steamclient.dll
5b500000 5b554000 vstdlib_s vstdlib_s.dll
5bd60000 5be71000 tier0_s tier0_s.dll
60000000 60021000 CSERHelper CSERHelper.dll
60120000 6082c000 atiumdag atiumdag.dll
61950000 620e9000 atiumdva atiumdva.dll
62a80000 62c53000 d3d9_62a80000 d3d9.dll
63660000 6371f000 msvcr100 msvcr100.dll
68d80000 691ca000 D3DX9_40 D3DX9_40.dll
691d0000 691e2000 enbhelper enbhelper.dll
691f0000 6927e000 XAudio2_6 XAudio2_6.dll
69280000 693d1000 gameoverlayrenderer gameoverlayrenderer.dll
693e0000 694f5000 dbghelp_693e0000 dbghelp.dll
69500000 697c1000 Steam2 Steam2.dll
697d0000 69907000 Steam Steam.dll
69910000 69927000 towConversation towConversation.dll
69930000 699bd000 nioverride nioverride.dll
699c0000 699d6000 lookCloser lookCloser.dll
699e0000 69a04000 hmkHotKeys hmkHotKeys.dll
69a10000 6a5d0000 hdtPhysicsExtensions hdtPhysicsExtensions.dll
6a5d0000 6a619000 hdtHighHeelNative hdtHighHeelNative.dll
6a620000 6a6ab000 chargen chargen.dll
6a6b0000 6a6d0000 UltimateCombat UltimateCombat.dll
6a6d0000 6a797000 StorageUtil StorageUtil.dll
6a7a0000 6a7cb000 SexLabUtil SexLabUtil.dll
6a7d0000 6a7ee000 SSAssist SSAssist.dll
6a7f0000 6a854000 SK_Armor_SKSE SK_Armor_SKSE.dll
6a860000 6a88c000 SKSE_EnhancedCamera SKSE_EnhancedCamera.dll
6a890000 6a8c7000 OneTweak OneTweak.dll
6a8d0000 6a90c000 MfgConsole MfgConsole.dll
6a910000 6a933000 MemoryBlocksLog MemoryBlocksLog.dll
6a940000 6ab6b000 JContainers JContainers.dll
6ab70000 6ac71000 DeviousDevices DeviousDevices.dll
6ac80000 6ad65000 skse_1_9_32 skse_1_9_32.dll
6ad70000 6af6f000 D3DX9_43 D3DX9_43.dll
6af70000 6b155000 D3DX9_42 D3DX9_42.dll
6b320000 6b3a1000 dsound dsound.dll
6c1c0000 6c1f5000 Fuz_Ro_D_oh Fuz Ro D'oh.dll
6c2d0000 6c339000 msvcp100 msvcp100.dll
6c340000 6c371000 AddItemMenu AddItemMenu.dll
6c380000 6c3a6000 skse_steam_loader skse_steam_loader.dll
6c400000 6c428000 steam_api steam_api.dll
6c430000 6c51e000 msvcr120 msvcr120.dll
6c520000 6c591000 msvcp120 msvcp120.dll
6c5a0000 6c611000 hook hook.dll
6ce70000 6ce8c000 atiu9pag atiu9pag.dll
6cef0000 6cf26000 dinput8 dinput8.dll
6d460000 6d476000 usp10 usp10.dll
70260000 7026e000 CellStabilizer CellStabilizer.dll
70270000 70277000 X3DAudio1_7 X3DAudio1_7.dll
70470000 70596000 aticfx32 aticfx32.dll
70e30000 70f71000 dbghelp dbghelp.dll
710a0000 71100000 AudioSes AudioSes.dll
71100000 71153000 MMDevAPI MMDevAPI.dll
712d0000 712ea000 dwmapi dwmapi.dll
71500000 715ed000 uxtheme uxtheme.dll
715f0000 71613000 WINMMBASE WINMMBASE.dll
71790000 7179a000 hid hid.dll
72000000 72089000 comctl32 comctl32.dll
731e0000 731ea000 secur32 secur32.dll
731f0000 73211000 devobj devobj.dll
73310000 7331a000 avrt avrt.dll
73a00000 73a40000 powrprof powrprof.dll
73d30000 73d53000 winmm winmm.dll
73f30000 73f39000 kernel_appcore kernel.appcore.dll
74930000 749bb000 SHCore SHCore.dll
74a00000 74a08000 winnsi winnsi.dll
74d10000 74d30000 IPHLPAPI IPHLPAPI.DLL
75040000 75048000 version version.dll
75120000 75128000 wsock32 wsock32.dll
75480000 754d4000 bcryptPrimitives bcryptPrimitives.dll
754e0000 754ea000 CRYPTBASE CRYPTBASE.dll
754f0000 7550e000 sspicli sspicli.dll
75510000 75555000 shlwapi shlwapi.dll
756d0000 756de000 msasn1 msasn1.dll
757b0000 75873000 msvcrt msvcrt.dll
75880000 76b2d000 shell32 shell32.dll
76b30000 76c07000 KERNELBASE KERNELBASE.dll
76c10000 76ca5000 oleaut32 oleaut32.dll
76cb0000 76e2d000 combase combase.dll
76e30000 76ebd000 clbcatq clbcatq.dll
76ec0000 76ee7000 imm32 imm32.dll
76ef0000 76f8b000 comdlg32 comdlg32.dll
76f90000 76fd1000 sechost sechost.dll
77070000 770ec000 advapi32 advapi32.dll
770f0000 771aa000 rpcrt4 rpcrt4.dll
771c0000 772d2000 msctf msctf.dll
772e0000 772f4000 imagehlp imagehlp.dll
77300000 77306000 psapi psapi.dll
77310000 7734d000 wintrust wintrust.dll
77350000 774d8000 crypt32 crypt32.dll
774e0000 77530000 ws2_32 ws2_32.dll
77530000 77670000 kernel32 kernel32.dll
77670000 776ac000 cfgmgr32 cfgmgr32.dll
776b0000 777d9000 ole32 ole32.dll
777e0000 77933000 user32 user32.dll
77940000 77af1000 setupapi setupapi.dll
77b00000 77b07000 nsi nsi.dll
77b10000 77c1f000 gdi32 gdi32.dll
77cf0000 77e5e000 ntdll ntdll.dll

Any help would be truly appreciated!

nafeasonto · August 16, 2015

@Sanks

The crash happens in some kind of keyboard input class. Not sure how to help further.

@nafeasonto

The crash happens in a function where object reference does this:
(this->baseForm->flags & 0x80000) != 0
Except that baseForm is NULL, this is possibly due to this method being called in the wrong place such as constructor or destructor. Can't help further since no stack was provided.

What does that mean, why would it null?

bjornk · August 16, 2015

1. Upon game load, the player character is in T-pose (other NPCs are okay), if I press one of the WASD keys the game CTDs.

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00d573a8 (TESV+0x009573a8)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000 

STACK_TEXT: 
WARNING: Stack unwind information not available. Following frames may be wrong.
3805eee0 00bf2fb8 00000000 1892b300 3805fdbc TESV+0x9573a8
3805ef10 00000000 00000000 01b450c0 00a48e1e TESV+0x7f2fb8

start    end        module name
0c080000 0c25b000   SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
68fe0000 69ba0000   hdtPhysicsExtensions hdtPhysicsExtensions.dll
6fed0000 6fef2000   showRaceMenu_preCacheKiller showRaceMenu_preCacheKiller.dll
6ff00000 6ff8d000   nioverride nioverride.dll
6ff90000 6ffd9000   hdtHighHeelNative hdtHighHeelNative.dll
6ffe0000 700a7000   StorageUtil StorageUtil.dll
700b0000 700db000   SexLabUtil SexLabUtil.dll
700e0000 7011c000   MfgConsole MfgConsole.dll
70120000 70142000   JaxonzConsolePlugIn JaxonzConsolePlugIn.dll
70150000 7037b000   JContainers JContainers.dll
70380000 703bd000   FirstPersonPlugin FirstPersonPlugin.dll
703c0000 70428000   CharacterMakingExtender_plugin CharacterMakingExtender_plugin.dll
70740000 70775000   Fuz_Ro_D_oh Fuz Ro D'oh.dll
70780000 7084a000   skse_1_9_32 skse_1_9_32.dll
709b0000 70a31000   hook     hook.dll   
70a90000 70ab3000   CFM_extensions CFM_extensions.dll

Looks similar to this:

Offset: 00d573a8 (TESV+0x009573a8)
When: loading finished
Cause: unknown
Result: skeleton is used in one thread while it was just deleted in another
Fix: unknown (may help to have less animations installed - guess only)
Related: animation binding, skeleton, string cache

2. Here's another one. After updating to FNIS 5.5, the same save above CTDs on game load, but unlike the above it doesn't load successfully.

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00d822d8 (TESV+0x009822d8)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000048
Attempt to read from address 00000048

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
37f8f724 00d832df 00000024 00000003 275ff2c0 TESV+0x9822d8
37f8f780 00c21660 00000024 00000001 00000003 TESV+0x9832df
37f8f840 00c22697 273d8480 275ff2c0 37f8fb64 TESV+0x821660
37f8fb2c 00bfb0ad 273d8480 37f8fb64 275e78d0 TESV+0x822697
37f8fb30 273d8480 37f8fb64 275e78d0 37f8fee8 TESV+0x7fb0ad
37f8fb34 37f8fb64 275e78d0 37f8fee8 275e78d0 0x273d8480
37f8fb38 275e78d0 37f8fee8 275e78d0 1517bfb0 0x37f8fb64
37f8fb64 12919210 00000000 80000000 12919210 0x275e78d0
37f8fb68 00000000 80000000 12919210 00000000 0x12919210

Loaded modules are the same as above.

It maybe important to note that this save loads just fine when loaded after another save, or after starting a new game.

3. This is a CTD while attempting to save the game.

FAULTING_IP:
TESV+272f94
00672f94 8b07            mov     eax,dword ptr [edi]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00672f94 (TESV+0x00272f94)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000001
Attempt to read from address 00000001

FOLLOWUP_IP:
TESV+272f94
00672f94 8b07            mov     eax,dword ptr [edi]

LAST_CONTROL_TRANSFER:  from 00000000 to 00672f94

STACK_TEXT: 
00000000 00000000 00000000 00000000 00000000 TESV+0x272f94

(Modules are same as above)

4. CTD while approaching Lakeview Manor.

FAULTING_IP: 
TESV+4b437c
008b437c 8b90ac000000    mov     edx,dword ptr [eax+0ACh]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 008b437c (TESV+0x004b437c)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 000000ac
Attempt to read from address 000000ac

LAST_CONTROL_TRANSFER:  from 265f5500 to 008b437c

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
37e1fa54 265f5500 6f6d38c0 37e1fa80 1b0321f0 TESV+0x4b437c
37e1fa58 6f6d38c0 37e1fa80 1b0321f0 6f655aea 0x265f5500
37e1fa5c 37e1fa80 1b0321f0 6f655aea 0000003d nioverride+0x838c0
37e1fa60 1b0321f0 6f655aea 0000003d 265f5500 0x37e1fa80
37e1fa80 6f674853 265f5500 44e2adb3 2810ca80 0x1b0321f0
37e1fadc 6f67476b 2810ca80 27073180 44e2ac2f nioverride+0x24853
37e1fb0c 6f6747ae 265f5500 1b0321f0 27072700 nioverride+0x2476b
37e1fb10 265f5500 1b0321f0 27072700 00000001 nioverride+0x247ae
37e1fb14 1b0321f0 27072700 00000001 3eda7800 0x265f5500
37e1fb18 27072700 00000001 3eda7800 00000000 0x1b0321f0
37e1fb1c 00000000 3eda7800 00000000 27073180 0x27072700

...which looks like this, possibly related to nioverride:

Offset: 008b437c (TESV+0x004b437c) [nioverride+0x838c0 in stack]
When: loading save
Cause: unknown
Result: unknown
Fix: unknown
Related: script, nioverride, RaceMenu

I don't use RaceMenu but I have the NetImmerse Override SKSE plugin.

Don't know what it means but I've also noticed this in SKSE.LOG:

Unhandled chunk type in Core_LoadCallback: 4E494E55 (UNIN)

5. CTD while exiting Lakeview Manor, again, looks like it's related to nioverride.

FAULTING_IP:
+24884
00000000 ??              ???

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00000000
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000
 
FOLLOWUP_IP:
nioverride+24884
694a4884 ??              ???

FAILED_INSTRUCTION_ADDRESS:
+24884
00000000 ??              ???
 
LAST_CONTROL_TRANSFER:  from 694a4884 to 00000000

STACK_TEXT: 
WARNING: Frame IP not in any known module. Following frames may be wrong.
0018f6e0 694a4884 00000000 5802e41a 28583fc0 0x0
0018f738 694a476b 28583fc0 28726840 5802e582 nioverride+0x24884
0018f768 694a47ae 25f66c00 138a2c90 28726b40 nioverride+0x2476b
0018f76c 25f66c00 138a2c90 28726b40 00000001 nioverride+0x247ae
0018f770 138a2c90 28726b40 00000001 3f3e9800 0x25f66c00
0018f774 28726b40 00000001 3f3e9800 00000000 0x138a2c90
0018f778 00000000 3f3e9800 00000000 28726840 0x28726b40

I was having so many CTDs involving nioverride.dll so I finally decided to get rid of it. I think I can live without tattoos. :dodgy:

XunTzu · August 17, 2015

So I added this to the skse.ini and I'm not getting a crash dump file or anything.

Using Skse 1.7.3

bjornk · August 17, 2015

So I added this to the skse.ini and I'm not getting a crash dump file or anything.

Using Skse 1.7.3

If the following is in your SKSE.INI inside the Data\SKSE\ folder (or just the SKSE\ folder if when used in MO) then it should work. If it doesn't then the INI is in the wrong place and doesn't get processed. You may also check the SKSE.LOG for messages about the dump file. Don't know if the SKSE version changes anything but I'm using 1.7.2.

[Debug]
WriteMinidumps=1

nafeasonto · August 17, 2015

nm

XunTzu · August 18, 2015

Using 1.7.3 and adding through MO via Open in Explorer and it's not comming up.

E_Nigma · August 19, 2015

2 gtx 670 4gb 16 gb of ram and this game still runs like dog ass im at my whits end figuring why this game is made of chinese

*h38fh2mf* · August 19, 2015

Not game's fault, disable ENB and compare FPS.

E_Nigma · August 20, 2015

Not game's fault, disable ENB and compare FPS.

Not really an fps problem anymore, just random ctds, and today the game wont even load, the SKSE tweak doesn't create a log, and I have no idea what I disabled to make my game not work

*h38fh2mf* · August 21, 2015

Ahh my bad, you were listing your computer stuff I thought FPS because of it.

ZaneKaiser · August 21, 2015

This actually helped a bit

bjornk · August 22, 2015

6. CTD while saving game:

FAULTING_IP: 
TESV+272b10
00672b10 8b0b            mov     ecx,dword ptr [ebx]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00672b10 (TESV+0x00272b10)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000001
Attempt to read from address 00000001

LAST_CONTROL_TRANSFER:  from 4252d8e0 to 00672b10

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
0018edc0 4252d8e0 0018ef80 123d8250 00000071 TESV+0x272b10
0018f064 77a938ce 0b870138 77a938aa 793de137 0x4252d8e0
0018f06c 77a938aa 793de137 000000c0 0b871190 ntdll!RtlpFreeHeap+0xbb1
0018f14c 93980966 0b870ba8 0b870ba8 0b870bb0 ntdll!RtlpFreeHeap+0xb7a
0018f158 0b870bb0 00000000 0018f150 0018fcf4 0x93980966
0018f15c 00000000 0018f150 0018fcf4 0018fcf4 0xb870bb0

start    end        module name
0bb00000 0bcdb000   SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
6ac30000 6ac52000   showRaceMenu_preCacheKiller showRaceMenu_preCacheKiller.dll
6ac60000 6b820000   hdtPhysicsExtensions hdtPhysicsExtensions.dll
6b820000 6b869000   hdtHighHeelNative hdtHighHeelNative.dll
6b870000 6ba9b000   JContainers JContainers.dll
6bcb0000 6bd77000   StorageUtil StorageUtil.dll
6bd80000 6bdab000   SexLabUtil SexLabUtil.dll
6c050000 6c08c000   MfgConsole MfgConsole.dll
6c090000 6c0c5000   Fuz_Ro_D_oh Fuz Ro D'oh.dll
6c0d0000 6c10d000   FirstPersonPlugin FirstPersonPlugin.dll
6c110000 6c1da000   skse_1_9_32 skse_1_9_32.dll
6c210000 6c232000   JaxonzConsolePlugIn JaxonzConsolePlugIn.dll
6c240000 6c2a8000   CharacterMakingExtender_plugin CharacterMakingExtender_plugin.dll
6c690000 6c6b3000   CFM_extensions CFM_extensions.dll
6c7f0000 6c871000   hook     hook.dll

My uneducated guess is that it's a memory allocation issue.

7. CTD upon save load.

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00d573a8 (TESV+0x009573a8)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000

LAST_CONTROL_TRANSFER:  from 00bf2fb8 to 00d573a8

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
3875fc20 00bf2fb8 00000000 46442e00 3875fde0 TESV+0x9573a8
3875fd44 00bc638e 3875fde0 3e29fbe8 16f5daa0 TESV+0x7f2fb8
3875fd48 3875fde0 3e29fbe8 16f5daa0 00000000 TESV+0x7c638e
3875fd4c 3e29fbe8 16f5daa0 00000000 03cc1548 0x3875fde0
3875fde0 4526a1a0 00000000 00000000 00000000 0x3e29fbe8
3875fde4 00000000 00000000 00000000 00000000 0x4526a1a0

Guess it is the same as this:

Offset: 00d573a8 (TESV+0x009573a8)
When: loading finished
Cause: unknown
Result: skeleton is used in one thread while it was just deleted in another
Fix: unknown (may help to have less animations installed - guess only)
Related: animation binding, skeleton, string cache

8. CTD upon save load, player character in T-pose (not the same as #1 above):

FAULTING_IP: 
TESV+81ef39
00c1ef39 0f2807          movaps  xmm0,xmmword ptr [edi]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00c1ef39 (TESV+0x0081ef39)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000

LAST_CONTROL_TRANSFER:  from 00c005e4 to 00c1ef39

STACK_TEXT:  
WARNING: Stack unwind information not available. Following frames may be wrong.
3861fc74 00c005e4 46cb5820 406fcf00 179aa800 TESV+0x81ef39
00000000 00000000 00000000 00000000 00000000 TESV+0x8005e4

*h38fh2mf* · August 22, 2015

The crash happened when game was saving topic info (dialogue) to save file and it was saving some kind of linked list but the list was set to NULL value.

hewhocumsbynight · August 23, 2015

A recent CTD debug record.

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 776a49b5 (ntdll!RtlSizeHeap+0x00000085)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000014
Attempt to read from address 00000014

STACK_TEXT:
00000000 00000000 tesv.exe!Unknown+0x0

*h38fh2mf* · August 23, 2015

@hewhocumsbynight

don't know there isn't enough information.

@bjornk

the T pose thing, try running FNIS again even if you didn't change any animations. I had it a couple of times too and re-running FNIS usually helped even if I hadn't changed any mods, don't know why. Maybe it's just random and not related that it fixed after running it.

bjornk · August 23, 2015

@bjornk

the T pose thing, try running FNIS again even if you didn't change any animations. I had it a couple of times too and re-running FNIS usually helped even if I hadn't changed any mods, don't know why. Maybe it's just random and not related that it fixed after running it.

Yes, I've noticed that too. I wonder if it's a known issue with FNIS, haven't checked it.

hewhocumsbynight · August 23, 2015

Don't worry, I figured it out, I was just providing the information in response to the directions in post 1.

Thanks anyway!

YFeyn · August 23, 2015

No it's a placebo effect. There's no such thing as a "DLL corruption".

@YFeyn

your crash is same as in the original post, it's related to skeleton being deleted while another thread is binding animations to it. For me just retrying to load the same save game eventually will allow to load without crash.

Is there no way to prevent it? I started getting random CTDs with the same Crashdump and I am pretty sure the origin is Captured Dreams Shop but I would like to keep using that mod. Sorry if this is the wrong section.

Sign In

How to debug CTD

Recommended Posts

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Link to comment

Create an account or sign in to comment

Create an account

Sign in

Recently Browsing 0 members

Important Information