How to debug CTD

*h38fh2mf* · October 2, 2015

Try uninstalling racemenu (also the SKSE plugin) and see if "TESV+4b437c" changes into something else.

yatol · October 2, 2015

Try uninstalling racemenu (also the SKSE plugin) and see if "TESV+4b437c" changes into something else.

did a ctrl f in the dump, that's for mine?

how uninstalling racemenu or skse is supposed to fix anything?

that crash dump don't show problem is moon and star?

didn't find the problem yet, it's boring to reload the game to check if ctd is gone or not

tried that first

moonandstar above 3dnpc -> ctd

without 3dnpc -> ctd

wasn't expecting much from conflicts... i did that mod, i can get in that zone from an earlier save

it's coming back in that zone after doing that mod i can't do

guessing the problem is a waste of time

tried after deleting worldpace of that mod -> ctd

tried after deleting quests of that mod -> no more ctd

tried after deleting the main quest -> no more ctd

tried after deleting the main quest script -> ctd

tried after deleting the main quest script, stage, objective and alias -> no more ctd

and that's where i am, for now, it's either in stage, objective or alias

maybe i ctd because i don't have the ring the quest giver gave me (didn't found it i breezhome, have no idea what i did of that thing)

maybe i ctd because i killed the quest giver

will find out later

*h38fh2mf* · October 2, 2015

I said it because in your stack trace is a bunch of functions called by nioverride plugin which is part of RaceMenu mod, it would be interesting to see if the crash ends up in the same address and what the stack trace looks like without the plugin installed. Also crashes are often random, for example loading same save over and over again might result in a crash sometimes but not other times without changing anything, so even if you do change something and reload it might not actually change the outcome or be the cause of why you could now load save without crash.

Haloeye · October 2, 2015

So I'm having a CTD on load save issue, would this dump thingy work for that even if you don't get in game? I tried using it but it doesn't seem to be dropping the dump file into my documents.

yatol · October 2, 2015

Also crashes are often random, for example loading same save over and over again might result in a crash sometimes but not other times without changing anything, so even if you do change something and reload it might not actually change the outcome or be the cause of why you could now load save without crash.

reloading the save 9000 times will be 9000 ctd

in solstheim, after i dragonrend a dragon, it went somewhere, but didn't come back (it got lost)

result was a ctd zone, a npc that was chasing that dragon broke, getting back in that npc location is a ctd all the time

only fix is to delete npc from the save until you find the one that is broken (faster to just reload earlier save)

had a ctd on my way to the greybeards, shortcut was a ctd

after giving up and picking another route, since i was near the ctd zone, went back in after saving, and this time, no ctd

leveled lists result is always the same from location x to y

but if you go to location z, and enter location y, game load something else from leveled lists, this time, you may not ctd

had that when i left gauldur amulet cave, only thing to do was coc whiterun (or somewhere else, but not the ctd zone location)

it's impossible to find those broken npc, and i never found them

that was the last time i saw that, don't know why (maybe i fix the broken npc while doing something else)

had a lot of exemples, but if you fix those ctd, one by one, they don't come back

problem is finding why you ctd, and how to fix that

and not adding new ctd

bjornk · October 2, 2015

So I'm having a CTD on load save issue, would this dump thingy work for that even if you don't get in game? I tried using it but it doesn't seem to be dropping the dump file into my documents.

Analysis of the dump file might give you a clue about the cause of the crash. Dump files are created by SKSE, but only if you have enabled the feature in your skse.ini. You need to have the following lines in SKSE.INI. (If you don't have a SKSE.INI create one inside the DATA\SKSE\ folder or just the SKSE\ folder inside your SKSE mod folder if using MO).

[General]
ClearInvalidRegistrations=1
EnableDiagnostics=1

[Debug]
WriteMinidumps=1

Haloeye · October 2, 2015

So I'm having a CTD on load save issue, would this dump thingy work for that even if you don't get in game? I tried using it but it doesn't seem to be dropping the dump file into my documents.

Analysis of the dump file might give you a clue about the cause of the crash. Dump files are created by SKSE, but only if you have enabled the feature in your skse.ini. You need to have the following lines in SKSE.INI. (If you don't have a SKSE.INI create one inside the DATA\SKSE\ folder or just the SKSE\ folder inside your SKSE mod folder if using MO).
[General]
ClearInvalidRegistrations=1
EnableDiagnostics=1

[Debug]
WriteMinidumps=1

Pretty sure I had those files already in my folder and that I had done it right.

Haloeye · October 4, 2015

I am only getting new Papyrus logs. Not dump files, should I turn off Papyrus files?

bjornk · October 4, 2015

Take a look at the last line in SKSE.LOG, what does it say about the crash? When a dump file is created because of a crash, the last line in SKSE.LOG mentions that, should also inform you if it fails to create one.

Papyrus logs have nothing to do with the SKSE crash dump.

Haloeye · October 4, 2015

skse.log

This is what I've got. Doesn't seem to read anything about a fatal error or what not.

yatol · October 4, 2015

is it that hard to read a readme?

This is a short guide on how to debug CTDs yourself.

What it means is you will try to find out as much information about the crash as possible.

First, open Data/SKSE/skse.ini, if it doesn't exist then create it.

Add this:
[Debug]
WriteMinidumps=1
Then wait for the game to crash.

Now you will have a crash dump in Documents/My Games/Skyrim/SKSE/Crashdumps

For example something like this 2015-05-08_16.26.42.dmp

This file is not readable by humans, it's for debugger but you can do online crashdump analysis. Here is one site that does this:
https://www.osronline.com/page.cfm?name=analyze

Once you submit you will receive a bunch of text, most of this is useless but there are few things that can be helpful to you or someone else.

Scroll down a bit and find the line that says:
EXCEPTION_RECORD:

Below it is the address in code where game crashed exactly. For example:

ExceptionAddress: 00d573a8 (TESV+0x009573a8)
It means that game was executing code on address 0xD573A8. It also says that the crash occurred in module TESV. If the crash had occurred in any SKSE plugin it would says that DLL name as module instead. Although it's still possible for a crash to be caused by SKSE plugin and happen in TESV module.

Now why is this address helpful?

1. Someone else may have the same crash, you can compare what you both have in common to narrow down cause.
2. Someone else may have had the same crash and already solved it.
3. I can look it up in game code to see what happens in the function, maybe it helps you narrow down cause.
4. You can compare if the crashes you are having are the same ones or different.

It could also be helpful to catalogue known crashes in a sticky or somewhere.

If you post your crash here include at least this information:

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00d573a8 (TESV+0x009573a8)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00000000
Attempt to read from address 00000000

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
3684fc20 00bf2fb8 00000000 16a9a770 3684fde0 TESV+0x9573a8
3684fc50 00000000 00000000 3684fcd4 00786b68 TESV+0x7f2fb8
And everything SKSE related from Loaded Module List. Example:
0c490000 0c577000 SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
50e00000 50e80000 nioverride nioverride.dll
51110000 51122000 enbhelper enbhelper.dll
51310000 51332000 showRaceMenu_preCacheKiller showRaceMenu_preCacheKiller.dll
51340000 5140d000 StorageUtil StorageUtil.dll
51bf0000 51c76000 chargen chargen.dll
51c80000 51c96000 SpellInvisibilityPlugin SpellInvisibilityPlugin.dll
51ca0000 51ccb000 SexLabUtil SexLabUtil.dll
51cd0000 51d23000 SchlongsOfSkyrim SchlongsOfSkyrim.dll
51d30000 51d6c000 MfgConsole MfgConsole.dll
51d70000 51d86000 ItemSoulgemPlugin ItemSoulgemPlugin.dll
51f50000 51f66000 ItemPoisonPlugin ItemPoisonPlugin.dll
51f70000 5203a000 skse_1_9_32 skse_1_9_32.dll
52290000 522e3000 FirstPersonPlugin FirstPersonPlugin.dll
522f0000 5236a000 hook hook.dll
52530000 52546000 ItemArrowPlugin ItemArrowPlugin.dll
52550000 52566000 ItemChargePlugin ItemChargePlugin.dll
525b0000 525c6000 AutoLockpickPlugin AutoLockpickPlugin.dll
525d0000 525ef000 DoubleJumpPlugin DoubleJumpPlugin.dll

Some reported crashes so far:

Offset: 00d573a8 (TESV+0x009573a8)
When: loading finished
Cause: unknown
Result: skeleton is used in one thread while it was just deleted in another
Fix: unknown (may help to have less animations installed - guess only)
Related: animation binding, skeleton, string cache

Offset: 00a50a3d (TESV+0x00650a3d) [a512a1 in stack]
When: unknown
Cause: unknown
Result: BSFixedString is set to invalid string cache entry which causes a crash when trying to increment its reference count
Fix: unknown
Related: string cache

Offset: xxxxxxxx [nioverride+0xf96b in stack]
When: unknown - happens in nioverride module which is a DLL included with RaceMenu mod
Cause: unknown
Result: unknown
Fix: unknown
Related:

Offset: 0068701d (TESV+0x0028701d)
When: saving game
Cause: mod conflict
Result: multiple mods modify same record, in one instance of this crash it was leveled lists
Fix: unknown (Azzazzx traced it to Requiem, may vary)
Related: saving, BGSSaveLoadManager, mod conflict

Offset: 006bac9a (TESV+0x002bac9a)
When: unknown
Cause: unknown
Result: actor has base form set to NULL, reading flags from it causes a crash
Fix: unknown
Related: Actor, ActorBase

Offset: 00abeab4 (TESV+0x006beab4)
When: unknown
Cause: unknown
Result: unknown
Fix: unknown
Related: NiNode

Offset: 0046edf0 (TESV+0x0006edf0)
When: unknown
Cause: unknown
Result: comparing name of NiNode while the name pointer is invalid, possibly searching NiNode by name
Fix: unknown
Related: NiNode

Offset: 008b437c (TESV+0x004b437c) [nioverride+0x838c0 in stack]
When: loading save
Cause: unknown
Result: unknown
Fix: unknown
Related: script, nioverride, RaceMenu

Offset: 00cec5ec (TESV+0x008ec5ec)
When: unknown
Cause: unknown
Result: unknown
Fix: unknown
Related: rendering, particles

Offset: 00bdc33b (TESV+0x007dc33b)
When: unknown
Cause: unknown
Result: unknown
Fix: unknown
Related: animations

Offset: 0046ecf5 (TESV+0x0006ecf5)
When: removing clothes, other?
Cause: unknown (possibly incompatible skeleton)
Result: unknown
Fix: unknown (try installing different skeleton and re-running FNIS)
Related: skeleton, NiNode

Offset: 00d5c69f (TESV+0x0095c69f) [00d6305e in last control transfer]
When: unknown
Cause: unknown
Result: unknown
Fix: unknown
Related: unknown

and if you can't understand the dump, you can't do anything with it, so it's useless for almost everyone

DarkSide744 · October 4, 2015

Skeleton issues would be probably resolved by installing the latest XPMSE

bjornk · October 4, 2015

skse.log

This is what I've got. Doesn't seem to read anything about a fatal error or what not.

Either minidumps are not enabled in your SKSE.INI or your SKSE cannot detect your SKSE.INI file.

Because if it was enabled:

You'd be able to find this folder (it is created even if there's been no crash):

C:\Users\(user)\Documents\My Games\Skyrim\SKSE\Crashdumps
There would be a "minidumps enabled" line after "config path = " in your SKSE.LOG. It isn't there in the log file you've attached.

I'm not quite sure, but your SKSE.LOG tells me that you have some other issues with your mods and their load order as well.

Haloeye · October 4, 2015

skse.log

This is what I've got. Doesn't seem to read anything about a fatal error or what not.

Either minidumps are not enabled in your SKSE.INI or your SKSE cannot detect your SKSE.INI file.

Because if it was enabled:

You'd be able to find this folder (it is created even if there's been no crash):

C:\Users\(user)\Documents\My Games\Skyrim\SKSE\Crashdumps

There would be a "minidumps enabled" line after "config path = " in your SKSE.LOG. It isn't there in the log file you've attached.

I'm not quite sure, but your SKSE.LOG tells me that you have some other issues with your mods and their load order as well.

Sounds about right. I keep trying to activate the minidumps, and I've written the activation line in my SKSE folder, but I don't know why t doesn't write out a debug line. But yeah, I already figured there is a conflict somewhere in my load order. But it's compatible on some level because I am on occasion able to play. For instance, right now I seem to be able to play as long has I avoid White water cave. A bandit cave related to the dark elf Janessa for a lover quest line. But if I go into said cave then whenever I try an leave it the game CTDs.

bjornk · October 4, 2015

I keep trying to activate the minidumps, and I've written the activation line in my SKSE folder, but I don't know why t doesn't write out a debug line.

Where exactly is your SKSE.INI is located and what is written inside it? What is the file extension for it? Hope it isn't TXT, as in SKSE.INI.TXT.

DarkSide744 · October 5, 2015

Since I'm getting crashes as well, I've tried this out but I'm not sure it supposed to give out an empty (0 kb) dump ... :-/

bjornk · October 5, 2015

Since I'm getting crashes as well, I've tried this out but I'm not sure it supposed to give out an empty (0 kb) dump ...

Sounds like SKSE itself crashes before writing the dump file.

Elquemanda · October 5, 2015

I CTD randomly when load a save, it would be great if someone can help.

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00c306b4 (TESV+0x008306b4)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: 80000018
Attempt to read from address 80000018

DEFAULT_BUCKET_ID:  INVALID_POINTER_READ

PROCESS_NAME:  TESV .exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  80000018

READ_ADDRESS:  80000018 

FOLLOWUP_IP: 
TESV+8306b4
00c306b4 8b37            mov     esi,dword ptr [edi]

FAULTING_THREAD:  00001dd8

PRIMARY_PROBLEM_CLASS:  INVALID_POINTER_READ

BUGCHECK_STR:  APPLICATION_FAULT_INVALID_POINTER_READ

LAST_CONTROL_TRANSFER:  from 00000000 to 00c306b4

STACK_TEXT:  
00000000 00000000 00000000 00000000 00000000 TESV+0x8306b4

DarkSide744 · October 6, 2015

Since I'm getting crashes as well, I've tried this out but I'm not sure it supposed to give out an empty (0 kb) dump ...

Sounds like SKSE itself crashes before writing the dump file.

I haven't played yet, but it was probably because I had an old race menu and the new race menu enabled at the same time (derp) and MO didn't say anything about it (derp 2) ...

DarkSide744 · October 9, 2015

Well nevermind, it' still crashing, but at least I got a crashdump this time

FAULTING_IP: 
TESV+64fdd7
00a4fdd7 8b0a            mov     ecx,dword ptr [edx]

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00a4fdd7 (TESV+0x0064fdd7)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000000
   Parameter[1]: ee15ecec
Attempt to read from address ee15ecec

DEFAULT_BUCKET_ID:  INVALID_POINTER_READ

PROCESS_NAME:  TESV.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1:  00000000

EXCEPTION_PARAMETER2:  ee15ecec

READ_ADDRESS:  ee15ecec 

FOLLOWUP_IP: 
TESV+64fdd7
00a4fdd7 8b0a            mov     ecx,dword ptr [edx]

FAULTING_THREAD:  0000153c

PRIMARY_PROBLEM_CLASS:  INVALID_POINTER_READ

BUGCHECK_STR:  APPLICATION_FAULT_INVALID_POINTER_READ

LAST_CONTROL_TRANSFER:  from 00000000 to 00a4fdd7

STACK_TEXT:  
10f2fcec 00000000 0a911070 00a4f5c9 daeac8a0 TESV+0x64fdd7


SYMBOL_STACK_INDEX:  0

SYMBOL_NAME:  TESV+64fdd7

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: TESV

IMAGE_NAME:  TESV.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  51437ce5

STACK_COMMAND:  ~27s; .ecxr ; kb

FAILURE_BUCKET_ID:  INVALID_POINTER_READ_c0000005_TESV.exe!Unknown

BUCKET_ID:  APPLICATION_FAULT_INVALID_POINTER_READ_TESV+64fdd7

WATSON_STAGEONE_URL:  http://watson.microsoft.com/StageOne/TESV_exe/1_9_32_0/51437ce5/TESV_exe/1_9_32_0/51437ce5/c0000005/0064fdd7.htm?Retriage=1

Followup: MachineOwner

Lizzy · October 11, 2015

I have a problem, in that SKSE does not create the log. I wrote that in my SKSE.ini

There's a folder I created named "Crashdumps", but it always remains empty.

I get these random Papyrus errors, but I'm told sometimes Papyrus logs if things are good, and CTDs often happen before Papyrus can log.

So I wanted to try this. Low and behold, NOTHING

I also have Safety Load, which is supposed to create a log in SKSE Plugins called "SafetyLoad.log"

The only thing that log ever says is "load. SafetyLoad is always enabled."

Grrrrrrr. I just want a utility to tell me why my game crashes at certain places :angry:

Can't trust Papyrus on that, can't SKSE minidump, can't Safety Load log. Nexus has a "smashing face against brick wall" emoticon.

I really neeed that one right now :wacko:

I'm crashing anywhere near or around Ilinalta's Deep, the lake region.

I Googled the problem and as usual, people responded with the dumbest bull$#% answers that never solve it :angry:

Is it supposed to be like this:

[Display]

iTintTextureResolution=2048

iTexMipMapSkip=0

[General]

ClearInvalidRegistrations=1

[Memory]

DefaultHeapInitialAllocMB=768

ScrapHeapSizeMB=256

[NotPlacebo]

GiveFirstBornToSheson=11

[Debug]

WriteMinidumps=1

or this?

[Display]

iTintTextureResolution=2048

iTexMipMapSkip=0

[General]

ClearInvalidRegistrations=1

[Memory]

DefaultHeapInitialAllocMB=768

ScrapHeapSizeMB=256

[NotPlacebo]

GiveFirstBornToSheson=11

[Debug]

WriteMinidumps=1

YFeyn · October 11, 2015

Ok so I get the error from the first post and the recommended fix is to disable some animations which I will try as soon as I can but in the meanwhile I would like to ask if there is any probability of a fix appearing in the future because I would really like to use all the awesome animations on LL and Nexus. Sorry if this is the wrong section.

silversquall · October 11, 2015

I got random CTDs , wish I could figure out why

FAULTING_IP:
TESV+522196
00922196 8b1497 mov edx,dword ptr [edi+edx*4]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00922196 (TESV+0x00522196)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 00003fbc
Attempt to read from address 00003fbc

DEFAULT_BUCKET_ID: INVALID_POINTER_READ

PROCESS_NAME: TESV .exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 00003fbc

READ_ADDRESS: 00003fbc

FOLLOWUP_IP:
TESV+522196
00922196 8b1497 mov edx,dword ptr [edi+edx*4]

FAULTING_THREAD: 000010d8

PRIMARY_PROBLEM_CLASS: INVALID_POINTER_READ

BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ

SYMBOL_STACK_INDEX: 0

SYMBOL_NAME: TESV+522196

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: TESV

IMAGE_NAME: TESV .exe

DEBUG_FLR_IMAGE_TIMESTAMP: 51437ce5

STACK_COMMAND: ~20s; .ecxr ; kb

FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_TESV .exe!Unknown

BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_TESV+522196

Loaded Modules list :

start end module name
00260000 00276000 XINPUT1_3 XINPUT1_3
00400000 01d88000 TESV TESV
02020000 02a74000 d3d9 d3d9
0f600000 0f66d000 SKSE_Elys_AltF4 SKSE_Elys_AltF4
0f890000 0f977000 SKSE_Elys_Uncapper SKSE_Elys_Uncapper
10000000 10047000 binkw32 binkw32
36a70000 36bcc000 nvspcap nvspcap
550a0000 55cc9000 nvd3dum nvd3dum
564b0000 568fa000 D3DX9_40 D3DX9_40
56c70000 56ce2000 dsound dsound
56cf0000 56db0000 nvSCPAPI nvSCPAPI
56db0000 56e3e000 XAudio2_6 XAudio2_6
56e40000 56ecd000 nioverride nioverride
56ed0000 56f5b000 chargen chargen
56f60000 5703e000 StorageUtil StorageUtil
57040000 57075000 Smart_Souls Smart Souls
57080000 57111000 SexLabUtil SexLabUtil
57120000 57142000 SafetyLoad SafetyLoad
57150000 57181000 SKSE_EnhancedCamera SKSE_EnhancedCamera
57190000 571cc000 MfgConsole MfgConsole
571d0000 571f2000 MDX_NoPoisonDialogs MDX_NoPoisonDialogs
57200000 5742b000 JContainers JContainers
57430000 57465000 Fuz_Ro_D_oh Fuz Ro D'oh
57470000 5766f000 D3DX9_43 D3DX9_43
57cb0000 57cb7000 wsock32 wsock32
58a10000 58acf000 msvcr100 msvcr100
5d8d0000 5d8d7000 avrt avrt
5daa0000 5dabe000 TKHitStop TKHitStop
5dac0000 5dae2000 DienesTools DienesTools
5daf0000 5db59000 msvcp100 msvcp100
5db60000 5db6e000 CellStabilizer CellStabilizer
5db70000 5db76000 BW_plugin BW_plugin
5db80000 5dc6e000 msvcr120 msvcr120
5df00000 5e0e5000 D3DX9_42 D3DX9_42
5e0f0000 5e0f7000 X3DAudio1_7 X3DAudio1_7
5e100000 5e131000 steam_api steam_api
5e140000 5e225000 skse_1_9_32 skse_1_9_32
5e230000 5e2a1000 hook hook
5e2b0000 5e321000 msvcp120 msvcp120
63f50000 64113000 d3d9_63f50000 d3d9
65b20000 65e48000 nvapi nvapi
65e50000 65e89000 MMDevAPI MMDevAPI
65e90000 65ec6000 AudioSes AudioSes
689b0000 689b9000 hid hid
689c0000 689f0000 dinput8 dinput8
689f0000 68a74000 comctl32 comctl32
6f8a0000 6f8a6000 d3d8thk d3d8thk
6fa30000 6fa62000 winmm winmm
6fa70000 6faf0000 uxtheme uxtheme
71d00000 71d13000 dwmapi dwmapi
721d0000 721f5000 powrprof powrprof
72910000 7295c000 apphelp apphelp
730f0000 731e5000 propsys propsys
73f30000 7401b000 dbghelp dbghelp
74280000 742cf000 webio webio
742d0000 74328000 winhttp winhttp
754e0000 754e9000 version version
755b0000 755bc000 CRYPTBASE CRYPTBASE
755c0000 75620000 sspicli sspicli
75800000 75847000 KERNELBASE KERNELBASE
759b0000 759c2000 devobj devobj
759d0000 75a05000 ws2_32 ws2_32
75a10000 75a1a000 lpk lpk
75a30000 75b20000 rpcrt4 rpcrt4
75b20000 75b77000 shlwapi shlwapi
75b80000 767cb000 shell32 shell32
767d0000 768e0000 kernel32 kernel32
768e0000 76a01000 crypt32 crypt32
76a20000 76ac1000 advapi32 advapi32
76ad0000 76ad6000 nsi nsi
76ae0000 76bac000 msctf msctf
76bb0000 76c40000 gdi32 gdi32
76c40000 76c4b000 profapi profapi
76cf0000 76cfc000 msasn1 msasn1
76d70000 76d97000 cfgmgr32 cfgmgr32
77020000 770bd000 usp10 usp10
77110000 7718b000 comdlg32 comdlg32
77190000 7723c000 msvcrt msvcrt
77240000 7726f000 wintrust wintrust
77270000 772f3000 clbcatq clbcatq
77300000 77400000 user32 user32
77400000 77419000 sechost sechost
77420000 77480000 imm32 imm32
77480000 7750f000 oleaut32 oleaut32
77540000 776dd000 setupapi setupapi
776e0000 7783c000 ole32 ole32
77c10000 77c15000 psapi psapi
77c40000 77dc0000 ntdll ntdll

Edited October 11, 2015 by silversquall

Nelth · October 12, 2015

Random CTDs, please help

FAULTING_IP:
TESV+95c69f
00d5c69f 0f285010 movaps xmm2,xmmword ptr [eax+10h]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 00d5c69f (TESV+0x0095c69f)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 000000c0
Attempt to read from address 000000c0

DEFAULT_BUCKET_ID: NULL_CLASS_PTR_READ

PROCESS_NAME: TESV exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s".

EXCEPTION_PARAMETER1: 00000000

EXCEPTION_PARAMETER2: 000000c0

READ_ADDRESS: 000000c0

FOLLOWUP_IP:
TESV+95c69f
00d5c69f 0f285010 movaps xmm2,xmmword ptr [eax+10h]

FAULTING_THREAD: 000012a8

PRIMARY_PROBLEM_CLASS: NULL_CLASS_PTR_READ

BUGCHECK_STR: APPLICATION_FAULT_NULL_CLASS_PTR_READ

LAST_CONTROL_TRANSFER: from 00d6305e to 00d5c69f

STACK_TEXT:
WARNING: Stack unwind information not available. Following frames may be wrong.
3250fe00 00d6305e 000000b0 141ebd00 141ebc70 TESV+0x95c69f
3250fe30 006a6b37 3250fe40 00000001 3250ff24 TESV+0x96305e
3250fe54 0078b980 3250fe90 76f088c0 123871d0 TESV+0x2a6b37
3250ff24 00734f6e 123871d0 01b2ecc0 01b2ed80 TESV+0x38b980
3250ff94 7732ad1f 21b0e900 5278d1c9 00000000 TESV+0x334f6e
3250ffdc 7732acea ffffffff 7731022c 00000000 ntdll!__RtlUserThreadStart+0x2f
3250ffec 00000000 00a4b4a0 21b0e900 00000000 ntdll!_RtlUserThreadStart+0x1b

Loaded Modules:

start end module name
00370000 00386000 XINPUT1_3 XINPUT1_3 dll
00400000 01d88000 TESV TESV exe
0f710000 0f86c000 nvspcap nvspcap dll
10000000 10047000 binkw32 binkw32 dll
3b400000 3b41e000 steam_api steam_api dll
6c220000 6c34e000 nvSCPAPI nvSCPAPI dll
6c350000 6cf93000 nvd3dum nvd3dum dll
6cfa0000 6d000000 AudioSes AudioSes dll
70d40000 70dce000 XAudio2_6 XAudio2_6 dll
70df0000 70e43000 MMDevAPI MMDevAPI dll
71040000 710c1000 dsound dsound dll
71140000 71180000 powrprof powrprof dll
711a0000 711aa000 avrt avrt dll
711b0000 711ba000 hid hid dll
71c20000 71f25000 nvapi nvapi dll
73290000 7336e000 StorageUtil StorageUtil dll
73400000 73422000 zzEstrusUtil zzEstrusUtil dll
73430000 73456000 SKSE_JoyOfPerspective SKSE_JoyOfPerspective dll
73460000 734f1000 SexLabUtil SexLabUtil dll
73560000 73582000 showRaceMenu_preCacheKiller showRaceMenu_preCacheKiller dll
73590000 735f9000 SchlongsOfSkyrim SchlongsOfSkyrim dll
73600000 7369d000 nioverride nioverride dll
736a0000 736c2000 mzinWaterUtil mzinWaterUtil dll
736d0000 7370c000 MfgConsole MfgConsole dll
73710000 7393b000 JContainers JContainers dll
73940000 73963000 JaxonzConsolePlugIn JaxonzConsolePlugIn dll
73970000 73998000 InventoryFunctions InventoryFunctions dll
739a0000 739e9000 hdtHighHeelNative hdtHighHeelNative dll
739f0000 73a25000 Fuz_Ro_D_oh Fuz Ro D'oh dll
73a30000 73b1e000 msvcr120 msvcr120 dll
73b20000 73b3a000 dwmapi dwmapi dll
73b50000 73c51000 DeviousDevices DeviousDevices dll
73c60000 73da1000 dbghelp dbghelp dll
73db0000 73f83000 d3d9 d3d9 dll
73f90000 74175000 D3DX9_42 D3DX9_42 dll
74180000 7426d000 uxtheme uxtheme dll
74270000 742e1000 msvcp120 msvcp120 dll
742f0000 743d5000 skse_1_9_32 skse_1_9_32 dll
74400000 74495000 chargen chargen dll
744f0000 7450e000 ASO ASO dll
74510000 74533000 WINMMBASE WINMMBASE dll
74540000 74563000 winmm winmm dll
74570000 745a6000 dinput8 dinput8 dll
745b0000 74639000 comctl32 comctl32 dll
746b0000 746bb000 Flying_Physics Flying_Physics dll
746c0000 746c8000 wsock32 wsock32 dll
746d0000 746d7000 X3DAudio1_7 X3DAudio1_7 dll
746e0000 746e9000 kernel_appcore kernel appcore dll
746f0000 746ff000 profapi profapi dll
74700000 7478b000 SHCore SHCore dll
747f0000 7488f000 winhttp winhttp dll
749b0000 749d1000 devobj devobj dll
74a50000 74a58000 version version dll
74a60000 74ab4000 bcryptPrimitives bcryptPrimitives dll
74ac0000 74aca000 CRYPTBASE CRYPTBASE dll
74ad0000 74aee000 sspicli sspicli dll
74af0000 74ca1000 setupapi setupapi dll
74cc0000 74d3c000 advapi32 advapi32 dll
74d40000 74e93000 user32 user32 dll
74f00000 74f9b000 comdlg32 comdlg32 dll
74fa0000 750af000 gdi32 gdi32 dll
750b0000 750b7000 nsi nsi dll
750c0000 750fd000 wintrust wintrust dll
75100000 763ad000 shell32 shell32 dll
763b0000 763be000 msasn1 msasn1 dll
763d0000 76493000 msvcrt msvcrt dll
764a0000 764a6000 psapi psapi dll
76530000 76607000 KERNELBASE KERNELBASE dll
766a0000 76735000 oleaut32 oleaut32 dll
76740000 767fa000 rpcrt4 rpcrt4 dll
76800000 7697d000 combase combase dll
76980000 769d0000 ws2_32 ws2_32 dll
769d0000 769f7000 imm32 imm32 dll
76a00000 76b12000 msctf msctf dll
76b20000 76c49000 ole32 ole32 dll
76c50000 76c91000 sechost sechost dll
76ca0000 76cdc000 cfgmgr32 cfgmgr32 dll
76e50000 76edd000 clbcatq clbcatq dll
76ee0000 77020000 kernel32 kernel32 dll
77020000 77065000 shlwapi shlwapi dll
77070000 771f8000 crypt32 crypt32 dll
772d0000 7743e000 ntdll ntdll dll

TGAV · October 13, 2015

My crash isn't random. In-game, I can't leave a cave without this crash happening.

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 000000c7
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 000000c7
Attempt to read from address 000000c7

STACK_TEXT:
WARNING: Frame IP not in any known module. Following frames may be wrong.
0018f658 008b4386 66464b68 e5a37c80 0018f68c 0xc7
0018f65c 66464b68 e5a37c80 0018f68c e35a6400 TESV+0x4b4386
0018f660 e5a37c80 0018f68c e35a6400 663a592b nioverride+0xc4b68
0018f664 0018f68c e35a6400 663a592b 0000003d 0xe5a37c80
0018f668 e35a6400 663a592b 0000003d e35a6400 0x18f68c
0018f68c 663ca838 e35a6400 dc333bbe e57d6ea0 0xe35a6400
0018f6f8 663ca75b e57d6ea0 e5a37c80 dc333a6e nioverride+0x2a838
0018f728 663ca79e e35a6400 f525df80 e5a37d40 nioverride+0x2a75b
0018f72c e35a6400 f525df80 e5a37d40 00000002 nioverride+0x2a79e
0018f730 f525df80 e5a37d40 00000002 e5a57600 0xe35a6400
0018f734 e5a37d40 00000002 e5a57600 00000000 0xf525df80
0018f738 00000000 e5a57600 00000000 e5a37c80 0xe5a37d40

LM:

00390000 003a6000 XINPUT1_3 XINPUT1_3.dll

00400000 01e12000 TESV TESV.exe
022a0000 02cf4000 d3d9 d3d9.dll
08ac0000 08ba7000 SKSE_Elys_Uncapper SKSE_Elys_Uncapper.dll
0fba0000 0fcfc000 nvspcap nvspcap.dll
10000000 10047000 binkw32 binkw32.dll
38000000 389e7000 steamclient steamclient.dll
53260000 53e20000 hdtPhysicsExtensions hdtPhysicsExtensions.dll
5a390000 5a4bf000 nvSCPAPI nvSCPAPI.dll
5a4c0000 5b0ac000 nvd3dum nvd3dum.dll
5be60000 5c2aa000 D3DX9_40 D3DX9_40.dll
5f7b0000 5f973000 d3d9_5f7b0000 d3d9.dll
60000000 60021000 CSERHelper CSERHelper.dll
65240000 65392000 gameoverlayrenderer gameoverlayrenderer.dll
653a0000 654b5000 dbghelp_653a0000 dbghelp.dll
65cd0000 65d5e000 XAudio2_6 XAudio2_6.dll
65d60000 66021000 Steam2 Steam2.dll
66030000 66167000 Steam Steam.dll
66170000 6624e000 StorageUtil StorageUtil.dll
66250000 66281000 SKSE_EnhancedCamera SKSE_EnhancedCamera.dll
66290000 66321000 SexLabUtil SexLabUtil.dll
66330000 66399000 SchlongsOfSkyrim SchlongsOfSkyrim.dll
663a0000 66471000 nioverride nioverride.dll
66480000 664bc000 MfgConsole MfgConsole.dll
664c0000 666a9000 JContainers JContainers.dll
666b0000 666f9000 hdtHighHeelNative hdtHighHeelNative.dll
66700000 66735000 Fuz_Ro_D_oh Fuz Ro D'oh.dll
66740000 668cf000 BeeingFemale BeeingFemale.dll
66950000 66a51000 DeviousDevices DeviousDevices.dll
66a90000 66aee000 FirstPersonPlugin FirstPersonPlugin.dll
66af0000 66b41000 ConsolePlugin ConsolePlugin.dll
66b50000 66c35000 skse_1_9_32 skse_1_9_32.dll
66c40000 66e3f000 D3DX9_43 D3DX9_43.dll
66f20000 66f42000 showRaceMenu_preCacheKiller showRaceMenu_preCacheKiller.dll
66f50000 66fe6000 chargen chargen.dll
66ff0000 67016000 skse_steam_loader skse_steam_loader.dll
67020000 67205000 D3DX9_42 D3DX9_42.dll
67860000 67888000 steam_api steam_api.dll
678b0000 678b7000 X3DAudio1_7 X3DAudio1_7.dll
67c80000 67cb0000 dinput8 dinput8.dll
686e0000 686e3000 api_ms_win_core_synch_l1_2_0 api-ms-win-core-synch-l1-2-0.DLL
6a420000 6a50b000 dbghelp dbghelp.dll
6f0f0000 6f40c000 nvapi nvapi.dll

I'm sorry about the giant block, I can't get the spoiler tag to hide more than one line of it and I don't understand why

Sign In

How to debug CTD

Recommended Posts

Create an account or sign in to comment

Create an account

Sign in

Recently Browsing 0 members