Skip to main content

Crash Offsets

Overview

This page attempts to collate the offsets found in this thread into a single, searchable database.

The crash offsets are available as a JSON payload should you want to use them in automatic crash detection.

Finding Your Crash Offset

In order to get the offset from a crash:

  • Press Win + R, enter 'eventvwr.msc' and hit okay.
  • Go to Windows Logs, then Application Logs and search for your crash.
  • Under the 'general' tab, note the faulting module name (i.e.common.dll) and the fault offset(i.e. 0x000d21eb).

If you're using the event viewer for this a lot, you can use the following xml filter to only show errors generated by Freelancer.exe and flserver.exe:

<QueryList>
<Query Id="0" Path="Application">
<Select Path="Application">*[System[(Level=2) and (EventID=1000)]] and *[EventData[Data and (Data='Freelancer.exe' or Data='flserver.exe')]]</Select>
</Query>
</QueryList>

common.dll

Module NameOffsetAuthorDate AddedDescription
common.dllaf690adoxa2010-05-11T09:17:00.000ZINI_Reader constructor; problem with normal FLHook (uses 1024 bytes of data, but 5480 bytes are required; plugin version uses 8192).
common.dll5e010adoxa2010-05-11T09:17:00.000ZPart of function Fuse::UnBurn, if that helps. Likely related to a bad fuse entry.
common.dlle3f9dadoxa2010-05-11T09:17:00.000ZMemory allocation failure.
common.dllf24a0adoxa2010-05-11T09:17:00.000ZDeliberate segfault (presumably a "this should never happen" scenario).*
common.dll103141Huor2010-06-09T22:22:00.000ZRelated to PhySys::PhyCollisionStateManager::enable_collisions.
common.dll603d6HeIIoween2010-06-21T19:46:00.000ZOriginates from from IObjInspectImpl::is_targetable: something that shouldn't have been targeted has been targeted.
common.dll4f486Huor2010-07-25T15:40:00.000ZSeems to be related to cmp reading. Something has gone wrong with a cmp file or with something that uses it.
common.dll10deaAlex2010-07-19T21:29:00.000ZGood missing equipment line.
common.dll91f38HeIIoween2010-08-24T21:46:00.000Zship_archetype = <blank> in players file
common.dll5be63Lord of the Hell2012-01-15T14:41:00.000ZMissing exclusion zone, but is called in asteroid/nebula file - look to FlSpew.txt for zone nickname
common.dll25cc9Lord of the Hell2012-01-15T14:41:00.000ZBad surface file
common.dll62555Gold_Sear2017-01-29T18:38:00.000ZOccurs when docking with a tradelane that has neither a prev_ring nor a next_ring entry
common.dllf20e3Cpt_Rei_Fukai2017-06-10T21:45:00.000ZBad thruster model
common.dllc22feCpt_Rei_Fukai2018-07-23T18:49:00.000ZOccurs when you try to load a save game that contains a reputation to a faction that doesn't exist in initialworld.ini
common.dllaa91aCpt_Rei_Fukai2018-11-11T20:03:00.000ZOccurs when you try to buy a ship which contains an invalid item in its package. E.g the nickname of the engine does not exist.
common.dll4aa02Cellulanus2020-05-09T10:54:00.000ZOccurs when an NPC that was using a weapon that's model wasn't actually set to be a gun model is destroyed.
common.dll9143BC462023-11-12T21:00:00.000ZSpecified loadout for [MsnSolar] is not defined in loadouts.ini.
common.dll62ffbebIrateRedKite2021-07-26T13:39:00.000ZRelates to a bad NPC costume (inconsistent gender choices according to IDA) in mBases.ini
common.dll4fe6cdrakohen2022-01-14T18:51:00.000ZCShip::Launch causes a CTD when the client and server don't have matching base nicknames in the [Object] entry in a system INI. The client is the one that has the CTD.
common.dll45c30IrateRedKite2023-03-14T10:18:00.000Z[Asteroids] block has been declared in a system ini file without a valid zone
common.dll96879Beaglerush2023-04-11T03:18:00.000ZBad projectile archetype in [Gun] block.
common.dllf1e32Gold_Sear2017-02-04T00:21:10.000ZPossible max speed threshold crossed. May also relate to missing equipment hardpoints for mounting.
common.dll635c376FriendlyFire2016-06-16T19:58:00.000ZRelated to ray collision, involves PhySys::FindRayCollisions. More information can be found at https://the-starport.net/freelancer/forum/viewtopic.php?post_id=61603.
common.dll635d32bFriendlyFire2016-09-07T18:50:00.000ZOccurs sometimes when switching systems. Relates to a broken quaternion conversion somewhere. More information can be found at https://the-starport.net/freelancer/forum/viewtopic.php?topic_id=5970.
common.dll97e93IrateRedKite2023-12-10T22:34:37.000ZBad equipment ini files. Occurred when Invalid bool values were listed in `force_gun_ori` and `requires_ammo. The actual crash here seems to be triggered by an equipment entry with bad or invalid conent though, in the case where this was discovered it was en empty [Motor] block.
common.dll10dceIrateRedKite2024-01-01T20:30:42.000ZMissing archetype. In the instance where this occurred, commodities that were for sale on bases were not being loaded.
common.dll52753IrateRedKite2024-01-13T10:58:26.000Z[Gun] archetype references a munition that does not exist.
common.dll5da50IrateRedKite2024-01-13T11:02:55.000ZMissing explosion archetype called. This occurred when ship collision groups with fuses attached were not included and then the main fuse was called.
common.dll44a99Darklighter2024-02-23T21:38:43.000ZReferenced a bad [Asteroid] nickname in a field.

content.dll

Module NameOffsetAuthorDate AddedDescription
content.dll490a5FriendlyFire, Helloween2010-05-11T04:19:00.000ZRelated to multiple players/ships suiciding at the same moment into a planet/death zone. Also relates to formation errors, you may wish to check faction_prop.ini formation values
content.dllaf690adoxa2010-05-11T09:17:00.000ZINI_Reader constructor; problem with normal FLHook (uses 1024 bytes of data, but 5480 bytes are required; plugin version uses 8192).
content.dllc45a2HeIIoween2023-11-12T21:00:00.000ZEncounter related. Can be patched with 0C458F, 8B0482->33C090
content.dll47bc4Tiger_MU2010-10-20T11:17:00.000ZRelated to NPCs and/or their chatter. Possibly bad encounter, missing formation from factionprop.ini
content.dll5ccd4HeIIoween2011-06-03T02:20:00.000ZMissing/mistyped formation.
content.dlldb0f1Lord of the Hell, Cpt_Rei_Fukai2012-01-15T14:41:00.000ZPatrol encounter attempted to spawn inside a population zone that wasn't a patrol path.
content.dll9100fLord of the Hell2012-01-15T14:41:00.000ZPossible bad tradelane
content.dll9566dLord of the Hell2012-01-15T14:41:00.000ZPossible bad tradelane
content.dllc465fNova2010-05-23T04:11:00.000ZMixed non-patched and 1.1 patched files.
content.dll55727Cpt_Rei_Fukai2018-11-11T20:03:00.000ZOccurs when an encounter is spawned that contains more permutation lines than formations
content.dllf7c2fIrateRedKite2020-02-25T09:03:00.000ZBad rmlootprops.ini entries.
content.dlle99458fIrateRedKite2020-04-12T16:49:00.000ZPatrol encounter contains a faction that is not defined in the related base's BaseFaction entries.
content.dll12e10IrateRedKite2021-07-26T13:03:00.000ZRelates to a bad NPC costume (inconsistent gender choices according to IDA) in mBases.ini. This also occurred when attempting to load an NPC in a [BaseFaction] block that hadn't been defined as a [GF_NPC], so this crash likely just relates to a failure to load an NPC in general..
content.dll956e4IrateRedKite2023-03-13T11:44:00.000Znpc_ship in faction_prop.ini listed that does not exist. This offset has also been seen as 0x0013f932 in kernelbase.dll when launching flserver.exe with flhook.dll preloading files.
content.dll95598Laz / BC462023-10-06T11:34:00.000ZFaction prop is missing but initial world is correct
content.dll6c216IrateRedKite2023-03-27T09:49:00.000ZSeems to be a missing or null patrol path waypoint. This was originally triggered by giving an NPC on patrol in a ship that couldn't vanish by docking the arrival = all, -tradelane, -object_jump_gate tag. In cases where the patrol spawned at the end of the path in a docked state, it would cause this crash
content.dll53b9fIrateRedKite2023-03-27T11:06:00.000ZBad encounter file (Missing [EncounterFormation] or [Creation] blocks.)
content.dlld9151IrateRedKite2023-11-12T21:00:00.000ZBad path in a system encounter declaration (Missing encounter ini file)
content.dllc491fIrateRedKite2023-11-12T21:00:00.000ZEmpty encounter? Occured when ship_by_class had a 0 value with no alternatives
content.dll63a98BC462023-07-29T17:14:00.000ZRelated to character animations. This occured when voice keys were commented out in gcsexcl.ini without also commenting out their accompanying scripts.
content.dll639c6BC462023-07-29T17:14:00.000ZRelated to character animations. This occured when voice keys were commented out in gcsexcl.ini without also commenting out their accompanying scripts.
content.dllc458fCpt_Rei_Fukai, FriendlyFire2010-05-30T23:00:00.000ZPossibly related to missing faction entries in an mbases.ini entry. Not definite but surely encounter-related. More information can be found at https://the-starport.net/freelancer/forum/viewtopic.php?topic_id=6063
content.dllbd173IrateRedKite, Laz & Raikkonen2024-01-08T16:31:18.000ZConverts an archID into a goodId and then uses the goodId for a lookup, which fails and is not checked, causing a crash. This occurred when ammo entries for loot were not defined in lootprops.ini. If a munition entry has 'requires_ammo = true', the ammo AND the gun both require a lootprops.ini entry. The server crash offset for this is 0xe06d7363 in kernelbase.dll
content.dll1833fIrateRedKite2024-01-11T14:01:09.000ZA mission trigger without a condition was invoked. If the trigger doesn't require a proper condition, it needs a `Cnd_True = no_params` line.

server.dll

Module NameOffsetAuthorDate AddedDescription
server.dll3954990Laz2020-04-10T12:22:00.000ZTriggered by warping to a base that doesn't have a physical presence, but has an mbase and universe entry. Deliberately triggered by warping to st03b_01_base for testing.
server.dll78d3adoxa2010-05-11T09:17:00.000ZCalled as part of pub::SpaceObj::Dock. Running FLHook on a server should fix this.
server.dll14990adoxa2010-05-11T09:17:00.000ZPart of docking, and others (it's a function to swap the sign of a vector). This crash occurs when undocking from a base with no valid undock point.
server.dll2c267adoxa2010-05-11T09:17:00.000ZSeems to be another part of docking, and others
server.dll2c290adoxa2010-05-11T09:17:00.000ZSeems to be another part of docking, and others
server.dll76fdfHeIIoween2010-07-22T05:10:00.000ZRelated to loading a player. Possibly a corrupt character file.
server.dll17f38IrateRedKite2020-02-03T12:56:00.000ZRelated to a bad ship loadout. Occurs after Loadout::Get (presumably returning NULL), called when a ship is created
server.dll702064Laz2020-04-10T12:22:00.000ZTriggered by warping to a base that doesn't have a physical presence, but has an mbase and universe entry
server.dll2247fHeIIoween2010-05-15T05:43:00.000ZNPC loadout is missing engine. Attempts to enter cruise, then can't find and crashes. This crash can also occur for flserver.exe in server dll at 0x00022567. At both addresses it fails to call `CEEngine::cast(CEquip *)`
server.dllf988IrateRedKite2023-03-21T10:58:00.000ZMissing destination jumpgate
server.dll1b221HeIIoween2023-11-11T12:16:22.000ZMore than 10 holes/gates per system

alchemy.dll

Module NameOffsetAuthorDate AddedDescription
alchemy.dll701bGold_Sear2017-06-25T11:59:00.000ZRare crash, occurs inconsistently when creating an instant jump fx
alchemy.dll1f3a6Cpt_Rei_Fukai2018-11-11T20:03:00.000ZOccurs when the <pairs> of an effect use numbers that do not exist in the <fx> part of the effect.
alchemy.dll187bcIrateRedKite2023-11-12T21:00:00.000ZDuplicate node name (occured when an emitter and node had the same name)

dalib.dll

Module NameOffsetAuthorDate AddedDescription
dalib.dll4353robocop2010-08-25T02:49:00.000ZMemory allocation failure (in CDPMsgList::Add). It's only asking for 12 bytes, so there must be some serious memory leakage going on.

freelancer.exe

Module NameOffsetAuthorDate AddedDescription
freelancer.exe6100adoxa2012-01-15T14:41:00.000ZBad wireframe
freelancer.exe114764Gold_Sear2017-01-29T18:38:00.000ZOccurs when a next_ring does not reference to a tradelane ring
freelancer.exe58000Cpt_Rei_Fukai+050498-11-17T00:40:00.000ZOccurs when a player has got an item equipped that no longer exists, i.e. the weapon was deleted.
freelancer.exe54f08HeIIoween, Louva-Deus2023-11-12T21:00:00.000ZPossible corrupted mbases.ini. This is also caused by missing `gcs_fmsit_*.thn` scripts from the `DATA/SCRIPTS/GCS` folder.
freelancer.exe3bb07IrateRedKite2023-11-12T21:00:00.000ZInvalid base room
freelancer.exe46909IrateRedKite2023-10-23T17:37:00.000ZInvalid equipment entry in a loadout
freelancer.exee53edGold_Sear2017-04-22T16:29:00.000ZOccurred following a formation join and cargo scan. Cause isn't clear.
freelancer.exe8381aIrateRedKite2023-12-01T21:56:56.000ZBad goods.ini entry. In the instance where this was occurring, the 'price' field contained invalid data.
freelancer.exe1531efIrateRedKite2023-12-02T12:54:47.000ZMissing solar archetypes on system load.
freelancer.exe25640IrateRedKite2023-12-02T15:58:00.000ZSeems to be a missing or bad nebula file.
freelancer.exe1efa9Laz2024-01-06T00:57:58.000ZFreelancer tries to acess a directinput8 instance for the mouse and fails. It's possible that this crash is caused by a hardware issue!
freelancer.exed1744IrateRedKite2024-01-11T09:47:39.000ZFreelancer was unable to find a system file entry defined in universe.ini. This can also occur if a system is loaded with no solar objects present.
freelancer.exe80a9bIrateRedKite2024-01-16T16:15:58.000ZAttempted to purchase a ship in multiplayer when the player had no ship. This was a forced crash that occurred when the %PACKAGE% value was removed from mpnewcharacter.fl
freelancer.exe108853Jammi2024-01-26T23:25:49.000ZReferenced a nebula field file that didn't exist.
freelancer.exeed422IrateRedKite2024-01-29T11:06:08.000ZPlayer in multiplayer died, respawned and didn't have a 'last base' to go to. This occurred when the start location was set to space, and the player died repeatedly before docking. Crash occurs on the client, not the server.
freelancer.exe1b26b7IrateRedKite2024-01-29T11:13:09.000ZRelates to a render problem with alt-tabbing and window focus. Function at this address suggests that the crash is a fauilure to populate the IRenderPipeline or DALib::Pipeline structs correctly.
freelancer.exe13f4d7IrateRedKite2024-02-20T10:22:31.000ZA referenced `[Effect]` nickname isn't present in an effects.ini file.

ntdll.dll

Module NameOffsetAuthorDate AddedDescription
ntdll.dll3ff05HeIIoween2023-11-12T21:00:00.000ZIncompatible d3d8.dll wrapper/converter.
ntdll.dll11689HeIIoween2010-07-23T10:50:00.000ZNot supported/equipable archetype in players char file.
ntdll.dll101b3Tiger_MU2010-10-20T11:17:00.000ZRelated to NPCs and/or their chatter.
ntdll.dll109d8Jeider2017-07-07T22:14:00.000ZReason: using inherit in ShieldGenerator
ntdll.dll118caLivsi2017-02-14T20:00:00.000ZPossible heap corruption
ntdll.dll109fbLivsi2017-02-14T20:00:00.000ZPossible heap corruption
ntdll.dll11669Livsi2017-02-14T20:00:00.000ZPossible heap corruption
ntdll.dll109f9Livsi2017-02-14T20:00:00.000ZPossible heap corruption
ntdll.dll4591fIrateRedKite2023-12-19T08:40:13.000ZAccess violation. I have been unable to reliably reproduce this crash, but it seems to relate to NPCs in some way. If this can be reproduced reliably, please update this and run Freelancer with a debugger attached.

rendcomp.dll

Module NameOffsetAuthorDate AddedDescription
rendcomp.dll11163Lord of the Hell2012-01-15T14:41:00.000Zbad hash at <VMeshLibrary>

engbase.dll

Module NameOffsetAuthorDate AddedDescription
engbase.dll124bdNightstalker2010-07-19T00:36:00.000ZSomething major failing if this is occuring. Called from GetRoot and IsDescendant.
engbase.dll11731Caenen2024-02-02T00:01:24.000ZPossibly relates to a bad fuse. The exact cause of this is unclear.

flmaterials.dll

Module NameOffsetAuthorDate AddedDescription
flmaterials.dll5b33HeIIoween2012-04-07T04:06:00.000ZTexture related problems. This was originally caused by a bad texture on Bw08_suprise_ge_train_1 in Tau 23 in an old HD Texture pack

thorn.dll

Module NameOffsetAuthorDate AddedDescription
thorn.dll5dd2IrateRedKite2024-01-03T17:20:38.000ZAttempted to call an animation for an entity in a Thorn scene that doesn't exist. Occurred when attempting to call `START_MOTION` for `sc_no loop` on a set 3db in a base ambient script.

shading.dll

Module NameOffsetAuthorDate AddedDescription
shading.dllf658Jos_Naabal2024-01-12T17:28:23.000ZExcessive particle limits set for alchemy effects in Freelancer.ini