Crash Offsets
import Offsets from '@site/src/components/Offsets';
📌 Overview
This page attempts to collate the offsets found in this thread into a single, searchable database.
The crash offsets are available as a JSON payload should you want to use them in automatic crash detection.
💥 Finding Your Crash Offset
In order to get the offset from a crash:
- Press Win + R, enter 'eventvwr.msc' and hit okay.
- Go to Windows Logs, then Application Logs and search for your crash.
- Under the 'general' tab, note the faulting module name (i.e.common.dll) and the fault offset(i.e. 0x000d21eb).
If you're using the event viewer for this a lot, you can use the following xml filter to only show errors generated by Freelancer.exe and flserver.exe:
<QueryList>
<Query Id="0" Path="Application">
<Select Path="Application">*[System[(Level=2) and (EventID=1000)]] and *[EventData[Data and (Data='Freelancer.exe' or Data='flserver.exe')]]</Select>
</Query>
</QueryList>
🧩 common.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x000af690 | adoxa | INI_Reader constructor; problem with normal FLHook (uses 1024 bytes of data, but 5480 bytes are required; plugin version uses 8192). | 2010-05-11 |
0x0005e010 | adoxa | Part of function Fuse::UnBurn, if that helps. Likely related to a bad fuse entry. | 2010-05-11 |
0x000e3f9d | adoxa | Memory allocation failure. | 2010-05-11 |
0x000f24a0 | adoxa | Deliberate segfault (presumably a "this should never happen" scenario).* | 2010-05-11 |
0x00103141 | Huor | Related to PhySys::PhyCollisionStateManager::enable_collisions. | 2010-06-09 |
0x000603d6 | HeIIoween | Originates from from IObjInspectImpl::is_targetable: something that shouldn't have been targeted has been targeted. | 2010-06-21 |
0x0004f486 | Huor | Seems to be related to cmp reading. Something has gone wrong with a cmp file or with something that uses it. | 2010-07-25 |
0x00010dea | Alex | Good missing equipment line. | 2010-07-19 |
0x00091f38 | HeIIoween | ship_archetype = | 2010-08-24 |
0x0005be63 | Lord of the Hell | Missing exclusion zone, but is called in asteroid/nebula file - look to FlSpew.txt for zone nickname | 2012-01-15 |
0x00025cc9 | Lord of the Hell | Bad surface file | 2012-01-15 |
0x00062555 | Gold_Sear | Occurs when docking with a tradelane that has neither a prev_ring nor a next_ring entry | 2017-01-29 |
0x000f20e3 | Cpt_Rei_Fukai | Bad thruster model | 2017-06-10 |
0x000c22fe | Cpt_Rei_Fukai | Occurs when you try to load a save game that contains a reputation to a faction that doesn't exist in initialworld.ini. This offset also seems to show up where faction objects are missing from save games as well. | 2018-07-23 |
0x000aa91a | Cpt_Rei_Fukai | Occurs when you try to buy a ship which contains an invalid item in its package. E.g the nickname of the engine does not exist. | 2018-11-11 |
0x0004aa02 | Cellulanus | Occurs when an NPC that was using a weapon that's model wasn't actually set to be a gun model is destroyed. | 2020-05-09 |
0x00009143 | BC46 | Specified loadout for [MsnSolar] is not defined in loadouts.ini. | 2023-11-12 |
0x0009fbeb | IrateRedKite | Relates to a bad NPC costume (inconsistent gender choices according to IDA) in mBases.ini | 2021-07-26 |
0x0004fe6c | drakohen | CShip::Launch causes a CTD when the client and server don't have matching base nicknames in the [Object] entry in a system INI. The client is the one that has the CTD. | 2022-01-14 |
0x00045c30 | IrateRedKite | [Asteroids] block has been declared in a system ini file without a valid zone | 2023-03-14 |
0x00096879 | Beaglerush | Bad projectile archetype in [Gun] block. | 2023-04-11 |
0x000f1e32 | Gold_Sear | Possible max speed threshold crossed. May also relate to missing equipment hardpoints for mounting. | 2017-02-04 |
0x000FC376 | FriendlyFire | Related to ray collision, involves PhySys::FindRayCollisions. More information can be found at https://the-starport.com/forums/topic/5738/common-dll-0x0635c376-crash?_=1715267168399. | 2016-06-16 |
0x000FD32B | FriendlyFire | Occurs sometimes when switching systems. Relates to a broken quaternion conversion somewhere. More information can be found at https://the-starport.com/forums/topic/5772/crash-at-0x635d32b-common-dll-dump-attached/7?_=1715267168404. | 2016-09-07 |
0x000C9B78 | Aingar | Cause unknown, has to do with rendering of multiplayer text and/or console window. | 2024-12-02 |
0x00097e93 | IrateRedKite | Bad equipment ini files. Occurred when Invalid bool values were listed in `force_gun_ori` and `requires_ammo. The actual crash here seems to be triggered by an equipment entry with bad or invalid conent though, in the case where this was discovered it was en empty [Motor] block. | 2023-12-10 |
0x00010dce | IrateRedKite | Missing archetype. In the instance where this occurred, commodities that were for sale on bases were not being loaded. | 2024-01-01 |
0x00052753 | IrateRedKite | [Gun] archetype references a munition that does not exist. | 2024-01-13 |
0x0005da50 | IrateRedKite | Missing explosion archetype called. This occurred when ship collision groups with fuses attached were not included and then the main fuse was called. This can also occur when an invalid fuse is specified. | 2024-01-13 |
0x00044a99 | Darklighter | Referenced a bad [Asteroid] nickname in a field. | 2024-02-23 |
0x000f1e2a | McDyson | Possibly relates to a malformed .cmp or .3db model. Exact cause is currently unclear. | 2024-05-31 |
0x0006c282 | Ven | Group formation leader error | 2024-10-02 |
💻 content.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x000490a5 | FriendlyFire, Helloween | Related to multiple players/ships suiciding at the same moment into a planet/death zone. Also relates to formation errors, you may wish to check faction_prop.ini formation values | 2010-05-11 |
0x000af690 | adoxa | INI_Reader constructor; problem with normal FLHook (uses 1024 bytes of data, but 5480 bytes are required; plugin version uses 8192). | 2010-05-11 |
0x000c45a2 | HeIIoween | Encounter related. Can be patched with 0C458F, 8B0482->33C090 | 2023-11-12 |
0x00047bc4 | Tiger_MU | Related to NPCs and/or their chatter. Possibly bad encounter, missing formation from factionprop.ini | 2010-10-20 |
0x0005ccd4 | HeIIoween | Missing/mistyped formation. | 2011-06-03 |
0x000db0f1 | Lord of the Hell, Cpt_Rei_Fukai | Patrol encounter attempted to spawn inside a population zone that wasn't a patrol path. | 2012-01-15 |
0x0009100f | Lord of the Hell | Possible bad tradelane | 2012-01-15 |
0x0009566d | Lord of the Hell | Possible bad tradelane | 2012-01-15 |
0x000c465f | Nova | Mixed non-patched and 1.1 patched files. | 2010-05-23 |
0x00055727 | Cpt_Rei_Fukai | Occurs when an encounter is spawned that contains more permutation lines than formations | 2018-11-11 |
0x000f7c2f | IrateRedKite | Bad rmlootprops.ini entries. | 2020-02-25 |
0x0e99458f | IrateRedKite | Patrol encounter contains a faction that is not defined in the related base's BaseFaction entries. | 2020-04-12 |
0x00012e10 | IrateRedKite | Relates to a bad NPC costume (inconsistent gender choices according to IDA) in mBases.ini. This also occurred when attempting to load an NPC in a [BaseFaction] block that hadn't been defined as a [GF_NPC], so this crash likely just relates to a failure to load an NPC in general.. | 2021-07-26 |
0x000956e4 | IrateRedKite | npc_ship in faction_prop.ini listed that does not exist. This offset has also been seen as 0x0013f932 in kernelbase.dll when launching flserver.exe with flhook.dll preloading files. | 2023-03-13 |
0x00095598 | Laz / BC46 | Faction prop is missing but initial world is correct | 2023-10-06 |
0x0006c216 | IrateRedKite | Seems to be a missing or null patrol path waypoint. This was originally triggered by giving an NPC on patrol in a ship that couldn't vanish by docking the arrival = all, -tradelane, -object_jump_gate tag. In cases where the patrol spawned at the end of the path in a docked state, it would cause this crash | 2023-03-27 |
0x00053b9f | IrateRedKite | Bad encounter file (Missing [EncounterFormation] or [Creation] blocks.) | 2023-03-27 |
0x000d9151 | IrateRedKite | Bad path in a system encounter declaration (Missing encounter ini file) | 2023-11-12 |
0x000c491f | IrateRedKite | Empty encounter? Occured when ship_by_class had a 0 value with no alternatives | 2023-11-12 |
0x00063a98 | BC46 | Related to character animations. This occured when voice keys were commented out in gcsexcl.ini without also commenting out their accompanying scripts. | 2023-07-29 |
0x000639c6 | BC46 | Related to character animations. This occured when voice keys were commented out in gcsexcl.ini without also commenting out their accompanying scripts. | 2023-07-29 |
0x000c458f | Cpt_Rei_Fukai, FriendlyFire | Possibly related to missing faction entries in an mbases.ini entry. Not definite but surely encounter-related. More information can be found at https://the-starport.net/freelancer/forum/viewtopic.php?topic_id=6063 | 2010-05-30 |
0x000bd173 | IrateRedKite, Laz & Raikkonen | Converts an archID into a goodId and then uses the goodId for a lookup, which fails and is not checked, causing a crash. This occurred when ammo entries for loot were not defined in lootprops.ini. If a munition entry has 'requires_ammo = true', the ammo AND the gun both require a lootprops.ini entry. The Multiplayer crash offset for this is 0x0013fae2 in KernelBase.dll | 2024-01-08 |
0x000512ac | EngiN33R, IrateRedKite | Faction prop is missing but initial world and empathy configuration are correct. Possibly relates to how bases are constructed. | 2024-06-06 |
0x0001aa9f | Ven | _SendMessage (Server uses this to communicate with every function) crashes due to following reason; if anyone calls Story mission 'Act_State = SUCCEED' server will call DestroyInstance for every story instances are running, it will crash the server if there are more than 1 in action. This can be temporarily fixed by altering the function, which prevents DestroyInstance erase Story instances (it will only stop the last instance which Co-Op mod does for 0x1 iClientID). This crash has also bee observed in single player where there was a problem establishing the mission status of the player. | 2024-10-02 |
0x00049c95 | Ven | settimer assignment error, unstable instance for unknown reasons | 2024-10-02 |
0x00089651 | Ven | reputation based error (happened when SP Story reputation functions are enabled in MP) | 2024-10-02 |
0x0002d541 | Ven | Story manager tried to submit an order/reputation to a NPC that does not exist. Documented this bug at SpawnShip within initState = ACTIVE trigger | 2024-10-02 |
0x00055796 | Ven | Client crashed during MP base cutscene when server shut down (crash in DestroyInstance) | 2024-10-02 |
0x00025cc9 | Ven | Story trigger, Act_LockDock error?, possible nullpointer base? it might be related to other story triggers too(Previous OPjump does initilaize every trigger of story manager) | 2024-10-02 |
0x0002fe8f | Ven | AI logic error, as far as I can tell, 3 different functions use this area, one of them controls their orders as they spawn and the other one upon destruction | 2024-10-02 |
0x000f7bf2 | JosByte | Triggers when Freelancer attempts to create a cargo retrieval/destroy random mission but there is no valid defined good provided in vignettecriticalloot.ini | 2025-01-26 |
📡 server.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x03954990 | Laz | Triggered by warping to a base that doesn't have a physical presence, but has an mbase and universe entry. Deliberately triggered by warping to st03b_01_base for testing. | 2020-04-10 |
0x000078d3 | adoxa | Called as part of pub::SpaceObj::Dock. Running FLHook on a server should fix this. | 2010-05-11 |
0x00014990 | adoxa | Part of docking, and others (it's a function to swap the sign of a vector). This crash occurs when undocking from a base with no valid undock point. | 2010-05-11 |
0x0002c267 | adoxa | Seems to be another part of docking, and others | 2010-05-11 |
0x0002c290 | adoxa | Seems to be another part of docking, and others | 2010-05-11 |
0x00076fdf | HeIIoween | Related to loading a player. Possibly a corrupt character file. | 2010-07-22 |
0x00017f38 | IrateRedKite | Related to a bad ship loadout. Occurs after Loadout::Get (presumably returning NULL), called when a ship is created | 2020-02-03 |
0x000AB670 | Laz | Triggered by warping to a base that doesn't have a physical presence, but has an mbase and universe entry | 2020-04-10 |
0x0002247f | HeIIoween | NPC loadout is missing engine. Attempts to enter cruise, then can't find and crashes. This crash can also occur for flserver.exe in server dll at 0x00022567. At both addresses it fails to call `CEEngine::cast(CEquip *)` | 2010-05-15 |
0x0000f988 | IrateRedKite | Missing destination jumpgate | 2023-03-21 |
0x0001b221 | HeIIoween | More than 10 holes/gates per system | 2023-11-11 |
0x0000f988 | Ven | Client and Server failed to sync jump destination system, causes crash in Singleplayer | 2024-10-02 |
🧠 alchemy.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x0000701B | Gold_Sear | Rare crash, occurs inconsistently when creating an instant jump fx | 2017-06-25 |
0x0001f3a6 | Cpt_Rei_Fukai | Occurs when the | 2018-11-11 |
0x000187bc | IrateRedKite | Duplicate node name (occured when an emitter and node had the same name) | 2023-11-12 |
🛡️ dalib.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x00004353 | robocop | Memory allocation failure (in CDPMsgList::Add). It's only asking for 12 bytes, so there must be some serious memory leakage going on. | 2010-08-25 |
🔎 Freelancer.exe
| Offset | Author | Description | Date |
|---|---|---|---|
0x00006100 | adoxa | Bad wireframe | 2012-01-15 |
0x00114764 | Gold_Sear | Occurs when a next_ring does not reference to a tradelane ring | 2017-01-29 |
0x00058000 | Cpt_Rei_Fukai | Occurs when a player has got an item equipped that no longer exists, i.e. the weapon was deleted. | 2018-07-12 |
0x00054f08 | HeIIoween, Louva-Deus | Possible corrupted mbases.ini. This is also caused by missing `gcs_fmsit_*.thn` scripts from the `DATA/SCRIPTS/GCS` folder. | 2023-11-12 |
0x0003bb07 | IrateRedKite | Invalid base room | 2023-11-12 |
0x00046909 | IrateRedKite | Invalid equipment entry in a loadout | 2023-10-23 |
0x000e53ed | Gold_Sear | Occurred following a formation join and cargo scan. Cause isn't clear. | 2017-04-22 |
0x0008381a | IrateRedKite | Bad goods.ini entry. In the instance where this was occurring, the 'price' field contained invalid data. This can also occur when an item is sold for 0 credits. | 2023-12-01 |
0x001531ef | IrateRedKite | Missing solar archetypes on system load. | 2023-12-02 |
0x00025640 | IrateRedKite | Seems to be a missing or bad nebula file. | 2023-12-02 |
0x0001efa9 | Laz | Freelancer tries to acess a directinput8 instance for the mouse and fails. It's possible that this crash is caused by a hardware issue! | 2024-01-06 |
0x000d1744 | IrateRedKite | Freelancer was unable to find a system file entry defined in universe.ini. This can also occur if a system is loaded with no solar objects present. | 2024-01-11 |
0x00080a9b | IrateRedKite | Attempted to purchase a ship in multiplayer when the player had no ship. This was a forced crash that occurred when the %PACKAGE% value was removed from mpnewcharacter.fl | 2024-01-16 |
0x00108853 | Jammi | Referenced a nebula field file that didn't exist. | 2024-01-26 |
0x000ed422 | IrateRedKite | Player in multiplayer died, respawned and didn't have a 'last base' to go to. This occurred when the start location was set to space, and the player died repeatedly before docking. Crash occurs on the client, not the server. | 2024-01-29 |
0x001b26b7 | IrateRedKite | Relates to a render problem with alt-tabbing and window focus. Function at this address suggests that the crash is a fauilure to populate the IRenderPipeline or DALib::Pipeline structs correctly. | 2024-01-29 |
0x0013f4d7 | IrateRedKite | A referenced `[Effect]` nickname isn't present in an effects.ini file. | 2024-02-20 |
0x0014661b | Beaglerush | Occurs when an NPC is destroyed after it is spawned, but still has logic tied to it, For example during a trade-lane encounter. This originally occured when an NPC with a fuse to instantly destroy it was referenced the lane's destination population zone. This specific instance is handled in multiplayer, but not singleplayer, leading to this crash. | 2024-05-08 |
0x0013b395 | Katzenkebap, Ven | Possibly relates to a bad ship archetype. The function this crashes in is related to creating or showing a ship in a player's scanner range. Exact cause is unclear. | 2024-05-09 |
0x0012d1e4 | IrateRedKite | Attempted to fire an equipment object with a missing or malformed HpFire hardpoint. | 2024-06-22 |
0x0013d55a | Ven | Client tried to dock to a solar that does not exist from its perspective, either done through SwitchOut or following a formation leader that is docking | 2024-10-02 |
0x001469f6 | Ven | Client tried to sends its targetting information to the server, but failed (tried to target during SystemSwitchOut) | 2024-10-02 |
0x001aad50 | Ven | Based on pure speculation, Client tried to switch chars during server froze and it crashed | 2024-10-02 |
0x0007e244 | JosByte | Triggers where an NPCShips block has an invalid Shiparch entry specified. | 2025-01-26 |
🖥️ ntdll.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x0003ff05 | HeIIoween | Incompatible d3d8.dll wrapper/converter. | 2023-11-12 |
0x00011689 | HeIIoween | Not supported/equipable archetype in players char file. | 2010-07-23 |
0x000101b3 | Tiger_MU | Related to NPCs and/or their chatter. | 2010-10-20 |
0x000109d8 | Jeider | Reason: using inherit in ShieldGenerator | 2017-07-07 |
0x000118ca | Livsi | Possible heap corruption | 2017-02-14 |
0x000109fb | Livsi | Possible heap corruption | 2017-02-14 |
0x00011669 | Livsi | Possible heap corruption | 2017-02-14 |
0x000109f9 | Livsi | Possible heap corruption | 2017-02-14 |
0x000864ba | Aingar | Damaging/Destroying an incorrectly defined collision group | 2024-03-21 |
0x0004591f | IrateRedKite | Access violation. I have been unable to reliably reproduce this crash, but it seems to relate to NPCs in some way. If this can be reproduced reliably, please update this and run Freelancer with a debugger attached. | 2023-12-19 |
🗃️ rendcomp.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x00011163 | Lord of the Hell | bad hash at | 2012-01-15 |
🔎 engbase.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x000124bd | Nightstalker | Something major failing if this is occuring. Called from GetRoot and IsDescendant. | 2010-07-19 |
0x00011731 | Caenen | Possibly relates to a bad fuse. The exact cause of this is unclear. | 2024-02-02 |
🖥️ flmaterials.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x00005b33 | HeIIoween | Texture related problems. This was originally caused by a bad texture on Bw08_suprise_ge_train_1 in Tau 23 in an old HD Texture pack | 2012-04-07 |
🖥️ Thorn.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x00005dd2 | IrateRedKite | Attempted to call an animation for an entity in a Thorn scene that doesn't exist. Occurred when attempting to call `START_MOTION` for `sc_no loop` on a set 3db in a base ambient script. | 2024-01-03 |
🧩 Content.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x0001833f | IrateRedKite | A mission trigger without a condition was invoked. If the trigger doesn't require a proper condition, it needs a `Cnd_True = no_params` line. | 2024-01-11 |
0x00055540 | IrateRedKite | Bad encounter permutations value | 2025-01-01 |
📈 Shading.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x0000f658 | Jos_Naabal | Excessive particle limits set for alchemy effects in Freelancer.ini | 2024-01-12 |
0x00012f1e | JosByte | Invalid puff cloud defined in a Nebula entry. A crash will not always occur, but if no valid puff is present, the game will crash. | 2025-01-26 |
🖥️ rp8.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x00033b2f | JosByte | Occurs if in the current system there is one or more objects that doesn't have power of two size textures | 2024-10-08 |
🛠️ Common.dll
| Offset | Author | Description | Date |
|---|---|---|---|
0x00010ac1 | Katzenkebap | A package has attenoted to access a ship hull that doesn't exist. | 2025-01-26 |
0x0005da50 | JosByte | A package has attenoted to access a ship hull that doesn't exist. | 2025-01-26 |
0x0005d9d4 | JosByte | Triggers when a random mission solar is destroyed before the player reaches the mission waypoint, typically due to a zero or invalid hit point value. | 2025-01-26 |