[SOLVED] ntdll!RtlLookupFunctionEntry+82

JRodriguez17

JRodriguez17

Member
Joined
Oct 11, 2021
Posts
7
Greetings my beautiful people, I have this error constantly when running any game, I have restarted everything, windows, drivers, etc. and nothing seems to work.



Microsoft (R) Windows Debugger Version 10.0.22473.1005 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Windows\MEMORY.DMP]
Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available.

Symbol search path is: srv*
Executable search path is:
Windows 10 Kernel Version 22000 MP (16 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Edition build lab: 22000.1.amd64fre.co_release.210604-1628
Machine Name:
Kernel base = 0xfffff803`34a00000 PsLoadedModuleList = 0xfffff803`35629640
Debug session time: Sun Feb 6 15:09:44.103 2022 (UTC - 4:00)
System Uptime: 0 days 0:05:23.758
Loading Kernel Symbols
...............................................................
................................................................
...............................................................
Loading User Symbols
......................................................
Loading unloaded module list
.......
For analysis of this file, run !analyze -v
nt!KeBugCheckEx:
fffff803`34e15b00 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff20f`f292ebd0=00000000000000ef
13: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

CRITICAL_PROCESS_DIED (ef)
A critical system process died
Arguments:
Arg1: ffffcd04831ac0c0, Process object or thread object
Arg2: 0000000000000000, If this is 0, a process died. If this is 1, a thread died.
Arg3: 0000000000000000
Arg4: 0000000000000000

Debugging Details:
------------------


KEY_VALUES_STRING: 1

Key : Analysis.CPU.mSec
Value: 2874

Key : Analysis.DebugAnalysisManager
Value: Create

Key : Analysis.Elapsed.mSec
Value: 10413

Key : Analysis.Init.CPU.mSec
Value: 592

Key : Analysis.Init.Elapsed.mSec
Value: 21960

Key : Analysis.Memory.CommitPeak.Mb
Value: 99

Key : CriticalProcessDied.ExceptionCode
Value: 83222040

Key : CriticalProcessDied.Process
Value: svchost.exe

Key : WER.OS.Branch
Value: co_release

Key : WER.OS.Timestamp
Value: 2021-06-04T16:28:00Z

Key : WER.OS.Version
Value: 10.0.22000.1


FILE_IN_CAB: MEMORY.DMP

BUGCHECK_CODE: ef

BUGCHECK_P1: ffffcd04831ac0c0

BUGCHECK_P2: 0

BUGCHECK_P3: 0

BUGCHECK_P4: 0

PROCESS_NAME: svchost.exe

CRITICAL_PROCESS: svchost.exe

EXCEPTION_RECORD: ffffcd04831ac800 -- (.exr 0xffffcd04831ac800)
ExceptionAddress: 0000000000000000
ExceptionCode: 00000000
ExceptionFlags: 00000000
NumberParameters: 0

ERROR_CODE: (NTSTATUS) 0x83222040 - <Unable to get error code text>

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1

EXCEPTION_STR: 0x0

SYMBOL_NAME: ntdll!RtlLookupFunctionEntry+82

MODULE_NAME: ntdll

IMAGE_NAME: ntdll.dll

STACK_COMMAND: .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET: 82

FAILURE_BUCKET_ID: 0xEF_svchost.exe_BUGCHECK_CRITICAL_PROCESS_83222040_ntdll!RtlLookupFunctionEntry

OS_VERSION: 10.0.22000.1

BUILDLAB_STR: co_release

OSPLATFORM_TYPE: x64

OSNAME: Windows 10

FAILURE_ID_HASH: {f6b9b393-7496-75f2-4197-e0bdfdb14545}

Followup: MachineOwner
---------
 

Attachments

There's likely to be a faulty service which is causing the process to be terminated prematurely. I would suggest disabling all the unnecessary services or checking if you're able to boot into Safe Mode with Networking for a few hours without any crashes.
 
The logs displayed a recent Windows installation with 1 BSOD and 4 unexpected shutdowns and restarts.

The event logs when converted to text displayed many N/A limiting available information.
(This is a known problem with Windows 11 and the log collector commands)

There was one unsigned driver.

The page file is on another drive.



Please perform the following steps:


1) See if you can find a signed driver for cmuac.sys (C-Media USB Audio Class Driver)


2) Open administrative command prompt and type or copy and paste:

wmic computersystem where name="%computername%" set automaticmanagedpagefile=true
wmic computersystem where name="%computername%" get automaticmanagedpagefile


3) For any new BSOD run the Sysnative log collector and post a link into the newest post


4) When the troubleshooting has completed you can maintain the page file on C: or move it to D:
 
zbook said:
The event logs when converted to text displayed many N/A limiting available information.
(This is a known problem with Windows 11 and the log collector commands)
Click to expand...
This should be fixed upon the release of the new Sysnative log collection tool. The files will be .evtx instead.
 
zbook said:
The logs displayed a recent Windows installation with 1 BSOD and 4 unexpected shutdowns and restarts.

The event logs when converted to text displayed many N/A limiting available information.
(This is a known problem with Windows 11 and the log collector commands)

There was one unsigned driver.

The page file is on another drive.



Please perform the following steps:


1) See if you can find a signed driver for cmuac.sys (C-Media USB Audio Class Driver)


2) Open administrative command prompt and type or copy and paste:

wmic computersystem where name="%computername%" set automaticmanagedpagefile=true
wmic computersystem where name="%computername%" get automaticmanagedpagefile


3) For any new BSOD run the Sysnative log collector and post a link into the newest post


4) When the troubleshooting has completed you can maintain the page file on C: or move it to D:
Click to expand...

Thank you all for responding, I have followed the steps indicated attached image

CMUAC.png

COMMAND.png
 
From 2/6 to 2/9 there were approximately 27 unexpected shutdowns and restarts.

There was 1 new BSOD.

The dump file was not created due to problems with the page file.


1) Type:
win + r
sysdm.cpl
Click the advanced tab
Under performance click settings
On the performance options window click the advanced tab
Under virtual memory click change
Please return the paging file from D: to C:
Make sure that automatically manage paging file size for all drives is checked
Reboot


2) See if you can find a PSU for swap testing.




Code: 
Sound Tab 2: The file CMUAC.sys is not digitally signed, which means that it has not been tested by Microsoft's Windows Hardware Quality Labs (WHQL).

You may be able to get a WHQL logo'd driver from the hardware manufacturer.




https://www.msi.com/Motherboard/mpg-z390-gaming-edge-ac/support
 
update Update I have a POWER SUPPLY Corsair RM750 I just removed it and put an EVGA 850 And it has not given me the error again, I will put the Power supply back to discard.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top