Error: wininit lsass.exe windows server restart, event ID: 1000, 1001, 1015, 6005, 6006
Hi everyone, I recently joined in a Banking Corporation as a leader of IT below support that I explained about an error that is impossible to fix.
This company is running windows server 2008 r2 standard 64 bit OS sp1.
HP proliant DL380 G7 intel xeon
system processor: intel xeon E5620
This company is facing this problem since April 2014 to cultivate the date, but the question not yet fixed because there is no COMPUTER administrator in this endeavour to maintain this server. So, in this company, I'm the only guy with COMPUTER knowledge and my management was waiting for me to fix this error and to run the server without any problem.
The last few months I've corrected several server issues related in this society as windows update, windows daily backup, SQL server backup, user permissions, disk space low and network troubleshooting and equipment computer issues etc...,
But come to this lsass.exe I am unable to solve this problem I tried many ways to research online, but not yet fixed. Below you will find the details.
*) fix for windows server 2008 R2 Standard sp1
After the failed to install installation
Fix for Windows (KB2545850)
*) Tried to use the system tool
But failed to solve problem
*) I tried this command at the command prompt
sfc/scannow
result
Full check of 100%.
Windows resource protection did not find any breach of integrity.
*) I also tried to change the registry of one of the web links of dell values, but there is no change at all.
http://www.Dell.com/support/article/us/en/19/SLN291309/en
*) I thought installing the fix and some other updates in safe mode only to try my luck, but when I tired to start the server in safe mode it takes a long time to start in it. But, I'll try again if this issue is going to fix through safe mode then please advise me on this.
So to come back to this question, at the time of the restart, a small window will pop up as below.
Windows has encountered a critical problem and will restart automatically in a minute. Please save your work now.
*) I tried this in shutdown command prompt cmd - to stop this judgment but does not any.
*) I've tried many ways to solve this problem, but none of them worked for me even I tried to upgrade from sp1 to sp2 but could not do so for the following reason:
https://www.Microsoft.com/en-US/Download/details.aspx?ID=17669
After downloading the software from the link above and when I tried to install error appear below.
This service pack does not apply to the version of windows running on this computer.
It is the only question that is impossible to fix. So, I need expert help to resolve this issue as soon as POSSIBLE.
Note: I can not reinstall the operating system on this server because it runs many applications on the SQL 2008 database and also it is already configured with many services and I don't really know how many applications do I need to take a backup and how to configure manually. so if I reinstall OS and if I'm bored configurations or settings and then it will be difficult for employees who work on these applications. So I don't want to take the risk of doing as I said I am new to this company.
Additional information: this sever when ever it will pop up as server will restart in one minute then it restarts to 3 times without any gap, then after an interval extended from 3 to 4 hours, then it will follow even as I said above. To understand better, I'll give you this good example: If the server restart to 09:00, then 2nd reboot will be at 09:02 and the 3rd reboot will be at 09:04 and then after 3 to 4 hours apart, as about 13:00 it restarts again for 3 times vice versa.
Even I understand that I have to reinstall the OS to fix this stupid problem which is like a nightmare for me, but right now, I can't. So, please help me to solve this problem without reinstallation of server operating system.
I expect the best answer to my question that will solve my problem without any problem to this server.
Below the five examples are the main reason for my server restart. If you need anything that either more information please advice me I will answer according to your instructions.
Event ID 1000
Event ID 1001
Event ID 1015
Event ID 6005
Event ID 6006
Below, I have collected more information of the observer of events and even from now this server restarts again due to this error, I don't know what to do...!
1st error:
-System
-Supplier
[Name] Application error
-Event ID 1000
[Qualification] 0
Level 2
Working 100
Keywords 0 x 80000000000000
-TimeCreated
[SystemTime] 2016-02 - 11 T 07: 30:33.000000000Z
EventRecordID 479745
Application of channel
Security
-EventData
Lsass.exe
6.1.7601.18443
5348920c
ntdll.dll
6.1.7601.18247
521eaf24
C0000374
00000000000c 4102
220
01d16482b15bac9c
C:\Windows\system32\lsass.exe
C:\Windows\SYSTEM32\ntdll.dll
5518c7e0-d091-11e5-88FE-68b5996a1808
1 details of the error:
The failing application name: lsass.exe, version: 6.1.7601.18443, time stamp: 0x5348920c
The failed module name: ntdll.dll, version: 6.1.7601.18247, time stamp: 0x521eaf24
Exception code: 0xc0000374
Offset: 0x00000000000c4102
ID of the process failed: 0 x 220
Start time of application vulnerabilities: 0x01d16482b15bac9c
The failing application path: C:\Windows\system32\lsass.exe
The failed module path: C:\Windows\SYSTEM32\ntdll.dll
Report ID: 5518c7e0-d091-11e5-88fe-68b5996a1808
2nd error:
-System
-Supplier
[Name] Windows error reporting
-EventID 1001
[Qualification] 0
Level 4
Task 0
Keywords 0 x 80000000000000
-TimeCreated
[SystemTime] 2016-02 - 11 T 07: 30:33.000000000Z
EventRecordID 479746
Application of channel
Security
-EventData
0
APPCRASH
Not available
0
Lsass.exe
6.1.7601.18443
5348920c
StackHash_802c
6.1.7601.18247
521eaf24
C0000374
00000000000c 4102
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_6ddcb716254c9cb8578365fbfa251cf472753034_0d1bddf3
0
5518c7e0-d091-11e5-88FE-68b5996a1808
4
2 details of the error:
Bucket of error, type 0
Event name: APPCRASH
Answer: No available
Cabin ID: 0
Signature of the problem:
P1: lsass.exe
P2: 6.1.7601.18443
P3: 5348920c
P4: StackHash_802c
P5: 6.1.7601.18247
P6: 521eaf24
P7: c0000374
P8: 00000000000c 4102
P9:
P10:
Attached files:
These files are available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_lsass.exe_6ddcb716254c9cb8578365fbfa251cf472753034_0d1bddf3
Symbol of the analysis:
Recheck for solution: 0
Report ID: 5518c7e0-d091-11e5-88fe-68b5996a1808
3rd error:
-System
-Supplier
[Name] Microsoft-Windows-Wininit
[Guid] {206f6dea-d3c5-4d10-bc72-989f03c8b84b}
[EventSourceName] Wininit
-EventID 1015
[Qualification] 49152
Version 0
Level 2
Task 0
Opcode 0
Keywords 0 x 80000000000000
-TimeCreated
[SystemTime] 2016-02 - 11 T 07: 30:33.000000000Z
EventRecordID 479747
Correlation
-Execution
[Pr
ocessID] 0
[ThreadID] 0
Application of channel
Security
-EventData
C:\Windows\system32\lsass.exe
255
3 details of the error:
A process of critical system, C:\Windows\system32\lsass.exe, failed with status 255 code. You must now restart the machine.
error 4:
-System
-Supplier
[Name] Microsoft-Windows-Winlogon
[Guid] {DBE9B383-7CF3-4331-91CC-A3CB16A3B538}
[EventSourceName] Wlclntfy
-EventID 6005
[Qualification] 32768
Version 0
Level 3
Task 0
Opcode 0
Keywords 0 x 80000000000000
-TimeCreated
[SystemTime] 2016-02 - 11 T 07: 35:43.000000000Z
EventRecordID 479787
Correlation
-Execution
[ProcessID] 0
[ThreadID] 0
Application of channel
Security
-EventData
GPClient
CreateSession
00000000
--------------------------------------------------------------------------------
Binary data:
In the words
0000: 00000000
In bytes
0000: 00 00 00 00...
4 details of the error:
error 5: -System Details of the error 5:
Thanks forward, SAI Hello I suggest that you post the application on Microsoft TechNet forum because we have experts working on these issues. You can check the link to post the same query on TechNet: https://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer Please do not hesitate to contact us if you have other questions related to Windows. Tags: Windows error 0xc0000135 on a windows server 2003 R2. Whenever I want to run any app, I get error 0xc0000135 on a windows server 2003 R2. Anyone has a solution, because it can be run almost anything same not my antivirus. Hello Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums. http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer See you soon. How to solve (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) error when installing on Windows Server 2008 R2 COM component Please repost your request in one of the appropriate Forums for Windows Server. Thank you! VB6 DLL is not log messages in the Windows Server 2003 event log when it is called from an ASP page Hi all I have an ASP web application, I will create a "VBModule1" (VB6 Dll) instance of an ASP page and inside this method of "VBModule1" I create an instance of another VB6 Dll 'VBLogger', who calls App.LogEvent () to write messages to the event log. I tested the Web application on the develepoment (XP) machine and everything worked fine but when the user runs the Web application on the Production Server (windows server 2003) events are not saved. Friend missing the security settings of my ASP web app that needs to be configured on Windows Server 2003 for VB6 DLLs logging events? Please think as soon as POSSIBLE. IIS on Windows server 20003 version: 6.0 Thank you. Hello The question you have posted is related to Windows Server 2003 would be better suited to the Windows Server community. Please visit the link below to find a community that will support what ask you: http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer 1E error blue screen on windows server 2008 r2 Hi friends, Please help, I do face with blue screen error 1e, although helping to solve this problem, Signature of the problem: More information about the problem: Files helping to describe the problem: Read our privacy statement online: If the online privacy statement is not available, please read our offline privacy statement: [Moved from the community centre of Participation] You will find the Windows Server support in these forums: http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?category=windowsserver Error during installation of Windows Server 2003 I installed VMWare Player, however, when I went to install Windows Server 2003 (easy installation) on my windows 7 Home Edition (64-bit) as owner / administrator. The VMWare authorization Services do not seem to be started, but when I try to start them via the services.msc, I get the following error: "Windows failed to start the service on Local computer VMWare authorization Service. "Error 1067: the process terminated unexpectedly." I studied this error and saw a few notes on adding __vmware_user__ my users the. But with what privileges? I also saw a few notes on execution of "regsrv32 vmauxx.exe" which does not work on my computer. Any ideas on how to proceed? Thank you. Lee Welcome to the community, Installing on Windows 7 is sometimes delicate. Take a look at http://faq.sanbarrow.com/index.php?solution_id=1113 to verify that your installation is ok or how to fix it in case it is not. In addition to the installation of VMware Player, I suggest that you install the guest without using "Easy Install". André Facing error code standard activate windows server 2008 r2 0x8007007b When I turn it on with the product key indicating this error. Kindly help me solve this problem * This windows server is for commercial use Hello Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums. http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer See you soon. Performance diagnosis is not available in the Windows Server 2008 Event Viewer In Event Viewer, I can see the Microsoft-Windows-Diagnostics-Performance/operational under Windows 7 but I couldn't get under another computer running Windows 2008. Is it possible to allow that? Hello Your Windows is better suited for the Windows Server Forums on TechNet. Please post your question in the Windows Server Forums. http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer/ I have a box of Windows Server 2003 SP2 Standard that fails to convert using vCenter Converter Standalone 5.5.0 build-1362012. After you submit the task in the wizard's GUI, I get "a general error has occurred: unknown internal error". A virtual machine is created and deleted and then a few moments later. Create the virtual machine 192.168.1.201 Completed Search entity by UUID Completed Search entity by UUID Completed Remote disk open read-write Completed Search entity by UUID Completed Remote disk open read-write Completed Search entity by UUID Completed Delete the entity SRV-cspnsn. CSPNSN.local Completed The destination is VMware ESXI version 5.5.0 build-1623387 managed by vSphere Client version 5.5.50 build-1618071. The destination data store is a 5.60 VMFS volume with block size of 4 MB, on a local SATA HDD with 923, 50GB. Both machines are in the same network and have no any King or firewall or ACL in switches. In the log file, the only error is "error"Ufa.HTTPService"] Impossible to read the application; "flow: io_obj p:0x03403f24, h:-1, < tube"\\.\pipe\vmware-converter-server-soap">, < pipe"\\.\pipe\vmware-converter-server-soap"> >, error: class Vmacore::TimeoutException (Operation timed out). Any help would be appreciated. Thanks in advance. Hi all Once the converter VMware-converter-en - 5.5.1 - 1682692 does not work, with a touch of friend uninstall the 5.5 version of Converter Standalone Client, look for the VMware converter version - 4.0.0 - 146302 and install this version to the other machine. No not that I had to be Converter, but the windows 7 Pro 64-bit. After this race, the Standalone Client 4.4 Converter and everything work fine. Now I have the P2V converted and good machine, as was the real operation! I thank all of you. Best regards ADAJio Adobe Reader DC contains errors and crashes with Windows Server R2 2012 We have recently installed Adobe Reader DC Adobe version on our servers Windows Server R2 2012 and have problems since its launch. Few of the questions that we have seen are as follows: Any help to solve this problem would be useful. Thank you Questions for users confronted with this question: 1. do you have the preview pane enabled in file Explorer? If so, you can temporarily disable it to see if the problem goes away? On Windows 8, in Explorer, go to the view tab, and if you press the button "Preview Pane", UN-press it. On Windows 7, upwards to the right (to the left of the help icon) there is a button "show preview pane." UN-press it. 2. ensure that the following directories exist on your machine. If this isn't the case, please create them: C:\Users\USERNAME\AppData\Local\Adobe\Acrobat\DC\ToolsSearchCacheAcro C:\Users\USERNAME\AppData\Local\Adobe\Acrobat\DC\ToolsSearchCacheRdr Replace USERNAME with your username. Is - do this 1 or 2 to solve this problem? InDesign error code: 5 - on Windows Server or Qnap We continue to receive mean error code: 5 problems of corruption with our CC InDesign files on our corporate network. It doesn't seem like there is a work beyond obvious autour back manually before opening a file. The behavioiur arrives on a variety of machines, always when you save the file (although corruption is not apparent, until you try to open the file again with the same or another machine). Longer with the OS X Mavericks machines on Windows file sharing, but also arises on the rapid sharing of Qnap, (SSD and a dual Gbit ethernet, versus 7200 RPM drives and a single Gbit ethernet link). All Gbit links with CAT6 network cabling. It's an Active Directory environment. At this point, it is either Active Directory that throws the questions or it is from InDesign. Any other type of file were corrupted never well! Don't think it's OS X - although I have observed only corruption happening once (and I'm not 100% sure of the observation) with one of our machines Windows 8. Everyone suffers from this kind of problem? It is quite ordinary for us - occurs at least three or four times a week between 10 users... So we fixed that in our environment. I suspect it's a combination of things. We have to switch and teaming network adapters on the server. That does not help him alone, although reduced the presence a little. So, we have improved the macs in Yosemite. Doesn't really have much of a difference, but support for smb3 probably helped together with the next bit. We got a new, server of 2012 r2 for windows, with a very fast ssd raid array. No more code error 5. All this happened within a few months, so it is difficult to say if the impact fell with the first two changes. And I could not check if the new server was solely responsible, because we have not kept any Mac on the mavericks, and kept the old switch in the room. It seemed in any case mostly occur when we had very heavy traffic on the server (we are a Publisher, so generally it would be on our press days - is not ideal!). In any case, it is quite an expensive solution, but it has its good sides - everything is much more fluid, and windows 2012 is a breeze (relatively) to implement and administer. Occasional errors of NTFS on Windows Server VM I have a Windows 2003 server that I sometimes (every 2 weeks or more) get NTFS errors during backup (Backup Exec 12.5). It's always the same drive (dynamic spanning two volumes). The VM data store is on a NetApp iSCSI SAN. If I run chkdsk, mistakes become clear. That's happened last night again. I have a whole directory that is inaccessible today. Hopefully chkdsk will fix it again. 60 GB is a small disk, dynamic disks is the only way for volumes over 2 TB. You can extend your customer VI vmdk and then resize the NTFS with Dell ExtPart partition, gparted or any tool of partitioning that you like. --- MCSA, MCTS, VCP, VMware vExpert 2009 Error: lsass.exe. system error. Original title: "Lsass.exe" is there no solution? I'm runnng Windows XP, I made the recovery of the PC/3 times now. After recovery, I have to go through the difficult task of all updates and so on. I get usually far in the process, then right after a Windows Update (you are prompted to restart) I get the error message "lsass.exe. system error '. The PC will not boot in any mode to the current and therefore the recovery of the PC again. The restoration of the first PC was due to a problem of System32 hal.dll. I don't know if my original problem of system32 or Windows Update is triggering my problem of Lsass.exe. After reading these forums, it seems to be a problem for many people and there are no answers. A lot of people (like me) thought it was a (i) sass and not a sass (l) so there is even a ton of problems listed under isass.exe. It seems that any update of Windows after the SP3, triggers this problem. So I delayed install this update, but how long can I keep that upward? Any ideas how can I fix? Thank you, and in what concerns:
Visit our Microsoft answers feedback Forum and let us know what you think. event ID 1000 and event ID 1001 related to casetup32.exe and ImmunetProtectDriver Here you go: PAGE_FAULT_IN_NONPAGED_AREA (50) - Windows Server 2008 Hi Microsoft supports the team. We have Windows server 2008 sp2 enterprise edition-32 bit, once a week, we started receive "PAGE_FAULT_IN_NONPAGED_AREA" error message on this subject. What error come server stops responding and blue screen came up with the error message above, after that, you need to restart the server to begin to work in! Please find below the log from the dump file: Loading dump file [C:\Windows\Minidump\Mini080312-01.dmp] Symbol search path is: D:\241 RND\Symbols\Extracted Use! analyze - v to obtain detailed debugging information. Bugcheck 10000050, {f2a45048, 0, b 82, 94299, 0} The kernel symbols are FALSE. Correct symbols to do the analysis. *************************************************************************
ADDITIONAL_DEBUG_TEXT: MODULE_NAME: nt FAULTING_MODULE: 82a 18000 nt DEBUG_FLR_IMAGE_TIMESTAMP: 4f79a9be READ_ADDRESS: could not get nt! MmSpecialPoolStart FAULTING_IP: MM_INTERNAL_CODE: 0 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT_SERVER BUGCHECK_STR: 0 X 50 CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from 82b9a7f4 to b 82, 94299 STACK_TEXT: STACK_COMMAND: kb FOLLOWUP_IP: SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: nt + 17 c 299 FOLLOWUP_NAME: MachineOwner Nom_image: ntoskrnl.exe BUCKET_ID: WRONG_SYMBOLS Follow-up: MachineOwner -------------------------------------------------------------------------------------------------------------------- Can you please review and guide us more as soon as POSSIBLE. Let me know if any other information required for the same thing. Kind regards Helen Shah Hello The question you posted would be better suited to the TechNet community. Please visit the link below to find a community that will provide the support you want. http://TechNet.Microsoft.com/en-us/WindowsServer/bb310558.aspx Hope this information is useful. Firefox crashes every time you start First of all, I was able to open Firefox and it crashed after a few minutes. When I tried again, the same has happened. I could start Firefox in safe mode. Now, not even that works. When I run Firefox, the screen goes black and the computer freezes f I've converted my old iPhoto photo library and can search and find photos tagged keywords as expected. Photos added to the library after the conversion do not appear in the search results. Anyone else has a similar problem? Original title: pack visual c ++ 2005 service cannot download. Error 1714 in case of failure of the daily requests to download Visual c ++ 2005 Service Pack. "cannot find file vcredist.msi. Convert the button does not work My first post here. So, I have Sansa Fuse 8 GB. I use Sansa Media Converter all the time and it always works. But today, I want to convert videos (they are all AVI and they are a little more then 1 GB when I have 5 GB free) so I added the in the prog Properties of Windows gives bad folder size HelloThanks for the help in advance. I have a file (actually several) who give the right size in MB. Right-click on a folder and choosing Properties opens a dialog box that has the size only 11.5 MB (12,163,992 bytes). Finally, I have checked 12,163,
-Supplier
[Name] Microsoft-Windows-Winlogon
[Guid] {DBE9B383-7CF3-4331-91CC-A3CB16A3B538}
[EventSourceName] Wlclntfy
-EventID 6006
[Qualification] 32768
Version 0
Level 3
Task 0
Opcode 0
Keywords 0 x 80000000000000
-TimeCreated
[SystemTime] 2016-02 - 11 T 07: 36:39.000000000Z
EventRecordID 479792
Correlation
-Execution
[ProcessID] 0
[ThreadID] 0
Application of channel
Security
-EventData
GPClient
116
CreateSession
04000000
--------------------------------------------------------------------------------
Binary data:
In the words
0000: 00000004
In bytes
0000: 04 00 00 00...Similar Questions
Problem event name: BlueScreen
OS version: 6.1.7601.2.1.0.274.10
Locale ID: 1033
BCCode: 1e
BCP1: 0000000000000000
BCP2: 0000000000000000
BCP3: 0000000000000000
BCP4: 0000000000000000
OS version: 6_1_7601
Service Pack: 1_0
Product: 274_3
C:\Windows\Minidump\112914-22651-01.dmp
C:\Users\Administrator\AppData\Local\Temp\WER-73289-0.SysData.XML
http://go.Microsoft.com/fwlink/?LinkId=104288&clcid=0x0409
C:\Windows\system32\en-US\erofflps.txt
http://support.Microsoft.com/kb/922371
Shekhar S - Microsoft technical support.
If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.
--------------------------------------------------------------------------------------------------------------------------------------------------
The mini kernel dump file: only registers and the trace of the stack are available
Executable search path is:
Could not load the ntoskrnl.exe, 0n2 error Win32 image
WARNING: Unable to verify timestamp for ntoskrnl.exe
ERROR: Module load completed but symbols can be loaded for ntoskrnl.exe
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack2) MP (8 procs) free x 86 compatible
Product: LanManNt, suite: TerminalServer company
Computer name:
Kernel base = 0x82a18000 PsLoadedModuleList = 0x82b2fc70
The debugging session: 23:11:57.714 on Thursday, August 2, 2012 (UTC + 01:00)
System Uptime: 9 days 15:17:21.963
Could not load the ntoskrnl.exe, 0n2 error Win32 image
WARNING: Unable to verify timestamp for ntoskrnl.exe
ERROR: Module load completed but symbols can be loaded for ntoskrnl.exe
Loading the kernel symbols
...............................................................
................................................................
............
Loading user symbols
Loading unloaded module list
..........
*******************************************************************************
* *
* Bugcheck analysis *.
* *
*******************************************************************************
*************************************************************************
*** ***
*** ***
Either you have specified an absolute symbol, or your debugger *.
has no information complete symbol. Absolute symbol *.
resolution is disabled by default. Please specify a *.
complete symbol module! NomSymbole, or activate the resolution *.
symbols unskilled by typing '.symopt 100 '. Note that *.
allowing unqualified symbol with the network symbol resolution *.
shares of server in the symbol path can cause the debugger to *.
appear to hang for long periods of time when an incorrect *.
symbol name is typed or the symbol of the network server is down. ***
*** ***
For some commands work properly, your symbol path *.
should point to .pdb files have the type information complete. ***
*** ***
Some (such as the public OS symbols) .pdb files are not *.
contain the required information. The contact group that *.
you provided with these symbols, if you need this command for *.
work. ***
*** ***
Type referenced: nt! _KPRCB *.
*** ***
*************************************************************************
*************************************************************************
You can run '.symfix; .reload' to try to fix the symbols path and of loading symbol.
Unable to get nt! MmSpecialPoolEnd
Unable to get nt! MmPagedPoolEnd
Unable to get nt! MmNonPagedPoolStart
Unable to get nt! MmSizeOfNonPagedPoolInBytes
f2a45048
NT + c 17 299
82b 94299 394724 cmp dword ptr [edi + 24 h], eax
WARNING: Information not available stack unwind. Sequence of images may be wrong.
90e72a8c 82b9a7f4 01000001 4020 009c3f70 nt 009c + 0x17c299
90e72abc 82b9ae22 c422da20 00000006 01000001 nt + 0x1827f4
82b 95848 01000001 90e72c60 8000e8d0 nt 90e72b04 + 0x182e22
90e72b60 82b97fb7 90e72bb4 00000000 00000005 nt + 0x17d848
90e72bd8 82b9a257 90e72c60 90e72c4c 00000000 nt + 0x17ffb7
90e72c18 82b9049f 90e72c60 90e72c7b 00000000 nt + 0 x 182257
90e72d14 82b906d4 82b105a0 00000002 00000002 nt + 0x17849f
90e72d38 82c6fb01 82b1a13c 8784e020 82abdda2 nt + 0x1786d4
90e72d7c 82bedfe2 9b1e85b2 00000000 00000000 nt + 0x257b01
90e72dc0 82a56f0e 82abdca5 00000000 00000001 nt + 0x1d5fe2
00000000 00000000 00000000 00000000 00000000 nt + 0x3ef0e
NT + c 17 299
82b 94299 394724 cmp dword ptr [edi + 24 h], eax
---------Maybe you are looking for