ДО

nt!SeAccessCheck:
80564948 8bff            mov     edi,edi
8056494a 55              push    ebp
8056494b 8bec            mov     ebp,esp
8056494d 53              push    ebx
8056494e 33db            xor     ebx,ebx
80564950 385d24          cmp     byte ptr [ebp+24h],bl
80564953 0f8480300100    je      nt!CcSetLogHandleForFile+0x263 (805779d9) <---0f8480300100  
80564959 395d08          cmp     dword ptr [ebp+8],ebx

ПОСЛЕ
nt!SeAccessCheck:
80564948 ea3814e1850800  jmp     0008:85E11438
8056494f 8b9851730f84    mov     ebx,dword ptr [eax-7BF08CAFh] <- 0f848
80564955 803001          xor     byte ptr [eax],1                               <- 0300100  
80564958 0039            add     byte ptr [ecx],bh
8056495a 5d              pop     ebp
8056495b 080f            or      byte ptr [edi],cl
8056495d 84a4cb0900568b  test    byte ptr [ebx+ecx*8-74A9FFF7h],ah
80564964 750c            jne     nt!SeAccessCheck+0x2a (80564972)
...