As you can see, my windows is localized, so the offsets are different. " - patch ntkrpamp.exe at offset 0x15DF1A from 75 1B to 90 90 " <- in my ntkrnlpa.exe 5.1.2600.6419 it is not 75 1B. There are some calls to ExVerifySuite(x): PAGE:0049CF88 loc_49CF88: ; CODE XREF: IoDeleteSymbolicLink(x)+4EjPAGE:0049CF88 call _ObIsLUIDDeviceMapsEnabled@0 ; ObIsLUIDDeviceMapsEnabled()PAGE:0049CF8D test eax, eaxPAGE:0049CF8F jnz short loc_49CFA2PAGE:0049CF91 push 4PAGE:0049CF93 call _ExVerifySuite@4 ; ExVerifySuite(x)PAGE:0049CF98 cmp al, 1PAGE:0049CF9A jnz short loc_49CFA2PAGE:0049CF9C push ebxPAGE:0049CF9D call _IopDeleteSessionSymLinks@4 ; IopDeleteSessionSymLinks(x)PAGELK:0057550D loc_57550D: ; CODE XREF: MmAddPhysicalMemoryEx(x,x,x)+BEjPAGELK:0057550D cmp ebx, ecxPAGELK:0057550F jnb short loc_5754ECPAGELK:00575511 push 7PAGELK:00575513 call _ExVerifySuite@4 ; ExVerifySuite(x)PAGELK:00575518 cmp al, 1PAGELK:0057551A jnz short loc_575523PAGELK:0057551C mov eax, 1000000hPAGELK:00575521 jmp short loc_575544PAGELK:00575523 ; ═════════════════════════════════════════════════════════════PAGELK:00575523PAGELK:00575523 loc_575523: ; CODE XREF: MmAddPhysicalMemoryEx(x,x,x)+D8jPAGELK:00575523 cmp _MmProductType, 690057hPAGELK:0057552D jz short loc_57553FPAGELK:0057552F push 1PAGELK:00575531 call _ExVerifySuite@4 ; ExVerifySuite(x)PAGELK:00575536 cmp al, 1PAGELK:00575538 mov eax, 800000hPAGELK:0057553D jz short loc_575544PAGELK:0057553FPAGELK:0057553F loc_57553F: ; CODE XREF: MmAddPhysicalMemoryEx(x,x,x)+EBjPAGELK:0057553F mov eax, 100000hPAGELK:00575544PAGELK:00575544 loc_575544: ; CODE XREF: MmAddPhysicalMemoryEx(x,x,x)+DFjPAGELK:00575544 ; MmAddPhysicalMemoryEx(x,x,x)+FBjPAGELK:00575544 mov ecx, _MmNumberOfPhysicalPagesPAGELK:0057554A lea edx, [ecx+esi]PAGELK:0057554D cmp edx, eaxPAGELK:0057554F jbe short loc_57555BPAGELK:00575551 sub eax, ecxPAGELK:00575553 mov esi, eaxPAGELK:00575555 lea eax, [esi+ebx]PAGELK:00575558 mov [ebp+arg_8], eaxPAGELK:0057A4E9 loc_57A4E9: ; CODE XREF: MmCreateMirror()+21jPAGELK:0057A4E9 push 7PAGELK:0057A4EB call _ExVerifySuite@4 ; ExVerifySuite(x)PAGELK:0057A4F0 cmp al, 1PAGELK:0057A4F2 jz short loc_57A515PAGELK:0057A4F4 cmp _MmProductType, 690057hPAGELK:0057A4FE jz short loc_57A50BPAGELK:0057A500 push 1PAGELK:0057A502 call _ExVerifySuite@4 ; ExVerifySuite(x)PAGELK:0057A507 cmp al, 1PAGELK:0057A509 jz short loc_57A515PAGELK:0057A50BPAGELK:0057A50B loc_57A50B: ; CODE XREF: MmCreateMirror()+42jPAGELK:0057A50B mov eax, 0C000026AhPAGELK:0057A510 jmp loc_57A93ASo which should be changed to NOPs?