push edi

push dword ptr [ebp+14h]

lea edi,[esi+34h]

push edi

call KiMoveApcState1 //(804f8174) 1

mov dword ptr [edi+4],edi

mov dword ptr [edi],edi

lea eax,[esi+3Ch]

mov dword ptr [eax+4],eax

mov dword ptr [eax],eax

lea eax,[esi+14Ch]

cmp dword ptr [ebp+14h],eax

mov dword ptr [esi+44h],ebx

mov byte ptr [esi+48h],0

mov byte ptr [esi+49h],0

mov byte ptr [esi+4Ah],0

jne KiAttachProcess58// (804f8490)

mov dword ptr [esi+138h],eax

mov dword ptr [esi+13Ch],edi

mov byte ptr [esi+165h],1

KiAttachProcess58:

cmp byte ptr [ebx+65h],0

jne KiAttachProcess98 //(804f84d0)

lea esi,[ebx+40h]

jmp KiAttachProcess7C// (804f84b4)

KiAttachProcess63:

mov edx,dword ptr [eax]

lea ecx,[eax-60h]

mov eax,dword ptr [eax+4]

mov dword ptr [eax],edx

mov dword ptr [edx+4],eax

mov byte ptr [ecx+129h],0

call KiReadyThread2 //(80500dac) 2

KiAttachProcess7C:

mov eax,dword ptr [esi]

cmp eax,esi

jne KiAttachProcess63 //(804f849b)

mov eax,dword ptr [ebp+14h]

push dword ptr [eax+10h]

push ebx

call KiSwapProcess3 //3

mov cl,byte ptr [ebp+10h]

call KiUnlockDispatcherDatabase4 // (80541908) 4

jmp KiAttachProcessF7 // (804f852f)

KiAttachProcess98:

mov byte ptr [esi+2Dh],1

mov byte ptr [esi+129h],1

lea ecx,[ebx+40h]

mov edx,dword ptr [ecx+4]

lea eax,[esi+60h]

mov dword ptr [eax],ecx

mov dword ptr [eax+4],edx

mov dword ptr [edx],eax

mov dword ptr [ecx+4],eax

cmp byte ptr [ebx+65h],1

jne KiAttachProcessEC // (804f8524)

mov byte ptr [ebx+65h],2

mov eax,dword ptr [KiProcessInSwapListHeadAddr]//[0x80552fc0]//[0x80552fc0]//eax,dword ptr [nt!KiProcessInSwapListHead (80552fc0)]

lea edi,[ebx+48h]

mov dword ptr [ebp+0Ch],edi

mov dword ptr [ebp+14h],eax

KiAttachProcessCE:

mov dword ptr [edi],eax

mov ebx,eax

mov eax,dword ptr [ebp+14h]

mov ecx,KiProcessInS

。

。

。