7C85AAF2 >  8BFF            MOV EDI,EDI
7C85AAF4    55              PUSH EBP
7C85AAF5    8BEC            MOV EBP,ESP
7C85AAF7    837D 08 00      CMP DWORD PTR SS:[EBP+8],0
7C85AAFB    56              PUSH ESI
7C85AAFC    74 35           JE SHORT kernel32.7C85AB33
7C85AAFE    8B75 0C         MOV ESI,DWORD PTR SS:[EBP+C]
7C85AB01    85F6            TEST ESI,ESI
7C85AB03    74 2E           JE SHORT kernel32.7C85AB33
7C85AB05    6A 00           PUSH 0
7C85AB07    6A 04           PUSH 4
7C85AB09    8D45 08         LEA EAX,DWORD PTR SS:[EBP+8]
7C85AB0C    50              PUSH EAX
7C85AB0D    6A 07           PUSH 7
7C85AB0F    FF75 08         PUSH DWORD PTR SS:[EBP+8]
7C85AB12    FF15 AC10807C   CALL DWORD PTR DS:[<&ntdll.NtQueryInform>; ntdll.ZwQueryInformationProcess
7C85AB18    85C0            TEST EAX,EAX
7C85AB1A    7D 08           JGE SHORT kernel32.7C85AB24
7C85AB1C    50              PUSH EAX
7C85AB1D    E8 F7E8FAFF     CALL kernel32.7C809419
7C85AB22    EB 16           JMP SHORT kernel32.7C85AB3A
7C85AB24    33C0            XOR EAX,EAX
7C85AB26    3945 08         CMP DWORD PTR SS:[EBP+8],EAX
7C85AB29    0F95C0          SETNE AL
7C85AB2C    8906            MOV DWORD PTR DS:[ESI],EAX
7C85AB2E    33C0            XOR EAX,EAX
7C85AB30    40              INC EAX
7C85AB31    EB 09           JMP SHORT kernel32.7C85AB3C
7C85AB33    6A 57           PUSH 57
7C85AB35    E8 24E8FAFF     CALL kernel32.7C80935E
7C85AB3A    33C0            XOR EAX,EAX
7C85AB3C    5E              POP ESI
7C85AB3D    5D              POP EBP
7C85AB3E    C2 0800         RETN 8