Function at 0x902c44
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov edx, ebx
jmp 0x9027ab
sub esp, 0x15
mov dword [esp + 9], ebp
neg cx
lea esp, [esp + 1]
jmp 0x9025b3
push dword [esp + 3]
add bx, ax
je 0x902541
jne 0x90277a
jge 0x9025e6
sbb eax, 0x40a727d0
jno 0x902504
and eax, 0xa26b9dbe
invalid
mov ch, dl
mov byte [esp + 1], bl
jmp 0x902557
mov dx, bx
mov ecx, dword [esp]
call 0x9025f2
pop ss
test byte [edx], bl
jge 0x90254f
mov cl, 0xb0
mov bl, 0xaa
lds eax, [edi - 0x2f74dbec]
xchg dword [esp], edx
mov edx, eax
adc al, 0x24
lea ecx, [esp + ebp]
xchg cl, ch
call fcn.009025a5
mov cx, word [esp + 3]
xchg dword [esp], ecx
pop cx
jmp 0x90263b
stc
mov cx, 0xe926
mov cx, word [esp]
neg cx
jmp 0x90268a
stc
mov cx, 0xe926
mov cx, word [esp]
jmp 0x90264e
lea esp, [esp + 2]
add dx, 0x6a0a
add ecx, 0x9aa4e72b
jb 0x9025fe
jae 0x902625
neg cx
jmp 0x90268a
mov ch, dh
lea ecx, [eax + esi]
neg cx
jmp 0x902729
mov ch, dh
lea ecx, [eax + esi]
neg cx
jmp 0x902729
neg dx
lea ecx, [ebx*4]
bsr ecx, esp
jle 0x902653
jg 0x902674
lea ecx, [ebx*4]
jmp 0x902761
lea ecx, [eax + ebp]
sbb ecx, ebx
pushfd
call fcn.009026d3
inc ecx
lea ecx, [esp + eax]
sub esp, 0x16
lea esp, [esp + 2]
jmp 0x90270c
rcl cx, 8
lea ecx, [eax + ebp]
sbb ecx, ebx
pushfd
lea ecx, [ebx*4]
jmp 0x902761
lea eax, [eax - 0x21]
mov cx, 0x92a3
mov cl, byte [esp]
mov ecx, 0x5fd1e4c9
sub esp, 0xf
jmp 0x90274e
ror dx, 0
jl 0x9026f5
rcl cx, 8
jmp 0x9026b1
xchg cl, ch
push dword [esp + 0x28]
ret 0x2c
lea esp, [esp + 3]
xchg dword [esp + 0x28], eax
mov ecx, eax
xchg ch, cl
setne cl
not cl
jmp 0x902738
mov ecx, dword [esp + 3]
jmp 0x902789
sub esp, 0x15
mov dword [esp + 9], ebp
neg cx
call fcn.00902617
lea esp, [esp + 4]
not dx
cmc
jl 0x9028ef
jge 0x902802
mov al, 0x44
pop esi
fcom qword [esi]
mov ch, byte [ebp + eax*4 - 0x4a]
xor dword [ecx], edx
or eax, 0xe24bc80c
sbb eax, 0xcac1666c
add eax, 0xfdc2820f
invalid
ror dx, 5
jb 0x902577
mov ch, dl
mov byte [esp + 1], bl
push dword [esp + 3]
jmp 0x90255b
clc
mov cl, 0x3a
lea esp, [esp + 2]
jmp 0x902810
rol dx, 0
mov cx, word [esp]
mov cx, word [esp]
mov ecx, dword [esp]
mov ch, 0x49
sub esp, 0x16
jmp 0x902872
xchg ch, cl
mov cx, word [esp]
mov ecx, dword [esp]
jmp 0x9028f8
add ax, dx
mov ecx, dword [esp]
xchg dl, ch
and edx, 0xbb95a0bd
jmp 0x90282c
lea esp, [esp + 2]
jmp 0x902810
jbe 0x902842
ja 0x902842
popal
inc ebp
adc eax, 0x377f1ec0
push ds
sub ch, bl
push ebx
out dx, al
in eax, dx
cld
iretd
add edi, 2
mov dx, bx
mov dl, 0x65
bsf ecx, eax
jmp 0x90289d
push esi
sub esp, 3
bswap ecx
xchg dword [esp], edx
bsf cx, si
xchg byte [esp + 4], cl
jmp 0x90291b
js 0x9027c4
clc
mov cl, 0x3a
jmp 0x902826
jns 0x902853
push esi
sub esp, 3
call fcn.009028bf
sub dword [edx + reloc.aquarius2.dll__CanAccessBrowser_ProxyClient__UAE_NV__shrewd_ptr_VProxyExtension___prime__V__shrewd_ptr_VProxyBrowser___3__N1_Z], ecx
push ebx
add byte [eax], al
bsf edx, ebp
not edx
jmp 0x9028d0
lea ecx, [ecx - 0x2b]
shl dl, 7
bswap edx
call fcn.00902b22
not dword [ebx + ebp*4 + 0x79]
out 0x79, al
pop esi
test byte [0x1f8cbd02], 0x86
int 0x66
mov ecx, dword [esp]
xchg ch, cl
mov cx, word [esp]
mov ecx, dword [esp]
jmp 0x9027da
neg dx
jl 0x902945
fidivr dword [ebx + eax*2 + 0x66]
mov edx, dword [esp]
mov dx, word [esp]
lea edx, [esi + edi]
mov dx, bx
jmp 0x902964
lea esp, [esp + 3]
ror bx, 0
mov edx, 0xef69a634
mov edx, dword [esp]
bswap edx
jmp 0x9028fd
mov dx, bx
call fcn.0090294e
xchg esp, eax
cwde
mov eax, dword [reloc.aquarius2.dll__CanAccessBrowser_ProxyClient__UAE_NV__shrewd_ptr_VProxyExtension___prime__V__shrewd_ptr_VProxyBrowser___3__N1_Z]
js 0x9028ff
xchg ecx, eax
pop edi
xchg ebx, eax
or ah, byte [ebp + 0x24148b66]
mov dx, word [esp]
lea edx, [esi + edi]
jmp 0x90292f
lea esp, [esp + 4]
dec bx
jmp 0x902aeb
mov edx, dword [esp]
lea edx, [edx + 0x80]
jmp 0x902a05
mov ch, 0x76
jmp 0x902a7a
add bx, 0x2674
mov cx, si
neg dx
jne 0x902a3e
je 0x902a28
inc ebp
or edi, dword [edi]
mov al, byte [0x11a05136]
pop ebp
lodsb al, byte [esi]
mov edi, 0xf6303186
salc
not dh
dec ecx
push esp
jmp 0x902a01
lea ecx, reloc.aquarius2.dll__CanAccessBrowser_ProxyClient__UAE_NV__shrewd_ptr_VProxyExtension___prime__V__shrewd_ptr_VProxyBrowser___3__N1_Z
mov ecx, 0x8a8ef025
jmp 0x902a49
lea ecx, reloc.aquarius2.dll__CanAccessBrowser_ProxyClient__UAE_NV__shrewd_ptr_VProxyExtension___prime__V__shrewd_ptr_VProxyBrowser___3__N1_Z
mov ecx, 0x8a8ef025
xchg ebx, eax
dec edx
jmp 0x902ac3
mov dx, 0x6f67
cwde
not ecx
jmp 0x902aad
lea ecx, reloc.aquarius2.dll__CanAccessBrowser_ProxyClient__UAE_NV__shrewd_ptr_VProxyExtension___prime__V__shrewd_ptr_VProxyBrowser___3__N1_Z
not dh
dec ecx
push esp
mov ch, 0x76
lea esp, [esp + 4]
dec bx
mov edx, ebp
mov edx, ebp
jmp 0x9029eb
rol bx, 0
jbe 0x902a6d
lea ecx, reloc.aquarius2.dll__CanAccessBrowser_ProxyClient__UAE_NV__shrewd_ptr_VProxyExtension___prime__V__shrewd_ptr_VProxyBrowser___3__N1_Z
jmp 0x902a22
inc dx
jg 0x902acb
setle dl
cmc
jmp 0x902ad5
jg 0x902a51
mov dx, 0x6f67
jmp 0x902a55
setle dl
cmc
jmp 0x902ad5
xchg ebx, eax
mov ecx, ebp
bswap ecx
bswap ecx
sub esp, 0x17
jmp 0x902b6e
bswap ecx
lea edx, [ebx + ebp]
lea edx, reloc.aquarius2.dll__CanAccessBrowser_ProxyClient__UAE_NV__shrewd_ptr_VProxyExtension___prime__V__shrewd_ptr_VProxyBrowser___3__N1_Z
mov ch, 0xf2
mov edx, 0xa336db70
lea ecx, [ebx*4]
jmp 0x902a9b
lea esp, [esp + 3]
mov dword [esi], ebx
jmp 0x902b48
mov edx, esi
mov ebx, 0x3bdd7f31
jmp 0x902b4f
mov ecx, 0x27ea1906
jmp 0x902b32
lea ebx, [ebp + 0x50]
bsf edx, ebx
jge 0x902bab
mov dx, 0x7dba
bswap edx
jmp 0x902b8e
jnp 0x902b06
lea esp, [esp + 3]
jmp 0x902b0a
bswap edx
call fcn.00902b76
ja fcn.008e6dfc
mov ebx, 0x39302097
cmc
jo 0x902bf2
jno 0x902bc7
loopne 0x902c07
invalid
mov dx, 0x7dba
jmp 0x902b8c
lea esp, [esp + 2]
jmp 0x902bd8
bsr edx, edx
jmp 0x902bf5
jb 0x902bb1
lea esp, [esp + 2]
jmp 0x902bd8
lea ebx, [ebp + 0x40]
sub esp, 0x16
jnp 0x902c03
pop ecx
mov ecx, 0xb602cf19
mov cx, word [esp + 8]
jmp 0x902d3a
bsr edx, edx
mov edx, ebp
mov cx, bp
mov cx, 0x8e94
sub esp, 0x1a
jmp 0x902bcc
pop ecx
jmp 0x902c0a
invalid
mov ecx, 0xb602cf19
mov cx, word [esp + 8]
lea esp, [esp + 2]
jmp 0x902caf
pop word [esp + 6]
call 0x902c44
daa
jmp 0x902c86
lea esp, [esp + 3]
and cl, 0xfc
jmp 0x902c70
lea ecx, [esi - 0x80]
sub esp, 0xf
jne 0x902c39
pop word [esp + 6]
jmp 0x902c3e
push ax
push word [esp]
ja 0x902c93
jbe 0x902c93
inc ebx
rcl dword [ecx + 0x30], 0xc3
jo 0x902c44
jp 0x902cd8
les esi, [edi + 0x5e]
push word [esp + 9]
jp 0x902c46
lea esp, [esp + 3]
jmp 0x902c4a
sub ecx, ebx
call fcn.00902d03
test eax, 0xef826bc8
jmp 0xb655f307
sub ebx, edx
mov ecx, 0xf19823b8
pushfd
mov cx, word [esp]
mov ecx, dword [esp + 3]
jmp 0x902c61
mov esp, ecx
jmp 0x902ce3
pop word [esp]
pop dword [esp]
push word [esp]
jg 0x902cc1
jle 0x902cc1
pushfd
lea ebp, [ecx + ebx - 0x40]
push esi
jmp 0x902d1f
mov dword [esp + 4], ecx
sub esp, 0x1d
lea esp, [esp + 1]
lea esp, [esp + 0x20]
jmp 0x902d5d
jmp 0x902cd7
mov dword [esp + 4], ecx
sub esp, 0x1d
lea esp, [esp + 1]
jmp 0x902dd1
push edi
sub esp, 8
jb 0x902ceb
jae 0x902d09
xchg edx, eax
or eax, 0x4424ef9c
lds esi, [ebp - 0x41]
loop 0x902d07
xor byte [0x6320e1f6], dl
lcall 0xe902, 0x24648df5
insb byte es:[edi], dx
invalid
lea esp, [esp + 2]
jmp 0x902caf
mov esi, edx
jmp 0x902dbb
mov edi, ecx
jmp 0x902e09
lea esp, [esp + 0x20]
call 0x902d43
sub esp, 0x17
jp 0x902e25
lea esp, [esp + 3]
lea esp, [esp + 0x18]
popal
jmp 0x902f70
pushal
call fcn.00902df0
popal
jmp 0x902f70
lea esp, [esp + 3]
lea esp, [esp + 0x18]
jmp 0x902e0f
mov esi, dword [esp]
lea esp, [esp + 4]
jmp 0x902e75
mov esi, dword [esp]
lea esp, [esp + 4]
popfd
jmp fcn.008f915b
pop edi
bsr si, ax
jns 0x902e6e
js 0x902e58
jmp 0x902eda
xchg edx, edi
push dword [esp + 3]
mov dword [esp + 0x18], esi
jmp 0x902f00
sbb cx, di
ja 0x902f0c
not dl
jmp 0x902f44
lea esp, [esp + 8]
popal
xchg edx, ecx
mov dx, ax
jmp 0x902ee6
not dl
jmp 0x902f44
sub esp, 0xd
jmp 0x902f55
sub esi, 4
bt ecx, esp
jo 0x902f2e
sub esp, 0xd
jmp 0x902f9b
mov dword [esp + 5], eax
lea esp, [esp + 1]
jmp 0x902f79
cld
rep movsb byte es:[edi], byte [esi]
pop ecx
jmp 0x902e97
jmp 0x90329f
mov dword [esp + 5], eax
lea esp, [esp + 1]
call fcn.00902fbf
wait
xchg dword [esp], ecx
mov edx, dword [esp]
inc edx
lea ecx, [ecx - 0x2f]
mov dh, byte [esp]
jmp 0x90365b
mov ecx, 0x75bccd12
mov edx, dword [esp]
lea ecx, [ebx*4]
setne ch
push dword [esp + 0x18]
ret 0x1c
seto dh
sub esp, 0x1d
pop word [esp + 0x16]
lea esp, [esp + 3]
xchg dword [esp + 0x18], ecx
rol edx, 0x1b
jmp 0x90339f