Function at 0x42fa44
Capabilities:
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x24]
mov eax, dword [eax + 0x10]
cmp byte [eax], 0x25
jne case.0x42fa6b.2
mov edx, dword [ebx + 0xac]
inc edx
cmp edx, 0x11
ja case.default.0x42fa6b
jmp dword [edx*4 + 0x67b168]
xor ecx, ecx
mov edx, 0x12
jmp 0x42fcde
xor ecx, ecx
mov edx, 0x13
jmp 0x42fcde
xor ecx, ecx
mov edx, 0x14
jmp 0x42fcde
cmp dword [ebx + 0x60], 0
jne 0x42faa6
cmp dword [ebx + 0x28], 1
je case.0x42fa6b.2
mov al, byte [eax + 1]
lea edx, [eax - 9]
cmp dl, 1
jbe case.0x42fa6b.2
cmp al, 0x20
je case.0x42fa6b.2
cmp al, 0xd
je case.0x42fa6b.2
test al, al
je case.0x42fa6b.2
mov dword [esp], ebx
call sym.evasi0n_gui.exe_xmlNextChar
mov dword [esp], ebx
call sym.evasi0n_gui.exe_xmlParseName
mov esi, eax
call sym.evasi0n_gui.exe___xmlParserDebugEntities
cmp dword [eax], 0
je 0x42fb08
call sym.evasi0n_gui.exe___xmlGenericError
mov edi, dword [eax]
call sym.evasi0n_gui.exe___xmlGenericErrorContext
mov dword [esp + 8], esi
mov dword [esp + 4], str.PEReference:__s_n
mov eax, dword [eax]
mov dword [esp], eax
call edi
test esi, esi
jne 0x42fb18
xor ecx, ecx
mov edx, 0x18
jmp 0x42fcde
mov eax, dword [ebx + 0x24]
mov eax, dword [eax + 0x10]
cmp byte [eax], 0x3b
jne 0x42fcd7
mov dword [esp], ebx
call sym.evasi0n_gui.exe_xmlNextChar
mov eax, dword [ebx]
test eax, eax
je 0x42fb4e
mov eax, dword [eax + 0x60]
test eax, eax
je 0x42fb4e
mov dword [esp + 4], esi
mov edx, dword [ebx + 4]
mov dword [esp], edx
call eax
mov edi, eax
test eax, eax
jne 0x42fbbc
cmp dword [ebx + 0x1c], 1
je 0x42fb60
cmp dword [ebx + 0x58], 0
jne 0x42fb72
cmp dword [ebx + 0x5c], 0
jne 0x42fb72
mov dword [esp], esi
mov ecx, str.PEReference:____s__not_found_n
mov edx, 0x1a
jmp 0x42fcce
cmp dword [ebx + 0x68], 0
je 0x42fb9c
cmp dword [ebx + 0x70], 0
je 0x42fb9c
mov dword [esp + 4], 0
mov dword [esp], esi
mov ecx, str.PEReference:____s__not_found_n
mov edx, 0x1b
mov eax, ebx
call fcn.0042d256
jmp 0x42fbb0
mov dword [esp], esi
mov ecx, str.PEReference:____s__not_found_n
mov edx, 0x1b
mov eax, ebx
call fcn.0042e44a
mov dword [ebx + 0x64], 0
jmp case.0x42fa6b.2
mov eax, dword [ebx + 0x24]
cmp dword [eax + 0x28], 0x42c5e1
je 0x42fbe2
mov edx, edi
mov eax, ebx
call fcn.0042daa6
mov dword [esp + 4], eax
mov dword [esp], ebx
call sym.evasi0n_gui.exe_xmlPushInput
jmp case.0x42fa6b.2
mov eax, dword [edi + 0x30]
sub eax, 4
cmp eax, 1
ja 0x42fcc1
mov dword [esp + 4], edi
mov dword [esp], ebx
call sym.evasi0n_gui.exe_xmlNewEntityInputStream
mov dword [esp + 4], eax
mov dword [esp], ebx
call sym.evasi0n_gui.exe_xmlPushInput
test eax, eax
js case.0x42fa6b.2
cmp dword [ebx + 0x124], 0
jne 0x42fc31
mov edx, dword [ebx + 0x24]
mov eax, dword [edx + 0x14]
sub eax, dword [edx + 0x10]
cmp eax, 0xf9
jg 0x42fc31
mov eax, ebx
call fcn.0042ec0a
mov edx, dword [ebx + 0x24]
mov eax, dword [edx + 0x10]
mov edx, dword [edx + 0x14]
sub edx, eax
cmp edx, 3
jle 0x42fc7b
mov dl, byte [eax]
mov byte [ebp - 0x1c], dl
mov dl, byte [eax + 1]
mov byte [ebp - 0x1b], dl
mov dl, byte [eax + 2]
mov byte [ebp - 0x1a], dl
mov al, byte [eax + 3]
mov byte [ebp - 0x19], al
mov dword [esp + 4], 4
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlDetectCharEncoding
test eax, eax
je 0x42fc7b
mov dword [esp + 4], eax
mov dword [esp], ebx
call sym.evasi0n_gui.exe_xmlSwitchEncoding
cmp dword [edi + 0x30], 5
jne case.0x42fa6b.2
mov eax, dword [ebx + 0x24]
mov eax, dword [eax + 0x10]
cmp byte [eax], 0x3c
jne case.0x42fa6b.2
cmp byte [eax + 1], 0x3f
jne case.0x42fa6b.2
cmp byte [eax + 2], 0x78
jne case.0x42fa6b.2
cmp byte [eax + 3], 0x6d
jne case.0x42fa6b.2
cmp byte [eax + 4], 0x6c
jne case.0x42fa6b.2
mov al, byte [eax + 5]
lea edx, [eax - 9]
cmp dl, 1
jbe 0x42fcb7
cmp al, 0x20
je 0x42fcb7
cmp al, 0xd
jne case.0x42fa6b.2
mov dword [esp], ebx
call sym.evasi0n_gui.exe_xmlParseTextDecl
jmp case.0x42fa6b.2
mov dword [esp], esi
mov ecx, str.PEReference:__s_is_not_a_parameter_entity_n
mov edx, 0x1e
mov eax, ebx
call fcn.0042cf44
jmp case.0x42fa6b.2
xor ecx, ecx
mov edx, 0x19
mov eax, ebx
call fcn.0042d009
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
ret