Function at 0x41cfcd
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
push dword [ebp + 8]
call fcn.004279a0
inc eax
push eax
call fcn.0043be5a
push dword [ebp + 8]
mov ebx, eax
push ebx
mov dword [ebp - 4], ebx
call fcn.00428660
push ebx
call fcn.00434465
mov esi, dword [ebp + 0x10]
or dword [esi], 0xffffffff
push str.not_assigned_to_lacnic
push ebx
call fcn.00428a40
add esp, 0x1c
test eax, eax
je 0x41d01b
push str.__QUERY_ERROR
jmp 0x41d36e
push str.reached_the_limit
push ebx
call fcn.00428a40
test eax, eax
pop ecx
pop ecx
jne 0x41d369
push str.access_denied
push ebx
call fcn.00428a40
test eax, eax
pop ecx
pop ecx
jne 0x41d369
push str.limit_reached
push ebx
call fcn.00428a40
test eax, eax
pop ecx
pop ecx
jne 0x41d369
push str.you_have_exceeded
push ebx
call fcn.00428a40
test eax, eax
pop ecx
pop ecx
jne 0x41d369
push str.assigned_to_brazilian_users
push ebx
call fcn.00428a40
test eax, eax
pop ecx
pop ecx
je 0x41d094
push ebx
call fcn.0043be55
xor eax, eax
mov dword [esi], 2
inc eax
jmp 0x41d399
xor edi, edi
push edi
push 1
push str.owner:
push dword [ebp + 8]
call fcn.0040665f
mov esi, dword [ebp + 0xc]
add esp, 0x10
cmp eax, edi
jne 0x41d0c3
lea eax, [esi + 2]
push str.__QUERY_ERROR
push eax
call fcn.00428660
jmp 0x41d37c
push 0xff
push eax
lea edi, [esi + 2]
push edi
call fcn.00427a30
push 0xd
push edi
mov byte [esi + 0x101], 0
call fcn.00428980
add esp, 0x14
test eax, eax
jne 0x41d0f6
push 0xa
push edi
call fcn.00428980
test eax, eax
pop ecx
pop ecx
je 0x41d0f9
mov byte [eax], 0
push 0
push 1
push str.ownerid:
push dword [ebp + 8]
call fcn.0040665f
mov esi, eax
add esp, 0x10
test esi, esi
je 0x41d198
push esi
call fcn.004279a0
inc eax
push eax
call fcn.0043be5a
mov ebx, eax
push esi
push ebx
call fcn.00428660
push 0xd
push ebx
call fcn.00428980
add esp, 0x18
test eax, eax
jne 0x41d14a
push 0xa
push ebx
call fcn.00428980
test eax, eax
pop ecx
pop ecx
je 0x41d14d
mov byte [eax], 0
push edi
call fcn.004279a0
mov esi, 0xfc
sub esi, eax
cmp esi, 0xff
pop ecx
jae 0x41d172
push ebx
call fcn.004279a0
cmp eax, esi
pop ecx
jbe 0x41d172
mov byte [esi + ebx], 0
push 0x458bd8
push edi
call fcn.00428670
push ebx
push edi
call fcn.00428670
push 0x458bd4
push edi
call fcn.00428670
push ebx
call fcn.0043be55
add esp, 0x1c
push 0
push 1
mov ebx, str.address:
push ebx
push dword [ebp + 8]
call fcn.0040665f
mov edi, eax
add esp, 0x10
test edi, edi
je 0x41d292
push edi
call fcn.004279a0
inc eax
push eax
call fcn.0043be5a
mov esi, eax
push edi
push esi
call fcn.00428660
push str._r_n_r_n
push esi
call fcn.00428a40
add esp, 0x18
test eax, eax
jne 0x41d1f0
push 0x458bf8
push esi
call fcn.00428a40
test eax, eax
pop ecx
pop ecx
je 0x41d246
mov byte [eax], 0
push 1
push 1
push ebx
push esi
call fcn.0040665f
add esp, 0x10
test eax, eax
mov dword [ebp + 0x10], eax
je 0x41d246
push 0xd
push esi
call fcn.00428980
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x41d228
push 0xa
push esi
call fcn.00428980
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x41d1f3
push dword [ebp + 0x10]
call fcn.004279a0
inc eax
push eax
push dword [ebp + 0x10]
lea eax, [edi + 1]
push eax
call fcn.00427d70
add esp, 0x10
mov byte [edi], 0x20
jmp 0x41d1f3
push 0xd
push esi
call fcn.00428980
test eax, eax
pop ecx
pop ecx
jne 0x41d262
push 0xa
push esi
call fcn.00428980
test eax, eax
pop ecx
pop ecx
je 0x41d265
mov byte [eax], 0
push esi
call fcn.004279a0
cmp eax, 0xff
pop ecx
jbe 0x41d27a
mov byte [esi + 0xff], 0
mov eax, dword [ebp + 0xc]
add eax, 0x102
push esi
push eax
call fcn.00428660
push esi
call fcn.0043be55
add esp, 0xc
push 0
push 1
push str.country:
push dword [ebp + 8]
call fcn.0040665f
add esp, 0x10
test eax, eax
je 0x41d2d3
mov cl, byte [eax + 2]
cmp cl, 0xd
je 0x41d2b7
cmp cl, 0xa
jne 0x41d2d3
mov esi, dword [ebp + 0xc]
push 2
push eax
lea eax, [esi + 0x210]
push eax
call fcn.00427a30
add esp, 0xc
mov byte [esi + 0x212], 0
xor esi, esi
push esi
push 1
mov edi, str.inetnum:
push edi
push dword [ebp + 8]
call fcn.0040665f
add esp, 0x10
cmp eax, esi
je 0x41d33b
mov cl, byte [eax]
jmp 0x41d304
cmp cl, 0xd
je 0x41d308
cmp cl, 0xa
je 0x41d308
cmp esi, 0x1f
jae 0x41d308
inc esi
mov cl, byte [esi + eax]
test cl, cl
jne 0x41d2f1
push esi
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004295e0
mov eax, dword [ebp + 0xc]
lea ecx, [eax + 0x208]
push ecx
add eax, 0x204
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp + esi - 0x24], 0
call fcn.00406cb8
add esp, 0x18
neg eax
sbb eax, eax
inc eax
jmp 0x41d33e
xor eax, eax
inc eax
test eax, eax
je 0x41d361
push 0
push 1
push edi
push dword [ebp + 8]
call fcn.0040665f
add esp, 0x10
test eax, eax
je 0x41d361
push dword [ebp + 0xc]
push eax
call fcn.0041bb96
pop ecx
pop ecx
mov ebx, dword [ebp - 4]
xor edi, edi
inc edi
jmp 0x41d391
push str.__QUERY_LIMIT
mov esi, dword [ebp + 0xc]
lea eax, [esi + 2]
push eax
call fcn.00428660
xor edi, edi
pop ecx
pop ecx
add esi, 0x102
push str.whois.lacnic.net
push esi
call fcn.00428660
pop ecx
pop ecx
push ebx
call fcn.0043be55
mov eax, edi
pop ecx
pop edi
pop esi
pop ebx
leave
ret