Function at 0x401c1b
Capabilities:
Reference cloudflare dns server
Reference quad9 dns server

Disassembly:
push 0x84
mov eax, 0x59de89
call fcn.00495539
push 7
mov edi, 0x635258
pop ebx
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x90], edi
mov dword [0x63526c], ebx
mov dword [0x635268], eax
mov word [0x635258], cx
mov dword [ebp - 4], eax
mov dword [0x635288], ebx
mov dword [0x635284], eax
mov word [0x635274], cx
mov dword [0x6352a4], ebx
mov dword [0x6352a0], eax
mov word [0x635290], cx
mov dword [0x6352c0], ebx
mov dword [0x6352bc], eax
mov word [0x6352ac], cx
mov byte [ebp - 4], 3
mov dword [0x6352d0], eax
call fcn.00402019
mov dword [0x6352cc], eax
mov dword [eax], eax
mov eax, dword [0x6352cc]
mov dword [eax + 4], eax
mov eax, dword [0x6352cc]
mov dword [eax + 8], eax
mov eax, dword [0x6352cc]
mov byte [eax + 0x44], 1
mov eax, dword [0x6352cc]
mov byte [eax + 0x45], 1
mov esi, str.testnetwork.duoyi.com.dycdn.com
push esi
mov byte [ebp - 4], 4
call fcn.0048c5ca
pop ecx
mov ecx, esi
mov esi, 0x635274
call fcn.00401834
mov esi, str.61.142.132.87_124.95.140.121_183.232.9.33_47.88.79.111
push esi
call fcn.0048c5ca
pop ecx
mov ecx, esi
mov esi, edi
call fcn.00401834
mov esi, str.121.201.64.84_121.201.64.72_183.232.200.41_124.95.140.35_112.73.64.83_219.132.195.22
push esi
call fcn.0048c5ca
pop ecx
mov ecx, esi
mov esi, 0x6352ac
call fcn.00401834
mov esi, str.121.201.64.140_112.73.64.18_116.211.138.100_113.106.204.33
push esi
call fcn.0048c5ca
pop ecx
mov ecx, esi
mov esi, 0x635290
call fcn.00401834
push str.111.48.62.98_111.48.62.3_111.48.62.27_111.48.62.18
lea eax, [ebp - 0x4c]
call fcn.004018af
push str.3.3.3.3
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.004018af
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 6
call fcn.0040214f
pop ecx
mov byte [ebp - 4], bl
mov ebx, 0x6352c8
mov ecx, eax
mov edx, ebx
call fcn.004023fa
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004021bd
push 1
xor edi, edi
lea esi, [ebp - 0x68]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x84]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x30]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 4
call fcn.00401ad5
push str.122.190.108.143_122.190.108.135_113.57.219.169_113.57.219.167
lea eax, [ebp - 0x30]
call fcn.004018af
push str.2.2.2.2
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.004018af
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 9
call fcn.0040214f
pop ecx
mov ecx, eax
mov edx, ebx
mov byte [ebp - 4], 0xa
call fcn.004023fa
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004021bd
push 1
lea esi, [ebp - 0x68]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x84]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x4c]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.00401ad5
push str.112.73.64.18_112.73.64.14_112.73.64.15_116.211.138.100_113.106.204.33_113.106.204.51_119.96.196.36
lea eax, [ebp - 0x30]
call fcn.004018af
push str.1.1.1.1
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0xb
call fcn.004018af
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0xc
call fcn.0040214f
pop ecx
mov byte [ebp - 4], 0xd
mov ecx, eax
mov edx, ebx
call fcn.004023fa
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004021bd
push 1
lea esi, [ebp - 0x68]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x84]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x4c]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.00401ad5
push str.121.201.64.140_112.73.64.18_116.211.138.100_47.88.79.111
lea eax, [ebp - 0x30]
call fcn.004018af
push str.9.9.9.9
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0xe
call fcn.004018af
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0xf
call fcn.0040214f
pop ecx
mov ecx, eax
mov edx, ebx
mov byte [ebp - 4], 0x10
call fcn.004023fa
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004021bd
push 1
lea esi, [ebp - 0x68]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x84]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x4c]
call fcn.00401ad5
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.00401ad5
push str.121.201.64.140_112.73.64.18_116.211.138.100
lea eax, [ebp - 0x30]
call fcn.004018af
push str.4.4.4.4
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call fcn.004018af
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x12
call fcn.0040214f
pop ecx
mov ecx, eax
mov edx, ebx
mov byte [ebp - 4], 0x13
call fcn.004023fa
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004021bd
xor ebx, ebx
inc ebx
push ebx
lea esi, [ebp - 0x68]
call fcn.00401ad5
push ebx
lea esi, [ebp - 0x84]
call fcn.00401ad5
push ebx
lea esi, [ebp - 0x4c]
call fcn.00401ad5
push ebx
lea esi, [ebp - 0x30]
call fcn.00401ad5
mov eax, 0x635258
call fcn.00495583
ret