Function at 0x401b28
Capabilities:
Reference cloudflare dns server
Reference quad9 dns server

Disassembly:
push 0x84
mov eax, 0x59bf1a
call fcn.00493819
push 7
mov edi, 0x632078
pop ebx
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x90], edi
mov dword [0x63208c], ebx
mov dword [0x632088], eax
mov word [0x632078], cx
mov dword [ebp - 4], eax
mov dword [0x6320a8], ebx
mov dword [0x6320a4], eax
mov word [0x632094], cx
mov dword [0x6320c4], ebx
mov dword [0x6320c0], eax
mov word [0x6320b0], cx
mov dword [0x6320e0], ebx
mov dword [0x6320dc], eax
mov word [0x6320cc], cx
mov byte [ebp - 4], 3
mov dword [0x6320f0], eax
call fcn.00401f0c
mov dword [0x6320ec], eax
mov dword [eax], eax
mov eax, dword [0x6320ec]
mov dword [eax + 4], eax
mov eax, dword [0x6320ec]
mov dword [eax + 8], eax
mov eax, dword [0x6320ec]
mov byte [eax + 0x44], 1
mov eax, dword [0x6320ec]
mov byte [eax + 0x45], 1
mov esi, str.testnetwork.duoyi.com.dycdn.com
push esi
mov byte [ebp - 4], 4
call fcn.0048aa3a
pop ecx
mov ecx, esi
mov esi, 0x632094
call fcn.00401741
mov esi, str.61.142.132.87_124.95.140.121_183.232.9.33_47.88.79.111
push esi
call fcn.0048aa3a
pop ecx
mov ecx, esi
mov esi, edi
call fcn.00401741
mov esi, str.121.201.64.84_121.201.64.72_183.232.200.41_124.95.140.35_112.73.64.83_219.132.195.22
push esi
call fcn.0048aa3a
pop ecx
mov ecx, esi
mov esi, 0x6320cc
call fcn.00401741
mov esi, str.121.201.64.140_112.73.64.18_116.211.138.100_113.106.204.33
push esi
call fcn.0048aa3a
pop ecx
mov ecx, esi
mov esi, 0x6320b0
call fcn.00401741
push str.111.48.62.98_111.48.62.3_111.48.62.27_111.48.62.18
lea eax, [ebp - 0x4c]
call fcn.004017bc
push str.3.3.3.3
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 5
call fcn.004017bc
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 6
call fcn.00402042
pop ecx
mov byte [ebp - 4], bl
mov ebx, 0x6320e8
mov ecx, eax
mov edx, ebx
call fcn.004022ed
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004020b0
push 1
xor edi, edi
lea esi, [ebp - 0x68]
call fcn.004019e2
push 1
lea esi, [ebp - 0x84]
call fcn.004019e2
push 1
lea esi, [ebp - 0x30]
call fcn.004019e2
push 1
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 4
call fcn.004019e2
push str.122.190.108.143_122.190.108.135_113.57.219.169_113.57.219.167
lea eax, [ebp - 0x30]
call fcn.004017bc
push str.2.2.2.2
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.004017bc
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 9
call fcn.00402042
pop ecx
mov ecx, eax
mov edx, ebx
mov byte [ebp - 4], 0xa
call fcn.004022ed
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004020b0
push 1
lea esi, [ebp - 0x68]
call fcn.004019e2
push 1
lea esi, [ebp - 0x84]
call fcn.004019e2
push 1
lea esi, [ebp - 0x4c]
call fcn.004019e2
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.004019e2
push str.112.73.64.18_112.73.64.14_112.73.64.15_116.211.138.100_113.106.204.33_113.106.204.51_119.96.196.36
lea eax, [ebp - 0x30]
call fcn.004017bc
push str.1.1.1.1
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0xb
call fcn.004017bc
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0xc
call fcn.00402042
pop ecx
mov byte [ebp - 4], 0xd
mov ecx, eax
mov edx, ebx
call fcn.004022ed
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004020b0
push 1
lea esi, [ebp - 0x68]
call fcn.004019e2
push 1
lea esi, [ebp - 0x84]
call fcn.004019e2
push 1
lea esi, [ebp - 0x4c]
call fcn.004019e2
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.004019e2
push str.121.201.64.140_112.73.64.18_116.211.138.100_47.88.79.111
lea eax, [ebp - 0x30]
call fcn.004017bc
push str.9.9.9.9
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0xe
call fcn.004017bc
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0xf
call fcn.00402042
pop ecx
mov ecx, eax
mov edx, ebx
mov byte [ebp - 4], 0x10
call fcn.004022ed
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004020b0
push 1
lea esi, [ebp - 0x68]
call fcn.004019e2
push 1
lea esi, [ebp - 0x84]
call fcn.004019e2
push 1
lea esi, [ebp - 0x4c]
call fcn.004019e2
push 1
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 4
call fcn.004019e2
push str.121.201.64.140_112.73.64.18_116.211.138.100
lea eax, [ebp - 0x30]
call fcn.004017bc
push str.4.4.4.4
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call fcn.004017bc
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x12
call fcn.00402042
pop ecx
mov ecx, eax
mov edx, ebx
mov byte [ebp - 4], 0x13
call fcn.004022ed
push eax
lea esi, [ebp - 0x8c]
mov eax, ebx
call fcn.004020b0
xor ebx, ebx
inc ebx
push ebx
lea esi, [ebp - 0x68]
call fcn.004019e2
push ebx
lea esi, [ebp - 0x84]
call fcn.004019e2
push ebx
lea esi, [ebp - 0x4c]
call fcn.004019e2
push ebx
lea esi, [ebp - 0x30]
call fcn.004019e2
mov eax, 0x632078
call fcn.00493863
ret