Function at 0x49f2b0
Capabilities:
Create tcp socket
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x51ec
call fcn.00565240
mov eax, dword [0x615000]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x51d8], ecx
call fcn.00402270
mov dword [ebp - 0x51cc], eax
lea eax, [ebp - 0x1c8]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x49f30a
push 0x594c34
push 0x594c5c
call fcn.0040c050
add esp, 8
mov eax, 1
jmp 0x49f523
push 0
push 2
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x51d0], eax
mov dword [ebp - 0x38], 0x10
push 0x5000
push 0
lea ecx, [ebp - 0x51c8]
push ecx
call fcn.00562540
add esp, 0xc
push 0x594c84
call sub.WS2_32.dll_inet_addr
mov dword [ebp - 0x28], eax
mov edx, 2
mov word [ebp - 0x2c], dx
push 0xea63
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x2a], ax
mov byte [ebp - 0x2d], 1
push 1
lea eax, [ebp - 0x2d]
push eax
push 4
push 0xffff
mov ecx, dword [ebp - 0x51d0]
push ecx
call dword [sym.imp.WS2_32.dll_setsockopt]
push 0x10
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x51d0]
push eax
call dword [sym.imp.WS2_32.dll_bind]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x49f3c5
push 0x594c90
push 0x594cac
call fcn.0040c050
add esp, 8
mov ecx, dword [ebp - 0x51d0]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
or eax, 0xffffffff
jmp 0x49f523
mov edx, dword [ebp - 0x51d8]
cmp dword [edx + 4], 0
jne 0x49f50e
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x18]
push ecx
push 0
push 0x5000
lea edx, [ebp - 0x51c8]
push edx
mov eax, dword [ebp - 0x51d0]
push eax
call dword [sym.imp.WS2_32.dll_recvfrom]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x49f42e
push 0x594cd4
push 0x594cf8
call fcn.0040c050
add esp, 8
mov ecx, dword [ebp - 0x51d0]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
or eax, 0xffffffff
jmp 0x49f523
mov dword [ebp - 0x51dc], 0x594d20
lea edx, [ebp - 0x51c8]
mov dword [ebp - 0x51e0], edx
mov eax, dword [ebp - 0x51e0]
mov cl, byte [eax]
mov byte [ebp - 0x51e1], cl
mov edx, dword [ebp - 0x51dc]
cmp cl, byte [edx]
jne 0x49f4a2
cmp byte [ebp - 0x51e1], 0
je 0x49f496
mov eax, dword [ebp - 0x51e0]
mov cl, byte [eax + 1]
mov byte [ebp - 0x51e2], cl
mov edx, dword [ebp - 0x51dc]
cmp cl, byte [edx + 1]
jne 0x49f4a2
add dword [ebp - 0x51e0], 2
add dword [ebp - 0x51dc], 2
cmp byte [ebp - 0x51e2], 0
jne 0x49f444
mov dword [ebp - 0x51e8], 0
jmp 0x49f4ad
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x51e8], eax
mov ecx, dword [ebp - 0x51e8]
mov dword [ebp - 0x51ec], ecx
cmp dword [ebp - 0x51ec], 0
jne 0x49f4d6
push 0x594d28
push str.UninstallMontior::MonitorThreadFunction
call fcn.0040c050
add esp, 8
jmp 0x49f50e
lea edx, [ebp - 0x51c8]
test edx, edx
je 0x49f509
lea eax, [ebp - 0x51c8]
push eax
push 0x71
push 5
call fcn.00433830
add esp, 0xc
push 0x5000
push 0
lea ecx, [ebp - 0x51c8]
push ecx
call fcn.00562540
add esp, 0xc
jmp 0x49f3c5
mov edx, dword [ebp - 0x51d0]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0055abea
mov esp, ebp
pop ebp
ret