Function at 0x4a4b50
Capabilities:
Create tcp socket
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x51f4
call fcn.0056b140
mov eax, dword [0x61b000]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x51e0], ecx
call fcn.00402270
mov dword [ebp - 0x51d4], eax
lea eax, [ebp - 0x1d0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x4a4baa
push 0x59b24c
push 0x59b144
call fcn.0040c230
add esp, 8
mov eax, 1
jmp 0x4a4e07
push 0
push 2
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x4a4be8
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push 0x59b298
push 0x59b274
call fcn.0040c230
add esp, 0xc
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, 1
jmp 0x4a4e07
push 0
push 2
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x51d8], eax
mov dword [ebp - 0x3c], 0x10
push 0x5000
push 0
lea ecx, [ebp - 0x51d0]
push ecx
call fcn.00568440
add esp, 0xc
push 0x59b2dc
call sub.WS2_32.dll_inet_addr
mov dword [ebp - 0x28], eax
mov edx, 2
mov word [ebp - 0x2c], dx
push 0xea62
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x2a], ax
mov byte [ebp - 0x31], 1
push 1
lea eax, [ebp - 0x31]
push eax
push 4
push 0xffff
mov ecx, dword [ebp - 0x51d8]
push ecx
call dword [sym.imp.WS2_32.dll_setsockopt]
push 0x10
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x51d8]
push eax
call dword [sym.imp.WS2_32.dll_bind]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x4a4ca0
push 0x59b2e8
push 0x59b304
call fcn.0040c230
add esp, 8
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
or eax, 0xffffffff
jmp 0x4a4e07
mov edx, dword [ebp - 0x51e0]
cmp dword [edx + 8], 0
jne 0x4a4de8
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x18]
push ecx
push 0
push 0x5000
lea edx, [ebp - 0x51d0]
push edx
mov eax, dword [ebp - 0x51d8]
push eax
call dword [sym.imp.WS2_32.dll_recvfrom]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x4a4d06
push 0x59b328
push 0x59b34c
call fcn.0040c230
add esp, 8
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
or eax, 0xffffffff
jmp 0x4a4e07
mov dword [ebp - 0x51e4], 0x59b370
lea edx, [ebp - 0x51d0]
mov dword [ebp - 0x51e8], edx
mov eax, dword [ebp - 0x51e8]
mov cl, byte [eax]
mov byte [ebp - 0x51e9], cl
mov edx, dword [ebp - 0x51e4]
cmp cl, byte [edx]
jne 0x4a4d7a
cmp byte [ebp - 0x51e9], 0
je 0x4a4d6e
mov eax, dword [ebp - 0x51e8]
mov cl, byte [eax + 1]
mov byte [ebp - 0x51ea], cl
mov edx, dword [ebp - 0x51e4]
cmp cl, byte [edx + 1]
jne 0x4a4d7a
add dword [ebp - 0x51e8], 2
add dword [ebp - 0x51e4], 2
cmp byte [ebp - 0x51ea], 0
jne 0x4a4d1c
mov dword [ebp - 0x51f0], 0
jmp 0x4a4d85
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x51f0], eax
mov ecx, dword [ebp - 0x51f0]
mov dword [ebp - 0x51f4], ecx
cmp dword [ebp - 0x51f4], 0
jne 0x4a4dae
push 0x59b378
push str.ProcessProtect::ProcessProtectFunc
call fcn.0040c230
add esp, 8
jmp 0x4a4de8
lea edx, [ebp - 0x51d0]
test edx, edx
je 0x4a4de3
push 5
lea eax, [ebp - 0x51d0]
push eax
push 0x70
push 5
call fcn.00434820
add esp, 0x10
push 0x5000
push 0
lea ecx, [ebp - 0x51d0]
push ecx
call fcn.00568440
add esp, 0xc
jmp 0x4a4ca0
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebp - 0x51d8]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00560c61
mov esp, ebp
pop ebp
ret