Function at 0x49eb20
Capabilities:
Create tcp socket
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x51f4
call fcn.00565240
mov eax, dword [0x615000]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x51e0], ecx
call fcn.00402270
mov dword [ebp - 0x51d4], eax
lea eax, [ebp - 0x1d0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x49eb7a
push 0x59522c
push 0x595124
call fcn.0040c050
add esp, 8
mov eax, 1
jmp 0x49edd5
push 0
push 2
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x49ebb8
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push 0x595278
push 0x595254
call fcn.0040c050
add esp, 0xc
call dword [sym.imp.WS2_32.dll_WSACleanup]
mov eax, 1
jmp 0x49edd5
push 0
push 2
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [ebp - 0x51d8], eax
mov dword [ebp - 0x3c], 0x10
push 0x5000
push 0
lea ecx, [ebp - 0x51d0]
push ecx
call fcn.00562540
add esp, 0xc
push 0x5952bc
call sub.WS2_32.dll_inet_addr
mov dword [ebp - 0x28], eax
mov edx, 2
mov word [ebp - 0x2c], dx
push 0xea62
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x2a], ax
mov byte [ebp - 0x31], 1
push 1
lea eax, [ebp - 0x31]
push eax
push 4
push 0xffff
mov ecx, dword [ebp - 0x51d8]
push ecx
call dword [sym.imp.WS2_32.dll_setsockopt]
push 0x10
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x51d8]
push eax
call dword [sym.imp.WS2_32.dll_bind]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x49ec70
push 0x5952c8
push 0x5952e4
call fcn.0040c050
add esp, 8
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
or eax, 0xffffffff
jmp 0x49edd5
mov edx, dword [ebp - 0x51e0]
cmp dword [edx + 8], 0
jne 0x49edb6
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x18]
push ecx
push 0
push 0x5000
lea edx, [ebp - 0x51d0]
push edx
mov eax, dword [ebp - 0x51d8]
push eax
call dword [sym.imp.WS2_32.dll_recvfrom]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x49ecd6
push 0x595308
push 0x59532c
call fcn.0040c050
add esp, 8
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
or eax, 0xffffffff
jmp 0x49edd5
mov dword [ebp - 0x51e4], 0x595350
lea edx, [ebp - 0x51d0]
mov dword [ebp - 0x51e8], edx
mov eax, dword [ebp - 0x51e8]
mov cl, byte [eax]
mov byte [ebp - 0x51e9], cl
mov edx, dword [ebp - 0x51e4]
cmp cl, byte [edx]
jne 0x49ed4a
cmp byte [ebp - 0x51e9], 0
je 0x49ed3e
mov eax, dword [ebp - 0x51e8]
mov cl, byte [eax + 1]
mov byte [ebp - 0x51ea], cl
mov edx, dword [ebp - 0x51e4]
cmp cl, byte [edx + 1]
jne 0x49ed4a
add dword [ebp - 0x51e8], 2
add dword [ebp - 0x51e4], 2
cmp byte [ebp - 0x51ea], 0
jne 0x49ecec
mov dword [ebp - 0x51f0], 0
jmp 0x49ed55
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x51f0], eax
mov ecx, dword [ebp - 0x51f0]
mov dword [ebp - 0x51f4], ecx
cmp dword [ebp - 0x51f4], 0
jne 0x49ed7e
push 0x595358
push str.ProcessProtect::ProcessProtectFunc
call fcn.0040c050
add esp, 8
jmp 0x49edb6
lea edx, [ebp - 0x51d0]
test edx, edx
je 0x49edb1
lea eax, [ebp - 0x51d0]
push eax
push 0x70
push 5
call fcn.00433830
add esp, 0xc
push 0x5000
push 0
lea ecx, [ebp - 0x51d0]
push ecx
call fcn.00562540
add esp, 0xc
jmp 0x49ec70
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [ebp - 0x51d8]
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0055abea
mov esp, ebp
pop ebp
ret