Function at 0x14006ddb0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
mov rbp, rsp
sub rsp, 0x40
mov byte [rbp - 0x20], gethostname
xor ebx, ebx
mov byte [rbp - 0x1f], reloc.WLDAP32.dll_Ordinal_32
movabs r14, 0x512d4d7b21dd5648
mov byte [rbp - 0x1e], gethostname
mov r10, r14
mov byte [rbp - 0x1d], reloc.WLDAP32.dll_Ordinal_33
mov r9d, ebx
mov byte [rbp - 0x1c], reloc.WLDAP32.dll_Ordinal_46
mov edi, reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x1b], Ordinal_45
mov byte [rbp - 0x1a], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp - 0x19], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp - 0x18], 0x75
mov byte [rbp - 0x17], 0x33
mov byte [rbp - 0x16], Ordinal_41
mov byte [rbp - 0x15], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp - 0x14], 0x59
movzx eax, byte [rbp - 0x20]
lea rax, [rbp - 0x20]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea r8, [rbp - 0x20]
add r8, r9
and ecx, edi
cmp rcx, rdi
mov rdx, r14
cmovae rcx, rdi
shl cl, 2
lea eax, [r10 + r8]
shr rdx, cl
and dl, dil
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 - 0x20], dl
inc r9
cmp r9, 0xd
jb 0x14006de30
lea rcx, [rbp - 0x20]
call fcn.140066260
test al, al
je 0x14006de82
mov qword [0], 1
mov byte [rbp - 0x20], 0x56
movabs rsi, 0x10f13d89439b3c28
mov byte [rbp - 0x1f], 0x46
mov r10, rsi
mov byte [rbp - 0x1e], 0x51
mov r9, rbx
mov byte [rbp - 0x1d], 0x49
mov byte [rbp - 0x1c], 0x55
mov byte [rbp - 0x1b], 0x41
mov byte [rbp - 0x1a], 0x59
mov byte [rbp - 0x19], 0x59
mov byte [rbp - 0x18], 0x58
mov byte [rbp - 0x17], 0x40
mov byte [rbp - 0x16], reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x15], 0x55
mov byte [rbp - 0x14], Ordinal_79
mov byte [rbp - 0x13], 0x5f
mov byte [rbp - 0x12], gethostname
movzx eax, byte [rbp - 0x20]
lea rax, [rbp - 0x20]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea r8, [rbp - 0x20]
add r8, r9
and ecx, edi
cmp rcx, rdi
mov rdx, rsi
cmovae rcx, rdi
shl cl, 2
lea eax, [r10 + r8]
shr rdx, cl
and dl, dil
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 - 0x20], dl
inc r9
cmp r9, rdi
jb 0x14006dee0
lea rcx, [rbp - 0x20]
call fcn.140066260
test al, al
je 0x14006df31
mov qword [0], 1
mov byte [rbp - 0x20], 0x56
mov r10, rsi
mov byte [rbp - 0x1f], 0x46
mov r9, rbx
mov byte [rbp - 0x1e], 0x51
mov byte [rbp - 0x1d], 0x49
mov byte [rbp - 0x1c], 0x55
mov byte [rbp - 0x1b], 0x41
mov byte [rbp - 0x1a], 0x58
mov byte [rbp - 0x19], 0x58
mov byte [rbp - 0x18], 0x5c
mov byte [rbp - 0x17], 0x4b
mov byte [rbp - 0x16], reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x15], 0x55
mov byte [rbp - 0x14], Ordinal_79
mov byte [rbp - 0x13], 0x5f
mov byte [rbp - 0x12], gethostname
movzx eax, byte [rbp - 0x20]
lea rax, [rbp - 0x20]
sub r10, rax
nop
mov rcx, r9
lea r8, [rbp - 0x20]
add r8, r9
and ecx, edi
cmp rcx, rdi
mov rdx, rsi
cmovae rcx, rdi
shl cl, 2
lea eax, [r10 + r8]
shr rdx, cl
and dl, dil
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 - 0x20], dl
inc r9
cmp r9, rdi
jb 0x14006df80
lea rcx, [rbp - 0x20]
call fcn.140066260
test al, al
je 0x14006dfd1
mov qword [0], 1
mov byte [rbp - 0x20], Ordinal_41
movabs r11, 0x139739954c51cb7e
mov byte [rbp - 0x1f], 0x3f
mov r10, r11
mov byte [rbp - 0x1e], 0xca
mov r9, rbx
mov byte [rbp - 0x1d], 0xf8
mov byte [rbp - 0x1c], 0xf7
mov byte [rbp - 0x1b], 0xee
mov byte [rbp - 0x1a], 0xdb
mov byte [rbp - 0x19], 0xe4
mov byte [rbp - 0x18], 0xf1
mov byte [rbp - 0x17], 0xf8
mov byte [rbp - 0x16], 0xe8
mov byte [rbp - 0x15], 0xe9
mov byte [rbp - 0x14], 0xe8
mov byte [rbp - 0x13], 0xac
mov byte [rbp - 0x12], 0xea
mov byte [rbp - 0x11], 0xf4
mov byte [rbp - 0x10], 0xe5
mov byte [rbp - 0xf], 0x88
movzx eax, byte [rbp - 0x20]
lea rax, [rbp - 0x20]
sub r10, rax
nop dword [rax]
nop dword [rax + rax]
mov rcx, r9
lea r8, [rbp - 0x20]
add r8, r9
and ecx, edi
cmp rcx, rdi
mov rdx, r11
cmovae rcx, rdi
shl cl, 2
lea eax, [r10 + r8]
shr rdx, cl
and dl, dil
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 - 0x20], dl
inc r9
cmp r9, 0x12
jb 0x14006e040
lea rcx, [rbp - 0x20]
call fcn.140066260
test al, al
je 0x14006e092
mov qword [0], 1
mov byte [rbp - 0x20], gethostname
mov byte [rbp - 0x1f], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp - 0x1e], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp - 0x1d], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp - 0x1c], 0x35
mov byte [rbp - 0x1b], Ordinal_41
mov byte [rbp - 0x1a], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp - 0x19], 0x3d
mov byte [rbp - 0x18], 0x75
mov byte [rbp - 0x17], 0x33
mov byte [rbp - 0x16], Ordinal_41
mov byte [rbp - 0x15], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp - 0x14], 0x59
movzx eax, byte [rbp - 0x20]
nop word [rax + rax]
movzx eax, byte [rbp + rbx - 0x20]
mov rcx, rbx
and ecx, edi
mov rdx, r14
cmp rcx, rdi
cmovae rcx, rdi
shl cl, 2
shr rdx, cl
and dl, dil
xor dl, al
lea eax, [rbx + 0x48]
xor dl, al
mov byte [rbp + rbx - 0x20], dl
inc rbx
cmp rbx, 0xd
jb 0x14006e0d0
lea rcx, [rbp - 0x20]
call fcn.140066260
test al, al
je 0x14006e11a
mov qword [0], 1
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
add rsp, 0x40
pop rbp
ret