Function at 0x1400215b5
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
movaps xmmword [rsp + 0x50], xmm6
mov r14, rcx
xorps xmm6, xmm6
movaps xmmword [rsp + 0x40], xmm6
mov ecx, 2
call qword [fcn.1400df380]
mov r15, rax
movaps xmmword [rsp + 0x20], xmm6
xor eax, eax
lea rbx, [0x1400e7408]
movsxd rcx, dword [rax + rbx]
xor dword [rsp + rcx*4 + 0x20], 0x78c104ba
add rax, 4
cmp rax, 0xc
jne 0x1400215f1
mov ebp, 0x59f86fa6
mov dl, 1
mov eax, 0xc77b0d8
lea rsi, [0x1400e7400]
mov ecx, 0x5b7261a0
mov edi, dword [rsp + 0x28]
xor edi, eax
xor r8d, r8d
cmp ebp, 0x23b3651a
je 0x140021642
cmp ebp, 0x59f86fa6
je 0x14002164c
cmp ebp, 0xe97711d
jne 0x140021628
jmp 0x140021673
mov r8d, 0x10
mov ebp, edi
jmp 0x140021628
test dl, 1
je 0x140021669
xor edx, edx
movsxd rbp, dword [rdx + rsi]
xor dword [rsp + rbp*4 + 0x20], 0x7a21c57f
add rdx, 4
cmp rdx, 8
jne 0x140021653
mov ebp, dword [rsp + 0x20]
xor ebp, ecx
xor edx, edx
jmp 0x14002161f
lea rcx, str.could_not_load:
mov edx, 1
mov r9, r15
call sub.msvcrt.dll_fwrite
mov rcx, r15
call fcn.1400df9a0
mov ecx, 2
call qword [fcn.1400df380]
mov r15, rax
mov rcx, r14
call fcn.140020248
mov r12, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x20], xmm0
xor eax, eax
movsxd rcx, dword [rax + rbx]
xor dword [rsp + rcx*4 + 0x20], 0x78c104ba
add rax, 4
cmp rax, 0xc
jne 0x1400216b2
test r12, r12
mov eax, 0x765675a7
mov r13d, 0x5b7261a0
cmove r13d, eax
mov ecx, 0x59f86fa6
mov dil, 1
mov r14d, 0xc77b0d8
mov ebp, dword [rsp + 0x28]
xor ebp, r14d
xor eax, eax
cmp ecx, 0x23b3651a
je 0x14002170b
cmp ecx, 0x59f86fa6
je 0x140021717
cmp ecx, 0xe97711d
jne 0x1400216f1
jmp 0x140021740
mov rcx, r12
call sub.msvcrt.dll_strlen
mov ecx, ebp
jmp 0x1400216f1
test dil, 1
je 0x140021735
xor eax, eax
movsxd rcx, dword [rax + rsi]
xor dword [rsp + rcx*4 + 0x20], 0x7a21c57f
add rax, 4
cmp rax, 8
jne 0x14002171f
mov ecx, dword [rsp + 0x20]
xor ecx, r13d
xor edi, edi
jmp 0x1400216e8
mov edx, 1
mov rcx, r12
mov r8, rax
mov r9, r15
call sub.msvcrt.dll_fwrite
mov rcx, r15
call fcn.1400df9a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x3c], eax
xor eax, eax
movsxd rcx, dword [rax + rbx]
xor dword [rsp + rcx*4 + 0x40], 0x78c104ba
add rax, 4
cmp rax, 0xc
jne 0x140021767
mov eax, 0x59f86fa6
mov bpl, 1
mov r13d, 0xc77b0d8
xorps xmm6, xmm6
lea r14, str._n_bad_format__library_may_be_wrong_architecture_
mov r12d, 0x5b7261a0
mov r15d, dword [rsp + 0x48]
xor r15d, r13d
cmp eax, 0x23b3651a
je 0x1400217c1
cmp eax, 0x59f86fa6
je 0x140021868
cmp eax, 0xe97711d
jne 0x1400217a3
jmp 0x1400218a3
mov ecx, 2
call qword [fcn.1400df380]
mov rdi, rax
movaps xmmword [rsp + 0x20], xmm6
xor eax, eax
movsxd rcx, dword [rax + rbx]
xor dword [rsp + rcx*4 + 0x20], 0x78c104ba
add rax, 4
cmp rax, 0xc
jne 0x1400217d6
mov ecx, 0x59f86fa6
mov al, 1
mov edx, dword [rsp + 0x28]
xor edx, r13d
xor r8d, r8d
cmp ecx, 0xe97711d
je 0x140021848
cmp ecx, 0x23b3651a
je 0x140021817
cmp ecx, 0x59f86fa6
jne 0x1400217fd
jmp 0x140021821
mov r8d, 0x30
mov ecx, edx
jmp 0x1400217fd
test al, 1
je 0x14002183d
xor eax, eax
movsxd rcx, dword [rax + rsi]
xor dword [rsp + rcx*4 + 0x20], 0x7a21c57f
add rax, 4
cmp rax, 8
jne 0x140021827
mov ecx, dword [rsp + 0x20]
xor ecx, r12d
xor eax, eax
jmp 0x1400217f3
mov edx, 1
mov rcx, r14
mov r9, rdi
call sub.msvcrt.dll_fwrite
mov rcx, rdi
call fcn.1400df9a0
mov eax, r15d
jmp 0x1400217a3
mov eax, dword [rsp + 0x3c]
test bpl, 1
je 0x14002188a
xor ecx, ecx
movsxd rdx, dword [rcx + rsi]
xor dword [rsp + rdx*4 + 0x40], 0x7a21c57f
add rcx, 4
cmp rcx, 8
jne 0x140021874
cmp eax, 0xc1
mov eax, 0x765675a7
cmove eax, r12d
xor eax, dword [rsp + 0x40]
xor ebp, ebp
jmp 0x14002179b
mov ecx, 2
call qword [fcn.1400df380]
lea rdx, [0x1400e33b3]
mov rcx, rax
call fcn.140007d2a
mov ecx, 1
call sub.msvcrt.dll_exit
int3