Function at 0x1400c30f4
Capabilities:
Write file on windows

Disassembly:
jmp 0x140120fc0
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x418
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x96
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x438]
mov rax, qword [0x1402b0128]
xor rax, rbp
mov qword [rbp + 0x3c0], rax
lea rcx, [0x1402cd0c6]
call fcn.1400c7677
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0x10]
call fcn.1400c59df
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x20
mov rdx, qword [rbp + 0x3f0]
lea rcx, [rbp + 0x10]
call fcn.1400c3f40
nop
mov rax, qword [rbp + 0x10]
movsxd rax, dword [rax + 4]
lea rax, [rbp + rax + 0x10]
mov rcx, rax
call fcn.1400c794c
movzx eax, al
test eax, eax
je 0x140121083
mov r9d, 0x10
lea r8, str.Hata
lea rdx, str.Dosya_a
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x10]
call fcn.1400c2d6b
jmp 0x1401212ca
mov r8d, 2
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.1400c657e
lea rdx, [rbp + 0x358]
lea rcx, [rbp + 0x10]
call fcn.1400c7249
mov rcx, rax
call fcn.1400c7834
mov qword [rbp + 0x138], rax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.1400c657e
mov edx, 0x20
lea rcx, [rbp + 0x158]
call fcn.1400c68a3
lea rcx, [rbp + 0x384]
call fcn.1400c33b0
mov r8, rax
mov rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x158]
call fcn.1400c5b9c
nop
lea rcx, [rbp + 0x158]
call fcn.1400c3865
mov r8, qword [rbp + 0x138]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400c7762
mov qword [rbp + 0x3a8], rax
mov rax, qword [rbp + 0x3a8]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rbp + 0x3a8]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400c794c
movzx eax, al
test eax, eax
je 0x14012117d
mov r9d, 0x10
lea r8, str.Hata
lea rdx, str.Dosya_okunamad
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x158]
call fcn.1400c6e57
nop
lea rcx, [rbp + 0x10]
call fcn.1400c2d6b
jmp 0x1401212ca
lea rcx, [rbp + 0x10]
call fcn.1400c4fa3
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 3
mov edx, 0x40000000
lea rcx, [0x14025e730]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0x198], rax
cmp qword [rbp + 0x198], 0xffffffffffffffff
jne 0x140121203
mov r9d, 0x10
lea r8, str.Hata
lea rdx, str.MBR_verisi_geri_y
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
lea rcx, [rbp + 0x158]
call fcn.1400c6e57
nop
lea rcx, [rbp + 0x10]
call fcn.1400c2d6b
jmp 0x1401212ca
lea rcx, [rbp + 0x158]
call fcn.1400c22df
mov qword [rbp + 0x3b8], rax
lea rcx, [rbp + 0x158]
call fcn.1400c3865
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x1b4]
mov rcx, qword [rbp + 0x3b8]
mov r8d, ecx
mov rdx, rax
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140121264
lea rcx, [rbp + 0x158]
call fcn.1400c22df
cmp dword [rbp + 0x1b4], eax
je 0x1401212a6
mov r9d, 0x10
lea r8, str.Hata
lea rdx, str.MBR_verisi_geri_y
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x158]
call fcn.1400c6e57
nop
lea rcx, [rbp + 0x10]
call fcn.1400c2d6b
jmp 0x1401212ca
mov rcx, qword [rbp + 0x198]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp + 0x158]
call fcn.1400c6e57
nop
lea rcx, [rbp + 0x10]
call fcn.1400c2d6b
lea rcx, [rbp - 0x40]
lea rdx, [0x14025eda0]
call fcn.1400c6745
mov rcx, qword [rbp + 0x3c0]
xor rcx, rbp
call fcn.1400c49ae
lea rsp, [rbp + 0x3d8]
pop rdi
pop rbp
ret