Function at 0x47b2c0
Capabilities:
Write file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
push eax
mov eax, 0x20a8
call fcn.004e6390
sub esp, eax
mov eax, dword [esp + eax]
mov edi, eax
mov ebx, dword [eax]
test ebx, ebx
je 0x47b339
movzx edx, byte [ebx]
test dl, dl
jne 0x47b2f3
jmp 0x47b2f8
movzx edx, byte [ebx + 1]
add ebx, 1
test dl, dl
je 0x47b2f8
cmp dl, 0x3f
jne 0x47b2e8
xor ecx, ecx
lea eax, [ebx + 1]
cmp dl, 0x3f
mov byte [ebx], 0
cmovne eax, ecx
mov dword [esp + 0x34], eax
mov eax, dword [edi]
cmp byte [eax], 0
jne 0x47b348
mov byte [ebx], dl
mov eax, dword [edi]
mov dword [esp], str.empty_MAILPATH_component:__s
mov dword [esp + 4], eax
mov byte [esp + 0x24], dl
call sym.zsh.exe_zerr
movzx edx, byte [esp + 0x24]
add edi, 4
mov byte [ebx], dl
mov ebx, dword [edi]
test ebx, ebx
jne 0x47b2dc
add esp, 0x20ac
pop ebx
pop esi
pop edi
pop ebp
ret
mov byte [esp + 0x24], dl
call fcn.00476400
lea ecx, [esp + 0x38]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.cygwin1.dll__stat64
movzx edx, byte [esp + 0x24]
cmp eax, 0xffffffff
je 0x47b5c0
mov eax, dword [esp + 0x48]
and eax, 0xf000
cmp eax, 0x4000
je 0x47b4d0
mov ecx, dword [sym.zsh.exe_shout]
test ecx, ecx
je 0x47b32e
mov eax, dword [esp + 0x64]
or eax, dword [esp + 0x60]
jne 0x47b410
cmp byte [0x522d33], 0
je 0x47b32e
mov eax, dword [esp + 0x68]
cmp eax, dword [esp + 0x70]
jle 0x47b32e
cmp eax, dword [0x523b7c]
jle 0x47b32e
mov eax, dword [esp + 0x64]
or eax, dword [esp + 0x60]
je 0x47b32e
mov eax, dword [edi]
test eax, eax
je 0x47b3d8
mov byte [esp + 0x24], dl
call fcn.00476400
movzx edx, byte [esp + 0x24]
mov dword [esp + 8], eax
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp + 4], str.The_mail_in__s_has_been_read._n
mov dword [esp], eax
mov byte [esp + 0x24], dl
call sub.cygwin1.dll_fprintf
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp], eax
call sub.cygwin1.dll_fflush
movzx edx, byte [esp + 0x24]
jmp 0x47b32e
mov esi, dword [esp + 0x68]
mov eax, dword [esp + 0x70]
cmp esi, eax
jg 0x47b5fa
cmp eax, dword [0x523b7c]
jl 0x47b32e
mov eax, dword [esp + 0x34]
test eax, eax
je 0x47b738
mov eax, dword [0x5216f4]
mov byte [esp + 0x28], dl
mov dword [esp], eax
mov dword [esp + 0x24], eax
call sym.zsh.exe_zalloc
movzx edx, byte [esp + 0x28]
test eax, eax
mov esi, eax
je 0x47b6b4
mov eax, dword [0x5216f4]
mov dword [esp], esi
lea ebp, [esp + 0x34]
mov dword [esp + 8], eax
mov eax, dword [0x5216fc]
mov dword [esp + 4], eax
call sub.cygwin1.dll_memcpy
mov eax, dword [edi]
mov dword [esp], eax
call fcn.00417f40
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sym.zsh.exe_dupstring
mov dword [esp], ebp
mov dword [esp + 0x34], eax
call sym.zsh.exe_parsestr
movzx edx, byte [esp + 0x28]
test eax, eax
je 0x47b773
mov dword [esp], esi
mov byte [esp + 0x28], dl
call fcn.00417f40
mov eax, dword [esp + 0x24]
mov dword [esp], esi
mov dword [esp + 4], eax
call sym.zsh.exe_zfree
movzx edx, byte [esp + 0x28]
jmp 0x47b397
mov eax, dword [edi]
test eax, eax
je 0x47b4e4
mov byte [esp + 0x24], dl
call fcn.00476400
movzx edx, byte [esp + 0x24]
mov dword [esp], eax
mov byte [esp + 0x28], dl
call sub.cygwin1.dll_opendir
movzx edx, byte [esp + 0x28]
test eax, eax
mov dword [esp + 0x24], eax
je 0x47b32e
mov byte [esp + 0x2f], dl
call sym.zsh.exe_pushheap
call sym.zsh.exe_newlinklist
mov dword [esp + 0x28], 1
movzx ebp, byte [esp + 0x2f]
mov esi, eax
nop
mov eax, dword [esp + 0x24]
mov dword [esp + 4], 1
mov dword [esp], eax
call sym.zsh.exe_zreaddir
test eax, eax
je 0x47b64c
mov edx, dword [sym.zsh.exe_errflag]
test edx, edx
jne 0x47b64c
mov edx, dword [esp + 0x34]
mov ecx, dword [edi]
test edx, edx
je 0x47b620
mov dword [esp + 0x10], eax
lea eax, [esp + 0x9f]
mov dword [esp + 0x14], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], str._s__s__s
mov dword [esp + 4], 0x2001
mov dword [esp], eax
call sub.cygwin1.dll_snprintf
cmp eax, 0x2000
ja 0x47b520
lea eax, [esp + 0x9f]
mov dword [esp], eax
call sym.zsh.exe_dupstring
mov dword [esp + 8], eax
mov eax, dword [esi + 4]
mov dword [esp], esi
mov dword [esp + 4], eax
call sym.zsh.exe_insertlinknode
add dword [esp + 0x28], 1
jmp 0x47b520
call sub.cygwin1.dll___errno
movzx edx, byte [esp + 0x24]
cmp dword [eax], 2
je 0x47b32e
mov esi, dword [edi]
call sub.cygwin1.dll___errno
mov dword [esp + 8], esi
mov eax, dword [eax]
mov dword [esp], str._e:__s
mov dword [esp + 4], eax
call sym.zsh.exe_zerr
movzx edx, byte [esp + 0x24]
jmp 0x47b32e
cmp byte [0x522d33], 0
je 0x47b32e
cmp esi, dword [0x523b7c]
jg 0x47b3c4
jmp 0x47b32e
mov dword [esp + 0x10], eax
lea eax, [esp + 0x9f]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], str._s__s
mov dword [esp + 4], 0x2001
mov dword [esp], eax
call sub.cygwin1.dll_snprintf
jmp 0x47b583
mov eax, dword [esp + 0x24]
mov edx, ebp
mov byte [esp + 0x2f], dl
mov dword [esp], eax
call sub.cygwin1.dll_closedir
mov eax, dword [esp + 0x28]
shl eax, 2
mov dword [esp], eax
call sym.zsh.exe_zhalloc
movzx ebp, byte [esp + 0x2f]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x24], eax
mov ebx, eax
lea esi, [esi]
mov dword [esp], esi
add ebx, 4
call sym.zsh.exe_ugetnode
mov dword [ebx - 4], eax
test eax, eax
jne 0x47b680
mov eax, dword [esp + 0x24]
mov edx, ebp
mov ebx, dword [esp + 0x28]
mov byte [esp + 0x2f], dl
call fcn.0047b2c0
call sym.zsh.exe_popheap
movzx edx, byte [esp + 0x2f]
jmp 0x47b32e
mov eax, dword [edi]
mov byte [esp + 0x24], dl
lea ebp, [esp + 0x34]
mov dword [esp], eax
call fcn.00417f40
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sym.zsh.exe_dupstring
mov dword [esp], ebp
mov dword [esp + 0x34], eax
call sym.zsh.exe_parsestr
movzx edx, byte [esp + 0x24]
test eax, eax
jne 0x47b397
mov dword [esp], ebp
mov byte [esp + 0x24], dl
call sym.zsh.exe_singsub
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sym.zsh.exe_zputs
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp], 0xa
mov dword [esp + 4], eax
call sub.cygwin1.dll_fputc
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp], eax
call sub.cygwin1.dll_fflush
movzx edx, byte [esp + 0x24]
jmp 0x47b397
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0x13
mov dword [esp + 4], 1
mov dword [esp], str.You_have_new_mail._n
mov byte [esp + 0x24], dl
call sub.cygwin1.dll_fwrite
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp], eax
call sub.cygwin1.dll_fflush
movzx edx, byte [esp + 0x24]
jmp 0x47b397
mov dword [esp], ebp
mov byte [esp + 0x28], dl
call sym.zsh.exe_singsub
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sym.zsh.exe_zputs
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp], 0xa
mov dword [esp + 4], eax
call sub.cygwin1.dll_fputc
mov eax, dword [sym.zsh.exe_shout]
mov dword [esp], eax
call sub.cygwin1.dll_fflush
movzx edx, byte [esp + 0x28]
jmp 0x47b4a9