Function at 0x4bdde0
Capabilities:
Delete directory
Delete internet cache
Enumerate internet cache
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51d830
push 0x512bbe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x844
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x20], 0xa000
mov eax, dword [ebp + 0xc]
push eax
call fcn.004bdb20
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x20]
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 8
mov esi, eax
test esi, esi
je 0x4be02f
mov ecx, 0x2800
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov edx, dword [ebp - 0x20]
mov dword [esi], edx
lea eax, [ebp - 0x20]
push eax
push esi
push str.cookie:
call dword [sym.imp.WININET.dll_FindFirstUrlCacheEntryA]
mov ebx, eax
test ebx, ebx
je 0x4bdecb
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [esi + 0x34]
push edx
mov eax, dword [esi + 0x30]
push eax
call fcn.00475eb0
add esp, 0xc
test eax, eax
je 0x4bde9d
mov ecx, dword [esi + 4]
push ecx
mov edi, dword [sym.imp.WININET.dll_DeleteUrlCacheEntryA]
call edi
test eax, eax
jne 0x4bde9d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x4bde9d
push 0
mov edx, dword [esi + 4]
push edx
call dword [sym.imp.WININET.dll_UnlockUrlCacheEntryFileA]
mov eax, dword [esi + 4]
push eax
call edi
mov dword [ebp - 0x20], 0xa000
mov ecx, 0x2800
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x20]
mov dword [esi], ecx
lea edx, [ebp - 0x20]
push edx
push esi
push ebx
call dword [sym.imp.WININET.dll_FindNextUrlCacheEntryA]
test eax, eax
jne 0x4bde58
push ebx
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
push esi
call fcn.00512b1a
add esp, 4
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4be02f
mov word [ebp - 0x644], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x642]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, 0x5f5570
xor ebx, ebx
cmp word [0x5f5570], bx
jne 0x4bdf24
push ebx
push 0x21
lea eax, [ebp - 0x644]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x4bdf24
lea esi, [ebp - 0x644]
cmp esi, ebx
je 0x4bdf9a
cmp word [esi], bx
je 0x4bdf9a
mov word [ebp - 0x84c], bx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x84a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push str._.txt
push esi
push 0x52fe38
push 0x104
lea ecx, [ebp - 0x84c]
push ecx
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x14
mov dword [ebp - 4], ebx
push ebx
lea edx, [ebp - 0x84c]
push edx
call fcn.0043e630
add esp, 8
mov dword [ebp - 4], 0xffffffff
jmp 0x4bdf9a
mov word [ebp - 0x43c], bx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x43a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [ebp - 0x234], bx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x232]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
push 0x103
lea ecx, [ebp - 0x43c]
push ecx
mov ecx, 0x560ee8
call fcn.0040a860
push str.Sessions
lea edx, [ebp - 0x43c]
push edx
push str._s_s_
push 0x103
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x14
cmp word [ebp - 0x234], bx
je 0x4be02f
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x234]
push ecx
call fcn.004baae0
add esp, 0x10
lea edx, [ebp - 0x43c]
push edx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret