Function at 0x10003ab44
Capabilities:
Delete internet cache
Enumerate internet cache

Disassembly:
mov dword [rsp + 0x10], edx
mov dword [rsp + 8], ecx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
mov eax, 0x1000
xor r15d, r15d
xor r14d, r14d
xor r13d, r13d
xor ebp, ebp
mov r12d, ecx
mov dword [rsp + 0xc0], eax
mov rdx, rax
xor esi, esi
jmp 0x10003abd1
lea r8, [rsp + 0xc0]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.WININET.dll_FindFirstUrlCacheEntryW]
mov r13, rax
test rax, rax
jne 0x10003ac47
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov edi, eax
test esi, esi
jne 0x10003ac3d
cmp eax, 0x8007007a
jne 0x10003ac3d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov edx, dword [rsp + 0xc0]
lea esi, [r13 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rbx, rax
test rax, rax
jne 0x10003ab7d
mov edi, 0x8007000e
mov edx, 0x22d0140
mov r8d, edi
xor r9d, r9d
xor ecx, ecx
call fcn.1000b51b8
test rbx, rbx
je 0x10003ac0b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
test r13, r13
jne 0x10003ac4e
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_SetLastError]
test r13, r13
jne 0x10003ac4e
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
xor r9d, r9d
mov edx, 0x2dc0140
mov r8d, eax
xor ecx, ecx
mov edi, eax
call fcn.1000b51b8
jmp 0x10003af70
mov r8d, eax
mov edx, 0x2370140
jmp 0x10003abee
mov rbp, rbx
xor edi, edi
jmp 0x10003ac06
cmp dword [rsp + 0xb8], 0
je 0x10003ad2f
mov rax, qword [0x10011bcc0]
and qword [rsp + 0x50], 0
mov rbx, qword [rbp + 8]
xor edi, edi
test rax, rax
je 0x10003adee
and qword [rsp + 0x40], rdi
and qword [rsp + 0x38], rdi
and qword [rsp + 0x30], rdi
and qword [rsp + 0x28], rdi
lea rcx, [rsp + 0x50]
lea edx, [rdi + 2]
mov qword [rsp + 0x20], rcx
lea r8d, [rdi + 3]
xor r9d, r9d
mov rcx, rbx
call rax
test eax, eax
jne 0x10003acca
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov edx, 0x2ad0140
mov rcx, rbx
mov r9d, eax
mov r8d, eax
call fcn.1000b51b8
jmp 0x10003ad12
mov rcx, qword [rsp + 0x50]
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertEnumCRLsInStore]
mov rbx, rax
test rax, rax
jne 0x10003acff
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
xor r9d, r9d
mov edx, 0x2b40140
mov r8d, eax
xor ecx, ecx
call fcn.1000b51b8
jmp 0x10003ad04
mov edi, 1
test rbx, rbx
je 0x10003ad12
mov rcx, rbx
call qword [sym.imp.CRYPT32.dll_CertFreeCRLContext]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x10003ad27
mov edx, 2
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
test edi, edi
je 0x10003adee
cmp dword [0x10011bd04], 0
je 0x10003ad99
mov rcx, qword [rbp + 8]
call fcn.10003a3f8
test eax, eax
je 0x10003ad57
xor r9d, r9d
mov r8d, eax
mov edx, 0x2e60140
xor ecx, ecx
call fcn.1000b51b8
mov eax, dword [0x10011bd04]
cmp eax, 1
jle 0x10003ada9
mov ebx, eax
sub eax, 2
xor r8d, r8d
mov dword [0x10011bd04], eax
mov rdx, qword [rbp + 8]
xor ecx, ecx
call fcn.10003a644
test eax, eax
je 0x10003ad91
xor r9d, r9d
mov r8d, eax
mov edx, 0x2ee0140
xor ecx, ecx
call fcn.1000b51b8
mov dword [0x10011bd04], ebx
jmp 0x10003ada9
mov rdx, qword [rbp + 8]
lea rcx, [0x1000048e8]
call fcn.1000b99b0
lea rcx, [0x10000c564]
call fcn.1000b99b0
inc r14d
test r12d, r12d
je 0x10003adee
mov rcx, qword [rbp + 8]
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
test eax, eax
jne 0x10003adeb
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
xor r9d, r9d
mov edx, 0x2fe0140
mov r8d, eax
xor ecx, ecx
call fcn.1000b51b8
jmp 0x10003adee
inc r15d
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 0x1000
xor ebp, ebp
xor r12d, r12d
xor esi, esi
mov dword [rsp + 0xc8], eax
mov rdx, rax
jmp 0x10003ae64
lea r8, [rsp + 0xc8]
mov rdx, rdi
mov rcx, r13
call qword [sym.imp.WININET.dll_FindNextUrlCacheEntryW]
mov r12d, eax
test eax, eax
jne 0x10003aeef
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov ebx, eax
test esi, esi
jne 0x10003aee2
cmp eax, 0x8007007a
jne 0x10003aee2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov edx, dword [rsp + 0xc8]
lea esi, [r12 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rdi, rax
test rax, rax
jne 0x10003ae0f
mov eax, 0x8007000e
xor r9d, r9d
mov edx, 0x26a0140
mov ebx, eax
mov r8d, eax
xor ecx, ecx
call fcn.1000b51b8
test rdi, rdi
je 0x10003aeac
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
test r12d, r12d
mov r12d, dword [rsp + 0xb0]
jne 0x10003ac4e
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
mov edi, eax
cmp eax, 0x80070103
jne 0x10003af2c
cmp dword [rsp + 0xb0], 0
je 0x10003aef6
mov ecx, 0x96f
call fcn.1000ba420
mov edx, r15d
jmp 0x10003af08
mov r9d, 0x80070103
mov edx, 0x2780140
jmp 0x10003ae83
mov rbp, rdi
xor ebx, ebx
jmp 0x10003ae9b
test r14d, r14d
je 0x10003af10
mov ecx, 0x970
call fcn.1000ba420
mov edx, r14d
mov rcx, rax
call fcn.1000b99b0
lea rcx, [0x10000c564]
call fcn.1000b99b0
lea rcx, [0x10000c564]
call fcn.1000b99b0
xor edi, edi
jmp 0x10003af3e
xor r9d, r9d
mov r8d, eax
mov edx, 0x3110140
xor ecx, ecx
call fcn.1000b51b8
mov rcx, r13
call qword [sym.imp.WININET.dll_FindCloseUrlCache]
test eax, eax
jne 0x10003af70
call sub.KERNEL32.dll_GetLastError
mov ecx, eax
call fcn.1000b7bec
xor r9d, r9d
mov edx, 0x3260140
mov r8d, eax
xor ecx, ecx
mov ebx, eax
call fcn.1000b51b8
test edi, edi
cmove edi, ebx
test rbp, rbp
je 0x10003af7e
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, edi
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret