Function at 0x4644e0
Capabilities:
Delete internet cache
Enumerate internet cache

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4847a6
mov eax, dword fs:[0]
push eax
sub esp, 0x2dc
mov eax, dword [0x4b700c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
push str.cookie:
lea ecx, [ebp - 0x2c8]
call fcn.0045d100
mov byte [ebp - 4], 1
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2c4], 0x1000
push str._userprofile_
lea ecx, [ebp - 0x2cc]
call fcn.0045d100
mov byte [ebp - 4], 2
push str.Local_SettingsTemporary_Internet_FilesContent.IE5index.dat
lea ecx, [ebp - 0x1bc]
call fcn.0046b080
mov byte [ebp - 4], 3
lea eax, [ebp - 0x1bc]
cmp dword [ebp - 0x1a8], 0x10
cmovae eax, dword [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.0046c460
mov byte [ebp - 4], 4
push dword [eax]
push 0xc8
lea eax, [ebp - 0x1a4]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
add esp, 0xc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2bc]
mov eax, dword [ebp - 0x2c0]
cmp eax, ecx
je 0x4645c1
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
push dword [ebp - 0x2c4]
call fcn.0046e565
add esp, 4
mov esi, eax
mov dword [ebp - 0x2d0], esi
mov ecx, dword [ebp - 0x2c4]
mov dword [esi], ecx
lea eax, [ebp - 0x2c4]
push eax
push esi
push dword [ebp - 0x2c8]
mov ebx, dword [sym.imp.WININET.dll_FindFirstUrlCacheEntryW]
call ebx
mov edi, eax
test edi, edi
jne 0x464706
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x4646d2
push edi
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1a8]
cmp ecx, 0x10
jb 0x464661
inc ecx
mov dword [ebp - 0x2d4], ecx
mov edx, dword [ebp - 0x1bc]
mov eax, edx
cmp ecx, 0x1000
jb 0x464657
add ecx, 0x23
mov dword [ebp - 0x2d4], ecx
mov edx, dword [edx - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x464657
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0046ddb7
add esp, 8
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
mov byte [ebp - 4], 9
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2cc]
add edx, 0xfffffff0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4646a4
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x2c8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x464a6f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
xor eax, eax
jmp 0x464ac6
push dword [ebp - 0x2c4]
call fcn.0046e565
add esp, 4
mov esi, eax
mov dword [ebp - 0x2d0], esi
mov eax, dword [ebp - 0x2c4]
mov dword [esi], eax
lea eax, [ebp - 0x2c4]
push eax
push esi
push 0
call ebx
mov edi, eax
test edi, edi
je 0x4649bd
mov ebx, dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
push dword [esi + 4]
call ebx
lea eax, [ebp - 0x2c4]
push eax
push esi
push edi
call dword [sym.imp.WININET.dll_FindNextUrlCacheEntryW]
test eax, eax
jne 0x46470c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x4648c4
push edi
cmp eax, 0x103
je 0x464802
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1a8]
cmp ecx, 0x10
jb 0x464791
inc ecx
mov dword [ebp - 0x2d8], ecx
mov edx, dword [ebp - 0x1bc]
mov eax, edx
cmp ecx, 0x1000
jb 0x464787
add ecx, 0x23
mov dword [ebp - 0x2d8], ecx
mov edx, dword [edx - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x464787
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0046ddb7
add esp, 8
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2cc]
add edx, 0xfffffff0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4647d4
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x2c8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x464a6f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
xor eax, eax
jmp 0x464ac6
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1a8]
cmp ecx, 0x10
jb 0x464854
inc ecx
mov dword [ebp - 0x2dc], ecx
mov edx, dword [ebp - 0x1bc]
mov eax, edx
cmp ecx, 0x1000
jb 0x46484a
add ecx, 0x23
mov dword [ebp - 0x2dc], ecx
mov edx, dword [edx - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x46484a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0046ddb7
add esp, 8
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2cc]
add edx, 0xfffffff0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x464897
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x2c8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x4648ba
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov eax, 1
jmp 0x464ac6
push dword [ebp - 0x2c4]
call fcn.0046e565
add esp, 4
mov esi, eax
mov dword [ebp - 0x2d0], esi
mov eax, dword [ebp - 0x2c4]
mov dword [esi], eax
lea eax, [ebp - 0x2c4]
push eax
push esi
push edi
call dword [sym.imp.WININET.dll_FindNextUrlCacheEntryW]
test eax, eax
jne 0x46470c
push edi
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1a8]
cmp ecx, 0x10
jb 0x46494c
inc ecx
mov dword [ebp - 0x2e0], ecx
mov edx, dword [ebp - 0x1bc]
mov eax, edx
cmp ecx, 0x1000
jb 0x464942
add ecx, 0x23
mov dword [ebp - 0x2e0], ecx
mov edx, dword [edx - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x464942
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0046ddb7
add esp, 8
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2cc]
add edx, 0xfffffff0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46498f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x2c8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x464a6f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
xor eax, eax
jmp 0x464ac6
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1a8]
cmp ecx, 0x10
jb 0x464a09
inc ecx
mov dword [ebp - 0x2e4], ecx
mov edx, dword [ebp - 0x1bc]
mov eax, edx
cmp ecx, 0x1000
jb 0x4649ff
add ecx, 0x23
mov dword [ebp - 0x2e4], ecx
mov edx, dword [edx - 4]
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4649ff
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0046ddb7
add esp, 8
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
mov byte [ebp - 4], 7
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2cc]
add edx, 0xfffffff0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x464a4c
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x2c8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x464a6f
mov ecx, dword [edx]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
xor eax, eax
jmp 0x464ac6
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046dda6
mov esp, ebp
pop ebp
ret