Function at 0x4a8390
Capabilities:
Delete directory
Delete internet cache
Enumerate internet cache
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fd4d0
push 0x4f3f74
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x844
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x20], 0xa000
mov eax, dword [ebp + 0xc]
push eax
call fcn.004a80d0
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x20]
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 8
mov esi, eax
test esi, esi
je 0x4a85df
mov ecx, 0x2800
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov edx, dword [ebp - 0x20]
mov dword [esi], edx
lea eax, [ebp - 0x20]
push eax
push esi
push str.cookie:
call dword [sym.imp.WININET.dll_FindFirstUrlCacheEntryA]
mov ebx, eax
test ebx, ebx
je 0x4a847b
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [esi + 0x34]
push edx
mov eax, dword [esi + 0x30]
push eax
call fcn.004cbca0
add esp, 0xc
test eax, eax
je 0x4a844d
mov ecx, dword [esi + 4]
push ecx
mov edi, dword [sym.imp.WININET.dll_DeleteUrlCacheEntryA]
call edi
test eax, eax
jne 0x4a844d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x4a844d
push 0
mov edx, dword [esi + 4]
push edx
call dword [sym.imp.WININET.dll_UnlockUrlCacheEntryFileA]
mov eax, dword [esi + 4]
push eax
call edi
mov dword [ebp - 0x20], 0xa000
mov ecx, 0x2800
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x20]
mov dword [esi], ecx
lea edx, [ebp - 0x20]
push edx
push esi
push ebx
call dword [sym.imp.WININET.dll_FindNextUrlCacheEntryA]
test eax, eax
jne 0x4a8408
push ebx
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
push esi
call fcn.004f3eca
add esp, 4
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4a85df
mov word [ebp - 0x644], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x642]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, 0x5cf56c
xor ebx, ebx
cmp word [0x5cf56c], bx
jne 0x4a84d4
push ebx
push 0x21
lea eax, [ebp - 0x644]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x4a84d4
lea esi, [ebp - 0x644]
cmp esi, ebx
je 0x4a854a
cmp word [esi], bx
je 0x4a854a
mov word [ebp - 0x84c], bx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x84a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push str._.txt
push esi
push 0x50dabc
push 0x104
lea ecx, [ebp - 0x84c]
push ecx
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x14
mov dword [ebp - 4], ebx
push ebx
lea edx, [ebp - 0x84c]
push edx
call fcn.00439a10
add esp, 8
mov dword [ebp - 4], 0xffffffff
jmp 0x4a854a
mov word [ebp - 0x43c], bx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x43a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [ebp - 0x234], bx
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x232]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
push 0x103
lea ecx, [ebp - 0x43c]
push ecx
mov ecx, 0x53adc0
call fcn.004086a0
push str.Sessions
lea edx, [ebp - 0x43c]
push edx
push str._s_s_
push 0x103
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x14
cmp word [ebp - 0x234], bx
je 0x4a85df
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x234]
push ecx
call fcn.004a51e0
add esp, 0x10
lea edx, [ebp - 0x43c]
push edx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret