Function at 0x10003a72
Capabilities:
Delete internet cache
Enumerate internet cache

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b0
and dword [ebp - 0xd4], 0
and dword [ebp - 0xcc], 0
mov dword [ebp - 0xd0], 0x1000
push dword [ebp - 0xd0]
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
lea eax, [ebp - 0xd0]
push eax
push dword [ebp - 0xcc]
push str.cookie:
call dword [sym.imp.WININET.dll_FindFirstUrlCacheEntryA]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
je 0x10003b2a
push 0x1000a640
mov eax, dword [ebp - 0xcc]
push dword [eax + 4]
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x10003b16
push 0x1000a644
mov eax, dword [ebp - 0xcc]
push dword [eax + 4]
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x10003b25
mov eax, dword [ebp - 0xcc]
push dword [eax + 4]
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
jmp 0x10003bbc
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x7a
je 0x10003b41
jmp 0x10003ba9
push dword [ebp - 0xd0]
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
lea eax, [ebp - 0xd0]
push eax
push dword [ebp - 0xcc]
push 0
call dword [sym.imp.WININET.dll_FindFirstUrlCacheEntryA]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
je 0x10003ba2
mov eax, dword [ebp - 0xcc]
push dword [eax + 4]
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
jmp 0x10003bbc
xor eax, eax
jmp 0x10003cd8
push dword [ebp - 0xd4]
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
xor eax, eax
jmp 0x10003cd8
lea eax, [ebp - 0xd0]
push eax
push dword [ebp - 0xcc]
push dword [ebp - 0xd4]
call dword [sym.imp.WININET.dll_FindNextUrlCacheEntryA]
test eax, eax
je 0x10003c1d
push 0x1000a648
mov eax, dword [ebp - 0xcc]
push dword [eax + 4]
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x10003c09
push 0x1000a64c
mov eax, dword [ebp - 0xcc]
push dword [eax + 4]
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x10003c18
mov eax, dword [ebp - 0xcc]
push dword [eax + 4]
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
jmp 0x10003ccb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x7a
je 0x10003c40
cmp dword [ebp - 0x1b0], 0x103
je 0x10003caa
jmp 0x10003cbb
push dword [ebp - 0xd0]
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
lea eax, [ebp - 0xd0]
push eax
push dword [ebp - 0xcc]
push dword [ebp - 0xd4]
call dword [sym.imp.WININET.dll_FindNextUrlCacheEntryA]
test eax, eax
je 0x10003c9a
mov eax, dword [ebp - 0xcc]
push dword [eax + 4]
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntry]
jmp 0x10003ccb
push dword [ebp - 0xd4]
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
xor eax, eax
jmp 0x10003cd8
push dword [ebp - 0xd4]
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
push 1
pop eax
jmp 0x10003cd8
push dword [ebp - 0xd4]
call dword [sym.imp.WININET.dll_FindCloseUrlCache]
xor eax, eax
jmp 0x10003cd8
push 1
pop eax
test eax, eax
jne 0x10003bbc
xor eax, eax
leave
ret