Function at 0x10036630
Capabilities:
Check if file exists
Enumerate files on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1018a667
mov eax, dword fs:[0]
push eax
sub esp, 0x2ec
mov eax, dword [0x101ebb68]
xor eax, esp
mov dword [esp + 0x2e4], eax
push ebx
push esi
mov eax, dword [0x101ebb68]
xor eax, esp
push eax
lea eax, [esp + 0x2f8]
mov dword fs:[0], eax
xor ebx, ebx
cmp edi, ebx
je 0x10036757
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x10036757
xor eax, eax
mov word [esp + 0x2c], ax
mov eax, edi
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x100366a0
sub eax, edx
sar eax, 1
push eax
mov eax, edi
lea esi, [esp + 0x30]
call fcn.1000b950
mov dword [esp + 0x300], ebx
xor ecx, ecx
push 2
mov eax, 0x101a7048
lea esi, [esp + 0x14]
mov dword [esp + 0x28], 7
mov dword [esp + 0x24], ebx
mov word [esp + 0x14], cx
call fcn.1000b950
mov edx, esi
push ebx
push edx
or eax, 0xffffffff
lea esi, [esp + 0x34]
mov byte [esp + 0x308], 1
call fcn.1000aef0
mov esi, 8
mov byte [esp + 0x300], bl
cmp dword [esp + 0x24], esi
jb 0x1003671d
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0x2c]
cmp dword [esp + 0x40], esi
jae 0x1003672b
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x9c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0xc], eax
cmp eax, 0xffffffff
jne 0x10036780
cmp dword [esp + 0x40], esi
jb 0x10036757
mov edx, dword [esp + 0x2c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor al, al
mov ecx, dword [esp + 0x2f8]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [esp + 0x2e4]
xor ecx, esp
call fcn.10178946
mov esp, ebp
pop ebp
ret
xor eax, eax
mov word [esp + 0x48], ax
push 1
mov eax, 0x101a37bc
lea esi, [esp + 0x4c]
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], ebx
call fcn.1000b950
mov byte [esp + 0x300], 2
xor ecx, ecx
mov eax, edi
mov dword [esp + 0x24], 7
mov dword [esp + 0x20], ebx
mov word [esp + 0x10], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x100367c3
sub eax, edx
sar eax, 1
push eax
mov eax, edi
lea esi, [esp + 0x14]
call fcn.1000b950
lea eax, [esp + 0x48]
mov ecx, esi
lea ebx, [esp + 0x64]
mov byte [esp + 0x300], 3
call fcn.10007f90
push eax
lea eax, [esp + 0xcc]
lea ecx, [esp + 0x84]
mov byte [esp + 0x304], 4
call fcn.1003b0c0
mov esi, 8
add esp, 4
cmp dword [esp + 0x78], esi
jb 0x1003682d
mov edx, dword [esp + 0x64]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x78], 7
mov dword [esp + 0x74], ebx
mov word [esp + 0x64], ax
cmp dword [esp + 0x24], esi
jb 0x10036856
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edx, edx
mov byte [esp + 0x300], bl
mov dword [esp + 0x24], 7
mov dword [esp + 0x20], ebx
mov word [esp + 0x10], dx
cmp dword [esp + 0x5c], esi
jb 0x10036884
mov eax, dword [esp + 0x48]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ebx, dword [sym.imp.SHLWAPI.dll_StrCmpW]
push 0x101a7050
lea ecx, [esp + 0xcc]
push ecx
call ebx
test eax, eax
je 0x100368b0
push 0x101a7054
lea edx, [esp + 0xcc]
push edx
call ebx
test eax, eax
jne 0x100368e8
cmp dword [esp + 0x94], esi
jb 0x100368ca
mov eax, dword [esp + 0x80]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x9c]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x10036902
xor ebx, ebx
jmp 0x10036780
lea esi, [esp + 0x80]
call fcn.1000ba80
lea esi, [esp + 0x2c]
call fcn.1000ba80
jmp 0x10036757
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea esi, [esp + 0x2c]
call fcn.1000ba80
mov al, 1
jmp 0x10036759