Function at 0x1000f000
Capabilities:
Get file size
Read file on windows

Disassembly:
sub esp, 0x18
mov ecx, dword [esp + 0x34]
push ebx
push ebp
push esi
push edi
lea ebp, [eax + 0xccc]
mov eax, dword [eax]
push ecx
push eax
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x1000f046
push str.GetFileSizeEx__
push 0x11e
push str..QHImageHlp.c
xor edx, edx
call fcn.10011fb0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
mov ecx, dword [esp + 0x2c]
xor eax, eax
add ecx, 8
xor edi, edi
xor ebx, ebx
cmp eax, dword [esp + 0x30]
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], ecx
jne 0x1000f06e
mov edx, dword [esp + 0x44]
mov esi, dword [edx]
mov eax, edx
mov eax, dword [eax + 4]
jmp 0x1000f074
mov esi, dword [ecx - 8]
mov eax, dword [ecx - 4]
sub esi, edi
sbb eax, ebx
mov edx, esi
shrd edx, eax, 0xf
shr eax, 0xf
and esi, 0x7fff
mov dword [esp + 0x18], edx
jne 0x1000f094
mov esi, 0x8000
jmp 0x1000f099
inc edx
mov dword [esp + 0x18], edx
test edx, edx
jbe 0x1000f12b
mov ecx, dword [esp + 0x1c]
push 0
push 0
push ebx
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1000f20b
mov eax, dword [esp + 0x1c]
push 0
lea edx, [esp + 0x28]
push edx
push esi
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1000f22e
cmp esi, dword [esp + 0x24]
jne 0x1000f251
mov eax, dword [esp + 0x34]
test eax, eax
je 0x1000f0f9
mov ecx, dword [esp + 0x38]
push esi
push ebp
push ecx
call eax
test eax, eax
je 0x1000f277
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1000f112
mov edx, dword [esp + 0x40]
push esi
push ebp
push edx
call eax
test eax, eax
je 0x1000f283
add edi, esi
adc ebx, 0
sub dword [esp + 0x18], 1
mov esi, 0x8000
jne 0x1000f0a1
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x30]
jae 0x1000f1e8
mov esi, dword [ecx]
test esi, esi
je 0x1000f1fe
cmp dword [ecx + 8], 0
jne 0x1000f196
push 0
push 0
push ebx
push edi
mov edi, dword [esp + 0x2c]
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x1000f20b
mov ecx, ebp
mov edx, edi
call fcn.1000e500
test eax, eax
je 0x1000f2dd
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x1000f192
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov ecx, dword [esp + 0x40]
push edx
push ebp
push ecx
call eax
test eax, eax
je 0x1000f28f
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x34]
test esi, esi
je 0x1000f1d8
cmp dword [ecx + 4], 0
je 0x1000f1d8
mov eax, dword [ecx]
cmp eax, 0x8000
ja 0x1000f29b
push eax
push 0
push ebp
call fcn.10015cf0
mov edx, dword [esp + 0x20]
mov eax, dword [edx]
mov ecx, dword [esp + 0x44]
add esp, 0xc
push eax
push ebp
push ecx
call esi
test eax, eax
je 0x1000f2c1
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx]
mov ebx, dword [ecx - 4]
mov eax, dword [esp + 0x20]
xor edx, edx
add edi, dword [ecx - 8]
adc ebx, edx
inc eax
add ecx, 0x18
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], ecx
cmp eax, dword [esp + 0x30]
jbe 0x1000f05f
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
push str.SetFilePointerEx__
push 0xf9
push str..QHImageHlp.c
xor edx, edx
call fcn.10011fb0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
push str.ReadFile__
push 0xfc
push str..QHImageHlp.c
xor edx, edx
call fcn.10011fb0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
push 0x1002d628
push 0xfe
mov edx, 1
push str..QHImageHlp.c
call fcn.100120e0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
push 0x1002d6e8
push 0x374
jmp 0x1000f2cb
push 0x1002d6e8
push 0x379
jmp 0x1000f2cb
push 0x1002d6e8
push 0x38b
jmp 0x1000f2cb
push 0x1002d6f8
push 0x392
mov edx, 8
push str..QHImageHlp.c
call fcn.100120e0
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
push 0x1002d6e8
push 0x395
mov edx, 0x11
push str..QHImageHlp.c
call fcn.100120e0
add esp, 0xc
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x18
ret