Function at 0x140023340
Capabilities:
Query environment variable

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rdi
sub rsp, 0x58
mov r10d, dword [r9]
mov r11, rdx
mov rax, qword [r8]
mov rdi, rcx
mov rbx, r9
lea r8, [rsp + 0x80]
lea r9, [rsp + 0x78]
mov ecx, dword [r11]
lea rdx, [rax + r10*8]
sub ecx, r10d
lea rax, [0x140383178]
mov qword [rsp + 0x20], rax
call fcn.1400229a0
add dword [rbx], eax
mov rax, qword [0x140383178]
test rax, rax
jne 0x1400233a4
lea rcx, str.MYSQL_GROUP_SUFFIX
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [0x140383178], rax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400233dc
cmp byte [0x140383189], 0
jne 0x1400233dc
lea rbx, [0x140383390]
mov rdx, rbx
call fcn.1400227f0
test eax, eax
jne 0x140023603
mov rax, qword [0x140383178]
mov qword [0x140383170], rbx
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140023419
cmp byte [0x140383189], 0
jne 0x140023419
lea rbx, [0x140383190]
mov rdx, rbx
call fcn.1400227f0
test eax, eax
jne 0x140023603
mov rax, qword [0x140383178]
mov qword [0x140383180], rbx
jmp 0x140023420
mov rbx, qword [0x140383180]
mov qword [rsp + 0x88], rbp
mov rbp, qword [rsp + 0x90]
mov qword [rsp + 0x50], rsi
xor esi, esi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r14
mov r14, qword [rsp + 0x98]
mov qword [rsp + 0x30], r15
mov byte [0x140383189], 1
test rax, rax
je 0x140023569
lea rcx, [0x140022a80]
cmp rbp, rcx
jne 0x140023569
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
cmp byte [rax + rdi + 1], sil
lea rdi, [rdi + 1]
jne 0x140023480
mov r15, qword [r14 + 0x10]
mov rcx, qword [r14]
mov eax, dword [r15]
lea edx, [rax*2 + 1]
shl rdx, 3
call fcn.140027a30
mov r13, rax
test rax, rax
je 0x1400235b1
mov eax, dword [r15]
mov r12d, esi
test eax, eax
je 0x14002354f
nop
mov eax, r12d
mov rbx, 0xffffffffffffffff
lea rcx, [rax*8]
mov rax, qword [r15 + 0x10]
lea r8, [rcx + r13]
mov qword [rsp + 0x78], r8
mov rdx, qword [rcx + rax]
mov qword [r8], rdx
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400234e6
mov rcx, qword [r14]
lea rdx, [rdi + 1]
add rdx, rbx
mov edx, edx
call fcn.140027a30
mov rsi, rax
test rax, rax
je 0x1400235b1
mov ecx, dword [r15]
mov r8, rbx
mov rdx, qword [rsp + 0x78]
add ecx, r12d
mov qword [r13 + rcx*8], rax
mov rcx, rax
mov rdx, qword [rdx]
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x140383178]
lea r8, [rdi + 1]
lea rcx, [rsi + rbx]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [r15]
inc r12d
cmp r12d, eax
jb 0x1400234c0
xor esi, esi
mov rdi, qword [rsp + 0x70]
add eax, eax
mov dword [r15], eax
mov qword [r15 + 0x10], r13
mov qword [r13 + rax*8], rsi
mov rbx, qword [0x140383180]
test rbx, rbx
je 0x1400235b8
mov dword [rsp + 0x28], esi
lea r9, [0x140065a45]
lea r8, [0x140065a45]
mov qword [rsp + 0x20], rbx
mov rdx, r14
mov rcx, rbp
call fcn.1400238d0
test eax, eax
js 0x1400236a3
jle 0x1400235e0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x140383180]
jmp 0x140023694
mov eax, 2
jmp 0x1400235e2
mov rcx, rdi
call fcn.140026f40
test rax, rax
je 0x14002360a
mov r9, rdi
xor r8d, r8d
mov rdx, r14
mov rcx, rbp
call fcn.140023820
test eax, eax
js 0x1400236a3
nop
xor eax, eax
mov r14, qword [rsp + 0x38]
mov r13, qword [rsp + 0x40]
mov r12, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x88]
mov r15, qword [rsp + 0x30]
add rsp, 0x58
pop rdi
pop rbx
ret
mov rbx, qword [rsp + 0xa0]
mov rax, qword [rbx]
test rax, rax
je 0x1400235e0
nop word [rax + rax]
cmp byte [rax], 0
je 0x14002363c
mov r9, rdi
mov r8, rax
mov rdx, r14
mov rcx, rbp
call fcn.140023820
test eax, eax
js 0x1400236a3
jmp 0x140023670
mov rax, qword [0x140383170]
test rax, rax
je 0x140023670
mov dword [rsp + 0x28], esi
lea r9, [0x140065a45]
lea r8, [0x140065a45]
mov qword [rsp + 0x20], rax
mov rdx, r14
mov rcx, rbp
call fcn.1400238d0
test eax, eax
js 0x1400236a3
jg 0x140023682
mov rax, qword [rbx + 8]
add rbx, 8
test rax, rax
jne 0x140023620
jmp 0x1400235e0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x140383170]
lea rdx, str.Could_not_open_required_defaults_file:__s_n
mov rcx, rax
call fcn.1400023b0
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.Fatal_error_in_defaults_handling._Program_aborted_n
call fcn.1400023b0
mov eax, 1
jmp 0x1400235e2