Function at 0x484080
Capabilities:
Check for sandbox username or hostname
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov eax, dword [0x55800c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x5674b0]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push edi
mov edi, ecx
mov esi, 1
mov ecx, dword [0x5674b8]
test ecx, ecx
cmovne eax, esi
mov dword [0x5674b0], eax
mov eax, dword [0x5674b4]
cmp eax, 2
jne 0x484192
test ecx, ecx
je 0x484192
call dword [sym.imp.USER32.dll_GetProcessWindowStation]
test eax, eax
jne 0x4840df
push str.d:_saasultravncwinvncwinvnc_vncservice.cpp_:_______________GetCurrentUser___ERROR_:_No_window_station__n
jmp 0x484332
lea ecx, [ebp - 0x4c]
push ecx
push 0
push 0
push 4
push eax
call dword [sym.imp.USER32.dll_GetUserObjectInformationA]
call ebx
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [ebp - 0x4c], 0
jne 0x48414a
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
push 0x518188
push 0x101
push edi
mov dword [0x5674b0], 0
call fcn.004d0170
add esp, 0xc
push str.d:_saasultravncwinvncwinvnc_vncservice.cpp_:_______________GetCurrentUser___Error:_Usersize_0_n
push 0
push 0x558c50
call fcn.0041c840
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004cbf27
mov esp, ebp
pop ebp
ret
cmp dword [0x5674b0], 0
jne 0x48418d
push str.d:_saasultravncwinvncwinvnc_vncservice.cpp_:_______________GetCurrentUser___Error:_NOT_impersonating_user__n
push 0
push 0x558c50
call fcn.0041c840
add esp, 0xc
push 0x518188
push 0x101
push edi
call fcn.004d0170
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004cbf27
mov esp, ebp
pop ebp
ret
mov eax, dword [0x5674b4]
dec eax
cmp eax, 1
ja 0x48432d
mov dword [ebp - 0x58], 0x101
call fcn.00483e70
test eax, eax
jne 0x4841c4
push 0x518188
push 0x101
push edi
call fcn.004d0170
add esp, 0xc
jmp 0x4842b1
push eax
push 0
push 0x2000000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
lea eax, [ebp - 0x4c]
push eax
push 0x201eb
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x484207
push 0x518188
push 0x101
push edi
call fcn.004d0170
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4842ab
lea eax, [ebp - 0x5c]
push eax
push 0x4000
push 0x5634b0
push 1
push dword [ebp - 0x4c]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x484285
push 0x40
lea eax, [ebp - 0x48]
push 0
push eax
call fcn.004cddb0
add esp, 0xc
mov dword [ebp - 0x50], 0x3f
lea eax, [ebp - 0x60]
mov dword [ebp - 0x54], 0x101
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x54]
push eax
push edi
push dword [0x5634b0]
push 0
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidA]
push dword [ebp - 0x4c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push ebx
call esi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004cbf27
mov esp, ebp
pop ebp
ret
push 0x518188
push 0x101
push edi
call fcn.004d0170
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 0xc
push dword [ebp - 0x4c]
call esi
push ebx
call esi
mov esi, 1
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [ebp - 0x58]
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
jne 0x48426f
call ebx
cmp eax, 0x4dd
jne 0x484303
push str.d:_saasultravncwinvncwinvnc_vncservice.cpp_:_______________GetCurrentUser___Error:_No_user_logged_on__n
push 0
push 0x558c50
call fcn.0041c840
add esp, 0xc
push 0x518188
push 0x101
push edi
call fcn.004d0170
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004cbf27
mov esp, ebp
pop ebp
ret
call ebx
push eax
push str.d:_saasultravncwinvncwinvnc_vncservice.cpp_:_getusername_error__d_n
push 0
push 0x558c50
call fcn.0041c840
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004cbf27
mov esp, ebp
pop ebp
ret
push str.d:_saasultravncwinvncwinvnc_vncservice.cpp_:_______________GetCurrentUser___Error:_Unknown_OS__n
push 0
push 0x558c50
call fcn.0041c840
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
xor eax, eax
pop edi
pop esi
pop ebx
call fcn.004cbf27
mov esp, ebp
pop ebp
ret