Function at 0x432c90
Capabilities:
Check for sandbox username or hostname
Get session user name
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x130
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x100], eax
lea ecx, [ebp - 9]
call fcn.00457940
mov ecx, eax
call fcn.00401a80
mov dword [esp], eax
call fcn.00401450
lea ecx, [ebp - 0xa]
call fcn.004579f0
mov ecx, eax
call fcn.00401b50
mov dword [esp], eax
call fcn.00401450
mov eax, dword [0x4955ce]
mov dword [ebp - 0xe], eax
lea ecx, [ebp - 0xf]
call fcn.00457aa0
mov ecx, eax
call fcn.00401c20
mov dword [esp], eax
call sub.msvcrt.dll_getenv
cmp eax, 0
je 0x432d3f
lea eax, [ebp - 0xe]
mov dword [esp], eax
call fcn.00401c40
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x432d3c
lea ecx, [ebp - 0x15]
call fcn.00457b50
mov ecx, eax
call fcn.00401b50
mov dword [esp], eax
call fcn.00401c50
xor eax, eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
sub esp, 4
call dword [ebp - 0x14]
lea ecx, [ebp - 0x16]
call fcn.00457c00
mov ecx, eax
call fcn.00401e00
mov dword [esp], eax
call fcn.00401450
mov eax, dword [ebp - 0x100]
test byte [eax + 7], 1
je 0x432f9e
mov eax, esp
lea ecx, [ebp - 0x4d]
mov dword [ebp - 0x120], ecx
mov dword [eax], ecx
call fcn.00457cb0
mov ecx, dword [ebp - 0x120]
call fcn.00457cd0
mov dword [ebp - 0x44], eax
mov eax, esp
lea ecx, [ebp - 0x52]
mov dword [ebp - 0x11c], ecx
mov dword [eax], ecx
call fcn.00457ce0
mov ecx, dword [ebp - 0x11c]
call fcn.00457d00
mov dword [ebp - 0x40], eax
call fcn.00457d10
mov dword [ebp - 0x56], edx
mov dword [ebp - 0x5a], eax
lea ecx, [ebp - 0x5a]
call fcn.00457d30
mov dword [ebp - 0x3c], eax
mov eax, esp
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x118], ecx
mov dword [eax], ecx
call fcn.00457d40
mov ecx, dword [ebp - 0x118]
call fcn.00457d60
mov dword [ebp - 0x38], eax
mov eax, esp
lea ecx, [ebp - 0x67]
mov dword [ebp - 0x114], ecx
mov dword [eax], ecx
call fcn.00457d70
mov ecx, dword [ebp - 0x114]
call fcn.00457d90
mov dword [ebp - 0x34], eax
mov eax, esp
lea ecx, [ebp - 0x73]
mov dword [ebp - 0x110], ecx
mov dword [eax], ecx
call fcn.00457da0
mov ecx, dword [ebp - 0x110]
call fcn.00457dc0
mov dword [ebp - 0x30], eax
mov eax, esp
lea ecx, [ebp - 0x7d]
mov dword [ebp - 0x10c], ecx
mov dword [eax], ecx
call fcn.00457dd0
mov ecx, dword [ebp - 0x10c]
call fcn.00457df0
mov dword [ebp - 0x2c], eax
mov eax, esp
lea ecx, [ebp - 0x82]
mov dword [ebp - 0x108], ecx
mov dword [eax], ecx
call fcn.00457e00
mov ecx, dword [ebp - 0x108]
call fcn.00457e20
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0x4955d2
mov eax, esp
lea ecx, [ebp - 0x89]
mov dword [ebp - 0x104], ecx
mov dword [eax], ecx
call fcn.00457e30
mov ecx, dword [ebp - 0x104]
call fcn.00457e50
mov dword [ebp - 0x20], eax
call fcn.00457e60
mov dword [ebp - 0x8d], edx
mov dword [ebp - 0x91], eax
lea ecx, [ebp - 0x91]
call fcn.00457e80
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xb4], 0x1e
lea ecx, [ebp - 0xaf]
lea eax, [ebp - 0xb4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
sub esp, 8
cmp eax, 0
jne 0x432ee3
mov dword [ebp - 4], 1
jmp 0x432fa5
mov dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xb
jae 0x432f99
lea ecx, [ebp - 0xaf]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00457e90
cmp eax, 0
je 0x432f80
call fcn.0044cc80
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xc0], eax
lea ecx, [ebp - 0xc0]
call fcn.0044cca0
mov dword [ebp - 0x124], eax
lea eax, [ebp - 0xfc]
mov dword [esp], eax
call fcn.0044d160
lea ecx, [ebp - 0xfc]
call fcn.0044d180
mov ecx, dword [ebp - 0x124]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x31
call fcn.00401e20
mov dword [ebp - 4], 0
jmp 0x432fa5
jmp 0x432f85
mov eax, dword [ebp - 0xb8]
add eax, 1
mov dword [ebp - 0xb8], eax
jmp 0x432eed
jmp 0x432f9e
mov dword [ebp - 4], 1
mov eax, dword [ebp - 4]
add esp, 0x130
pop ebp
ret