Function at 0x10009a30
Capabilities:
Get hostname
Get local ipv4 addresses
Get mac address on windows
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1814
call fcn.1001a150
mov eax, dword [0x10029494]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, ecx
lea eax, [ebp - 0x1808]
push eax
lea ecx, [ebp - 0x804]
mov esi, 0x400
push ecx
mov dword [ebp - 0x180c], edi
mov dword [ebp - 0x1808], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x10009a86
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000bb22
mov esp, ebp
pop ebp
ret
lea edx, [ebp - 0x804]
push edx
push esi
push edi
call fcn.1000bb31
add esp, 0xc
lea eax, [ebp - 0x1808]
push eax
lea ecx, [ebp - 0x804]
push ecx
mov dword [ebp - 0x1808], esi
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x10009a74
push 0x10025b4c
push esi
push edi
call fcn.1000c903
lea edx, [ebp - 0x804]
push edx
push esi
push edi
call fcn.1000c903
add esp, 0x18
xor eax, eax
movzx ecx, word [edi + eax*2]
test cx, cx
je 0x10009af0
cmp ecx, 0x20
jne 0x10009aeb
mov ecx, 0x5f
mov word [edi + eax*2], cx
inc eax
cmp eax, esi
jb 0x10009ad4
mov dword [ebp - 0x1810], 0x3a98
mov dword [ebp - 0x1814], 0
push ebx
jmp 0x10009b10
mov edx, dword [ebp - 0x1810]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push edx
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
test esi, esi
je 0x10009b71
lea eax, [ebp - 0x1810]
push eax
push esi
push 0
push 0x10
push 2
call dword [sym.imp.IPHLPAPI.DLL_GetAdaptersAddresses]
mov edi, eax
cmp edi, 0x6f
jne 0x10009b8c
push esi
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0x1814]
inc eax
xor esi, esi
mov dword [ebp - 0x1814], eax
cmp eax, 3
jae 0x10009b8c
mov edi, dword [ebp - 0x180c]
jmp 0x10009b10
push 0x10022d70
lea ecx, [ebp - 0x804]
push 0x400
push ecx
call fcn.1000bb31
jmp 0x10009c89
xor edx, edx
push 0x7fe
push edx
lea eax, [ebp - 0x1002]
push eax
mov word [ebp - 0x1004], dx
call fcn.100112a0
add esp, 0xc
test edi, edi
jne 0x10009c5b
mov edi, esi
test esi, esi
je 0x10009c6b
lea esp, [esp]
cmp dword [edi + 0x34], 0
jne 0x10009bd2
mov edi, dword [edi + 8]
test edi, edi
jne 0x10009bc0
jmp 0x10009c5b
mov eax, dword [edi + 0x34]
xor ebx, ebx
test eax, eax
jle 0x10009c55
jmp 0x10009be0
dec eax
cmp ebx, eax
jne 0x10009c16
movzx ecx, byte [edi + ebx + 0x2c]
push ecx
push str._.2X
lea edx, [ebp - 0x1804]
push 0x400
push edx
call fcn.1000cd31
lea eax, [ebp - 0x1804]
push eax
push 0x400
lea ecx, [ebp - 0x1004]
push ecx
jmp 0x10009c45
movzx edx, byte [edi + ebx + 0x2c]
push edx
push str._.2X_
lea eax, [ebp - 0x1804]
push 0x400
push eax
call fcn.1000cd31
lea ecx, [ebp - 0x1804]
push ecx
push 0x400
lea edx, [ebp - 0x1004]
push edx
call fcn.1000c903
mov eax, dword [edi + 0x34]
inc ebx
add esp, 0x1c
cmp ebx, eax
jl 0x10009be0
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
test esi, esi
je 0x10009c6b
push esi
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea eax, [ebp - 0x1004]
push eax
lea ecx, [ebp - 0x804]
push 0x400
push ecx
call fcn.1000bb31
mov edi, dword [ebp - 0x180c]
add esp, 0xc
mov ecx, 0x10022d70
lea eax, [ebp - 0x804]
pop ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x10009cbe
test dx, dx
je 0x10009cba
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x10009cbe
add eax, 4
add ecx, 4
test dx, dx
jne 0x10009c98
xor eax, eax
jmp 0x10009cc3
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10009a74
push 0x10025b4c
push 0x400
push edi
call fcn.1000c903
lea edx, [ebp - 0x804]
push edx
push 0x400
push edi
call fcn.1000c903
mov ecx, dword [ebp - 4]
add esp, 0x18
pop edi
xor ecx, ebp
mov eax, 1
pop esi
call fcn.1000bb22
mov esp, ebp
pop ebp
ret