Function at 0x418530
Capabilities:
Create directory
Read .ini file

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x244
push ebx
push eax
push 0
push str.Total
mov ebx, ecx
push str.USERS
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
test eax, eax
mov dword [ebx + 0x1a3c], eax
jle 0x4187e4
cmp eax, 0x3e8
jg 0x4187e4
lea ecx, [eax + eax*2]
push ebp
shl ecx, 4
add ecx, eax
push esi
push edi
lea ecx, [ecx + ecx*2]
lea edx, [eax + ecx*4]
shl edx, 2
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov ecx, dword [ebx + 0x1a3c]
mov ebp, eax
mov edi, ebp
mov dword [ebx + 0x1a38], ebp
lea eax, [ecx + ecx*2]
add esp, 4
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
xor eax, eax
shl ecx, 2
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebx + 0x981]
push eax
lea eax, [esp + 0x58]
push str._slogs
push eax
call edi
lea ecx, [esp + 0x60]
push ecx
call dword [sym.imp.MSVCRT.dll__chdir]
lea edx, [esp + 0x64]
push 0
push edx
call dword [sym.imp.MSVCRT.dll__access]
add esp, 0x18
test eax, eax
je 0x4185fd
push str.logs
call dword [sym.imp.MSVCRT.dll__mkdir]
add esp, 4
lea eax, [esp + 0x34]
push str.USER_ID
push eax
call edi
mov eax, dword [ebx + 0x1a3c]
add esp, 8
test eax, eax
jle 0x418749
mov esi, 1
add ebp, 0x10
mov dword [esp + 0x10], esi
jmp 0x418632
mov esi, dword [esp + 0x10]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
push esi
lea ecx, [esp + 0x18]
push str.user__03d
push ecx
call edi
mov edx, dword [esp + 0x264]
add esp, 0xc
lea eax, [esp + 0x14]
lea ecx, [esp + 0x34]
push edx
push pe_nt_image_headers32
push ebp
push 0x44e938
push eax
push ecx
mov dword [ebp - 8], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push 0x429ca4
push ebp
call dword [sym.imp.MSVCRT.dll_strstr]
mov esi, eax
add esp, 8
test esi, esi
je 0x4186bf
mov edi, 0x429ca4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
push ecx
call dword [sym.imp.MSVCRT.dll_atoi]
add esp, 4
lea edx, [ebp + 0x80]
mov dword [ebp + 0x100], eax
mov byte [esi], 0
push ebp
push str.uzone_token_s
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
jmp 0x4186d1
push ebp
lea eax, [ebp + 0x80]
push str.uzone_token_s
push eax
call edi
add esp, 0xc
mov ecx, dword [ebp - 8]
lea esi, [ebx + 0x981]
push ecx
push esi
lea edx, [ebp + 0x1fc]
lea eax, [ebx + 0xb84]
push str._slogs_d.txt
push edx
mov dword [ebp + 0x100], 0
mov dword [ebp - 0x10], eax
call edi
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp + 0x27c]
mov eax, ecx
mov esi, edi
mov edi, edx
add ebp, 0x934
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x10]
and ecx, 3
inc eax
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x1a3c]
mov dword [esp + 0x10], eax
dec eax
cmp eax, ecx
jl 0x418628
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
push str.iKfrdPPKpvAiPVBAdTx_sk0Mbnm7Gxo61HPMfttNWg4tEf1j6Mgmo96nIpoFG21a6JheqT1PDUctNnp5a1TAZgpfid139
lea ecx, [ebx + 0x90]
push str.uzone_token_s
push ecx
mov dword [ebx + 8], 0x270f
call edi
add esp, 0xc
lea edx, [ebx + 0x10]
push str.iKfrdPPKpvAiPVBAdTx_sk0Mbnm7Gxo61HPMfttNWg4tEf1j6Mgmo96nIpoFG21a6JheqT1PDUctNnp5a1TAZgpfid139
push 0x429bec
push edx
call edi
mov ecx, dword [ebx + 8]
add esp, 0xc
lea esi, [ebx + 0x981]
lea edx, [ebx + 0x20c]
push ecx
push esi
lea eax, [ebx + 0xb84]
push str._slogs_d.txt
push edx
mov dword [ebx + 0x110], 0
mov dword [ebx], eax
call edi
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebx + 0x28c]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.004011f0
mov eax, dword [ebx + 0x1a3c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x244
ret 4
mov dword [ebx + 0x1a3c], 0
xor eax, eax
pop ebx
add esp, 0x244
ret 4