Function at 0x410f87
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push edi
push 0x4311b8
call fcn.0040113f
mov edi, eax
xor ebx, ebx
pop ecx
cmp edi, ebx
jne 0x410fb4
push str.failed_in_IsUserInAdminGroup__:_JRE_System_LoadLibrary_advapi32.dll_
call fcn.0040fb5b
pop ecx
xor eax, eax
jmp 0x411153
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.AllocateAndInitializeSid
push edi
call esi
push 0x43122c
push edi
mov dword [ebp - 0x18], eax
call esi
push 0x431240
push edi
mov dword [ebp - 0x1c], eax
call esi
push str.EqualSid
push edi
mov dword [ebp - 0x10], eax
call esi
push str.FreeSid
push edi
mov dword [ebp - 0x20], eax
call esi
mov esi, eax
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x18], ebx
je 0x41113e
cmp dword [ebp - 0x1c], ebx
je 0x41113e
cmp dword [ebp - 0x10], ebx
je 0x41113e
cmp dword [ebp - 0x20], ebx
je 0x41113e
cmp esi, ebx
je 0x41113e
lea eax, [ebp - 4]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x220
push 0x20
push 2
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x24], 0x500
mov dword [ebp - 4], ebx
call dword [ebp - 0x18]
test eax, eax
jne 0x411054
push str.failed_in_IsUserInAdminGroup__:_lpfnAllocateAndInitializeSid__
jmp 0x411143
lea eax, [ebp - 0xc]
push eax
push 8
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x1c]
test eax, eax
jne 0x411080
push str.failed_in_IsUserInAdminGroup__:_lpfnOpenProcessToken__
call fcn.0040fb5b
pop ecx
push dword [ebp - 4]
call esi
jmp 0x411149
lea eax, [ebp - 8]
push eax
push ebx
push ebx
push 2
push dword [ebp - 0xc]
mov dword [ebp - 8], ebx
call dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x4110a3
push str.failed_in_IsUserInAdminGroup__:_GetLastError_____ERROR_INSUFFICIENT_BUFFER
jmp 0x411070
push dword [ebp - 8]
call fcn.0041320c
mov esi, eax
pop ecx
cmp esi, ebx
jne 0x4110c8
push str.failed_in_IsUserInAdminGroup__:__TOKEN_GROUPS__malloc_cb_
call fcn.0040fb5b
pop ecx
push dword [ebp - 4]
call dword [ebp - 0x14]
jmp 0x411149
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push esi
push 2
push dword [ebp - 0xc]
call dword [ebp - 0x10]
test eax, eax
jne 0x4110e3
push str.failed_in_IsUserInAdminGroup__:_lpfnGetTokenInformation__
jmp 0x4110b7
mov dword [ebp - 0x1c], ebx
cmp dword [esi], ebx
jbe 0x411108
lea eax, [esi + 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push dword [eax]
push dword [ebp - 4]
call dword [ebp - 0x20]
test eax, eax
jne 0x411135
add dword [ebp - 0x10], 8
inc ebx
cmp ebx, dword [esi]
jb 0x4110f0
push str.IsUserInAdminGroup__:_user_not_found_in_Admin_group
call fcn.0040fb5b
pop ecx
push esi
call fcn.004132a0
pop ecx
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 4]
call dword [ebp - 0x14]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x1c]
jmp 0x411152
mov dword [ebp - 0x1c], 1
jmp 0x411113
push str.failed_in_IsUserInAdminGroup__:_GetProcAddress__
call fcn.0040fb5b
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
pop esi
pop edi
pop ebx
leave
ret