Function at 0x418d11
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push edi
push 0x4392e8
call fcn.00401148
mov edi, eax
xor ebx, ebx
pop ecx
cmp edi, ebx
jne 0x418d3e
push str.failed_in_IsUserInAdminGroup__:_JRE_System_LoadLibrary_advapi32.dll_
call fcn.00417b54
pop ecx
xor eax, eax
jmp 0x418edd
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.AllocateAndInitializeSid
push edi
call esi
push 0x43935c
push edi
mov dword [ebp - 0x18], eax
call esi
push 0x439370
push edi
mov dword [ebp - 0x1c], eax
call esi
push str.EqualSid
push edi
mov dword [ebp - 0x10], eax
call esi
push str.FreeSid
push edi
mov dword [ebp - 0x20], eax
call esi
mov esi, eax
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x18], ebx
je 0x418ec8
cmp dword [ebp - 0x1c], ebx
je 0x418ec8
cmp dword [ebp - 0x10], ebx
je 0x418ec8
cmp dword [ebp - 0x20], ebx
je 0x418ec8
cmp esi, ebx
je 0x418ec8
lea eax, [ebp - 4]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x220
push 0x20
push 2
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x24], 0x500
mov dword [ebp - 4], ebx
call dword [ebp - 0x18]
test eax, eax
jne 0x418dde
push str.failed_in_IsUserInAdminGroup__:_lpfnAllocateAndInitializeSid__
jmp 0x418ecd
lea eax, [ebp - 0xc]
push eax
push 8
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x1c]
test eax, eax
jne 0x418e0a
push str.failed_in_IsUserInAdminGroup__:_lpfnOpenProcessToken__
call fcn.00417b54
pop ecx
push dword [ebp - 4]
call esi
jmp 0x418ed3
lea eax, [ebp - 8]
push eax
push ebx
push ebx
push 2
push dword [ebp - 0xc]
mov dword [ebp - 8], ebx
call dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x418e2d
push str.failed_in_IsUserInAdminGroup__:_GetLastError_____ERROR_INSUFFICIENT_BUFFER
jmp 0x418dfa
push dword [ebp - 8]
call fcn.0041b5c6
mov esi, eax
pop ecx
cmp esi, ebx
jne 0x418e52
push str.failed_in_IsUserInAdminGroup__:__TOKEN_GROUPS__malloc_cb_
call fcn.00417b54
pop ecx
push dword [ebp - 4]
call dword [ebp - 0x14]
jmp 0x418ed3
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push esi
push 2
push dword [ebp - 0xc]
call dword [ebp - 0x10]
test eax, eax
jne 0x418e6d
push str.failed_in_IsUserInAdminGroup__:_lpfnGetTokenInformation__
jmp 0x418e41
mov dword [ebp - 0x1c], ebx
cmp dword [esi], ebx
jbe 0x418e92
lea eax, [esi + 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push dword [eax]
push dword [ebp - 4]
call dword [ebp - 0x20]
test eax, eax
jne 0x418ebf
add dword [ebp - 0x10], 8
inc ebx
cmp ebx, dword [esi]
jb 0x418e7a
push str.IsUserInAdminGroup__:_user_not_found_in_Admin_group
call fcn.00417b54
pop ecx
push esi
call fcn.0041b58c
pop ecx
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 4]
call dword [ebp - 0x14]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x1c]
jmp 0x418edc
mov dword [ebp - 0x1c], 1
jmp 0x418e9d
push str.failed_in_IsUserInAdminGroup__:_GetProcAddress__
call fcn.00417b54
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
pop esi
pop edi
pop ebx
leave
ret