Function at 0x4199bf
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push edi
push 0x43a9fc
call fcn.00401148
mov edi, eax
xor ebx, ebx
pop ecx
cmp edi, ebx
jne 0x4199ec
push str.failed_in_IsUserInAdminGroup__:_JRE_System_LoadLibrary_advapi32.dll_
call fcn.0041866b
pop ecx
xor eax, eax
jmp 0x419b8b
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.AllocateAndInitializeSid
push edi
call esi
push 0x43aa70
push edi
mov dword [ebp - 0x18], eax
call esi
push 0x43aa84
push edi
mov dword [ebp - 0x1c], eax
call esi
push str.EqualSid
push edi
mov dword [ebp - 0x10], eax
call esi
push str.FreeSid
push edi
mov dword [ebp - 0x20], eax
call esi
mov esi, eax
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x18], ebx
je 0x419b76
cmp dword [ebp - 0x1c], ebx
je 0x419b76
cmp dword [ebp - 0x10], ebx
je 0x419b76
cmp dword [ebp - 0x20], ebx
je 0x419b76
cmp esi, ebx
je 0x419b76
lea eax, [ebp - 4]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x220
push 0x20
push 2
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x24], 0x500
mov dword [ebp - 4], ebx
call dword [ebp - 0x18]
test eax, eax
jne 0x419a8c
push str.failed_in_IsUserInAdminGroup__:_lpfnAllocateAndInitializeSid__
jmp 0x419b7b
lea eax, [ebp - 0xc]
push eax
push 8
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x1c]
test eax, eax
jne 0x419ab8
push str.failed_in_IsUserInAdminGroup__:_lpfnOpenProcessToken__
call fcn.0041866b
pop ecx
push dword [ebp - 4]
call esi
jmp 0x419b81
lea eax, [ebp - 8]
push eax
push ebx
push ebx
push 2
push dword [ebp - 0xc]
mov dword [ebp - 8], ebx
call dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x419adb
push str.failed_in_IsUserInAdminGroup__:_GetLastError_____ERROR_INSUFFICIENT_BUFFER
jmp 0x419aa8
push dword [ebp - 8]
call fcn.0041c986
mov esi, eax
pop ecx
cmp esi, ebx
jne 0x419b00
push str.failed_in_IsUserInAdminGroup__:__TOKEN_GROUPS__malloc_cb_
call fcn.0041866b
pop ecx
push dword [ebp - 4]
call dword [ebp - 0x14]
jmp 0x419b81
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push esi
push 2
push dword [ebp - 0xc]
call dword [ebp - 0x10]
test eax, eax
jne 0x419b1b
push str.failed_in_IsUserInAdminGroup__:_lpfnGetTokenInformation__
jmp 0x419aef
mov dword [ebp - 0x1c], ebx
cmp dword [esi], ebx
jbe 0x419b40
lea eax, [esi + 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push dword [eax]
push dword [ebp - 4]
call dword [ebp - 0x20]
test eax, eax
jne 0x419b6d
add dword [ebp - 0x10], 8
inc ebx
cmp ebx, dword [esi]
jb 0x419b28
push str.IsUserInAdminGroup__:_user_not_found_in_Admin_group
call fcn.0041866b
pop ecx
push esi
call fcn.0041c94c
pop ecx
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 4]
call dword [ebp - 0x14]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x1c]
jmp 0x419b8a
mov dword [ebp - 0x1c], 1
jmp 0x419b4b
push str.failed_in_IsUserInAdminGroup__:_GetProcAddress__
call fcn.0041866b
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
pop esi
pop edi
pop ebx
leave
ret