Function at 0x4190e5
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push edi
push 0x439464
call fcn.00401148
mov edi, eax
xor ebx, ebx
pop ecx
cmp edi, ebx
jne 0x419112
push str.failed_in_IsUserInAdminGroup__:_JRE_System_LoadLibrary_advapi32.dll_
call fcn.00417d91
pop ecx
xor eax, eax
jmp 0x4192b1
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.AllocateAndInitializeSid
push edi
call esi
push 0x4394d8
push edi
mov dword [ebp - 0x18], eax
call esi
push 0x4394ec
push edi
mov dword [ebp - 0x1c], eax
call esi
push str.EqualSid
push edi
mov dword [ebp - 0x10], eax
call esi
push str.FreeSid
push edi
mov dword [ebp - 0x20], eax
call esi
mov esi, eax
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x18], ebx
je 0x41929c
cmp dword [ebp - 0x1c], ebx
je 0x41929c
cmp dword [ebp - 0x10], ebx
je 0x41929c
cmp dword [ebp - 0x20], ebx
je 0x41929c
cmp esi, ebx
je 0x41929c
lea eax, [ebp - 4]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x220
push 0x20
push 2
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x24], 0x500
mov dword [ebp - 4], ebx
call dword [ebp - 0x18]
test eax, eax
jne 0x4191b2
push str.failed_in_IsUserInAdminGroup__:_lpfnAllocateAndInitializeSid__
jmp 0x4192a1
lea eax, [ebp - 0xc]
push eax
push 8
mov dword [ebp - 0xc], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x1c]
test eax, eax
jne 0x4191de
push str.failed_in_IsUserInAdminGroup__:_lpfnOpenProcessToken__
call fcn.00417d91
pop ecx
push dword [ebp - 4]
call esi
jmp 0x4192a7
lea eax, [ebp - 8]
push eax
push ebx
push ebx
push 2
push dword [ebp - 0xc]
mov dword [ebp - 8], ebx
call dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x419201
push str.failed_in_IsUserInAdminGroup__:_GetLastError_____ERROR_INSUFFICIENT_BUFFER
jmp 0x4191ce
push dword [ebp - 8]
call fcn.0041bc56
mov esi, eax
pop ecx
cmp esi, ebx
jne 0x419226
push str.failed_in_IsUserInAdminGroup__:__TOKEN_GROUPS__malloc_cb_
call fcn.00417d91
pop ecx
push dword [ebp - 4]
call dword [ebp - 0x14]
jmp 0x4192a7
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push esi
push 2
push dword [ebp - 0xc]
call dword [ebp - 0x10]
test eax, eax
jne 0x419241
push str.failed_in_IsUserInAdminGroup__:_lpfnGetTokenInformation__
jmp 0x419215
mov dword [ebp - 0x1c], ebx
cmp dword [esi], ebx
jbe 0x419266
lea eax, [esi + 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push dword [eax]
push dword [ebp - 4]
call dword [ebp - 0x20]
test eax, eax
jne 0x419293
add dword [ebp - 0x10], 8
inc ebx
cmp ebx, dword [esi]
jb 0x41924e
push str.IsUserInAdminGroup__:_user_not_found_in_Admin_group
call fcn.00417d91
pop ecx
push esi
call fcn.0041bc1c
pop ecx
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 4]
call dword [ebp - 0x14]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x1c]
jmp 0x4192b0
mov dword [ebp - 0x1c], 1
jmp 0x419271
push str.failed_in_IsUserInAdminGroup__:_GetProcAddress__
call fcn.00417d91
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
pop esi
pop edi
pop ebx
leave
ret