Function at 0x401000
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Identify system language via api

Disassembly:
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffedf
jne 0x40107f
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
call sub.kernel32.dll_GetUserDefaultUILanguage
cmp eax, 0xffffff12
jne 0x40110d
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff1a
jne 0x40118c
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xffffff26
jne 0x4011fc
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
call sub.kernel32.dll_GetSystemDefaultUILanguage
cmp eax, 0xfffffef9
jne 0x40126c
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
call sub.advapi32.dll_LsaSetForestTrustInformation
ret
jmp 0x49857b
shr esi, 0x16
mov esi, 0xd5dd7181
xchg ecx, edx
shr esi, 0x1e
inc ecx
jmp 0x49aab0
push 0xd5e14721
sub ecx, ebx
sub ecx, ebx
xchg ecx, ebx
not ecx
xchg edi, ecx
sub ebx, esi
add ecx, esi
xchg ecx, esi
jmp 0x4997f6
push 0xd5e173cb
dec ebx
sub ebx, 0xdc888156
xor edi, 0xdc88ba5e
mov edi, ecx
xor ebx, ecx
inc ebx
or edi, 0xdc8aab7d
not ecx
mov ecx, esi
sub esi, ebx
jmp 0x49a972
jmp loc.0049f000
mov edx, 0x123b2f04
xor esi, ebx
xchg ebx, ecx
xchg ecx, edi
xchg edi, ecx
dec ecx
mov ecx, ebx
xor ecx, esi
xchg edi, ebx
xchg edi, ebx
inc ecx
and ebx, ecx
xchg ebx, ecx
or edi, ecx
jmp 0x49985f
push 0xd5e1153c
or esi, ecx
mov edi, esi
or ebx, 0xde492de5
or esi, ebx
mov edi, esi
xor edi, 0xde4a5099
add esi, ecx
not edi
or esi, 0xde4b92de
shl edi, 0x1b
mov ecx, edi
dec esi
jmp 0x49874b