fcrypt.inc

The final version of UPX scrambler and PE sources in Delphi and flat assembler.

; some fake crypto signatures

macro fake_sign_ripemd160 {
     ; RIPEMD-160 fake crypto signature
     dd $5A827999
     dd $6Ed9EBA1
     dd $8F1BBCDC
     dd $A953FD4E
     dd $50A28BE6
     dd $5C4DD124
     dd $6D703EF3
     dd $7A6D76E9
}

macro fake_sign_md4 {
     ; MD4 fake crypto signature (transform & init consts)
     dd $5A827999
     dd $6ED9EBA1
     dd $67452301
     dd $EFCDAB89
     dd $98BADCFE
     dd $10325476
}

macro fake_sign_twofish {
     ; Twofish fake crypto signature (8x8 Sbox)
     db $A9,$67,$B3,$E8,$04,$FD,$A3,$76
     db $9A,$92,$80,$78,$E4,$DD,$D1,$38
     db $0D,$C6,$35,$98,$18,$F7,$EC,$6C
     db $43,$75,$37,$26,$FA,$13,$94,$48
     db $F2,$D0,$8B,$30,$84,$54,$DF,$23
     db $19,$5B,$3D,$59,$F3,$AE,$A2,$82
     db $63,$01,$83,$2E,$D9,$51,$9B,$7C
     db $A6,$EB,$A5,$BE,$16,$0C,$E3,$61
     db $C0,$8C,$3A,$F5,$73,$2C,$25,$0B
     db $BB,$4E,$89,$6B,$53,$6A,$B4,$F1
     db $E1,$E6,$BD,$45,$E2,$F4,$B6,$66
     db $CC,$95,$03,$56,$D4,$1C,$1E,$D7
     db $FB,$C3,$8E,$B5,$E9,$CF,$BF,$BA
     db $EA,$77,$39,$AF,$33,$C9,$62,$71
     db $81,$79,$09,$AD,$24,$CD,$F9,$D8
     db $E5,$C5,$B9,$4D,$44,$08,$86,$E7
     db $A1,$1D,$AA,$ED,$06,$70,$B2,$D2
     db $41,$7B,$A0,$11,$31,$C2,$27,$90
     db $20,$F6,$60,$FF,$96,$5C,$B1,$AB
     db $9E,$9C,$52,$1B,$5F,$93,$0A,$EF
     db $91,$85,$49,$EE,$2D,$4F,$8F,$3B
     db $47,$87,$6D,$46,$D6,$3E,$69,$64
     db $2A,$CE,$CB,$2F,$FC,$97,$05,$7A
     db $AC,$7F,$D5,$1A,$4B,$0E,$A7,$5A
     db $28,$14,$3F,$29,$88,$3C,$4C,$02
     db $B8,$DA,$B0,$17,$55,$1F,$8A,$7D
     db $57,$C7,$8D,$74,$B7,$C4,$9F,$72
     db $7E,$15,$22,$12,$58,$07,$99,$34
     db $6E,$50,$DE,$68,$65,$BC,$DB,$F8
     db $C8,$A8,$2B,$40,$DC,$FE,$32,$A4
     db $CA,$10,$21,$F0,$D3,$5D,$0F,$00
     db $6F,$9D,$36,$42,$4A,$5E,$C1,$E0
     db $75,$F3,$C6,$F4,$DB,$7B,$FB,$C8
     db $4A,$D3,$E6,$6B,$45,$7D,$E8,$4B
     db $D6,$32,$D8,$FD,$37,$71,$F1,$E1
     db $30,$0F,$F8,$1B,$87,$FA,$06,$3F
     db $5E,$BA,$AE,$5B,$8A,$00,$BC,$9D
     db $6D,$C1,$B1,$0E,$80,$5D,$D2,$D5
     db $A0,$84,$07,$14,$B5,$90,$2C,$A3
     db $B2,$73,$4C,$54,$92,$74,$36,$51
     db $38,$B0,$BD,$5A,$FC,$60,$62,$96
     db $6C,$42,$F7,$10,$7C,$28,$27,$8C
     db $13,$95,$9C,$C7,$24,$46,$3B,$70
     db $CA,$E3,$85,$CB,$11,$D0,$93,$B8
     db $A6,$83,$20,$FF,$9F,$77,$C3,$CC
     db $03,$6F,$08,$BF,$40,$E7,$2B,$E2
     db $79,$0C,$AA,$82,$41,$3A,$EA,$B9
     db $E4,$9A,$A4,$97,$7E,$DA,$7A,$17
     db $66,$94,$A1,$1D,$3D,$F0,$DE,$B3
     db $0B,$72,$A7,$1C,$EF,$D1,$53,$3E
     db $8F,$33,$26,$5F,$EC,$76,$2A,$49
     db $81,$88,$EE,$21,$C4,$1A,$EB,$D9
     db $C5,$39,$99,$CD,$AD,$31,$8B,$01
     db $18,$23,$DD,$1F,$4E,$2D,$F9,$48
     db $4F,$F2,$65,$8E,$78,$5C,$58,$19
     db $8D,$E5,$98,$57,$67,$7F,$05,$64
     db $AF,$63,$B6,$FE,$F5,$B7,$3C,$A5
     db $CE,$E9,$68,$44,$E0,$4D,$43,$69
     db $29,$2E,$AC,$15,$59,$A8,$0A,$9E
     db $6E,$47,$DF,$34,$35,$6A,$CF,$DC
     db $22,$C9,$C0,$9B,$89,$D4,$ED,$AB
     db $12,$A2,$0D,$52,$BB,$02,$2F,$A9
     db $D7,$61,$1E,$B4,$50,$04,$F6,$C2
     db $16,$25,$86,$56,$55,$09,$BE,$91
}

macro fake_sign_rc56 {
     ; RC5/6 fake crypto signature
     dd $B7E15163,$5618CB1C,$F45044D5,$9287BE8E,$30BF3847,$CEF6B200
     dd $6D2E2BB9,$0B65A572,$A99D1F2B,$47D498E4,$E60C129D,$84438C56
     dd $227B060F,$C0B27FC8,$5EE9F981,$FD21733A,$9B58ECF3,$399066AC
     dd $D7C7E065,$75FF5A1E,$1436D3D7,$B26E4D90,$50A5C749,$EEDD4102
     dd $8D14BABB,$2B4C3474,$C983AE2D,$67BB27E6,$05F2A19F,$A42A1B58
     dd $42619511,$E0990ECA,$7ED08883,$1D08023C,$BB3F7BF5,$5976F5AE
     dd $F7AE6F67,$95E5E920,$341D62D9,$D254DC92,$708C564B,$0EC3D004
     dd $ACFB49BD,$4B32C376,$E96A3D2F,$87A1B6E8,$25D930A1,$C410AA5A
     dd $62482413,$007F9DCC,$9EB71785,$3CEE913E
}

macro fake_sign_misty {
     ; Misty fake crypto signature (S7 table)
     db $1B,$32,$33,$5A,$3B,$10,$17,$54,$5B,$1A,$72,$73,$6B,$2C,$66,$49
     db $1F,$24,$13,$6C,$37,$2E,$3F,$4A,$5D,$0F,$40,$56,$25,$51,$1C,$04
     db $0B,$46,$20,$0D,$7B,$35,$44,$42,$2B,$1E,$41,$14,$4B,$79,$15,$6F
     db $0E,$55,$09,$36,$74,$0C,$67,$53,$28,$0A,$7E,$38,$02,$07,$60,$29
     db $19,$12,$65,$2F,$30,$39,$08,$68,$5F,$78,$2A,$4C,$64,$45,$75,$3D
     db $59,$48,$03,$57,$7C,$4F,$62,$3C,$1D,$21,$5E,$27,$6A,$70,$4D,$3A
     db $01,$6D,$6E,$63,$18,$77,$23,$05,$26,$76,$00,$31,$2D,$7A,$7F,$61
     db $50,$22,$11,$06,$47,$16,$52,$4E,$71,$3E,$69,$43,$34,$5C,$58,$7D
}

macro fake_sign_ice {
     ; ICE fake crypto signature (xor table)
     dd $CD9B8583
     dd $41ADA7CC
     dd $33D42E4B
     dd $042ECBEA
}

macro fake_sign_rijndael {
     ; Rijndael fake crypto signature (SBOX)
     db  99, 124, 119, 123, 242, 107, 111, 197,  48,   1, 103,	43, 254, 215, 171, 118
     db 202, 130, 201, 125, 250,  89,  71, 240, 173, 212, 162, 175, 156, 164, 114, 192
     db 183, 253, 147,	38,  54,  63, 247, 204,  52, 165, 229, 241, 113, 216,  49,  21
     db   4, 199,  35, 195,  24, 150,	5, 154,   7,  18, 128, 226, 235,  39, 178, 117
     db   9, 131,  44,	26,  27, 110,  90, 160,  82,  59, 214, 179,  41, 227,  47, 132
     db  83, 209,   0, 237,  32, 252, 177,  91, 106, 203, 190,	57,  74,  76,  88, 207
     db 208, 239, 170, 251,  67,  77,  51, 133,  69, 249,   2, 127,  80,  60, 159, 168
     db  81, 163,  64, 143, 146, 157,  56, 245, 188, 182, 218,	33,  16, 255, 243, 210
     db 205,  12,  19, 236,  95, 151,  68,  23, 196, 167, 126,	61, 100,  93,  25, 115
     db  96, 129,  79, 220,  34,  42, 144, 136,  70, 238, 184,	20, 222,  94,  11, 219
     db 224,  50,  58,	10,  73,   6,  36,  92, 194, 211, 172,	98, 145, 149, 228, 121
     db 231, 200,  55, 109, 141, 213,  78, 169, 108,  86, 244, 234, 101, 122, 174,   8
     db 186, 120,  37,	46,  28, 166, 180, 198, 232, 221, 116,	31,  75, 189, 139, 138
     db 112,  62, 181, 102,  72,   3, 246,  14,  97,  53,  87, 185, 134, 193,  29, 158
     db 225, 248, 152,	17, 105, 217, 142, 148, 155,  30, 135, 233, 206,  85,  40, 223
     db 140, 161, 137,	13, 191, 230,  66, 104,  65, 153,  45,	15, 176,  84, 187,  22
}