adworld_misc_8

---

[TOC]

流量分析

traffic

脑洞题

https://blog.csdn.net/m0_73360524/article/details/147644612

flag{1CmPG@M3}

要啥有啥

比较古老的套路了？.jpg

LCTF{CVE20153306A11_1n_0ne_Pcap}

traffic1

flag{4sun0_y0zora_sh0ka1h@n__#>>_<<#}

Usb-probing

学习了过滤USB流量的方法：usb.capdata

在101发现了隐藏的png，很有意思的是仅能在浏览器里面可正常读取，有点神奇。

ALEXCTF{SN1FF_TH3_FL4G_OV3R_U58}

Steganography

第四扩展FS

也是蠢的可以，不知道做一个这么大的附件何意味，

分离zip，从jpg的元数据读取到密码。剩下的…file.txt词频分析就行。DCTF{ka1f4NgxIntAi}

官方也是nb，还能给个错误答案：`DCTF{ka1f4NgxlntAi}

NdisBackDoor

🐕shi

Noise

**官方，大小写分不清真tm无语

眼睛不好使就多买几副眼镜，就是再瞎也不知道怎么看错的，眼睛真是白长了

QCTF{Th4t_1s_V3ry_Har5h}

santa-walks-into-a-bar

很无聊的题目

3DS{I_h0p3_th4t_Y0u_d1d_n0t_h4v3_ch4ck3d_OnE_by_0n3}

Blocks

答辩

ASIS_08213db585ffe1c93c8f04622c319594

3-2

动图分解帧嘛，很老的套路，不过卡了好一会的是二维码的处理，我还真没反应过来要把四个拼在一起…

做了这么久的题了没见过这么大的二维码aaa。随波逐流拼在一起就行，随波逐流扫码明显是pyc，反编译就行，但是…2.7的版本也是很让人无语，pylingual不支持，https://tool.lu/pyc/嘿嘿这个可以。

#!/usr/bin/env python
# visit http://tool.lu/pyc/ for more information
import random
key = 'ctf'
strr = '186,98,180,154,139,192,114,14,102,168,43,136,52,218,85,100,43'

def func1(str1, key):
    random.seed(key)
    str2 = ''
    for c in str1:
        str2 += str(ord(c) ^ random.randint(0, 255)) + ','
    
    str2 = str2.strip(',')
    return str2


def func2(str2, key):
    random.seed(key)
    str1 = ''
    for i in str2.split(','):
        i = int(i)
        str1 += chr(i ^ random.randint(0, 255))
    
    return str1

flag{U_r_Greatt!}

NdisBackDoor1

真服了，还来恶心一次

Baby_enc

脸对脸，背对背

zwz，逆向，但是关键是必须知道flag的头是RCTF{

def recover(test, start, prefix="RCTF{", max_len=400):
    x = list(map(ord, prefix))
    k = 0
    while True:
        if start + k >= len(test):
            return None
        nxt = test[start + k] ^ x[k] ^ x[k+1] ^ x[k+4]
        if not (32 <= nxt <= 126):
            return None
        x.append(nxt)
        if nxt == ord('}'):
            return ''.join(map(chr, x))
        if len(x) >= max_len:
            return None
        k += 1

with open("out.txt", "r") as f:
    s = f.read()

test = list(map(ord, s))

for i in range(len(test)):
    res = recover(test, i, "RCTF{")
    if res:
        print(i, res)

RCTF{te1l_mE_tHe_wAy_you_so1ve_thIs}

LooL

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

真是不知道何意味啊，附件没有一丁点作用…

解码base64发现是png，保存一下。里面是一张像素图，pngcheck没有问题，但是exiftool发现可疑信息：

exiftool 0226.png
ExifTool Version Number         : 13.36
File Name                       : 0226.png
Directory                       : .
File Size                       : 760 bytes
File Modification Date/Time     : 2026:02:26 15:37:37+08:00
File Access Date/Time           : 2026:02:26 15:42:56+08:00
File Inode Change Date/Time     : 2026:02:26 15:37:37+08:00
File Permissions                : -rwxrwxrwx
File Type                       : PNG
File Type Extension             : png
MIME Type                       : image/png
Image Width                     : 28
Image Height                    : 20
Bit Depth                       : 8
Color Type                      : RGB
Compression                     : Deflate/Inflate
Filter                          : Adaptive
Interlace                       : Noninterlaced
Pixels Per Unit X               : 3780
Pixels Per Unit Y               : 3780
Pixel Units                     : meters
Modify Date                     : 2014:10:13 22:32:08
Warning                         : [minor] Text/EXIF chunk(s) found after PNG IDAT (may be ignored by some readers)
XMP Toolkit                     : Image::ExifTool 9.46
Dctf                            : 6fb53295b535ebdffa1ac8843fc6acdd
Image Size                      : 28x20
Megapixels                      : 0.000560

显然6fb53295b535ebdffa1ac8843fc6acdd是md5，扔到https://www.somd5.com/

解码得到brainloller，搜一下是怎么个事儿.bing搜到的第二条是https://note.tonycrane.cc/ctf/misc/esolang/

跳转到讲解brainloller的部分，脚本直接借鉴这位师傅的了…

from PIL import Image 
import sys

def Brainloller(filename):
    source = Image.open(filename).convert("RGB")
    width, height = source.size
    result = ''
    ptr = (0, 0)
    direction = 0
    while True:
        if ptr[0] >= height or ptr[0] < 0 or ptr[1] >= width or ptr[1] < 0:
            break
        else:
            color = source.getpixel((ptr[1], ptr[0]))
            if   color == (255,   0,   0): result += '>'
            elif color == (128,   0,   0): result += '<'
            elif color == (  0, 255,   0): result += '+'
            elif color == (  0, 128,   0): result += '-'
            elif color == (  0,   0, 255): result += '.'
            elif color == (  0,   0, 128): result += ','
            elif color == (255, 255,   0): result += '['
            elif color == (128, 128,   0): result += ']'
            elif color == (  0, 255, 255): direction = (direction + 1) % 4
            elif color == (  0, 128, 128): direction = (direction - 1) % 4
            else: print(f"[-] Unknown color: {color}")
        if   direction == 0: ptr = ptr[0], ptr[1] + 1
        elif direction == 1: ptr = ptr[0] + 1, ptr[1]
        elif direction == 2: ptr = ptr[0], ptr[1] - 1
        elif direction == 3: ptr = ptr[0] - 1, ptr[1]

    print(f"[+] BrainFuck Code: {result}")
    return result

def Brainfuck(code):
    code = ''.join(filter(lambda x: x in ['.', ',', '[', ']', '<', '>', '+', '-'], code))
    bracemap = buildbracemap(code)

    cells, codeptr, cellptr = [0], 0, 0
    result = ''

    while codeptr < len(code):
        command = code[codeptr]
        if command == ">":
            cellptr += 1
            if cellptr == len(cells): cells.append(0)
        elif command == "<": cellptr = 0 if cellptr <= 0 else cellptr - 1
        elif command == "+": cells[cellptr] = cells[cellptr] + 1 if cells[cellptr] < 255 else 0
        elif command == "-": cells[cellptr] = cells[cellptr] - 1 if cells[cellptr] > 0 else 255
        elif command == "[" and cells[cellptr] == 0: codeptr = bracemap[codeptr]
        elif command == "]" and cells[cellptr] != 0: codeptr = bracemap[codeptr]
        elif command == ".": result += chr(cells[cellptr])
        elif command == ",": cells[cellptr] = ord(input("[*] input one char > "))
        codeptr += 1

    print(f"[+] Result: {result}")

def buildbracemap(code):
    temp_bracestack, bracemap = [], {}
    for position, command in enumerate(code):
        if command == "[": temp_bracestack.append(position)
        if command == "]":
            start = temp_bracestack.pop()
            bracemap[start] = position
            bracemap[position] = start
    return bracemap

if __name__ == "__main__":
    Brainfuck(Brainloller(sys.argv[1]))

可得flag：youdidwell

disordered_jpg

字节序乱排了一下罢了…

inp = "3a13f19128074c2b9a909f1c08b4b3f6.jpg"
out = "fixed.jpg"

with open(inp, "rb") as f:
    data = f.read()

fixed = bytearray()
for i in range(0, len(data), 4):
    fixed += data[i:i+4][::-1]

with open(out, "wb") as f:
    f.write(fixed)

print("written:", out)

flag{F098996689560BBB1B566EBC10D5E564}

secret_in_the_center

附件显然是zip。

raw.txt里面三个坐标求平均数，再转hex，拼接，即可得到flag。

flag{cef44b46f16ae8ecf664df4266ffdbf9}

opm-3

The flag is flag{answer}

file一下发现是png文件。

zsteg发现了zip

(base) ┌──(rekjo㉿LAPTOP-BMERJF8L)-[/mnt/e/02adb70ca363405f9e2b1b6308ebf8cb]
└─$ zsteg a.png
imagedata           .. text: "$%%#%%;;9Z\\Z"
chunk:0:IHDR        .. file: Adobe Photoshop Color swatch, version 0, 1920 colors; 1st RGB space (0), w 0x4b0, x 0x802, y 0, z 0; 2nd HSB space (1), w 0x402, x 0x101, y 0x202, z 0x203
b1,rgb,lsb,xy       .. file: Zip archive data, at least v2.0 to extract, compression method=deflate
b3,rgb,lsb,xy       .. file: LX executable
b4,rgb,lsb,xy       .. text: "C'DSGGen"
b4,bgr,lsb,xy       .. text: "#DGCWGeo"
                    ..
(base) ┌──(rekjo㉿LAPTOP-BMERJF8L)-[/mnt/e/02adb70ca363405f9e2b1b6308ebf8cb]
└─$ zsteg -E b1,rgb,lsb,xy a.png > out.zip

out.zip提示已经损坏。但是bandizip和7z仍能正常提取出文件（winrar不行）。

文件名字是STMFD SP!, {R11,LR}，（ARM 汇编指令）

那很显然里面的是机器码了。

保存为bin文件

file untitled3
untitled3: Dyalog APL component file 64-bit level 2 journaled checksummed version -100.96

sudo apt install binutils-arm-none-eabi

python3 - <<'PY'
import re, struct, sys

inp = "STMFD SP!, {R11,LR}"
out = "code.bin"

with open(inp, "r", errors="ignore") as f, open(out, "wb") as g:
    for line in f:
        # 找出这一行里所有 8-hex
        ws = re.findall(r"\b[0-9a-fA-F]{8}\b", line)
        if not ws:
            continue
        w = int(ws[-1], 16)            # 取最后一个 8hex（最保险）
        g.write(struct.pack("<I", w))  # 关键：按 little-endian 写入
print("wrote", out)
PY
arm-none-eabi-objdump -D -b binary -marm code.bin

code.bin:     file format binary


Disassembly of section .data:

00000000 <.data>:
       0:       e92d4800        push    {fp, lr}
       4:       e28db004        add     fp, sp, #4
       8:       e24dd018        sub     sp, sp, #24
       c:       e50b0010        str     r0, [fp, #-16]
      10:       e50b1014        str     r1, [fp, #-20]  @ 0xffffffec
      14:       e50b2018        str     r2, [fp, #-24]  @ 0xffffffe8
      18:       e51b3010        ldr     r3, [fp, #-16]
      1c:       e5933000        ldr     r3, [r3]
      20:       e59332a4        ldr     r3, [r3, #676]  @ 0x2a4
      24:       e51b0010        ldr     r0, [fp, #-16]
      28:       e51b1018        ldr     r1, [fp, #-24]  @ 0xffffffe8
      2c:       e3a02000        mov     r2, #0
      30:       e12fff33        blx     r3
      34:       e50b0008        str     r0, [fp, #-8]
      38:       e51b0008        ldr     r0, [fp, #-8]
      3c:       eb000003        bl      0x50
      40:       e92d4800        push    {fp, lr}
      44:       e28db004        add     fp, sp, #4
      48:       e24dd088        sub     sp, sp, #136    @ 0x88
      4c:       e50b0088        str     r0, [fp, #-136] @ 0xffffff78
      50:       e51b0088        ldr     r0, [fp, #-136] @ 0xffffff78
      54:       ebffffc2        bl      0xffffff64
      58:       e28fc600        add     ip, pc, #0, 12
      5c:       e28cca04        add     ip, ip, #4, 20  @ 0x4000
      60:       e5bcf40c        ldr     pc, [ip, #1036]!        @ 0x40c
      64:       e1a03000        mov     r3, r0
      68:       e3530010        cmp     r3, #16
      6c:       0a000001        beq     0x78
      70:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      74:       e5d33000        ldrb    r3, [r3]
      78:       e50b3084        str     r3, [fp, #-132] @ 0xffffff7c
      7c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      80:       e2833001        add     r3, r3, #1
      84:       e5d33000        ldrb    r3, [r3]
      88:       e50b3080        str     r3, [fp, #-128] @ 0xffffff80
      8c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      90:       e2833002        add     r3, r3, #2
      94:       e5d33000        ldrb    r3, [r3]
      98:       e50b307c        str     r3, [fp, #-124] @ 0xffffff84
      9c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      a0:       e2833003        add     r3, r3, #3
      a4:       e5d33000        ldrb    r3, [r3]
      a8:       e50b3078        str     r3, [fp, #-120] @ 0xffffff88
      ac:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      b0:       e2833004        add     r3, r3, #4
      b4:       e5d33000        ldrb    r3, [r3]
      b8:       e50b3074        str     r3, [fp, #-116] @ 0xffffff8c
      bc:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      c0:       e2833005        add     r3, r3, #5
      c4:       e5d33000        ldrb    r3, [r3]
      c8:       e50b3070        str     r3, [fp, #-112] @ 0xffffff90
      cc:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      d0:       e2833006        add     r3, r3, #6
      d4:       e5d33000        ldrb    r3, [r3]
      d8:       e50b306c        str     r3, [fp, #-108] @ 0xffffff94
      dc:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      e0:       e2833007        add     r3, r3, #7
      e4:       e5d33000        ldrb    r3, [r3]
      e8:       e50b3068        str     r3, [fp, #-104] @ 0xffffff98
      ec:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
      f0:       e2833008        add     r3, r3, #8
      f4:       e5d33000        ldrb    r3, [r3]
      f8:       e50b3064        str     r3, [fp, #-100] @ 0xffffff9c
      fc:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
     100:       e2833009        add     r3, r3, #9
     104:       e5d33000        ldrb    r3, [r3]
     108:       e50b3060        str     r3, [fp, #-96]  @ 0xffffffa0
     10c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
     110:       e283300a        add     r3, r3, #10
     114:       e5d33000        ldrb    r3, [r3]
     118:       e50b305c        str     r3, [fp, #-92]  @ 0xffffffa4
     11c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
     120:       e283300b        add     r3, r3, #11
     124:       e5d33000        ldrb    r3, [r3]
     128:       e50b3058        str     r3, [fp, #-88]  @ 0xffffffa8
     12c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
     130:       e283300c        add     r3, r3, #12
     134:       e5d33000        ldrb    r3, [r3]
     138:       e50b3054        str     r3, [fp, #-84]  @ 0xffffffac
     13c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
     140:       e283300d        add     r3, r3, #13
     144:       e5d33000        ldrb    r3, [r3]
     148:       e50b3050        str     r3, [fp, #-80]  @ 0xffffffb0
     14c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
     150:       e283300e        add     r3, r3, #14
     154:       e5d33000        ldrb    r3, [r3]
     158:       e50b304c        str     r3, [fp, #-76]  @ 0xffffffb4
     15c:       e51b3088        ldr     r3, [fp, #-136] @ 0xffffff78
     160:       e283300f        add     r3, r3, #15
     164:       e5d33000        ldrb    r3, [r3]
     168:       e50b3048        str     r3, [fp, #-72]  @ 0xffffffb8
     16c:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     170:       e1a02283        lsl     r2, r3, #5
     174:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     178:       e3e01036        mvn     r1, #54 @ 0x36
     17c:       e0030391        mul     r3, r1, r3
     180:       e0822003        add     r2, r2, r3
     184:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     188:       e3e01036        mvn     r1, #54 @ 0x36
     18c:       e0030391        mul     r3, r1, r3
     190:       e0822003        add     r2, r2, r3
     194:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     198:       e3e01052        mvn     r1, #82 @ 0x52
     19c:       e0030391        mul     r3, r1, r3
     1a0:       e0822003        add     r2, r2, r3
     1a4:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     1a8:       e3a0101b        mov     r1, #27
     1ac:       e0030391        mul     r3, r1, r3
     1b0:       e0822003        add     r2, r2, r3
     1b4:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     1b8:       e3e01019        mvn     r1, #25
     1bc:       e0030391        mul     r3, r1, r3
     1c0:       e0822003        add     r2, r2, r3
     1c4:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     1c8:       e3e01063        mvn     r1, #99 @ 0x63
     1cc:       e0030391        mul     r3, r1, r3
     1d0:       e0822003        add     r2, r2, r3
     1d4:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     1d8:       e3e0101f        mvn     r1, #31
     1dc:       e0030391        mul     r3, r1, r3
     1e0:       e0822003        add     r2, r2, r3
     1e4:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     1e8:       e3a0102e        mov     r1, #46 @ 0x2e
     1ec:       e0030391        mul     r3, r1, r3
     1f0:       e0822003        add     r2, r2, r3
     1f4:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     1f8:       e3a01061        mov     r1, #97 @ 0x61
     1fc:       e0030391        mul     r3, r1, r3
     200:       e0822003        add     r2, r2, r3
     204:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     208:       e3a01043        mov     r1, #67 @ 0x43
     20c:       e0030391        mul     r3, r1, r3
     210:       e0822003        add     r2, r2, r3
     214:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     218:       e3a0102d        mov     r1, #45 @ 0x2d
     21c:       e0030391        mul     r3, r1, r3
     220:       e0822003        add     r2, r2, r3
     224:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     228:       e3e01048        mvn     r1, #72 @ 0x48
     22c:       e0030391        mul     r3, r1, r3
     230:       e0822003        add     r2, r2, r3
     234:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     238:       e3a0104f        mov     r1, #79 @ 0x4f
     23c:       e0030391        mul     r3, r1, r3
     240:       e0822003        add     r2, r2, r3
     244:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     248:       e3e01004        mvn     r1, #4
     24c:       e0030391        mul     r3, r1, r3
     250:       e0822003        add     r2, r2, r3
     254:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     258:       e3e0100c        mvn     r1, #12
     25c:       e0030391        mul     r3, r1, r3
     260:       e0823003        add     r3, r2, r3
     264:       e50b3044        str     r3, [fp, #-68]  @ 0xffffffbc
     268:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     26c:       e3a02006        mov     r2, #6
     270:       e0020293        mul     r2, r3, r2
     274:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     278:       e3a01059        mov     r1, #89 @ 0x59
     27c:       e0030391        mul     r3, r1, r3
     280:       e0822003        add     r2, r2, r3
     284:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     288:       e3a01054        mov     r1, #84 @ 0x54
     28c:       e0030391        mul     r3, r1, r3
     290:       e0821003        add     r1, r2, r3
     294:       e51b205c        ldr     r2, [fp, #-92]  @ 0xffffffa4
     298:       e1a03002        mov     r3, r2
     29c:       e1a03203        lsl     r3, r3, #4
     2a0:       e0623003        rsb     r3, r2, r3
     2a4:       e0812003        add     r2, r1, r3
     2a8:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     2ac:       e3e0104b        mvn     r1, #75 @ 0x4b
     2b0:       e0030391        mul     r3, r1, r3
     2b4:       e0822003        add     r2, r2, r3
     2b8:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     2bc:       e3a01055        mov     r1, #85 @ 0x55
     2c0:       e0030391        mul     r3, r1, r3
     2c4:       e0822003        add     r2, r2, r3
     2c8:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     2cc:       e3a01048        mov     r1, #72 @ 0x48
     2d0:       e0030391        mul     r3, r1, r3
     2d4:       e0822003        add     r2, r2, r3
     2d8:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     2dc:       e1a01003        mov     r1, r3
     2e0:       e1a03283        lsl     r3, r3, #5
     2e4:       e0633001        rsb     r3, r3, r1
     2e8:       e0822003        add     r2, r2, r3
     2ec:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     2f0:       e3a01014        mov     r1, #20
     2f4:       e0030391        mul     r3, r1, r3
     2f8:       e0822003        add     r2, r2, r3
     2fc:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     300:       e3e01059        mvn     r1, #89 @ 0x59
     304:       e0030391        mul     r3, r1, r3
     308:       e0822003        add     r2, r2, r3
     30c:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     310:       e3e01058        mvn     r1, #88 @ 0x58
     314:       e0030391        mul     r3, r1, r3
     318:       e0822003        add     r2, r2, r3
     31c:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     320:       e3e01041        mvn     r1, #65 @ 0x41
     324:       e0030391        mul     r3, r1, r3
     328:       e0822003        add     r2, r2, r3
     32c:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     330:       e3e01048        mvn     r1, #72 @ 0x48
     334:       e0030391        mul     r3, r1, r3
     338:       e0822003        add     r2, r2, r3
     33c:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     340:       e3e0103f        mvn     r1, #63 @ 0x3f
     344:       e0030391        mul     r3, r1, r3
     348:       e0822003        add     r2, r2, r3
     34c:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     350:       e3a01057        mov     r1, #87 @ 0x57
     354:       e0030391        mul     r3, r1, r3
     358:       e0822003        add     r2, r2, r3
     35c:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     360:       e3a0101a        mov     r1, #26
     364:       e0030391        mul     r3, r1, r3
     368:       e0823003        add     r3, r2, r3
     36c:       e50b3040        str     r3, [fp, #-64]  @ 0xffffffc0
     370:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     374:       e3a02053        mov     r2, #83 @ 0x53
     378:       e0020293        mul     r2, r3, r2
     37c:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     380:       e1a01003        mov     r1, r3
     384:       e1a03183        lsl     r3, r3, #3
     388:       e0633001        rsb     r3, r3, r1
     38c:       e0822003        add     r2, r2, r3
     390:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     394:       e3a01039        mov     r1, #57 @ 0x39
     398:       e0030391        mul     r3, r1, r3
     39c:       e0822003        add     r2, r2, r3
     3a0:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     3a4:       e3a0101b        mov     r1, #27
     3a8:       e0030391        mul     r3, r1, r3
     3ac:       e0822003        add     r2, r2, r3
     3b0:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     3b4:       e3a0100e        mov     r1, #14
     3b8:       e0030391        mul     r3, r1, r3
     3bc:       e0822003        add     r2, r2, r3
     3c0:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     3c4:       e3e01029        mvn     r1, #41 @ 0x29
     3c8:       e0030391        mul     r3, r1, r3
     3cc:       e0822003        add     r2, r2, r3
     3d0:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     3d4:       e3a0105c        mov     r1, #92 @ 0x5c
     3d8:       e0030391        mul     r3, r1, r3
     3dc:       e0822003        add     r2, r2, r3
     3e0:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     3e4:       e3a0104e        mov     r1, #78 @ 0x4e
     3e8:       e0030391        mul     r3, r1, r3
     3ec:       e0822003        add     r2, r2, r3
     3f0:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     3f4:       e3a0105e        mov     r1, #94 @ 0x5e
     3f8:       e0030391        mul     r3, r1, r3
     3fc:       e0822003        add     r2, r2, r3
     400:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     404:       e3a01016        mov     r1, #22
     408:       e0030391        mul     r3, r1, r3
     40c:       e0822003        add     r2, r2, r3
     410:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     414:       e3a01022        mov     r1, #34 @ 0x22
     418:       e0030391        mul     r3, r1, r3
     41c:       e0822003        add     r2, r2, r3
     420:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     424:       e3a0104b        mov     r1, #75 @ 0x4b
     428:       e0030391        mul     r3, r1, r3
     42c:       e0822003        add     r2, r2, r3
     430:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     434:       e3a0103d        mov     r1, #61 @ 0x3d
     438:       e0030391        mul     r3, r1, r3
     43c:       e0821003        add     r1, r2, r3
     440:       e51b2070        ldr     r2, [fp, #-112] @ 0xffffff90
     444:       e1a03002        mov     r3, r2
     448:       e1a03283        lsl     r3, r3, #5
     44c:       e0623003        rsb     r3, r2, r3
     450:       e0812003        add     r2, r1, r3
     454:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     458:       e3a01064        mov     r1, #100        @ 0x64
     45c:       e0030391        mul     r3, r1, r3
     460:       e0822003        add     r2, r2, r3
     464:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     468:       e3e0100f        mvn     r1, #15
     46c:       e0030391        mul     r3, r1, r3
     470:       e0823003        add     r3, r2, r3
     474:       e50b303c        str     r3, [fp, #-60]  @ 0xffffffc4
     478:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     47c:       e3a02060        mov     r2, #96 @ 0x60
     480:       e0020293        mul     r2, r3, r2
     484:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     488:       e3e01058        mvn     r1, #88 @ 0x58
     48c:       e0030391        mul     r3, r1, r3
     490:       e0822003        add     r2, r2, r3
     494:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     498:       e3e0101a        mvn     r1, #26
     49c:       e0030391        mul     r3, r1, r3
     4a0:       e0822003        add     r2, r2, r3
     4a4:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     4a8:       e3a0104c        mov     r1, #76 @ 0x4c
     4ac:       e0030391        mul     r3, r1, r3
     4b0:       e0822003        add     r2, r2, r3
     4b4:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     4b8:       e3e01043        mvn     r1, #67 @ 0x43
     4bc:       e0030391        mul     r3, r1, r3
     4c0:       e0822003        add     r2, r2, r3
     4c4:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     4c8:       e3a01030        mov     r1, #48 @ 0x30
     4cc:       e0030391        mul     r3, r1, r3
     4d0:       e0822003        add     r2, r2, r3
     4d4:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     4d8:       e3a01048        mov     r1, #72 @ 0x48
     4dc:       e0030391        mul     r3, r1, r3
     4e0:       e0822003        add     r2, r2, r3
     4e4:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     4e8:       e3a0102b        mov     r1, #43 @ 0x2b
     4ec:       e0030391        mul     r3, r1, r3
     4f0:       e0822003        add     r2, r2, r3
     4f4:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     4f8:       e3a0104b        mov     r1, #75 @ 0x4b
     4fc:       e0030391        mul     r3, r1, r3
     500:       e0822003        add     r2, r2, r3
     504:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     508:       e3a0102c        mov     r1, #44 @ 0x2c
     50c:       e0030391        mul     r3, r1, r3
     510:       e0822003        add     r2, r2, r3
     514:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     518:       e3e01010        mvn     r1, #16
     51c:       e0030391        mul     r3, r1, r3
     520:       e0822003        add     r2, r2, r3
     524:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     528:       e3e0103a        mvn     r1, #58 @ 0x3a
     52c:       e0030391        mul     r3, r1, r3
     530:       e0822003        add     r2, r2, r3
     534:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     538:       e0632002        rsb     r2, r3, r2
     53c:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     540:       e3a01052        mov     r1, #82 @ 0x52
     544:       e0030391        mul     r3, r1, r3
     548:       e0822003        add     r2, r2, r3
     54c:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     550:       e3a0102f        mov     r1, #47 @ 0x2f
     554:       e0030391        mul     r3, r1, r3
     558:       e0822003        add     r2, r2, r3
     55c:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     560:       e3e0102b        mvn     r1, #43 @ 0x2b
     564:       e0030391        mul     r3, r1, r3
     568:       e0823003        add     r3, r2, r3
     56c:       e50b3038        str     r3, [fp, #-56]  @ 0xffffffc8
     570:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     574:       e3a0202a        mov     r2, #42 @ 0x2a
     578:       e0020293        mul     r2, r3, r2
     57c:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     580:       e3a01059        mov     r1, #89 @ 0x59
     584:       e0030391        mul     r3, r1, r3
     588:       e0822003        add     r2, r2, r3
     58c:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     590:       e3e01060        mvn     r1, #96 @ 0x60
     594:       e0030391        mul     r3, r1, r3
     598:       e0822003        add     r2, r2, r3
     59c:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     5a0:       e3a01018        mov     r1, #24
     5a4:       e0030391        mul     r3, r1, r3
     5a8:       e0822003        add     r2, r2, r3
     5ac:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     5b0:       e3e01020        mvn     r1, #32
     5b4:       e0030391        mul     r3, r1, r3
     5b8:       e0822003        add     r2, r2, r3
     5bc:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     5c0:       e3a0103e        mov     r1, #62 @ 0x3e
     5c4:       e0030391        mul     r3, r1, r3
     5c8:       e0822003        add     r2, r2, r3
     5cc:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     5d0:       e3a01054        mov     r1, #84 @ 0x54
     5d4:       e0030391        mul     r3, r1, r3
     5d8:       e0822003        add     r2, r2, r3
     5dc:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     5e0:       e3a0102c        mov     r1, #44 @ 0x2c
     5e4:       e0030391        mul     r3, r1, r3
     5e8:       e0822003        add     r2, r2, r3
     5ec:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     5f0:       e3a01057        mov     r1, #87 @ 0x57
     5f4:       e0030391        mul     r3, r1, r3
     5f8:       e0822003        add     r2, r2, r3
     5fc:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     600:       e3e0103b        mvn     r1, #59 @ 0x3b
     604:       e0030391        mul     r3, r1, r3
     608:       e0822003        add     r2, r2, r3
     60c:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     610:       e3a01039        mov     r1, #57 @ 0x39
     614:       e0030391        mul     r3, r1, r3
     618:       e0822003        add     r2, r2, r3
     61c:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     620:       e3e0103f        mvn     r1, #63 @ 0x3f
     624:       e0030391        mul     r3, r1, r3
     628:       e0822003        add     r2, r2, r3
     62c:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     630:       e3e0103b        mvn     r1, #59 @ 0x3b
     634:       e0030391        mul     r3, r1, r3
     638:       e0822003        add     r2, r2, r3
     63c:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     640:       e3e01011        mvn     r1, #17
     644:       e0030391        mul     r3, r1, r3
     648:       e0822003        add     r2, r2, r3
     64c:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     650:       e3e01050        mvn     r1, #80 @ 0x50
     654:       e0030391        mul     r3, r1, r3
     658:       e0821003        add     r1, r2, r3
     65c:       e51b2068        ldr     r2, [fp, #-104] @ 0xffffff98
     660:       e1a03002        mov     r3, r2
     664:       e1a03183        lsl     r3, r3, #3
     668:       e0833002        add     r3, r3, r2
     66c:       e0813003        add     r3, r1, r3
     670:       e50b3034        str     r3, [fp, #-52]  @ 0xffffffcc
     674:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     678:       e3a02059        mov     r2, #89 @ 0x59
     67c:       e0020293        mul     r2, r3, r2
     680:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     684:       e3e01060        mvn     r1, #96 @ 0x60
     688:       e0030391        mul     r3, r1, r3
     68c:       e0822003        add     r2, r2, r3
     690:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     694:       e3a0104f        mov     r1, #79 @ 0x4f
     698:       e0030391        mul     r3, r1, r3
     69c:       e0822003        add     r2, r2, r3
     6a0:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     6a4:       e3e01038        mvn     r1, #56 @ 0x38
     6a8:       e0030391        mul     r3, r1, r3
     6ac:       e0822003        add     r2, r2, r3
     6b0:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     6b4:       e3a01036        mov     r1, #54 @ 0x36
     6b8:       e0030391        mul     r3, r1, r3
     6bc:       e0822003        add     r2, r2, r3
     6c0:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     6c4:       e3a01030        mov     r1, #48 @ 0x30
     6c8:       e0030391        mul     r3, r1, r3
     6cc:       e0822003        add     r2, r2, r3
     6d0:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     6d4:       e3a0103b        mov     r1, #59 @ 0x3b
     6d8:       e0030391        mul     r3, r1, r3
     6dc:       e0822003        add     r2, r2, r3
     6e0:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     6e4:       e3a0101e        mov     r1, #30
     6e8:       e0030391        mul     r3, r1, r3
     6ec:       e0822003        add     r2, r2, r3
     6f0:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     6f4:       e3a01017        mov     r1, #23
     6f8:       e0030391        mul     r3, r1, r3
     6fc:       e0822003        add     r2, r2, r3
     700:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     704:       e3a01044        mov     r1, #68 @ 0x44
     708:       e0030391        mul     r3, r1, r3
     70c:       e0822003        add     r2, r2, r3
     710:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     714:       e3a0102e        mov     r1, #46 @ 0x2e
     718:       e0030391        mul     r3, r1, r3
     71c:       e0822003        add     r2, r2, r3
     720:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     724:       e3a0105b        mov     r1, #91 @ 0x5b
     728:       e0030391        mul     r3, r1, r3
     72c:       e0822003        add     r2, r2, r3
     730:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     734:       e3e0103d        mvn     r1, #61 @ 0x3d
     738:       e0030391        mul     r3, r1, r3
     73c:       e0822003        add     r2, r2, r3
     740:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     744:       e1a03283        lsl     r3, r3, #5
     748:       e0822003        add     r2, r2, r3
     74c:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     750:       e3e01004        mvn     r1, #4
     754:       e0030391        mul     r3, r1, r3
     758:       e0822003        add     r2, r2, r3
     75c:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     760:       e3a0102a        mov     r1, #42 @ 0x2a
     764:       e0030391        mul     r3, r1, r3
     768:       e0823003        add     r3, r2, r3
     76c:       e50b3030        str     r3, [fp, #-48]  @ 0xffffffd0
     770:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     774:       e3a0203e        mov     r2, #62 @ 0x3e
     778:       e0010392        mul     r1, r2, r3
     77c:       e51b2050        ldr     r2, [fp, #-80]  @ 0xffffffb0
     780:       e1a03002        mov     r3, r2
     784:       e1a03183        lsl     r3, r3, #3
     788:       e0833002        add     r3, r3, r2
     78c:       e0812003        add     r2, r1, r3
     790:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     794:       e3e01060        mvn     r1, #96 @ 0x60
     798:       e0030391        mul     r3, r1, r3
     79c:       e0822003        add     r2, r2, r3
     7a0:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     7a4:       e3e01062        mvn     r1, #98 @ 0x62
     7a8:       e0030391        mul     r3, r1, r3
     7ac:       e0822003        add     r2, r2, r3
     7b0:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     7b4:       e3e01055        mvn     r1, #85 @ 0x55
     7b8:       e0030391        mul     r3, r1, r3
     7bc:       e0822003        add     r2, r2, r3
     7c0:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     7c4:       e3e01009        mvn     r1, #9
     7c8:       e0030391        mul     r3, r1, r3
     7cc:       e0822003        add     r2, r2, r3
     7d0:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     7d4:       e3e01038        mvn     r1, #56 @ 0x38
     7d8:       e0030391        mul     r3, r1, r3
     7dc:       e0822003        add     r2, r2, r3
     7e0:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     7e4:       e3e0101c        mvn     r1, #28
     7e8:       e0030391        mul     r3, r1, r3
     7ec:       e0822003        add     r2, r2, r3
     7f0:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     7f4:       e3a0100e        mov     r1, #14
     7f8:       e0030391        mul     r3, r1, r3
     7fc:       e0822003        add     r2, r2, r3
     800:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     804:       e3e0100d        mvn     r1, #13
     808:       e0030391        mul     r3, r1, r3
     80c:       e0822003        add     r2, r2, r3
     810:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     814:       e3e0103b        mvn     r1, #59 @ 0x3b
     818:       e0030391        mul     r3, r1, r3
     81c:       e0822003        add     r2, r2, r3
     820:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     824:       e3e01058        mvn     r1, #88 @ 0x58
     828:       e0030391        mul     r3, r1, r3
     82c:       e0822003        add     r2, r2, r3
     830:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     834:       e3a01031        mov     r1, #49 @ 0x31
     838:       e0030391        mul     r3, r1, r3
     83c:       e0822003        add     r2, r2, r3
     840:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     844:       e3a0100b        mov     r1, #11
     848:       e0030391        mul     r3, r1, r3
     84c:       e0822003        add     r2, r2, r3
     850:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     854:       e3a0104b        mov     r1, #75 @ 0x4b
     858:       e0030391        mul     r3, r1, r3
     85c:       e0822003        add     r2, r2, r3
     860:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     864:       e3e0104e        mvn     r1, #78 @ 0x4e
     868:       e0030391        mul     r3, r1, r3
     86c:       e0823003        add     r3, r2, r3
     870:       e50b302c        str     r3, [fp, #-44]  @ 0xffffffd4
     874:       e51b204c        ldr     r2, [fp, #-76]  @ 0xffffffb4
     878:       e1a03002        mov     r3, r2
     87c:       e1a03283        lsl     r3, r3, #5
     880:       e0622003        rsb     r2, r2, r3
     884:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     888:       e3a01006        mov     r1, #6
     88c:       e0030391        mul     r3, r1, r3
     890:       e0822003        add     r2, r2, r3
     894:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     898:       e3e01044        mvn     r1, #68 @ 0x44
     89c:       e0030391        mul     r3, r1, r3
     8a0:       e0822003        add     r2, r2, r3
     8a4:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     8a8:       e3e01050        mvn     r1, #80 @ 0x50
     8ac:       e0030391        mul     r3, r1, r3
     8b0:       e0822003        add     r2, r2, r3
     8b4:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     8b8:       e3a01053        mov     r1, #83 @ 0x53
     8bc:       e0030391        mul     r3, r1, r3
     8c0:       e0822003        add     r2, r2, r3
     8c4:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     8c8:       e3a01061        mov     r1, #97 @ 0x61
     8cc:       e0030391        mul     r3, r1, r3
     8d0:       e0822003        add     r2, r2, r3
     8d4:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     8d8:       e3a01050        mov     r1, #80 @ 0x50
     8dc:       e0030391        mul     r3, r1, r3
     8e0:       e0822003        add     r2, r2, r3
     8e4:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     8e8:       e3a0103a        mov     r1, #58 @ 0x3a
     8ec:       e0030391        mul     r3, r1, r3
     8f0:       e0821003        add     r1, r2, r3
     8f4:       e51b207c        ldr     r2, [fp, #-124] @ 0xffffff84
     8f8:       e1a03002        mov     r3, r2
     8fc:       e1a03203        lsl     r3, r3, #4
     900:       e0833002        add     r3, r3, r2
     904:       e0812003        add     r2, r1, r3
     908:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     90c:       e3a0103a        mov     r1, #58 @ 0x3a
     910:       e0030391        mul     r3, r1, r3
     914:       e0822003        add     r2, r2, r3
     918:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     91c:       e3e01061        mvn     r1, #97 @ 0x61
     920:       e0030391        mul     r3, r1, r3
     924:       e0822003        add     r2, r2, r3
     928:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     92c:       e3a0105b        mov     r1, #91 @ 0x5b
     930:       e0030391        mul     r3, r1, r3
     934:       e0822003        add     r2, r2, r3
     938:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     93c:       e3e01004        mvn     r1, #4
     940:       e0030391        mul     r3, r1, r3
     944:       e0822003        add     r2, r2, r3
     948:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     94c:       e3e0104a        mvn     r1, #74 @ 0x4a
     950:       e0030391        mul     r3, r1, r3
     954:       e0822003        add     r2, r2, r3
     958:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     95c:       e3e01019        mvn     r1, #25
     960:       e0030391        mul     r3, r1, r3
     964:       e0822003        add     r2, r2, r3
     968:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     96c:       e3e0103b        mvn     r1, #59 @ 0x3b
     970:       e0030391        mul     r3, r1, r3
     974:       e0823003        add     r3, r2, r3
     978:       e50b3028        str     r3, [fp, #-40]  @ 0xffffffd8
     97c:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     980:       e3a02013        mov     r2, #19
     984:       e0020293        mul     r2, r3, r2
     988:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     98c:       e0632002        rsb     r2, r3, r2
     990:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     994:       e3a01049        mov     r1, #73 @ 0x49
     998:       e0030391        mul     r3, r1, r3
     99c:       e0822003        add     r2, r2, r3
     9a0:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     9a4:       e3e01003        mvn     r1, #3
     9a8:       e0030391        mul     r3, r1, r3
     9ac:       e0822003        add     r2, r2, r3
     9b0:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     9b4:       e3a0101a        mov     r1, #26
     9b8:       e0030391        mul     r3, r1, r3
     9bc:       e0822003        add     r2, r2, r3
     9c0:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     9c4:       e3e0102a        mvn     r1, #42 @ 0x2a
     9c8:       e0030391        mul     r3, r1, r3
     9cc:       e0822003        add     r2, r2, r3
     9d0:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     9d4:       e3e0101a        mvn     r1, #26
     9d8:       e0030391        mul     r3, r1, r3
     9dc:       e0822003        add     r2, r2, r3
     9e0:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     9e4:       e3e01014        mvn     r1, #20
     9e8:       e0030391        mul     r3, r1, r3
     9ec:       e0822003        add     r2, r2, r3
     9f0:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     9f4:       e3a0103e        mov     r1, #62 @ 0x3e
     9f8:       e0030391        mul     r3, r1, r3
     9fc:       e0822003        add     r2, r2, r3
     a00:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     a04:       e3e0100a        mvn     r1, #10
     a08:       e0030391        mul     r3, r1, r3
     a0c:       e0822003        add     r2, r2, r3
     a10:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     a14:       e3a01054        mov     r1, #84 @ 0x54
     a18:       e0030391        mul     r3, r1, r3
     a1c:       e0822003        add     r2, r2, r3
     a20:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     a24:       e3e0104c        mvn     r1, #76 @ 0x4c
     a28:       e0030391        mul     r3, r1, r3
     a2c:       e0822003        add     r2, r2, r3
     a30:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     a34:       e3a01031        mov     r1, #49 @ 0x31
     a38:       e0030391        mul     r3, r1, r3
     a3c:       e0822003        add     r2, r2, r3
     a40:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     a44:       e3e01055        mvn     r1, #85 @ 0x55
     a48:       e0030391        mul     r3, r1, r3
     a4c:       e0822003        add     r2, r2, r3
     a50:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     a54:       e0632002        rsb     r2, r3, r2
     a58:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     a5c:       e3e01041        mvn     r1, #65 @ 0x41
     a60:       e0030391        mul     r3, r1, r3
     a64:       e0823003        add     r3, r2, r3
     a68:       e50b3024        str     r3, [fp, #-36]  @ 0xffffffdc
     a6c:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     a70:       e3a0202a        mov     r2, #42 @ 0x2a
     a74:       e0020293        mul     r2, r3, r2
     a78:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     a7c:       e3e0104a        mvn     r1, #74 @ 0x4a
     a80:       e0030391        mul     r3, r1, r3
     a84:       e0822003        add     r2, r2, r3
     a88:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     a8c:       e3a01023        mov     r1, #35 @ 0x23
     a90:       e0030391        mul     r3, r1, r3
     a94:       e0822003        add     r2, r2, r3
     a98:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     a9c:       e3e01016        mvn     r1, #22
     aa0:       e0030391        mul     r3, r1, r3
     aa4:       e0822003        add     r2, r2, r3
     aa8:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     aac:       e3e0103b        mvn     r1, #59 @ 0x3b
     ab0:       e0030391        mul     r3, r1, r3
     ab4:       e0822003        add     r2, r2, r3
     ab8:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     abc:       e3e01032        mvn     r1, #50 @ 0x32
     ac0:       e0030391        mul     r3, r1, r3
     ac4:       e0822003        add     r2, r2, r3
     ac8:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     acc:       e3a01044        mov     r1, #68 @ 0x44
     ad0:       e0030391        mul     r3, r1, r3
     ad4:       e0822003        add     r2, r2, r3
     ad8:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     adc:       e3a01053        mov     r1, #83 @ 0x53
     ae0:       e0030391        mul     r3, r1, r3
     ae4:       e0822003        add     r2, r2, r3
     ae8:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     aec:       e3a0104d        mov     r1, #77 @ 0x4d
     af0:       e0030391        mul     r3, r1, r3
     af4:       e0822003        add     r2, r2, r3
     af8:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     afc:       e3a0102b        mov     r1, #43 @ 0x2b
     b00:       e0030391        mul     r3, r1, r3
     b04:       e0822003        add     r2, r2, r3
     b08:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     b0c:       e3a01053        mov     r1, #83 @ 0x53
     b10:       e0030391        mul     r3, r1, r3
     b14:       e0822003        add     r2, r2, r3
     b18:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     b1c:       e3a01060        mov     r1, #96 @ 0x60
     b20:       e0030391        mul     r3, r1, r3
     b24:       e0822003        add     r2, r2, r3
     b28:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     b2c:       e3a0101a        mov     r1, #26
     b30:       e0030391        mul     r3, r1, r3
     b34:       e0822003        add     r2, r2, r3
     b38:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     b3c:       e3e01013        mvn     r1, #19
     b40:       e0030391        mul     r3, r1, r3
     b44:       e0822003        add     r2, r2, r3
     b48:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     b4c:       e3e01058        mvn     r1, #88 @ 0x58
     b50:       e0030391        mul     r3, r1, r3
     b54:       e0822003        add     r2, r2, r3
     b58:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     b5c:       e1a01003        mov     r1, r3
     b60:       e1a03183        lsl     r3, r3, #3
     b64:       e0633001        rsb     r3, r3, r1
     b68:       e0823003        add     r3, r2, r3
     b6c:       e50b3020        str     r3, [fp, #-32]  @ 0xffffffe0
     b70:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     b74:       e3a0202d        mov     r2, #45 @ 0x2d
     b78:       e0020293        mul     r2, r3, r2
     b7c:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     b80:       e3a0100e        mov     r1, #14
     b84:       e0030391        mul     r3, r1, r3
     b88:       e0822003        add     r2, r2, r3
     b8c:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     b90:       e3e0105a        mvn     r1, #90 @ 0x5a
     b94:       e0030391        mul     r3, r1, r3
     b98:       e0822003        add     r2, r2, r3
     b9c:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     ba0:       e3a01030        mov     r1, #48 @ 0x30
     ba4:       e0030391        mul     r3, r1, r3
     ba8:       e0822003        add     r2, r2, r3
     bac:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     bb0:       e3a01032        mov     r1, #50 @ 0x32
     bb4:       e0030391        mul     r3, r1, r3
     bb8:       e0822003        add     r2, r2, r3
     bbc:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     bc0:       e3e01033        mvn     r1, #51 @ 0x33
     bc4:       e0030391        mul     r3, r1, r3
     bc8:       e0822003        add     r2, r2, r3
     bcc:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     bd0:       e3a0103a        mov     r1, #58 @ 0x3a
     bd4:       e0030391        mul     r3, r1, r3
     bd8:       e0822003        add     r2, r2, r3
     bdc:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     be0:       e3a0104a        mov     r1, #74 @ 0x4a
     be4:       e0030391        mul     r3, r1, r3
     be8:       e0822003        add     r2, r2, r3
     bec:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     bf0:       e3a01049        mov     r1, #73 @ 0x49
     bf4:       e0030391        mul     r3, r1, r3
     bf8:       e0822003        add     r2, r2, r3
     bfc:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     c00:       e3a0103a        mov     r1, #58 @ 0x3a
     c04:       e0030391        mul     r3, r1, r3
     c08:       e0822003        add     r2, r2, r3
     c0c:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     c10:       e3e01063        mvn     r1, #99 @ 0x63
     c14:       e0030391        mul     r3, r1, r3
     c18:       e0822003        add     r2, r2, r3
     c1c:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     c20:       e3e01055        mvn     r1, #85 @ 0x55
     c24:       e0030391        mul     r3, r1, r3
     c28:       e0822003        add     r2, r2, r3
     c2c:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     c30:       e3a0100c        mov     r1, #12
     c34:       e0030391        mul     r3, r1, r3
     c38:       e0822003        add     r2, r2, r3
     c3c:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     c40:       e3a01047        mov     r1, #71 @ 0x47
     c44:       e0030391        mul     r3, r1, r3
     c48:       e0822003        add     r2, r2, r3
     c4c:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     c50:       e3a01045        mov     r1, #69 @ 0x45
     c54:       e0030391        mul     r3, r1, r3
     c58:       e0822003        add     r2, r2, r3
     c5c:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     c60:       e3a01042        mov     r1, #66 @ 0x42
     c64:       e0030391        mul     r3, r1, r3
     c68:       e0823003        add     r3, r2, r3
     c6c:       e50b301c        str     r3, [fp, #-28]  @ 0xffffffe4
     c70:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     c74:       e3a0201e        mov     r2, #30
     c78:       e0020293        mul     r2, r3, r2
     c7c:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     c80:       e3e0101a        mvn     r1, #26
     c84:       e0030391        mul     r3, r1, r3
     c88:       e0822003        add     r2, r2, r3
     c8c:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     c90:       e1a03183        lsl     r3, r3, #3
     c94:       e0822003        add     r2, r2, r3
     c98:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     c9c:       e3e01028        mvn     r1, #40 @ 0x28
     ca0:       e0030391        mul     r3, r1, r3
     ca4:       e0822003        add     r2, r2, r3
     ca8:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     cac:       e3e01059        mvn     r1, #89 @ 0x59
     cb0:       e0030391        mul     r3, r1, r3
     cb4:       e0822003        add     r2, r2, r3
     cb8:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     cbc:       e3a01030        mov     r1, #48 @ 0x30
     cc0:       e0030391        mul     r3, r1, r3
     cc4:       e0822003        add     r2, r2, r3
     cc8:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     ccc:       e3e01049        mvn     r1, #73 @ 0x49
     cd0:       e0030391        mul     r3, r1, r3
     cd4:       e0822003        add     r2, r2, r3
     cd8:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     cdc:       e3e0103b        mvn     r1, #59 @ 0x3b
     ce0:       e0030391        mul     r3, r1, r3
     ce4:       e0822003        add     r2, r2, r3
     ce8:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     cec:       e3a0101a        mov     r1, #26
     cf0:       e0030391        mul     r3, r1, r3
     cf4:       e0822003        add     r2, r2, r3
     cf8:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     cfc:       e3e0103c        mvn     r1, #60 @ 0x3c
     d00:       e0030391        mul     r3, r1, r3
     d04:       e0822003        add     r2, r2, r3
     d08:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     d0c:       e3a01014        mov     r1, #20
     d10:       e0030391        mul     r3, r1, r3
     d14:       e0822003        add     r2, r2, r3
     d18:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     d1c:       e1a01003        mov     r1, r3
     d20:       e1a03283        lsl     r3, r3, #5
     d24:       e0633001        rsb     r3, r3, r1
     d28:       e0822003        add     r2, r2, r3
     d2c:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     d30:       e3e01034        mvn     r1, #52 @ 0x34
     d34:       e0030391        mul     r3, r1, r3
     d38:       e0822003        add     r2, r2, r3
     d3c:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     d40:       e3e0103a        mvn     r1, #58 @ 0x3a
     d44:       e0030391        mul     r3, r1, r3
     d48:       e0822003        add     r2, r2, r3
     d4c:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     d50:       e3a01044        mov     r1, #68 @ 0x44
     d54:       e0030391        mul     r3, r1, r3
     d58:       e0822003        add     r2, r2, r3
     d5c:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     d60:       e3a01048        mov     r1, #72 @ 0x48
     d64:       e0030391        mul     r3, r1, r3
     d68:       e0823003        add     r3, r2, r3
     d6c:       e50b3018        str     r3, [fp, #-24]  @ 0xffffffe8
     d70:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     d74:       e3a02019        mov     r2, #25
     d78:       e0020293        mul     r2, r3, r2
     d7c:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     d80:       e3e0100b        mvn     r1, #11
     d84:       e0030391        mul     r3, r1, r3
     d88:       e0822003        add     r2, r2, r3
     d8c:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     d90:       e3e01021        mvn     r1, #33 @ 0x21
     d94:       e0030391        mul     r3, r1, r3
     d98:       e0822003        add     r2, r2, r3
     d9c:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     da0:       e3e01022        mvn     r1, #34 @ 0x22
     da4:       e0030391        mul     r3, r1, r3
     da8:       e0822003        add     r2, r2, r3
     dac:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     db0:       e3a01062        mov     r1, #98 @ 0x62
     db4:       e0030391        mul     r3, r1, r3
     db8:       e0821003        add     r1, r2, r3
     dbc:       e51b2054        ldr     r2, [fp, #-84]  @ 0xffffffac
     dc0:       e1a03002        mov     r3, r2
     dc4:       e1a03183        lsl     r3, r3, #3
     dc8:       e0623003        rsb     r3, r2, r3
     dcc:       e0812003        add     r2, r1, r3
     dd0:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     dd4:       e3e0104b        mvn     r1, #75 @ 0x4b
     dd8:       e0030391        mul     r3, r1, r3
     ddc:       e0822003        add     r2, r2, r3
     de0:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     de4:       e3e01019        mvn     r1, #25
     de8:       e0030391        mul     r3, r1, r3
     dec:       e0821003        add     r1, r2, r3
     df0:       e51b207c        ldr     r2, [fp, #-124] @ 0xffffff84
     df4:       e1a03002        mov     r3, r2
     df8:       e1a03283        lsl     r3, r3, #5
     dfc:       e0623003        rsb     r3, r2, r3
     e00:       e0812003        add     r2, r1, r3
     e04:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     e08:       e3a01013        mov     r1, #19
     e0c:       e0030391        mul     r3, r1, r3
     e10:       e0822003        add     r2, r2, r3
     e14:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     e18:       e3e0105e        mvn     r1, #94 @ 0x5e
     e1c:       e0030391        mul     r3, r1, r3
     e20:       e0822003        add     r2, r2, r3
     e24:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     e28:       e3e0100f        mvn     r1, #15
     e2c:       e0030391        mul     r3, r1, r3
     e30:       e0822003        add     r2, r2, r3
     e34:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     e38:       e1a03303        lsl     r3, r3, #6
     e3c:       e0821003        add     r1, r2, r3
     e40:       e51b2070        ldr     r2, [fp, #-112] @ 0xffffff90
     e44:       e1a03002        mov     r3, r2
     e48:       e1a03283        lsl     r3, r3, #5
     e4c:       e0833002        add     r3, r3, r2
     e50:       e0812003        add     r2, r1, r3
     e54:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     e58:       e3a0100a        mov     r1, #10
     e5c:       e0030391        mul     r3, r1, r3
     e60:       e0822003        add     r2, r2, r3
     e64:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     e68:       e3e01052        mvn     r1, #82 @ 0x52
     e6c:       e0030391        mul     r3, r1, r3
     e70:       e0823003        add     r3, r2, r3
     e74:       e50b3014        str     r3, [fp, #-20]  @ 0xffffffec
     e78:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     e7c:       e3a02033        mov     r2, #51 @ 0x33
     e80:       e0020293        mul     r2, r3, r2
     e84:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     e88:       e1a03103        lsl     r3, r3, #2
     e8c:       e0822003        add     r2, r2, r3
     e90:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     e94:       e3e01005        mvn     r1, #5
     e98:       e0030391        mul     r3, r1, r3
     e9c:       e0822003        add     r2, r2, r3
     ea0:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     ea4:       e3a01047        mov     r1, #71 @ 0x47
     ea8:       e0030391        mul     r3, r1, r3
     eac:       e0822003        add     r2, r2, r3
     eb0:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     eb4:       e3e0100f        mvn     r1, #15
     eb8:       e0030391        mul     r3, r1, r3
     ebc:       e0822003        add     r2, r2, r3
     ec0:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
     ec4:       e3a0104b        mov     r1, #75 @ 0x4b
     ec8:       e0030391        mul     r3, r1, r3
     ecc:       e0822003        add     r2, r2, r3
     ed0:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     ed4:       e1a03203        lsl     r3, r3, #4
     ed8:       e0822003        add     r2, r2, r3
     edc:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     ee0:       e3e01058        mvn     r1, #88 @ 0x58
     ee4:       e0030391        mul     r3, r1, r3
     ee8:       e0822003        add     r2, r2, r3
     eec:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     ef0:       e3e01027        mvn     r1, #39 @ 0x27
     ef4:       e0030391        mul     r3, r1, r3
     ef8:       e0822003        add     r2, r2, r3
     efc:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     f00:       e3a0103d        mov     r1, #61 @ 0x3d
     f04:       e0030391        mul     r3, r1, r3
     f08:       e0822003        add     r2, r2, r3
     f0c:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
     f10:       e3a01014        mov     r1, #20
     f14:       e0030391        mul     r3, r1, r3
     f18:       e0822003        add     r2, r2, r3
     f1c:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
     f20:       e3e01042        mvn     r1, #66 @ 0x42
     f24:       e0030391        mul     r3, r1, r3
     f28:       e0822003        add     r2, r2, r3
     f2c:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
     f30:       e3a0101b        mov     r1, #27
     f34:       e0030391        mul     r3, r1, r3
     f38:       e0822003        add     r2, r2, r3
     f3c:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
     f40:       e3a0102a        mov     r1, #42 @ 0x2a
     f44:       e0030391        mul     r3, r1, r3
     f48:       e0822003        add     r2, r2, r3
     f4c:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
     f50:       e3a01026        mov     r1, #38 @ 0x26
     f54:       e0030391        mul     r3, r1, r3
     f58:       e0822003        add     r2, r2, r3
     f5c:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
     f60:       e3e01024        mvn     r1, #36 @ 0x24
     f64:       e0030391        mul     r3, r1, r3
     f68:       e0823003        add     r3, r2, r3
     f6c:       e50b3010        str     r3, [fp, #-16]
     f70:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
     f74:       e3a02060        mov     r2, #96 @ 0x60
     f78:       e0020293        mul     r2, r3, r2
     f7c:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
     f80:       e3a01026        mov     r1, #38 @ 0x26
     f84:       e0030391        mul     r3, r1, r3
     f88:       e0822003        add     r2, r2, r3
     f8c:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
     f90:       e3a01052        mov     r1, #82 @ 0x52
     f94:       e0030391        mul     r3, r1, r3
     f98:       e0822003        add     r2, r2, r3
     f9c:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
     fa0:       e1a03303        lsl     r3, r3, #6
     fa4:       e0822003        add     r2, r2, r3
     fa8:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
     fac:       e3a0105b        mov     r1, #91 @ 0x5b
     fb0:       e0030391        mul     r3, r1, r3
     fb4:       e0821003        add     r1, r2, r3
     fb8:       e51b2054        ldr     r2, [fp, #-84]  @ 0xffffffac
     fbc:       e1a03002        mov     r3, r2
     fc0:       e1a03183        lsl     r3, r3, #3
     fc4:       e0623003        rsb     r3, r2, r3
     fc8:       e0812003        add     r2, r1, r3
     fcc:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
     fd0:       e3a01027        mov     r1, #39 @ 0x27
     fd4:       e0030391        mul     r3, r1, r3
     fd8:       e0822003        add     r2, r2, r3
     fdc:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
     fe0:       e1a03283        lsl     r3, r3, #5
     fe4:       e0822003        add     r2, r2, r3
     fe8:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
     fec:       e3e0105b        mvn     r1, #91 @ 0x5b
     ff0:       e0030391        mul     r3, r1, r3
     ff4:       e0822003        add     r2, r2, r3
     ff8:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
     ffc:       e3a01039        mov     r1, #57 @ 0x39
    1000:       e0030391        mul     r3, r1, r3
    1004:       e0822003        add     r2, r2, r3
    1008:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
    100c:       e3a01028        mov     r1, #40 @ 0x28
    1010:       e0030391        mul     r3, r1, r3
    1014:       e0822003        add     r2, r2, r3
    1018:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
    101c:       e3e0102e        mvn     r1, #46 @ 0x2e
    1020:       e0030391        mul     r3, r1, r3
    1024:       e0822003        add     r2, r2, r3
    1028:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
    102c:       e3e01014        mvn     r1, #20
    1030:       e0030391        mul     r3, r1, r3
    1034:       e0822003        add     r2, r2, r3
    1038:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
    103c:       e3e01035        mvn     r1, #53 @ 0x35
    1040:       e0030391        mul     r3, r1, r3
    1044:       e0822003        add     r2, r2, r3
    1048:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
    104c:       e3e0100d        mvn     r1, #13
    1050:       e0030391        mul     r3, r1, r3
    1054:       e0822003        add     r2, r2, r3
    1058:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
    105c:       e3e01018        mvn     r1, #24
    1060:       e0030391        mul     r3, r1, r3
    1064:       e0823003        add     r3, r2, r3
    1068:       e50b300c        str     r3, [fp, #-12]
    106c:       e51b304c        ldr     r3, [fp, #-76]  @ 0xffffffb4
    1070:       e3a02054        mov     r2, #84 @ 0x54
    1074:       e0020293        mul     r2, r3, r2
    1078:       e51b3050        ldr     r3, [fp, #-80]  @ 0xffffffb0
    107c:       e1a01003        mov     r1, r3
    1080:       e1a03283        lsl     r3, r3, #5
    1084:       e0633001        rsb     r3, r3, r1
    1088:       e0822003        add     r2, r2, r3
    108c:       e51b3048        ldr     r3, [fp, #-72]  @ 0xffffffb8
    1090:       e3a01064        mov     r1, #100        @ 0x64
    1094:       e0030391        mul     r3, r1, r3
    1098:       e0822003        add     r2, r2, r3
    109c:       e51b305c        ldr     r3, [fp, #-92]  @ 0xffffffa4
    10a0:       e3e01035        mvn     r1, #53 @ 0x35
    10a4:       e0030391        mul     r3, r1, r3
    10a8:       e0822003        add     r2, r2, r3
    10ac:       e51b3060        ldr     r3, [fp, #-96]  @ 0xffffffa0
    10b0:       e1a03203        lsl     r3, r3, #4
    10b4:       e0822003        add     r2, r2, r3
    10b8:       e51b3054        ldr     r3, [fp, #-84]  @ 0xffffffac
    10bc:       e3e0105f        mvn     r1, #95 @ 0x5f
    10c0:       e0030391        mul     r3, r1, r3
    10c4:       e0822003        add     r2, r2, r3
    10c8:       e51b3058        ldr     r3, [fp, #-88]  @ 0xffffffa8
    10cc:       e3e01034        mvn     r1, #52 @ 0x34
    10d0:       e0030391        mul     r3, r1, r3
    10d4:       e0822003        add     r2, r2, r3
    10d8:       e51b3084        ldr     r3, [fp, #-132] @ 0xffffff7c
    10dc:       e3e01037        mvn     r1, #55 @ 0x37
    10e0:       e0030391        mul     r3, r1, r3
    10e4:       e0822003        add     r2, r2, r3
    10e8:       e51b307c        ldr     r3, [fp, #-124] @ 0xffffff84
    10ec:       e3a01037        mov     r1, #55 @ 0x37
    10f0:       e0030391        mul     r3, r1, r3
    10f4:       e0822003        add     r2, r2, r3
    10f8:       e51b3080        ldr     r3, [fp, #-128] @ 0xffffff80
    10fc:       e3e01005        mvn     r1, #5
    1100:       e0030391        mul     r3, r1, r3
    1104:       e0822003        add     r2, r2, r3
    1108:       e51b3074        ldr     r3, [fp, #-116] @ 0xffffff8c
    110c:       e3e01005        mvn     r1, #5
    1110:       e0030391        mul     r3, r1, r3
    1114:       e0822003        add     r2, r2, r3
    1118:       e51b3078        ldr     r3, [fp, #-120] @ 0xffffff88
    111c:       e3a0102a        mov     r1, #42 @ 0x2a
    1120:       e0030391        mul     r3, r1, r3
    1124:       e0822003        add     r2, r2, r3
    1128:       e51b306c        ldr     r3, [fp, #-108] @ 0xffffff94
    112c:       e3e01024        mvn     r1, #36 @ 0x24
    1130:       e0030391        mul     r3, r1, r3
    1134:       e0822003        add     r2, r2, r3
    1138:       e51b3070        ldr     r3, [fp, #-112] @ 0xffffff90
    113c:       e3e01025        mvn     r1, #37 @ 0x25
    1140:       e0030391        mul     r3, r1, r3
    1144:       e0822003        add     r2, r2, r3
    1148:       e51b3064        ldr     r3, [fp, #-100] @ 0xffffff9c
    114c:       e1a03303        lsl     r3, r3, #6
    1150:       e0822003        add     r2, r2, r3
    1154:       e51b3068        ldr     r3, [fp, #-104] @ 0xffffff98
    1158:       e3e0101a        mvn     r1, #26
    115c:       e0030391        mul     r3, r1, r3
    1160:       e0823003        add     r3, r2, r3
    1164:       e50b3008        str     r3, [fp, #-8]
    1168:       e51b2044        ldr     r2, [fp, #-68]  @ 0xffffffbc
    116c:       e3e03d6d        mvn     r3, #6976       @ 0x1b40
    1170:       e2433031        sub     r3, r3, #49     @ 0x31
    1174:       e1520003        cmp     r2, r3
    1178:       1a00004c        bne     0x12b0
    117c:       e51b2040        ldr     r2, [fp, #-64]  @ 0xffffffc0
    1180:       e3e03ea5        mvn     r3, #2640       @ 0xa50
    1184:       e2433004        sub     r3, r3, #4
    1188:       e1520003        cmp     r2, r3
    118c:       1a000047        bne     0x12b0
    1190:       e51b203c        ldr     r2, [fp, #-60]  @ 0xffffffc4
    1194:       e3a03a0d        mov     r3, #53248      @ 0xd000
    1198:       e28330c2        add     r3, r3, #194    @ 0xc2
    119c:       e1520003        cmp     r2, r3
    11a0:       1a000042        bne     0x12b0
    11a4:       e51b2038        ldr     r2, [fp, #-56]  @ 0xffffffc8
    11a8:       e3a03a05        mov     r3, #20480      @ 0x5000
    11ac:       e2833081        add     r3, r3, #129    @ 0x81
    11b0:       e1520003        cmp     r2, r3
    11b4:       1a00003d        bne     0x12b0
    11b8:       e51b2034        ldr     r2, [fp, #-52]  @ 0xffffffcc
    11bc:       e3a03d86        mov     r3, #8576       @ 0x2180
    11c0:       e2833036        add     r3, r3, #54     @ 0x36
    11c4:       e1520003        cmp     r2, r3
    11c8:       1a000038        bne     0x12b0
    11cc:       e51b2030        ldr     r2, [fp, #-48]  @ 0xffffffd0
    11d0:       e3a03c6b        mov     r3, #27392      @ 0x6b00
    11d4:       e28330ac        add     r3, r3, #172    @ 0xac
    11d8:       e1520003        cmp     r2, r3
    11dc:       1a000033        bne     0x12b0
    11e0:       e51b202c        ldr     r2, [fp, #-44]  @ 0xffffffd4
    11e4:       e3e03c69        mvn     r3, #26880      @ 0x6900
    11e8:       e24330c5        sub     r3, r3, #197    @ 0xc5
    11ec:       e1520003        cmp     r2, r3
    11f0:       1a00002e        bne     0x12b0
    11f4:       e51b2028        ldr     r2, [fp, #-40]  @ 0xffffffd8
    11f8:       e3a03dee        mov     r3, #15232      @ 0x3b80
    11fc:       e2833021        add     r3, r3, #33     @ 0x21
    1200:       e1520003        cmp     r2, r3
    1204:       1a000029        bne     0x12b0
    1208:       e51b2024        ldr     r2, [fp, #-36]  @ 0xffffffdc
    120c:       e3e03dbe        mvn     r3, #12160      @ 0x2f80
    1210:       e2433016        sub     r3, r3, #22
    1214:       e1520003        cmp     r2, r3
    1218:       1a000024        bne     0x12b0
    121c:       e51b2020        ldr     r2, [fp, #-32]  @ 0xffffffe0
    1220:       e3a03b11        mov     r3, #17408      @ 0x4400
    1224:       e283302c        add     r3, r3, #44     @ 0x2c
    1228:       e1520003        cmp     r2, r3
    122c:       1a00001f        bne     0x12b0
    1230:       e51b201c        ldr     r2, [fp, #-28]  @ 0xffffffe4
    1234:       e3a03c7a        mov     r3, #31232      @ 0x7a00
    1238:       e28330cb        add     r3, r3, #203    @ 0xcb
    123c:       e1520003        cmp     r2, r3
    1240:       1a00001a        bne     0x12b0
    1244:       e51b2018        ldr     r2, [fp, #-24]  @ 0xffffffe8
    1248:       e3e03c5a        mvn     r3, #23040      @ 0x5a00
    124c:       e243303a        sub     r3, r3, #58     @ 0x3a
    1250:       e1520003        cmp     r2, r3
    1254:       1a000015        bne     0x12b0
    1258:       e51b2014        ldr     r2, [fp, #-20]  @ 0xffffffec
    125c:       e3e03d7f        mvn     r3, #8128       @ 0x1fc0
    1260:       e2433007        sub     r3, r3, #7
    1264:       e1520003        cmp     r2, r3
    1268:       1a000010        bne     0x12b0
    126c:       e51b2010        ldr     r2, [fp, #-16]
    1270:       e3a03dcb        mov     r3, #12992      @ 0x32c0
    1274:       e283301b        add     r3, r3, #27
    1278:       e1520003        cmp     r2, r3
    127c:       1a00000b        bne     0x12b0
    1280:       e51b200c        ldr     r2, [fp, #-12]
    1284:       e3a03c4f        mov     r3, #20224      @ 0x4f00
    1288:       e28330ce        add     r3, r3, #206    @ 0xce
    128c:       e1520003        cmp     r2, r3
    1290:       1a000006        bne     0x12b0
    1294:       e51b2008        ldr     r2, [fp, #-8]
    1298:       e3e03dc6        mvn     r3, #12672      @ 0x3180
    129c:       e2433029        sub     r3, r3, #41     @ 0x29
    12a0:       e1520003        cmp     r2, r3
    12a4:       1a000001        bne     0x12b0
    12a8:       e3a03000        mov     r3, #0
    12ac:       ea000000        b       0x12b4
    12b0:       e1a00003        mov     r0, r3
    12b4:       e24bd004        sub     sp, fp, #4
    12b8:       e8bd8800        pop     {fp, pc}
    12bc:       e1a03000        mov     r3, r0
    12c0:       e1a00003        mov     r0, r3
    12c4:       e24bd004        sub     sp, fp, #4
    12c8:       e8bd8800        pop     {fp, pc}

剩下的不妨交给ai。

flag{Tr4c1Ng_F0R_FuN!}

misc2

题目解法有点sb，但是考点不错。

flag{0a07c11e46af753fd24d40023f0fdce1}

Hidden Write

有点阴间。

hxb2018{490fe1033073e985ef4526a41ea903ef}

happy_puzzle

考点是好的但是似乎有点为难人…数据块太多了。

unctf{312bbd92c1b891e1827ba519326b6688}

(官方答案错了)

https://www.cnblogs.com/wyuu101/p/19592423

HardWare

神秘的交易

https://blog.csdn.net/qq_75023818/article/details/136312892

SCTF{403110}

Forenics

Flying_High

我们发现一个坠毁的无人机，你能够恢复这个无人机的信息吗？

只能说这题有点小病，

(base) ┌──(rekjo㉿LAPTOP-BMERJF8L)-[/mnt/e]
└─$ cd bfa9e53164824aa29521f35bbc347d9a

(base) ┌──(rekjo㉿LAPTOP-BMERJF8L)-[/mnt/e/bfa9e53164824aa29521f35bbc347d9a]
└─$ pip install --user ubi_reader
Collecting ubi_reader
  Downloading ubi_reader-0.8.12-py3-none-any.whl.metadata (6.2 kB)
Collecting cryptography<45.0.0,>=44.0.2 (from ubi_reader)
  Downloading cryptography-44.0.3-cp39-abi3-manylinux_2_34_x86_64.whl.metadata (5.7 kB)
Collecting lzallright<0.3.0,>=0.2.1 (from ubi_reader)
  Downloading lzallright-0.2.6-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (946 bytes)
Requirement already satisfied: cffi>=1.12 in /home/rekjo/miniconda3/lib/python3.12/site-packages (from cryptography<45.0.0,>=44.0.2->ubi_reader) (2.0.0)
Requirement already satisfied: pycparser in /home/rekjo/miniconda3/lib/python3.12/site-packages (from cffi>=1.12->cryptography<45.0.0,>=44.0.2->ubi_reader) (2.21)
Downloading ubi_reader-0.8.12-py3-none-any.whl (73 kB)
Downloading cryptography-44.0.3-cp39-abi3-manylinux_2_34_x86_64.whl (4.2 MB)
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 4.2/4.2 MB 7.6 MB/s eta 0:00:00
Downloading lzallright-0.2.6-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (504 kB)
Installing collected packages: lzallright, cryptography, ubi_reader
Successfully installed cryptography-44.0.3 lzallright-0.2.6 ubi_reader-0.8.12

(base) ┌──(rekjo㉿LAPTOP-BMERJF8L)-[/mnt/e/bfa9e53164824aa29521f35bbc347d9a]
└─$ for i in *.bin; do
  ubireader_extract_files "$i" -o "extracted_$i"
done
Extracting files to: extracted_image0.bin
Extracting files to: extracted_image1.bin
extract_dents Warn: DEV Fail: unpack requires a buffer of 8 bytes
extract_dents Warn: DEV Fail: unpack requires a buffer of 8 bytes
extract_dents Warn: DEV Fail: unpack requires a buffer of 8 bytes
extract_dents Warn: DEV Fail: unpack requires a buffer of 8 bytes
Extracting files to: extracted_image2.bin
index Fatal: LEB: 31 at 4053248, Node size smaller than expected.
Extracting files to: extracted_image3.bin

就找吧，一找一个不吱声

最终在一个视频可以发现flag

HITB{96ac9a0458279711e5d61f10849e6c58}

沙箱逃逸

Run1

misc_7的原题。

flag{eee93c33d97aa55f785a7d10ba4ae3ce}