0520 babyunic(z3解法) HCTF-2015:RE-Crc-300 攻防世界

最新推荐文章于 2021-10-09 17:05:55 发布
最新推荐文章于 2021-10-09 17:05:55 发布
阅读量5.9k 收藏
点赞数
分类专栏： 逆向与保护
原文链接：https://www.cnblogs.com/YenKoc/p/12791367.html
版权

babyunic(z3解法)
func文件，Ghidra反mips，z3一把梭
一个优秀的z3脚本

import z3
import ctypes
import re

'''
#IDAPython
import binascii
start = 0x202020
tmp = []
for i in range(42):
    tmp.append(binascii.hexlify(get_bytes(start,4)))
    start += 4
print tmp

'''

tmp = ['ffffff94', 'ffffff38', '00000126', 'ffffff28', 'fffffc10', '00000294', 'fffffc9e', '000006ea', '000000dc', '00000006', 'ffffff0c', 'fffffdf6', 'fffffa82', 'fffffcd0', '00000182', '000003de', '0000014e', '000002b2', 'fffff8d8', '00000174', 'fffffaa6', 'fffff9d4', '000001c2', 'fffff97c', '0000035a', '00000146', 'ffffff3c', 'fffffa14', '000001ce', '000007dc', 'fffffd48', '00000098', '0000085e', 'fffffdb0', 'ffffffbc', '0000036e', 'ffffff4e', 'fffff836', '000005c0', '000006ae', '00000694', '00000022']
piParm2 = list(map(lambda x:z3.IntVal(ctypes.c_int32(int(x,16)).value),tmp))
#由于tmp中的数据是有符号整型，Python想要正常使用需要使用ctypes.c_int32转换类型
#为了将 Z3 中的数和 Python 区分开，应该使用 IntVal()、RealVal() 和 RatVal() 分别返回 Z3 整数、实数和有理数值。
a = '''
  *piParm2 = ((((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2]) -
										  (uint)pbParm1[3]) + (uint)pbParm1[4]) - (uint)pbParm1[5])
									   - (uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8]) +
									 (uint)pbParm1[9] + (uint)pbParm1[10]) - (uint)pbParm1[0xb]) +
								  (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
							   (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
							 (uint)pbParm1[0x12] + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) +
						   (uint)pbParm1[0x15] + (uint)pbParm1[0x16] + (uint)pbParm1[0x17] +
						  (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a]) -
					   (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c] + (uint)pbParm1[0x1d]) -
					 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) + (uint)pbParm1[0x20]) -
				  (uint)pbParm1[0x21]) + (uint)pbParm1[0x22] + (uint)pbParm1[0x23]) -
				(uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26]) -
			 (uint)pbParm1[0x27]) + (uint)pbParm1[0x28] + (uint)pbParm1[0x29];
  piParm2[1] = (((((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) +
											   (uint)pbParm1[2]) - (uint)pbParm1[3]) -
											 (uint)pbParm1[4]) + (uint)pbParm1[5]) -
										   (uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8])
										- (uint)pbParm1[9]) + (uint)pbParm1[10]) -
									  (uint)pbParm1[0xb]) + (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]
									) - (uint)pbParm1[0xe]) + (uint)pbParm1[0xf]) -
								 (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) + (uint)pbParm1[0x12])
							  - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14] + (uint)pbParm1[0x15]) -
							(uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) - (uint)pbParm1[0x18]) +
						 (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) + (uint)pbParm1[0x1b]) -
					  (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) + (uint)pbParm1[0x1e] +
					 (uint)pbParm1[0x1f] + (uint)pbParm1[0x20] + (uint)pbParm1[0x21] +
					 (uint)pbParm1[0x22] + (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]) -
				  (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) - (uint)pbParm1[0x27]) -
			   (uint)pbParm1[0x28]) + (uint)pbParm1[0x29];
  piParm2[2] = ((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
										  (uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5])
									   - (uint)pbParm1[6]) - (uint)pbParm1[7]) + (uint)pbParm1[8]) -
									(uint)pbParm1[9]) - (uint)pbParm1[10]) - (uint)pbParm1[0xb]) -
								 (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe]) -
							  (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11] +
							 (uint)pbParm1[0x12] + (uint)pbParm1[0x13] + (uint)pbParm1[0x14] +
							(uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) + (uint)pbParm1[0x17] +
						   (uint)pbParm1[0x18] + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a]) -
						 (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) +
					  (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) + (uint)pbParm1[0x20] +
					(uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) +
				  (uint)pbParm1[0x24] + (uint)pbParm1[0x25] + (uint)pbParm1[0x26]) -
				(uint)pbParm1[0x27]) + (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[3] = ((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) - (uint)pbParm1[2])
										   - (uint)pbParm1[3]) - (uint)pbParm1[4]) -
										 (uint)pbParm1[5]) + (uint)pbParm1[6] + (uint)pbParm1[7]) -
									   (uint)pbParm1[8]) - (uint)pbParm1[9]) - (uint)pbParm1[10]) -
									(uint)pbParm1[0xb]) + (uint)pbParm1[0xc]) - (uint)pbParm1[0xd])
								 + (uint)pbParm1[0xe]) - (uint)pbParm1[0xf]) + (uint)pbParm1[0x10])
							  - (uint)pbParm1[0x11]) + (uint)pbParm1[0x12] + (uint)pbParm1[0x13] +
							 (uint)pbParm1[0x14]) - (uint)pbParm1[0x15]) + (uint)pbParm1[0x16] +
							(uint)pbParm1[0x17] + (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) -
						 (uint)pbParm1[0x1a]) + (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) +
					   (uint)pbParm1[0x1d] + (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) -
					(uint)pbParm1[0x20]) - (uint)pbParm1[0x21]) + (uint)pbParm1[0x22]) -
				 (uint)pbParm1[0x23]) + (uint)pbParm1[0x24] + (uint)pbParm1[0x25] +
				(uint)pbParm1[0x26]) - (uint)pbParm1[0x27]) + (uint)pbParm1[0x28] +
			   (uint)pbParm1[0x29];
  piParm2[4] = ((((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) -
											  (uint)pbParm1[2]) + (uint)pbParm1[3]) -
											(uint)pbParm1[4]) - (uint)pbParm1[5]) + (uint)pbParm1[6]
										   + (uint)pbParm1[7] + (uint)pbParm1[8] + (uint)pbParm1[9])
										 - (uint)pbParm1[10]) + (uint)pbParm1[0xb] +
										(uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) +
									  (uint)pbParm1[0xe]) - (uint)pbParm1[0xf]) +
									 (uint)pbParm1[0x10] + (uint)pbParm1[0x11]) -
								   (uint)pbParm1[0x12]) + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]
								 ) + (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) -
							  (uint)pbParm1[0x17]) - (uint)pbParm1[0x18]) + (uint)pbParm1[0x19]) -
						   (uint)pbParm1[0x1a]) - (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) +
						 (uint)pbParm1[0x1d] + (uint)pbParm1[0x1e] + (uint)pbParm1[0x1f]) -
					   (uint)pbParm1[0x20]) + (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) -
					(uint)pbParm1[0x23]) + (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) +
				 (uint)pbParm1[0x26]) - (uint)pbParm1[0x27]) - (uint)pbParm1[0x28]) -
			   (uint)pbParm1[0x29];
  piParm2[5] = (((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2] +
										   (uint)pbParm1[3] + (uint)pbParm1[4] + (uint)pbParm1[5] +
										   (uint)pbParm1[6] + (uint)pbParm1[7] + (uint)pbParm1[8]) -
										 (uint)pbParm1[9]) - (uint)pbParm1[10]) - (uint)pbParm1[0xb]
									   ) - (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) -
									(uint)pbParm1[0xe]) + (uint)pbParm1[0xf]) - (uint)pbParm1[0x10])
								 + (uint)pbParm1[0x11]) - (uint)pbParm1[0x12]) + (uint)pbParm1[0x13]
							   + (uint)pbParm1[0x14]) - (uint)pbParm1[0x15]) + (uint)pbParm1[0x16])
							- (uint)pbParm1[0x17]) + (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) +
						  (uint)pbParm1[0x1a] + (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) +
					   (uint)pbParm1[0x1d]) - (uint)pbParm1[0x1e]) + (uint)pbParm1[0x1f] +
					  (uint)pbParm1[0x20] + (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) -
				   (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]) + (uint)pbParm1[0x25]) -
				(uint)pbParm1[0x26]) - (uint)pbParm1[0x27]) + (uint)pbParm1[0x28] +
			   (uint)pbParm1[0x29];
  piParm2[6] = ((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
										 (uint)pbParm1[3] + (uint)pbParm1[4]) - (uint)pbParm1[5]) +
									   (uint)pbParm1[6] + (uint)pbParm1[7] + (uint)pbParm1[8] +
									  (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb] +
									(uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe] +
								   (uint)pbParm1[0xf] + (uint)pbParm1[0x10] + (uint)pbParm1[0x11]) -
								 (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) - (uint)pbParm1[0x14])
							  - (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) +
							(uint)pbParm1[0x18] + (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
						  (uint)pbParm1[0x1b] + (uint)pbParm1[0x1c] + (uint)pbParm1[0x1d]) -
						(uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
					 (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) +
				   (uint)pbParm1[0x24] + (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) -
				(uint)pbParm1[0x27]) + (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[7] = (((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1]) - (uint)pbParm1[2])
										  - (uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5]
										+ (uint)pbParm1[6]) - (uint)pbParm1[7]) + (uint)pbParm1[8] +
									  (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb]) -
								   (uint)pbParm1[0xc]) + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
								(uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11]) -
							 (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14]) -
						  (uint)pbParm1[0x15]) + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) -
					   (uint)pbParm1[0x18]) + (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
					 (uint)pbParm1[0x1b] + (uint)pbParm1[0x1c] + (uint)pbParm1[0x1d] +
					 (uint)pbParm1[0x1e] + (uint)pbParm1[0x1f] + (uint)pbParm1[0x20]) -
				   (uint)pbParm1[0x21]) + (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) +
				 (uint)pbParm1[0x24] + (uint)pbParm1[0x25] + (uint)pbParm1[0x26] +
				(uint)pbParm1[0x27]) - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[8] = ((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) - (uint)pbParm1[2]) +
										  (uint)pbParm1[3] + (uint)pbParm1[4]) - (uint)pbParm1[5]) +
										(uint)pbParm1[6] + (uint)pbParm1[7] + (uint)pbParm1[8] +
										(uint)pbParm1[9] + (uint)pbParm1[10]) - (uint)pbParm1[0xb])
									 - (uint)pbParm1[0xc]) + (uint)pbParm1[0xd]) -
								   (uint)pbParm1[0xe]) + (uint)pbParm1[0xf] + (uint)pbParm1[0x10] +
								   (uint)pbParm1[0x11] + (uint)pbParm1[0x12]) - (uint)pbParm1[0x13])
								 + (uint)pbParm1[0x14] + (uint)pbParm1[0x15]) - (uint)pbParm1[0x16])
							  - (uint)pbParm1[0x17]) + (uint)pbParm1[0x18] + (uint)pbParm1[0x19] +
							 (uint)pbParm1[0x1a]) - (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c]) -
						  (uint)pbParm1[0x1d]) - (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) -
					   (uint)pbParm1[0x20]) - (uint)pbParm1[0x21]) + (uint)pbParm1[0x22]) -
					(uint)pbParm1[0x23]) - (uint)pbParm1[0x24]) + (uint)pbParm1[0x25]) -
				 (uint)pbParm1[0x26]) - (uint)pbParm1[0x27]) + (uint)pbParm1[0x28]) -
			   (uint)pbParm1[0x29];
  piParm2[9] = ((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2]) -
										  (uint)pbParm1[3]) + (uint)pbParm1[4] + (uint)pbParm1[5] +
										 (uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8]) -
									  (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb] +
									 (uint)pbParm1[0xc] + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe])
								   + (uint)pbParm1[0xf] + (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]
								 ) - (uint)pbParm1[0x12]) + (uint)pbParm1[0x13] +
							   (uint)pbParm1[0x14]) - (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) -
							(uint)pbParm1[0x17]) + (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) -
						 (uint)pbParm1[0x1a]) - (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c] +
						(uint)pbParm1[0x1d] + (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) +
					  (uint)pbParm1[0x20] + (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) -
				   (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) +
				(uint)pbParm1[0x26]) - (uint)pbParm1[0x27]) + (uint)pbParm1[0x28] +
			   (uint)pbParm1[0x29];
  piParm2[10] = (((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) +
											   (uint)pbParm1[2] + (uint)pbParm1[3]) -
											 (uint)pbParm1[4]) - (uint)pbParm1[5]) +
											(uint)pbParm1[6] + (uint)pbParm1[7]) - (uint)pbParm1[8])
										 - (uint)pbParm1[9]) - (uint)pbParm1[10]) -
									   (uint)pbParm1[0xb]) + (uint)pbParm1[0xc] + (uint)pbParm1[0xd]
									  + (uint)pbParm1[0xe]) - (uint)pbParm1[0xf]) +
									(uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
								   (uint)pbParm1[0x12] + (uint)pbParm1[0x13] + (uint)pbParm1[0x14])
								 - (uint)pbParm1[0x15]) + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]
							   ) - (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a]
							) - (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d]) -
						(uint)pbParm1[0x1e]) + (uint)pbParm1[0x1f] + (uint)pbParm1[0x20]) -
					  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23]) -
				   (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26]) -
				(uint)pbParm1[0x27]) + (uint)pbParm1[0x28] + (uint)pbParm1[0x29];
  piParm2[0xb] = (((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2]
											  + (uint)pbParm1[3] + (uint)pbParm1[4]) -
											(uint)pbParm1[5]) + (uint)pbParm1[6] + (uint)pbParm1[7])
										  - (uint)pbParm1[8]) + (uint)pbParm1[9] + (uint)pbParm1[10]
										 ) - (uint)pbParm1[0xb]) - (uint)pbParm1[0xc]) -
									  (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) + (uint)pbParm1[0xf]
									) - (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) -
								 (uint)pbParm1[0x12]) + (uint)pbParm1[0x13] + (uint)pbParm1[0x14]) -
							   (uint)pbParm1[0x15]) + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) +
							 (uint)pbParm1[0x18] + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a] +
							(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d] +
						  (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
					   (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) +
					 (uint)pbParm1[0x24] + (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) -
				  (uint)pbParm1[0x27]) - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0xc] = ((((((((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) -
													(uint)pbParm1[2]) - (uint)pbParm1[3]) +
												  (uint)pbParm1[4]) - (uint)pbParm1[5]) -
												(uint)pbParm1[6]) + (uint)pbParm1[7] +
											   (uint)pbParm1[8]) - (uint)pbParm1[9]) +
											 (uint)pbParm1[10]) - (uint)pbParm1[0xb]) -
										   (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) +
										 (uint)pbParm1[0xe]) - (uint)pbParm1[0xf]) +
									   (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
									 (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) -
								   (uint)pbParm1[0x14]) - (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]
								 ) + (uint)pbParm1[0x17]) - (uint)pbParm1[0x18]) +
							  (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) + (uint)pbParm1[0x1b]) -
						   (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d]) - (uint)pbParm1[0x1e]) -
						(uint)pbParm1[0x1f]) + (uint)pbParm1[0x20] + (uint)pbParm1[0x21] +
					   (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]) -
					(uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27]) -
				 (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0xd] = ((((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) +
												(uint)pbParm1[2]) - (uint)pbParm1[3]) +
											  (uint)pbParm1[4]) - (uint)pbParm1[5]) +
											(uint)pbParm1[6]) - (uint)pbParm1[7]) + (uint)pbParm1[8]
										  ) - (uint)pbParm1[9]) + (uint)pbParm1[10]) -
									   (uint)pbParm1[0xb]) + (uint)pbParm1[0xc] + (uint)pbParm1[0xd]
									   + (uint)pbParm1[0xe] + (uint)pbParm1[0xf]) -
									 (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) -
								   (uint)pbParm1[0x12]) + (uint)pbParm1[0x13] + (uint)pbParm1[0x14]
								  + (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) -
								(uint)pbParm1[0x17]) + (uint)pbParm1[0x18] + (uint)pbParm1[0x19]) -
							  (uint)pbParm1[0x1a]) - (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c] +
							(uint)pbParm1[0x1d]) - (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) -
						 (uint)pbParm1[0x20]) + (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) -
					  (uint)pbParm1[0x23]) + (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) -
				   (uint)pbParm1[0x26]) - (uint)pbParm1[0x27]) + (uint)pbParm1[0x28]) -
				 (uint)pbParm1[0x29];
  piParm2[0xe] = ((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2]) -
										(uint)pbParm1[3]) - (uint)pbParm1[4]) - (uint)pbParm1[5]) +
									 (uint)pbParm1[6]) - (uint)pbParm1[7]) + (uint)pbParm1[8] +
									(uint)pbParm1[9] + (uint)pbParm1[10]) - (uint)pbParm1[0xb]) +
								 (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
							   (uint)pbParm1[0xf] + (uint)pbParm1[0x10] + (uint)pbParm1[0x11]) -
							 (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
						  (uint)pbParm1[0x15]) + (uint)pbParm1[0x16] + (uint)pbParm1[0x17] +
						 (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a] +
						(uint)pbParm1[0x1b] + (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
					 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) + (uint)pbParm1[0x20] +
					(uint)pbParm1[0x21] + (uint)pbParm1[0x22] + (uint)pbParm1[0x23] +
					(uint)pbParm1[0x24] + (uint)pbParm1[0x25] + (uint)pbParm1[0x26]) -
				  (uint)pbParm1[0x27]) - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0xf] = (((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
										  (uint)pbParm1[3] + (uint)pbParm1[4] + (uint)pbParm1[5]) -
										(uint)pbParm1[6]) + (uint)pbParm1[7]) - (uint)pbParm1[8]) -
									 (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb] +
									(uint)pbParm1[0xc] + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) -
								 (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11]) -
							  (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
						   (uint)pbParm1[0x15]) + (uint)pbParm1[0x16] + (uint)pbParm1[0x17] +
						   (uint)pbParm1[0x18] + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a] +
						  (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
					   (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) + (uint)pbParm1[0x20]) -
					(uint)pbParm1[0x21]) + (uint)pbParm1[0x22] + (uint)pbParm1[0x23] +
					(uint)pbParm1[0x24] + (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) +
				  (uint)pbParm1[0x27] + (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x10] =
	   (((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
								   (uint)pbParm1[3]) - (uint)pbParm1[4]) - (uint)pbParm1[5]) +
								 (uint)pbParm1[6] + (uint)pbParm1[7] + (uint)pbParm1[8] +
								 (uint)pbParm1[9] + (uint)pbParm1[10]) - (uint)pbParm1[0xb]) +
							  (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe] +
							 (uint)pbParm1[0xf] + (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
						  (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14]) -
					   (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) -
					(uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a] +
				   (uint)pbParm1[0x1b] + (uint)pbParm1[0x1c] + (uint)pbParm1[0x1d]) -
				 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) + (uint)pbParm1[0x20]) -
			  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23]) -
		   (uint)pbParm1[0x24]) + (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) + (uint)pbParm1[0x29];
  piParm2[0x11] =
	   (((((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2] +
									   (uint)pbParm1[3] + (uint)pbParm1[4]) - (uint)pbParm1[5]) +
									 (uint)pbParm1[6] + (uint)pbParm1[7] + (uint)pbParm1[8]) -
								   (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb]) -
								(uint)pbParm1[0xc]) + (uint)pbParm1[0xd] + (uint)pbParm1[0xe] +
							   (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11]) -
							(uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14]) -
						 (uint)pbParm1[0x15]) + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) -
					  (uint)pbParm1[0x18]) + (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
				   (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d]) -
				(uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) + (uint)pbParm1[0x20]) -
			 (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23]) -
		  (uint)pbParm1[0x24]) + (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27] +
	   (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x12] =
	   (((((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) - (uint)pbParm1[2]) -
									  (uint)pbParm1[3]) + (uint)pbParm1[4] + (uint)pbParm1[5]) -
									(uint)pbParm1[6]) + (uint)pbParm1[7]) - (uint)pbParm1[8]) +
								  (uint)pbParm1[9] + (uint)pbParm1[10]) - (uint)pbParm1[0xb]) -
							   (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe]) -
							(uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11] +
						   (uint)pbParm1[0x12] + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
						(uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) -
					 (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) -
				  (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c] + (uint)pbParm1[0x1d] +
				 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
			  (uint)pbParm1[0x21]) + (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) -
		   (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) + (uint)pbParm1[0x29];
  piParm2[0x13] =
	   (((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2] +
								(uint)pbParm1[3]) - (uint)pbParm1[4]) - (uint)pbParm1[5]) +
							 (uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8]) -
						  (uint)pbParm1[9]) - (uint)pbParm1[10]) - (uint)pbParm1[0xb]) -
					   (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe] +
					  (uint)pbParm1[0xf] + (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
					(uint)pbParm1[0x12] + (uint)pbParm1[0x13] + (uint)pbParm1[0x14] +
				   (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) + (uint)pbParm1[0x17] +
				 (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a] +
			   (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d] +
			  (uint)pbParm1[0x1e] + (uint)pbParm1[0x1f] + (uint)pbParm1[0x20] + (uint)pbParm1[0x21])
			- (uint)pbParm1[0x22]) + (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]) -
		 (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27] + (uint)pbParm1[0x28]) -
	   (uint)pbParm1[0x29];
  piParm2[0x14] =
	   (((((((((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1]) - (uint)pbParm1[2]) -
										(uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5]) -
									 (uint)pbParm1[6]) + (uint)pbParm1[7]) - (uint)pbParm1[8]) -
								  (uint)pbParm1[9]) + (uint)pbParm1[10] + (uint)pbParm1[0xb]) -
								(uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe]) -
							 (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11]) -
						  (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14] +
						(uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) + (uint)pbParm1[0x17] +
					  (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) -
				   (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
				(uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) +
			 (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23] + (uint)pbParm1[0x24]
		   ) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26]) - (uint)pbParm1[0x27]) +
	   (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x15] =
	   ((((((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) - (uint)pbParm1[2]) -
									   (uint)pbParm1[3]) + (uint)pbParm1[4] + (uint)pbParm1[5] +
									   (uint)pbParm1[6] + (uint)pbParm1[7]) - (uint)pbParm1[8]) -
									(uint)pbParm1[9]) - (uint)pbParm1[10]) - (uint)pbParm1[0xb]) -
								 (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) -
							  (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11]) -
						   (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14]) -
						(uint)pbParm1[0x15]) + (uint)pbParm1[0x16] + (uint)pbParm1[0x17] +
					   (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
					(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
				 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
			  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) -
		   (uint)pbParm1[0x24]) + (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) + (uint)pbParm1[0x29];
  piParm2[0x16] =
	   ((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2] +
								  (uint)pbParm1[3] + (uint)pbParm1[4] + (uint)pbParm1[5] +
								  (uint)pbParm1[6] + (uint)pbParm1[7]) - (uint)pbParm1[8]) +
							   (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb]) -
							(uint)pbParm1[0xc]) + (uint)pbParm1[0xd] + (uint)pbParm1[0xe] +
						   (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11] +
						 (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) +
					   (uint)pbParm1[0x15] + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) +
					(uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
				 (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d] +
				(uint)pbParm1[0x1e] + (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) +
			 (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) -
		  (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   + (uint)pbParm1[0x28] + (uint)pbParm1[0x29];
  piParm2[0x17] =
	   ((((((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
										(uint)pbParm1[3]) - (uint)pbParm1[4]) - (uint)pbParm1[5]) -
									 (uint)pbParm1[6]) - (uint)pbParm1[7]) + (uint)pbParm1[8]) -
								  (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb] +
								(uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
							 (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
						   (uint)pbParm1[0x12] + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
						(uint)pbParm1[0x15]) + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) +
					  (uint)pbParm1[0x18] + (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
				   (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d] +
				 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
			  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) -
		   (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x18] =
	   ((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1]) - (uint)pbParm1[2]) +
							  (uint)pbParm1[3] + (uint)pbParm1[4]) - (uint)pbParm1[5]) +
							(uint)pbParm1[6] + (uint)pbParm1[7]) - (uint)pbParm1[8]) +
						  (uint)pbParm1[9] + (uint)pbParm1[10]) - (uint)pbParm1[0xb]) -
					   (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
					 (uint)pbParm1[0xf] + (uint)pbParm1[0x10] + (uint)pbParm1[0x11]) -
				   (uint)pbParm1[0x12]) + (uint)pbParm1[0x13] + (uint)pbParm1[0x14] +
				   (uint)pbParm1[0x15] + (uint)pbParm1[0x16] + (uint)pbParm1[0x17] +
				   (uint)pbParm1[0x18] + (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) -
				(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d] +
			  (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) + (uint)pbParm1[0x20] +
			 (uint)pbParm1[0x21] + (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]
		  ) - (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27] +
	   (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x19] =
	   (((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
									 (uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5] +
								   (uint)pbParm1[6]) - (uint)pbParm1[7]) + (uint)pbParm1[8] +
								  (uint)pbParm1[9] + (uint)pbParm1[10]) - (uint)pbParm1[0xb]) -
							   (uint)pbParm1[0xc]) + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
							(uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11] +
						   (uint)pbParm1[0x12] + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
						(uint)pbParm1[0x15]) + (uint)pbParm1[0x16] + (uint)pbParm1[0x17]) -
					  (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a]) -
				   (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) +
				(uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) +
			 (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) -
		  (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   + (uint)pbParm1[0x28] + (uint)pbParm1[0x29];
  piParm2[0x1a] =
	   ((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2] +
									(uint)pbParm1[3] + (uint)pbParm1[4]) - (uint)pbParm1[5]) -
								 (uint)pbParm1[6]) + (uint)pbParm1[7]) - (uint)pbParm1[8]) -
							  (uint)pbParm1[9]) - (uint)pbParm1[10]) - (uint)pbParm1[0xb]) +
						   (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe]) -
						(uint)pbParm1[0xf]) + (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
					 (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) +
				   (uint)pbParm1[0x15] + (uint)pbParm1[0x16] + (uint)pbParm1[0x17] +
				   (uint)pbParm1[0x18] + (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) -
				(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) +
			  (uint)pbParm1[0x1e] + (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
		   (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23] + (uint)pbParm1[0x24])
		- (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27] + (uint)pbParm1[0x28] +
	   (uint)pbParm1[0x29];
  piParm2[0x1b] =
	   ((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2]) -
								   (uint)pbParm1[3]) + (uint)pbParm1[4]) - (uint)pbParm1[5]) -
								(uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8]) -
							 (uint)pbParm1[9]) - (uint)pbParm1[10]) - (uint)pbParm1[0xb]) +
						   (uint)pbParm1[0xc] + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
						 (uint)pbParm1[0xf] + (uint)pbParm1[0x10] + (uint)pbParm1[0x11] +
						 (uint)pbParm1[0x12] + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
					  (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) +
					(uint)pbParm1[0x18] + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a]) -
				  (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c] + (uint)pbParm1[0x1d] +
				 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
			  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23]) -
		   (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x1c] =
	   (((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
									(uint)pbParm1[3] + (uint)pbParm1[4]) - (uint)pbParm1[5]) +
								  (uint)pbParm1[6] + (uint)pbParm1[7]) - (uint)pbParm1[8]) -
							   (uint)pbParm1[9]) + (uint)pbParm1[10] + (uint)pbParm1[0xb]) -
							 (uint)pbParm1[0xc]) + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
						  (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11] +
						 (uint)pbParm1[0x12] + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
					  (uint)pbParm1[0x15]) + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) -
				   (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
				(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
			 (uint)pbParm1[0x1e]) + (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
		  (uint)pbParm1[0x21]) + (uint)pbParm1[0x22] + (uint)pbParm1[0x23] + (uint)pbParm1[0x24]) -
		(uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27] + (uint)pbParm1[0x28] +
	   (uint)pbParm1[0x29];
  piParm2[0x1d] =
	   (((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1]) - (uint)pbParm1[2]) -
							  (uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5] +
							 (uint)pbParm1[6] + (uint)pbParm1[7]) - (uint)pbParm1[8]) +
						  (uint)pbParm1[9]) - (uint)pbParm1[10]) - (uint)pbParm1[0xb]) +
					   (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe] +
					 (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11] +
				   (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14] +
				  (uint)pbParm1[0x15] + (uint)pbParm1[0x16] + (uint)pbParm1[0x17]) -
				(uint)pbParm1[0x18]) + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a]) -
			  (uint)pbParm1[0x1b]) + (uint)pbParm1[0x1c] + (uint)pbParm1[0x1d] + (uint)pbParm1[0x1e]
			  + (uint)pbParm1[0x1f] + (uint)pbParm1[0x20]) - (uint)pbParm1[0x21]) -
		   (uint)pbParm1[0x22]) + (uint)pbParm1[0x23] + (uint)pbParm1[0x24]) - (uint)pbParm1[0x25])
		 + (uint)pbParm1[0x26] + (uint)pbParm1[0x27]) - (uint)pbParm1[0x28]) + (uint)pbParm1[0x29];
  piParm2[0x1e] =
	   (((((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2] +
									  (uint)pbParm1[3]) - (uint)pbParm1[4]) - (uint)pbParm1[5]) -
								   (uint)pbParm1[6]) - (uint)pbParm1[7]) + (uint)pbParm1[8] +
								 (uint)pbParm1[9]) - (uint)pbParm1[10]) - (uint)pbParm1[0xb]) -
							  (uint)pbParm1[0xc]) + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) -
						   (uint)pbParm1[0xf]) + (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) -
						(uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14]) -
					 (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) + (uint)pbParm1[0x17] +
				   (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
				(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
			 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
		  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23] + (uint)pbParm1[0x24] +
		(uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27] + (uint)pbParm1[0x28] +
	   (uint)pbParm1[0x29];
  piParm2[0x1f] =
	   (((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1]) - (uint)pbParm1[2]) +
								   (uint)pbParm1[3] + (uint)pbParm1[4]) - (uint)pbParm1[5]) -
								(uint)pbParm1[6]) + (uint)pbParm1[7] + (uint)pbParm1[8] +
								(uint)pbParm1[9] + (uint)pbParm1[10] + (uint)pbParm1[0xb] +
							   (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) -
							(uint)pbParm1[0xf]) + (uint)pbParm1[0x10] + (uint)pbParm1[0x11] +
							(uint)pbParm1[0x12] + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) +
						 (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) + (uint)pbParm1[0x17]) -
					  (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a] +
					(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d]) -
				 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) +
			  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23]) -
		   (uint)pbParm1[0x24]) + (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x20] =
	   ((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
								(uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5] +
							   (uint)pbParm1[6] + (uint)pbParm1[7] + (uint)pbParm1[8]) -
							 (uint)pbParm1[9]) + (uint)pbParm1[10] + (uint)pbParm1[0xb]) -
						   (uint)pbParm1[0xc]) + (uint)pbParm1[0xd] + (uint)pbParm1[0xe]) -
						 (uint)pbParm1[0xf]) + (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
					   (uint)pbParm1[0x12] + (uint)pbParm1[0x13] + (uint)pbParm1[0x14]) -
					 (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) + (uint)pbParm1[0x17]) -
				  (uint)pbParm1[0x18]) + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a] +
				 (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
			  (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
		   (uint)pbParm1[0x21]) + (uint)pbParm1[0x22] + (uint)pbParm1[0x23] + (uint)pbParm1[0x24] +
		  (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27]) - (uint)pbParm1[0x28])
	   + (uint)pbParm1[0x29];
  piParm2[0x21] =
	   ((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) - (uint)pbParm1[2]) +
									(uint)pbParm1[3] + (uint)pbParm1[4] + (uint)pbParm1[5] +
								   (uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8]) +
								 (uint)pbParm1[9] + (uint)pbParm1[10] + (uint)pbParm1[0xb]) -
							   (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe] +
							 (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11]) -
						  (uint)pbParm1[0x12]) + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) +
						(uint)pbParm1[0x15] + (uint)pbParm1[0x16] + (uint)pbParm1[0x17]) -
					  (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a] +
					(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d]) -
				 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
			  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) +
		   (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x22] =
	   (((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1]) - (uint)pbParm1[2]) +
								  (uint)pbParm1[3]) - (uint)pbParm1[4]) - (uint)pbParm1[5]) -
							   (uint)pbParm1[6]) + (uint)pbParm1[7] + (uint)pbParm1[8] +
							   (uint)pbParm1[9] + (uint)pbParm1[10] + (uint)pbParm1[0xb]) -
							 (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) +
						  (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11]) -
					   (uint)pbParm1[0x12]) + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
					(uint)pbParm1[0x15]) + (uint)pbParm1[0x16] + (uint)pbParm1[0x17]) -
				  (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) + (uint)pbParm1[0x1a] +
				 (uint)pbParm1[0x1b] + (uint)pbParm1[0x1c] + (uint)pbParm1[0x1d]) -
			   (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
			(uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]
		 ) + (uint)pbParm1[0x25] + (uint)pbParm1[0x26] + (uint)pbParm1[0x27]) - (uint)pbParm1[0x28])
	   - (uint)pbParm1[0x29];
  piParm2[0x23] =
	   (((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) + (uint)pbParm1[2] +
								(uint)pbParm1[3] + (uint)pbParm1[4]) - (uint)pbParm1[5]) -
							 (uint)pbParm1[6]) + (uint)pbParm1[7] + (uint)pbParm1[8]) -
						   (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb] +
						  (uint)pbParm1[0xc] + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) -
					   (uint)pbParm1[0xf]) + (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
					 (uint)pbParm1[0x12] + (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
				  (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) + (uint)pbParm1[0x17] +
				(uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
			  (uint)pbParm1[0x1b] + (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
		   (uint)pbParm1[0x1e]) + (uint)pbParm1[0x1f] + (uint)pbParm1[0x20]) - (uint)pbParm1[0x21])
		 + (uint)pbParm1[0x22] + (uint)pbParm1[0x23] + (uint)pbParm1[0x24] + (uint)pbParm1[0x25] +
		 (uint)pbParm1[0x26] + (uint)pbParm1[0x27]) - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x24] =
	   ((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2]) -
							  (uint)pbParm1[3]) - (uint)pbParm1[4]) - (uint)pbParm1[5]) -
						   (uint)pbParm1[6]) + (uint)pbParm1[7] + (uint)pbParm1[8] +
						  (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb] +
						(uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) + (uint)pbParm1[0xe] +
					   (uint)pbParm1[0xf] + (uint)pbParm1[0x10] + (uint)pbParm1[0x11] +
					   (uint)pbParm1[0x12] + (uint)pbParm1[0x13] + (uint)pbParm1[0x14] +
					  (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) +
				   (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) -
				(uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) + (uint)pbParm1[0x1d] +
			   (uint)pbParm1[0x1e] + (uint)pbParm1[0x1f] + (uint)pbParm1[0x20]) -
			 (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) -
		  (uint)pbParm1[0x24]) + (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) + (uint)pbParm1[0x27] +
	   (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x25] =
	   (((((((((((((((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) - (uint)pbParm1[2])
										  + (uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5]
										) - (uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8]
									 ) - (uint)pbParm1[9]) + (uint)pbParm1[10]) - (uint)pbParm1[0xb]
								  ) - (uint)pbParm1[0xc]) - (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]
							   ) - (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) + (uint)pbParm1[0x11]
							+ (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) - (uint)pbParm1[0x14]) -
						 (uint)pbParm1[0x15]) + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) +
					  (uint)pbParm1[0x18]) - (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) +
				   (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) +
				 (uint)pbParm1[0x1e] + (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) +
			  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) + (uint)pbParm1[0x23]) -
		   (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) - (uint)pbParm1[0x29];
  piParm2[0x26] =
	   (((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2] +
								(uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5] +
							   (uint)pbParm1[6] + (uint)pbParm1[7]) - (uint)pbParm1[8]) -
							(uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb] +
						   (uint)pbParm1[0xc] + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) -
						(uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) -
					 (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14] +
				   (uint)pbParm1[0x15]) - (uint)pbParm1[0x16]) + (uint)pbParm1[0x17] +
				  (uint)pbParm1[0x18] + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a] +
				 (uint)pbParm1[0x1b]) - (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) +
			   (uint)pbParm1[0x1e] + (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
			(uint)pbParm1[0x21]) + (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]
		 ) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26] + (uint)pbParm1[0x27] + (uint)pbParm1[0x28])
	   - (uint)pbParm1[0x29];
  piParm2[0x27] =
	   ((((((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) - (uint)pbParm1[2]) -
							 (uint)pbParm1[3]) - (uint)pbParm1[4]) + (uint)pbParm1[5]) -
						  (uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8]) +
					   (uint)pbParm1[9]) - (uint)pbParm1[10]) + (uint)pbParm1[0xb]) -
					(uint)pbParm1[0xc]) + (uint)pbParm1[0xd] + (uint)pbParm1[0xe]) -
				  (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) +
				(uint)pbParm1[0x12] + (uint)pbParm1[0x13] + (uint)pbParm1[0x14] +
				(uint)pbParm1[0x15] + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) +
			  (uint)pbParm1[0x18] + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a] + (uint)pbParm1[0x1b]
			 + (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) + (uint)pbParm1[0x1e] +
			(uint)pbParm1[0x1f] + (uint)pbParm1[0x20] + (uint)pbParm1[0x21] + (uint)pbParm1[0x22]) -
		  (uint)pbParm1[0x23]) - (uint)pbParm1[0x24]) + (uint)pbParm1[0x25] + (uint)pbParm1[0x26] +
		(uint)pbParm1[0x27]) - (uint)pbParm1[0x28]) + (uint)pbParm1[0x29];
  piParm2[0x28] =
	   (((((((((((((((((((((((uint)*pbParm1 - (uint)pbParm1[1]) - (uint)pbParm1[2]) -
						  (uint)pbParm1[3]) + (uint)pbParm1[4] + (uint)pbParm1[5] + (uint)pbParm1[6]
						 ) - (uint)pbParm1[7]) + (uint)pbParm1[8] + (uint)pbParm1[9]) -
					  (uint)pbParm1[10]) + (uint)pbParm1[0xb]) - (uint)pbParm1[0xc]) -
				   (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) + (uint)pbParm1[0xf] +
				  (uint)pbParm1[0x10] + (uint)pbParm1[0x11] + (uint)pbParm1[0x12] +
				  (uint)pbParm1[0x13] + (uint)pbParm1[0x14] + (uint)pbParm1[0x15] +
				 (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) + (uint)pbParm1[0x18] +
			   (uint)pbParm1[0x19]) - (uint)pbParm1[0x1a]) + (uint)pbParm1[0x1b] +
			 (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) + (uint)pbParm1[0x1e] + (uint)pbParm1[0x1f]
		   + (uint)pbParm1[0x20]) - (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) +
		 (uint)pbParm1[0x23] + (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) + (uint)pbParm1[0x26] +
	   (uint)pbParm1[0x27] + (uint)pbParm1[0x28] + (uint)pbParm1[0x29];
  piParm2[0x29] =
	   ((((((((((((((((((((((((((((((((uint)*pbParm1 + (uint)pbParm1[1] + (uint)pbParm1[2] +
									  (uint)pbParm1[3] + (uint)pbParm1[4] + (uint)pbParm1[5] +
									 (uint)pbParm1[6]) - (uint)pbParm1[7]) - (uint)pbParm1[8]) -
								  (uint)pbParm1[9]) + (uint)pbParm1[10] + (uint)pbParm1[0xb]) -
								(uint)pbParm1[0xc]) + (uint)pbParm1[0xd]) - (uint)pbParm1[0xe]) -
							 (uint)pbParm1[0xf]) - (uint)pbParm1[0x10]) - (uint)pbParm1[0x11]) -
						  (uint)pbParm1[0x12]) - (uint)pbParm1[0x13]) + (uint)pbParm1[0x14]) -
					   (uint)pbParm1[0x15]) + (uint)pbParm1[0x16]) - (uint)pbParm1[0x17]) -
					(uint)pbParm1[0x18]) + (uint)pbParm1[0x19] + (uint)pbParm1[0x1a] +
					(uint)pbParm1[0x1b] + (uint)pbParm1[0x1c]) - (uint)pbParm1[0x1d]) -
				 (uint)pbParm1[0x1e]) - (uint)pbParm1[0x1f]) - (uint)pbParm1[0x20]) -
			  (uint)pbParm1[0x21]) - (uint)pbParm1[0x22]) - (uint)pbParm1[0x23]) -
		   (uint)pbParm1[0x24]) - (uint)pbParm1[0x25]) - (uint)pbParm1[0x26]) - (uint)pbParm1[0x27])
	   - (uint)pbParm1[0x28]) + (uint)pbParm1[0x29];
  return;
}
'''

#对伪代码进行处理
for i in range(42):
	exec(r'a = re.sub(r"\(uint\)pbParm1\[' + hex(i) + r'\]","' + "m[" + str(i) + "]\",a)")

for i in range(1,11):
	exec(r'a = re.sub(r"\(uint\)pbParm1\[' + str(i) + r'\]","' + "m[" + str(i) + "]\",a)")

exec(r'a = re.sub(r"\(uint\)\*pbParm1","m[0]",a)')


exec(r'a = re.sub(r"\*piParm2","piParm2[0]",a)')
exec(r'a = re.sub(r" ","",a)')
exec(r'a = re.sub(r"\t","",a)')
exec(r'a = re.sub(r"\n","",a)')
exec(r'a = re.sub(r"=","==",a)')
#创建一个42个元素的数组，每个元素位z3.Int类型的对象
m = [z3.Int('m%d' % i) for i in range(42)]
#把所有42元的方程提取出来
pttern = re.compile(r"piParm2.*?;")
tmp = pttern.findall(a)

#创造一个通用 solver
solver = z3.Solver()

for i in m:
	#添加约束到solver中
	solver.add(i>=0)
	solver.add(i<=0xff)
for i in tmp:
	solver.add(eval(i[:-1]))


flag = []
# 检查 solver 中的约束是否满足
# satisfiable/满足
# unsatisfiable/不满足
if solver.check() == z3.sat:
	# model() 返回最后一个 check() 的 model
	# decls() 返回 model 包含了所有符号的列表
	tmp = solver.model()
	for i in range(42):
		flag.append(tmp[m[i]].as_long() ^ i)
flag = "".join(map(lambda x:chr(((x >> 3) | (x << 5)) & 0xff),flag))
print(flag)

HCTF-2015:RE-Crc-300
RE-Crc-300

z3学习，正则表达式下的文本处理，还有暴力破解，之前接触的也少，上了一课。
转载处理，没自己的东西。

期末自救计划启动
在这里插入图片描述

北风~
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
[XCTF-Reverse] 85 HCTF-2015_RE-crc-300
weixin_52640415的博客
03-29 879
爆破还是可以试试的。 这个程序逻辑上非常简单，就俩函数，加密这块全在一个里 signed int __thiscall check(const char *this) { const char *v1; // esi unsigned int v2; // kr00_4 signed int result; // eax unsigned int v4; // edx char v5; // al unsigned int v6; // esi signed int v7;
流浪者 攻防世界
re1wn
04-01 1188
攻防世界 流浪者
攻防世界-re-rev300
底层社会中的弱智
10-09 320
查看文件为ELF 32位文件 查看在ubuntu中运行的状态，运行后提示拒绝访问 使用ida查看程序源码 进入main函数查看 Main函数中判断条件满足时，提示访问通过，首先看判断条件，a1 > 1 a1提示后面的参数不为空，运行程序的时候需要携带一个参数。 sub_8048414函数是判断参数是否正确的函数，验证函数 这个函数是递归调用 首先带有两个形参，a1和a2 a1应该是我们输入的key a2参数带入的时候为0 进入验证函数中，先判断a2(a2
mfc逆向-200 攻防世界
re1wn
05-15 1306
mfc逆向-200 攻防世界
catch-me 攻防世界
re1wn
04-28 886
catch-me 攻防世界
Z3-str-Regex:Z3-str与正则表达式模块
05-26
Z3-regex是基于强大的Z3 SMT求解器（ ）构建的字符串理论插件。 它构建在Z3-str（ ）的顶部。 除了Z3-str支持的功能外，Z3-regex还支持（请参阅我们的文档）： 常用表达 成员资格谓词 适用于正则表达式（例如Star...
z3-interp-plus:这是https的副本
03-21
Z3 Z3是Microsoft Research的一个定理证明者。它是根据获得。 如果您不熟悉Z3，则可以从开始。 Z3可以使用 ， 或构建。它提供。 有关Z3的各种稳定版本的，请参阅。 建置状态 Windows x64 Windows x86 Windows x...
regex-crossword-solver:https
05-09
$ python bbc.py要求 带有Python绑定的或 您可以通过以下方式安装它们pip install plypip install angr-only-z3-custom确保LD_LIBRARY_PATH环境变量中具有/usr/local/lib/和$HOME/.local/lib 。用法直接解决正则...
z3-compact-case:适用于 Sony Xperia Z3 Compact 的保险杠式保护壳
05-31
z3-compact-case 适用于 Sony Xperia Z3 Compact 智能手机的 3D 可打印保护壳。 有关照片，请参阅。 我把整个左侧都盖起来了，所以你必须取下盖子才能把它插入充电器，如果你真的有充电座，你必须做一些修改。 ...
Flutter-UI-Reality:UI到现实？ 有颤动
03-10
Flutter_UI_Reality Simple Code Awesome UI 项目01 :check_mark_button: 项目02 :check_mark_button: ... 3Eqg2Wm9978CmcDJp4z3yM2CqjUu19Vuru ETH地址： 0x463d1d31eEEC94952D852046cF15913d02F627b8
pseudorandom nullcon-hackim-2016 攻防世界
re1wn
05-19 5825
pseudorandom nullcon-hackim-2016 攻防世界
攻防世界-RE-三题WP
WocW的博客
04-25 1617
1.re2-cpp-is-awesome 分析 打开看看，发现需要一个参数。在IDA里查找这个luck next time，交叉引用 再次交叉引用，发现到main函数。 这里就是关键的对比了，看起来像是v8经过某个处理后与明文表对比。动态调试看看，下端点在v8，发现我们所输入的字符串没有被处理过，那就更简单了，直接最原始的明文对比。 每次将执行到这里会出现一个flag明文，在下面的跳转指...
re学习笔记（37）BUUCTF-re-[GUET-CTF2019]re Z3约束求解器
逆向随笔
02-08 3315
新手一枚，如有错误（不足）请指正，谢谢！！ 个人博客：点击进入 题目链接：[GUET-CTF2019]re 题目下载：点击下载 IDA64位载入 大概率被加壳，使用exeinfope查看 upx壳，使用官方upx脱壳 脱壳后IDA64载入，shift+F12查找字符串 找到关键代码 查看sub_4009AE()函数 典型z3约束器求解题 （当然你想一个个挨个手动算的话也行……） z3安...
Windows_Reverse2 攻防世界
re1wn
04-03 1148
Windows_Reverse2 攻防世界
攻防世界--re1-100
weixin_30607659的博客
09-25 217
测试文件：https://adworld.xctf.org.cn/media/task/attachments/dc14f9a05f2846249336a84aecaf18a2.zip 1.准备 获取信息 64位文件 2.IDA打开 前面大部分都是“无用代码”，这里贴上我们需要的代码 while ( 1 ) { me...
攻防世界-baby_web
Nothing-one的博客
07-28 160
从题目描述中我们可以看到我们要找到他的初始界面。所以我们就可以将后缀名改为index.php（这是一般网站的首页），将1.php换为index.php我们就可以看到 然后直接f12我们查看网站的信息我们就可以看到flag ...
2021-09-28 网安实验-图像隐写-HCTF-Steg300
热门推荐
时光隧道
09-28 4万+
相关知识 Binwalk BinWalk是一个固件的分析工具，旨在协助研究人员对固件进行分析，提取及逆向工程用处。简单易用，完全自动化脚本，并通过自定义签名，提取规则和插件模块，还重要一点的是可以轻松地扩展。最简单的使用方法很直接，提供文件路径和文件名即可。 BinWalk常用于识别任意二进制数据块中所包含的其他类型的文件数据。 Android逆向基础 Android下的APK文件本身是一个zip压缩包，可以使用解压缩软件对其进行解压。解压之后在根目录可以看到一个classes.dex文件，这个文件就是An
2015第七届HCTF
liukenn的博客
12-07 1175
大三狗一只，第一次写blog，希望记录下自己从零开始的CTF之旅 两个彩笔第一次参见正式的CTF，写写只做出来的5道题#共三十几道题啊。。=。= 首先是全部题目的地址： https://www.zybuluo.com/lightless/note/183904
【HCTF】2015hctf单刷_writeup
wintersun的地带
12-09 3861
这是一份HCTF不完全writeup。。0x00 misc1拿到题目，binwalk分析下文件。发现zip文件结尾和png文件开头中间有一段数据，拿出该段数据，base64既视感，base32既视感，base16既视感。。flag:hctf{nn1sc_ls_s0_34sy!}0x01 web1访问，用burp抓包，看头。。hctf{w3lcome_t0_hc7f_f4f4f4}0x02 perso
攻防世界 easyphp
最新发布
09-11
EasyPHP是一个用于Windows操作系统的开发环境，它集成了Apache服务器、MySQL数据库和PHP解释器，使得搭建和管理网站变得更加简单。在EasyPHP中，攻防世界是一个基于CTF（Capture The Flag）赛制的在线平台，旨在提供网络安全学习和竞赛的机会。 攻防世界平台上有各种不同的题目和挑战，涵盖了网络安全的多个方面，包括但不限于Web漏洞、系统漏洞、密码学等。参与者需要通过解决这些挑战来学习和提高自己的网络安全技能。同时，攻防世界也提供了一些教程和文章，帮助新手入门并引导他们深入理解攻击和防御的原理。 对于初学者来说，攻防世界的easyphp环境可以作为一个很好的起点，因为它提供了一个集成的开发环境，使得学习和实践变得更加方便。通过解决平台上的题目和挑战，初学者可以逐渐熟悉常见的安全漏洞和攻击技术，并学会如何进行相应的防御措施。 希望以上信息对你有所帮助！如果你有任何其他问题，请随时提问。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值