# Storytime: The Shocking Conclusion

tldr:

- See a weird function named `FUN_2302136`
- Finding references where it is called, see lots of parameters with values being passed into it
- `FUN_2302136` does some xoring and decodes the values to form a flag

[Python Script](story3Decode.py)

```
bcactf{h1dd3n_c0d3_1s_h1dd3n_2c8d}
```

Python Script in original writeup link

Original writeup (https://github.com/IRS-Cybersec/ctfdump/tree/master/BCACTF%202021/RE/Storytime%20The%20Shocking%20Conclusion).