Programcounter is linear in these dumps, right?
Anyway, even after converting to LFSR, ML102 locks up pretty quickly, something's still not right I bet.