Please, do not write just a link to original writeup here.

Original writeup (https://tcode2k16.github.io/blog/posts/dctf-2018-writeup/#ransomware-reverse-50-pcts).