It is a shuffle and two XORs, we can retrieve most of the key data and brute-force the rest.

Original writeup (https://www.nevivur.net/writeups/2019/04/tjctf-2019/#comprehensive).