More of an RE challenge than a pwn challenge.

Very detailed writeup provided at the link.

I didn't finish this during the CTF, however r4j (from JHDiscord) made a writeup without any explanation for how he solved it, which prompted me to make this writeup.