RC4 with same keystream, re-encrypt the ciphertext for the flag:

full writeup: [https://ctf.rip/write-ups/reversing/deadface-cryptoware/](https://ctf.rip/write-ups/reversing/deadface-cryptoware/)

Original writeup (https://ctf.rip/write-ups/reversing/deadface-cryptoware/).