Required patching binary with no-ops on string reverses and realizing that replacing an XOR by "0xXX" with "0x00" results in receiving the original input back as output. Full writeup plus output, patched and unpatched binaries, on site.

Original writeup (https://github.com/novafacing/writeups/tree/master/2017DefCampCTF).