see link

Original writeup (https://rawsec.ml/en/TPCTF-2017-write-ups/#10-that-s-not-latin-misc).