I would like to thank Jia Tan for authoring the best CTF challenge of the past decade.
@q3k Ok, but where's the flag?
@redford The flag is stored in `uint bd_inject_key(ulong param_1,undefined4 param_2,int param_3,uint param_4)` somewhere, better figure it out!