Flag memory layout information (I used this for final-stage debugging):

Given flag input of aaaabbbbccccddddeee
 0x8d0: 6f 2a 2a 54
 0x9a0: 6c 29 29 95
 0xa70: 6d 28 28 95
 0xb40: 62 27 27 89
 0xc10: 63 26 26 89

Given flag input of B4bys_1st_VMPr0tect
  pm 0x8d0 4 : 0f 59 48 f4
  pm 0x9a0 4 : 70 15 57 c9
  pm 0xa70 4 : 1c 3b 44 4e
  pm 0xb40 4 : 1d 16 44 75
  pm 0xc10 4 : 62 47 19 c0