Run the program in gdb, jump to get_flag. A pointer to the flag is in RAX, read it.

Original writeup (https://neg9.org/writeups/tamuctf-2021-acrylic-solution/).