#fr0g

(2:633)$ file shuffle 
shuffle: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), dynamically linked (uses shared libs), for GNU/Linux 2.6.24, BuildID[sha1]=0x392b3d943f673207d169fb2c65dc642bdd79679f, not stripped



part of the main:
   0x08048549 <+28>:	xor    eax,eax
   0x0804854b <+30>:	mov    eax,0x53
   0x08048550 <+35>:	mov    BYTE PTR [esp+0x24],al		// esp+0x24 => flag offset
   0x08048554 <+39>:	mov    eax,0x45
   0x08048559 <+44>:	mov    BYTE PTR [esp+0x25],al
   0x0804855d <+48>:	mov    eax,0x43
   0x08048562 <+53>:	mov    BYTE PTR [esp+0x26],al
   0x08048566 <+57>:	mov    eax,0x43
   0x0804856b <+62>:	mov    BYTE PTR [esp+0x27],al
   0x0804856f <+66>:	mov    eax,0x4f
   0x08048574 <+71>:	mov    BYTE PTR [esp+0x28],al
   0x08048578 <+75>:	mov    eax,0x4e
   0x0804857d <+80>:	mov    BYTE PTR [esp+0x29],al
   0x08048581 <+84>:	mov    eax,0x7b
   0x08048586 <+89>:	mov    BYTE PTR [esp+0x2a],al
   0x0804858a <+93>:	mov    eax,0x57
   0x0804858f <+98>:	mov    BYTE PTR [esp+0x2b],al
   0x08048593 <+102>:	mov    eax,0x65
   0x08048598 <+107>:	mov    BYTE PTR [esp+0x2c],al
   0x0804859c <+111>:	mov    eax,0x6c
   0x080485a1 <+116>:	mov    BYTE PTR [esp+0x2d],al
   0x080485a5 <+120>:	mov    eax,0x63
   0x080485aa <+125>:	mov    BYTE PTR [esp+0x2e],al
   0x080485ae <+129>:	mov    eax,0x6f
   0x080485b3 <+134>:	mov    BYTE PTR [esp+0x2f],al
   0x080485b7 <+138>:	mov    eax,0x6d
   0x080485bc <+143>:	mov    BYTE PTR [esp+0x30],al
   0x080485c0 <+147>:	mov    eax,0x65
   0x080485c5 <+152>:	mov    BYTE PTR [esp+0x31],al
   0x080485c9 <+156>:	mov    eax,0x20
   0x080485ce <+161>:	mov    BYTE PTR [esp+0x32],al
   0x080485d2 <+165>:	mov    eax,0x74
   0x080485d7 <+170>:	mov    BYTE PTR [esp+0x33],al
   0x080485db <+174>:	mov    eax,0x6f
   0x080485e0 <+179>:	mov    BYTE PTR [esp+0x34],al
   0x080485e4 <+183>:	mov    eax,0x20
   0x080485e9 <+188>:	mov    BYTE PTR [esp+0x35],al
   0x080485ed <+192>:	mov    eax,0x74
   0x080485f2 <+197>:	mov    BYTE PTR [esp+0x36],al
   0x080485f6 <+201>:	mov    eax,0x68
   0x080485fb <+206>:	mov    BYTE PTR [esp+0x37],al
   0x080485ff <+210>:	mov    eax,0x65
   0x08048604 <+215>:	mov    BYTE PTR [esp+0x38],al
   0x08048608 <+219>:	mov    eax,0x20
   0x0804860d <+224>:	mov    BYTE PTR [esp+0x39],al
   0x08048611 <+228>:	mov    eax,0x53
   0x08048616 <+233>:	mov    BYTE PTR [esp+0x3a],al
   0x0804861a <+237>:	mov    eax,0x45
   0x0804861f <+242>:	mov    BYTE PTR [esp+0x3b],al
   0x08048623 <+246>:	mov    eax,0x43
   0x08048628 <+251>:	mov    BYTE PTR [esp+0x3c],al
   0x0804862c <+255>:	mov    eax,0x43
   0x08048631 <+260>:	mov    BYTE PTR [esp+0x3d],al
   0x08048635 <+264>:	mov    eax,0x4f
   0x0804863a <+269>:	mov    BYTE PTR [esp+0x3e],al
   0x0804863e <+273>:	mov    eax,0x4e
   0x08048643 <+278>:	mov    BYTE PTR [esp+0x3f],al
   0x08048647 <+282>:	mov    eax,0x20
   0x0804864c <+287>:	mov    BYTE PTR [esp+0x40],al
   0x08048650 <+291>:	mov    eax,0x32
   0x08048655 <+296>:	mov    BYTE PTR [esp+0x41],al
   0x08048659 <+300>:	mov    eax,0x30
   0x0804865e <+305>:	mov    BYTE PTR [esp+0x42],al
   0x08048662 <+309>:	mov    eax,0x31
   0x08048667 <+314>:	mov    BYTE PTR [esp+0x43],al
   0x0804866b <+318>:	mov    eax,0x34
   0x08048670 <+323>:	mov    BYTE PTR [esp+0x44],al
   0x08048674 <+327>:	mov    eax,0x20
   0x08048679 <+332>:	mov    BYTE PTR [esp+0x45],al
   0x0804867d <+336>:	mov    eax,0x43
   0x08048682 <+341>:	mov    BYTE PTR [esp+0x46],al
   0x08048686 <+345>:	mov    eax,0x54
   0x0804868b <+350>:	mov    BYTE PTR [esp+0x47],al
   0x0804868f <+354>:	mov    eax,0x46
   0x08048694 <+359>:	mov    BYTE PTR [esp+0x48],al
   0x08048698 <+363>:	mov    eax,0x21
   0x0804869d <+368>:	mov    BYTE PTR [esp+0x49],al
   0x080486a1 <+372>:	mov    eax,0x7d
   0x080486a6 <+377>:	mov    BYTE PTR [esp+0x4a],al
=> 0x080486aa <+381>:	mov    eax,0x0				;; BREAK HERE

gdb $> x/s $esp+0x24
0xffffd224:	"SECCON{Welcome to the SECCON 2014 CTF!}\b"

