## main idea
HINT: PTR's or 'pointers', reference a **location in memory where values can be stored.**

<+22>: mov eax,DWORD **PTR [rbp-0x4]**
=>
<+15>: mov DWORD PTR **[rbp-0x4],0x9fe1a**

┌──(kali㉿kali)-[~/code]
└─$ wget https://artifacts.picoctf.net/c/510/disassembler-dump0_b.txt
--2023-07-30 22:14:49--  https://artifacts.picoctf.net/c/510/disassembler-dump0_b.txt
Resolving artifacts.picoctf.net (artifacts.picoctf.net)... 13.35.7.121, 13.35.7.96, 13.35.7.12, ...
Connecting to artifacts.picoctf.net (artifacts.picoctf.net)|13.35.7.121|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 270 [application/octet-stream]
Saving to: ‘disassembler-dump0_b.txt’

disassembler-dump 100%[===========>]     270  --.-KB/s    in 0s      

2023-07-30 22:14:55 (148 MB/s) - ‘disassembler-dump0_b.txt’ saved [270/270]

                                                                      
┌──(kali㉿kali)-[~/code]
└─$ cat disassembler-dump0_b.txt | grep "eax"                       
<+22>:    mov    eax,DWORD PTR [rbp-0x4]
                                                                      
┌──(kali㉿kali)-[~/code]
└─$ cat disassembler-dump0_b.txt             
<+0>:     endbr64 
<+4>:     push   rbp
<+5>:     mov    rbp,rsp
<+8>:     mov    DWORD PTR [rbp-0x14],edi
<+11>:    mov    QWORD PTR [rbp-0x20],rsi
<+15>:    mov    DWORD PTR [rbp-0x4],0x9fe1a
<+22>:    mov    eax,DWORD PTR [rbp-0x4]
<+25>:    pop    rbp
<+26>:    ret
                                                                      
┌──(kali㉿kali)-[~/code]
└─$ python3
Python 3.11.2 (main, Mar 13 2023, 12:18:29) [GCC 12.2.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> print(int("0x9fe1a",16))
654874

=>picoCTF{654874}