picoCTF gdb baby steps part 3

before you return from the current stack frame look at $rbp-4 which holds the flag's value.