You can squeeze the /sbin/iptables string. Like this

xor edx, edx        ; edx = 0

    push edx            ; /sbin/iptables
    push word 0x7365
    push 0x6c626174
    push 0x70692f6e
    push 0x6962732f
    mov ebx, esp