section .text
global _start
_start:
        ??
one:
        ?? 			; (complete) ebx should contain the string address
	mov eax, 0
        ??    			; (complete) terminate /bin/sh with 0x00 (1 byte)
        ??   			; (complete) save ebx to memory at address ebx+8
        ??  			; (complete) save eax to memory at address ebx+12
        lea ecx, [ebx+8]   	; let ecx = ebx + 8
        
	mov edx, 0
        mov al, 0x0b
        int 0x80
two:
        ??
        db '/bin/sh*AAAABBBB'