Pe32 Executable -console- X86-64 For Ms Windows [1080p 8K]

Compile (MSVC):

Build:

my_func PROC push rbp mov rbp, rsp sub rsp, 32 ; shadow space + locals ; ... add rsp, 32 pop rbp ret my_func ENDP 7.1 Using MSVC (Visual Studio) cl /c hello.c link hello.obj /SUBSYSTEM:CONSOLE /MACHINE:X64 7.2 Using MinGW-w64 (gcc) x86_64-w64-mingw32-gcc -m64 hello.c -o hello.exe 7.3 Using NASM + LD (raw assembly) ; hello.asm bits 64 section .data msg db 'Hello PE32+ console', 0xd, 0xa, 0 section .text global main extern GetStdHandle extern WriteFile extern ExitProcess pe32 executable -console- x86-64 for ms windows

It breaks down as:

When a file analyzer (like file command, Detect It Easy, or PEiD) shows: Compile (MSVC): Build: my_func PROC push rbp mov

cl /O1 /GS- /Gs9999999 minimal_console.c /link /SUBSYSTEM:CONSOLE /MACHINE:X64 /ENTRY:main Check output: rsp sub rsp

main: sub rsp, 40 ; shadow + align mov rcx, -11 ; STD_OUTPUT_HANDLE call GetStdHandle mov rcx, rax lea rdx, [msg] mov r8, 23 ; length lea r9, [rsp + 32] ; lpNumberOfBytesWritten call WriteFile xor rcx, rcx call ExitProcess