NASM - Erstellung eines Win64-Bit Images für die Verwendung mit mehr als 2 Funccalls

[Kas Ob.]

Well I am sorry i can't find time to rebuild it for you now, i have guests

But there is very visible problem with Image Base addresses

Code:

; Optional Header, NT Additional Fields
    dq 0x000140000000       ; ImageBase

Code:

image_base dq 0x00400000

virtual_address_text dd $ - $$ + image_base

Such miss addressing will render the PE unrecognizable for Windows.