nasm -f win64 hello.asm -o hello.obj x86_64-w64-mingw32-ld hello.obj -o hello.exe -lkernel32 8.1 Check basic info (using dumpbin ) dumpbin /headers myapp.exe | findstr "machine magic subsystem" Output example:
Compile (MSVC):
When a file analyzer (like file command, Detect It Easy, or PEiD) shows: pe32 executable -console- x86-64 for ms windows
dumpbin /headers minimal_console.exe | findstr "PE32+" Output: nasm -f win64 hello
| Component | Meaning | |-----------|---------| | | 64-bit Portable Executable format (extension of original PE32). Uses 64-bit fields for image base, virtual addresses, and sizes. | | console | Subsystem = Console. App runs in a terminal window (cmd/powershell). Not GUI ( /SUBSYSTEM:WINDOWS ). | | x86-64 | Target machine architecture = AMD64 (also called x64, Intel 64). Not ARM, not IA64 (Itanium). | | MS Windows | Target OS: Windows (NT family: 2000, XP, Vista, 7, 10, 11, Server). | 2. PE32+ File Structure PE32+ follows the same logical layout as PE32, but with key structural differences. App runs in a terminal window (cmd/powershell)
cl /O1 /GS- /Gs9999999 minimal_console.c /link /SUBSYSTEM:CONSOLE /MACHINE:X64 /ENTRY:main Check output:
PE32+ executable (console) x86-64 for MS Windows