damn san, you point out everything I do wrong.

Ok, before you do the pushing, you have to fill bytes 0-255 in ram with the values 0-255! Assume that that will not crash the program.

But there is still no way to solve the orginal problem !