Close Topic Options

I tried to code a program which reads the first two bytes of file and if its equal to MZ it returns it is valid pe file, can anyone help how its possible of reading of first two bytes of file.

to do this you need:
1.read MSDN about WinAPI functions
2.look at tutorials, search and study existing examples
3.take simple examples and modify slightly, check result
4.use debugger to understand how does your code work or why not
5.when you stuck anyway - post your work at forum and ask precise question

I've learn't iczlions tutorials 1-14, but while file handling i'am supposed to obtain handle of file, allocate memory and lock the file and obtain file pointer then how would i read the bytes in memory

well, tutorial 12 describes file IO
programming with assembler requires also general understanding CPU and its command set, also, as there is no assembly examples by MS, you must guess how to write same code in assembler using C examples.

using search helps very much:

step 1
step 2
step 3
step 4

step 5

it is very basic manipulation of any CPU. you must read about addressing modes for x86.

simpliest examples:

mov al, buffer ; masm

mov esi,offset buffer
lodsb
or
mov al,[esi]