获取Windows NT可执行文件代码块的方法

获取Windows NT可执行文件代码块的方法 Access Method of the Executable File in Windows NT 熊前兴 XIONG Qian xing 1 1 2 3 first-author 熊莺 XIONG Ring 2 1 2 3 武汉交通科技大学计算机科学与工程系,武汉,430063 武汉交通科技大学计算机科学与工程系,武汉,430063 1 Department of Computer Science and Engineering, Wuhan Transportation University 1 Department of Computer Science and Engineering, Wuhan Transportation University 武汉大学计算机科学系,武汉,430072 武汉大学计算机科学系,武汉,430072 Department of Computer Science, Wuhan University Department of Computer Science, Wuhan University 武汉交通科技大学计算机科学与工程系!武汉430063武汉大学计算机科学系,武汉,430072 武汉交通科技大学计算机科学与工程系!武汉430063武汉大学计算机科学系,武汉,430072 详细地剖析了Ｗｉｎｄｏｗ ｓ ＮＴ可执行文件的块表与块之间的结构关系，揭示了可执行文件常用信息块的结构、功能及运行机制；以Ｗｉｎｄｏｗ ｓ ＮＴ远程访问程序Ｒａｓｐｈｏｎｅ．ｅｘｅ 为例，验证了这一分析方法的正确性． 此外，进一步探讨了获取系统文件代码块的方法． 对于深入研究ＮＴ系统文件的结构，进行系统设计与开发有一定的参考价值． The relationship between block table and block of the executable file in Windows NT is deeply analysed. The structure, function and running mechanism of commonly used information block of executable file is described. The correctness of this analysis approach is verified by using Windows NT’s remote access program \|Rasphone.exe. Finally, access method of system file code block is discussed. These researches are useful for analysis of NT system file structure and design, development of application software system. 块 块表 WindowsNT 链接器 库函数 block block table windows NT linker library function TP311.52 交通部重点科研基金 1999-05-01 2021-04-01 5