获取Windows NT可执行文件代码块的方法

Access Method of the Executable File in Windows NT

详细地剖析了Ｗｉｎｄｏｗ ｓ ＮＴ可执行文件的块表与块之间的结构关系，揭示了可执行文件常用信息块的结构、功能及运行机制；以Ｗｉｎｄｏｗ ｓ ＮＴ远程访问程序Ｒａｓｐｈｏｎｅ．ｅｘｅ 为例，验证了这一分析方法的正确性． 此外，进一步探讨了获取系统文件代码块的方法． 对于深入研究ＮＴ系统文件的结构，进行系统设计与开发有一定的参考价值．

The relationship between block table and block of the executable file in Windows NT is deeply analysed. The structure, function and running mechanism of commonly used information block of executable file is described. The correctness of this analysis approach is verified by using Windows NT's remote access program \|Rasphone.exe. Finally, access method of system file code block is discussed. These researches are useful for analysis of NT system file structure and design, development of application software system.