摘要： 深入地剖析了Ｗｉｎｄｏｗｓ ＮＴ可执行文件的块表与块之间的构结关系，探讨了获取系统文件块的方法。揭示了可执行文件重要信息快的结构及运行机制；并结合Ｗｉｎｄｏｗｓ ＮＴ系统程序ＳＥＴＵＰ．ＥＸＥ验证了这一分析的正确性。

关键词: 块, 块表, 链接器, 库函数

Abstract: This article deeply analyses the relationship between block table and block of the executable file in Windows NT. The article finally discusses the method of access system file block. It discovers the structure and running mechanism of important used information block in executable file. It verifies the correctness of this analysis based on Windows NT'S system program -SETUP.EXE.

中图分类号: 

• TP316