1.3 PROGRAM DEVELOPMENT ENVIRONMENT

1.4 WIN32 EXECUTEABLE FILE FORMAT

We should also know that complied binary code is a data structure in itself,which the operating system operates on when code is loaded into memory for execution.For Win32 platforms,this data structure is called Portable Executable,or PE,file format.

Understanding the PE file format helps greatly with Windows program.It helps you understand how source code is turned into binary code,where global variables are stored,and how are they initialized,including how shared variables work.Every DLL in the Win32 system is in the PE format.So understanding the PE format helps you understand how dynamic linking works,how inport references are resolved,and how to avoid dynamic rebasing of DLLs.The basic technique of API hooking depends heavlly on kowledge of import table details.Understanding the PE format also helps you understand how virtual memory space is structured in the Win32 environment.There are a few places where knowledge of PE file format will be needed in this book,so we briefly discuss the PE file format and its loaded form in RAM here.

第3小节讲的是程序开发环境，目前尚非实用，略去。第4小节，简略地讨论了PE文件格式及其加载进RAM的形式。关于PE文件的格式，可以参考小甲鱼的加密解密视频教程

另外鱼C论坛是一个不错的论坛，附上地址 http://bbs.fishc.com/forum.php

小甲鱼的空间 http://bbs.fishc.com/home.php?mod=space&uid=9&do=index

另，小甲鱼教学视频参考的貌似是看雪论坛《加密与解密》（第三版）第五章的内容

而我也准备花一些时间认真研究下PE文件格式

之所以学Windows_Graphics_Programming_Win32_GDI_and_DirectDraw，是前面压缩位图实例中遇到的压缩bitmap文件的难题，没想到这本书里面介绍的内容比预想的多太多