它的反跟踪原理！ (2千字)
这就是关键的地方。什么意思不用我说了吧。xixi~~~可怜我的爱机啊！被超度了n(n>10)次。
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404FC6(U)
|
:00404FEF 1E push ds
:00404FF0 06 push es
:00404FF1 668CD0 mov ax, ss
:00404FF4 668ED8 mov ds, ax
:00404FF7 668EC0 mov es, ax
:00404FFA BEC84F4000 mov esi, 00404FC8
:00404FFF 8975FC mov dword ptr [ebp-04], esi
:00405002 B9EF4F4000 mov ecx, 00404FEF
:00405007 2BCE sub ecx, esi
:00405009 8B3D806E7100 mov edi, dword ptr [00716E80]
:0040500F F3 repz
:00405010 A4 movsb
:00405011 0F014DF4 sidt [ebp-0C]
:00405015 8B5DF6 mov ebx, dword ptr [ebp-0A]
:00405018 83C308 add ebx, 00000008
:0040501B 8B03 mov eax, dword ptr [ebx]
:0040501D A3586A7100 mov dword ptr [00716A58], eax
:00405022 8B4B04 mov ecx, dword ptr [ebx+04]
:00405025 890D5C6A7100 mov dword ptr [00716A5C], ecx
:0040502B 8B45FC mov eax, dword ptr [ebp-04]
:0040502E 668CC9 mov cx, cs
:00405031 FA cli
:00405032 668903 mov word ptr [ebx], ax
:00405035 66894B02 mov word ptr [ebx+02], cx
:00405039 66C7430400EE mov [ebx+04], EE00
:0040503F C1E810 shr eax, 10
:00405042 66894306 mov word ptr [ebx+06], ax
:00405046 FB sti
:00405047 83C310 add ebx, 00000010
:0040504A 8B03 mov eax, dword ptr [ebx]
:0040504C A3506A7100 mov dword ptr [00716A50], eax
:00405051 8B4B04 mov ecx, dword ptr [ebx+04]
:00405054 890D546A7100 mov dword ptr [00716A54], ecx
:0040505A 8B45FC mov eax, dword ptr [ebp-04]
:0040505D 668CC9 mov cx, cs
:00405060 FA cli
:00405061 668903 mov word ptr [ebx], ax
:00405064 66894B02 mov word ptr [ebx+02], cx
:00405068 66C7430400EE mov [ebx+04], EE00
:0040506E C1E810 shr eax, 10
:00405071 66894306 mov word ptr [ebx+06], ax
:00405075 FB sti
:00405076 07 pop es
:00405077 1F pop ds
:00405078 33C0 xor eax, eax
:0040507A 5F pop edi
:0040507B 5E pop esi
:0040507C 5B pop ebx
:0040507D 8BE5 mov esp, ebp
:0040507F 5D pop ebp
:00405080 C3 ret
