摘要
作者提出对ＩＢＭＰＣ系列微机上ＤＥＢＵＧ实用程序的一种改进方法，即通过修改单步中断和断点中断的处理程序，使之能跟踪“反跟踪软件”，这对软件解密和病毒分析无疑是有用的。
This paper comes up with an improvement on DEBUG,a utility widely used onIBM PC serial computers. By means of modifying the routines of single step interrupt andbreakpoint interrupt,it makes DEBUG utility be able to track some so called 'anti-tracking software'. Therefore,this method is obviously useful for software decoding and virusanalysis.
关键词
DEBUG程序
跟踪软件
单步中断
断点中断
DEBUG utility
anti-tracking software
single step interrupt
breakpoint inter rupt
