（四）伪造、变造或者倒卖车票、船票、航空客票、文艺演出票、体育比赛入场券或者其他有价票证、凭证的；
while (k = 0 && bucketArr[k] key) {
，这一点在旺商聊官方下载中也有详细论述
// 每组：起始位置为0,1,2,...,gap-1
When VM=1, the protected-mode bit goes low and the Entry PLA selects real-mode entry points -- MOV ES, reg takes the one-line path. Meanwhile, CPL is hardwired to 3 whenever VM=1, so the V86 task always runs at the lowest privilege level, under full paging protection. The OS can use paging to virtualize the 8086's 1 MB address space, even simulating A20 address line wraparound by mapping pages to the same physical frames.