00AEF458 5A pop edx
00AEF459 5E pop esi
00AEF45A 5F pop edi
00AEF45B 59 pop ecx
00AEF45C 5B pop ebx
00AEF45D 5D pop ebp
00AEF45E FFE0 jmp eax << 找到了 记下 00AEF45E
00AEF460 0000 add [eax], al
00AEF462 0000 add [eax], al
00AEF464 0000 add [eax], al
00AEF466 0000 add [eax], al
00AEF468 0000 add [eax], al
00A2D854 55 db 55 ; CHAR 'U'
00A2D855 8B db 8B
00A2D856 EC db EC
00A2D857 83 db 83
00A2D858 C4 db C4
00A2D859 C4 db C4
00A2D85A B8 db B8
00A2D85B 3C db 3C ; CHAR '<'
00AEF44C 68 00800000 push 8000
00AEF451 6A 00 push 0
00AEF453 57 push edi
00AEF454 FF11 call [ecx]
00AEF456 8BC6 mov eax, esi
00AEF458 5A pop edx
00AEF459 5E pop esi
00AEF45A 5F pop edi
00AEF45B 59 pop ecx
00AEF45C 5B pop ebx
00AEF45D 5D pop ebp
00AEF45E FFE0 jmp eax