链接里的壳现在有没有办法脱呢？
730K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3N6V1i4K6u0W2M7h3W2S2L8X3&6S2L8#2)9J5k6h3y4G2L8g2)9K6b7e0R3H3z5o6m8Q4x3V1k6K6k6i4u0$3L8r3g2@1i4K6u0r3c8X3W2D9k6f1c8G2N6$3&6D9L8$3q4V1i4K6y4r3k6X3W2D9k6h3&6S2L8h3g2Q4x3@1c8Q4x3V1k6Q4x3V1k6*7P5X3q4Y4k6g2)9J5c8W2!0q4y4q4!0n7z5q4)9^5b7g2!0q4y4q4!0n7b7#2!0m8x3q4!0q4y4g2)9^5z5q4)9^5y4W2!0q4y4q4!0n7b7g2!0m8b7W2)9J5c8U0t1H3x3o6S2Q4x3V1j5I4x3W2)9J5c8U0t1^5i4K6u0r3b7f1u0o6i4K6u0W2M7X3q4J5i4K6t1$3N6X3W2V1i4K6y4p5x3q4)9J5y4Y4k6A6k6o6u0Q4x3@1b7H3

OD载入的开头如下：

00415C75 > /EB 10           JMP SHORT ABC.00415C87
00415C77   |66:623A         BOUND DI,DWORD PTR DS:[EDX]
00415C7A   |43              INC EBX
00415C7B   |2B2B            SUB EBP,DWORD PTR DS:[EBX]
00415C7D   |48              DEC EAX
00415C7E   |4F              DEC EDI
00415C7F   |4F              DEC EDI
00415C80   |4B              DEC EBX
00415C81   |90              NOP
00415C82  -|E9 00104000     JMP 00816C87
00415C87  -\E9 A8CC2F00     JMP ABC.00712934

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课