3. ShellCode混淆绕过火绒