How does avet handle shellcode encryption and remote retrieval?

avet supports self-implemented XOR-based encryption via the `-E` flag, which decodes encrypted shellcode at runtime using a `decode_shellcode` function. Additionally, it offers multiple remote retrieval methods: fetching shellcode via HTTP request to iexplore.exe, using WinAPI socket calls to pull from port 80, downloading via certutil, or via PowerShell. These techniques help evade network-based detection and allow the payload to be fetched only when needed. The tool also allows reading shellcode from a local file or using service registration for remote deployment via psexec.