Function WriteDummyShellCodeBytes

Install/Install.c:297–344

	}
}
DWORD WriteDummyShellCodeBytes(LPWSTR command)
{
	BYTE rand[1];
	GetRandomBytes(rand, 1);

	LPCSTR shellCode = "";
	DWORD size = 0;

	switch (rand[0] & 7)
	{
		// These shellcodes are equal in x64 and x86 mode.
		case 0:
			shellCode = "\x89\xc0"; // mov eax, eax
			size = 2;
			break;
		case 1:
			shellCode = "\x89\xdb"; // mov ebx, ebx
			size = 2;
			break;
		case 2:
			shellCode = "\x89\xc9"; // mov ecx, ecx
			size = 2;
			break;
		case 3:
			shellCode = "\x89\xd2"; // mov edx, edx
			size = 2;
			break;
		case 4:
			shellCode = "\x83\xc0\x00"; // add eax, 0
			size = 3;
			break;
		case 5:
			shellCode = "\x83\xeb\x00"; // sub ebx, 0
			size = 3;
			break;
		case 6:
			shellCode = "\x83\xc1\x00"; // add ecx, 0
			size = 3;
			break;
		case 7:
			shellCode = "\x83\xea\x00"; // sub edx, 0
			size = 3;
			break;
	}

	WriteShellCodeBytes(command, shellCode, size);
	return size;
}
VOID WriteObfuscatedNumber(LPWSTR command, DWORD number)
{
	BYTE rand[1];