{ "path": "Installer2\\installer.{EE6BEEBC-9431-4428-8DDB-EB839185C877}\\DynamicBillboardPresentations.dll", "sha256": "c7b342b4b9f063726575d2e0ac54371c02a95ad2a82d5ebe4c6c31a21c02a65c", "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof", "sections": [ { "name": ".text", "raw_bytes": 779264, "processed_bytes": 779264, "instructions": 275273, "skipdata_bytes": 22 } ], "utc": "2026-11-11T21:40:13.001583+00:00", "instructions": 275273, "skipdata_bytes": 22, "calls": 20239, "api_reference_counts": { "KERNEL32.dll!InitializeCriticalSectionEx": 22, "KERNEL32.dll!GetLastError": 120, "KERNEL32.dll!DeleteCriticalSection": 43, "KERNEL32.dll!InitializeSListHead": 9, "ole32.dll!CoCreateInstance": 2, "KERNEL32.dll!RaiseException": 4, "KERNEL32.dll!EnterCriticalSection": 26, "KERNEL32.dll!EncodePointer": 11, "KERNEL32.dll!LeaveCriticalSection": 28, "KERNEL32.dll!DecodePointer": 6, "KERNEL32.dll!FindResourceW": 3, "KERNEL32.dll!WideCharToMultiByte": 25, "KERNEL32.dll!HeapAlloc": 6, "KERNEL32.dll!HeapFree": 10, "KERNEL32.dll!HeapReAlloc": 3, "KERNEL32.dll!HeapSize": 2, "KERNEL32.dll!HeapDestroy": 2, "KERNEL32.dll!GetProcessHeap": 6, "KERNEL32.dll!FindResourceExW": 1, "KERNEL32.dll!LoadResource": 1, "KERNEL32.dll!LockResource": 1, "KERNEL32.dll!SizeofResource": 1, "OLEAUT32.dll!VariantInit": 61, "OLEAUT32.dll!VariantChangeType": 15, "OLEAUT32.dll!VariantClear": 72, "OLEAUT32.dll!SysFreeString": 22, "KERNEL32.dll!MultiByteToWideChar": 28, "OLEAUT32.dll!SysStringLen": 7, "SETUPAPI.dll!CM_Get_Device_IDW": 1, "OLEAUT32.dll!SysAllocString": 36, "OLEAUT32.dll!SysStringByteLen": 8, "OLEAUT32.dll!SysAllocStringByteLen": 8, "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6, "KERNEL32.dll!SetLastError": 38, "SETUPAPI.dll!SetupDiGetClassDevsW": 1, "OLEAUT32.dll!SysAllocStringLen": 3, "KERNEL32.dll!VerSetConditionMask": 5, "KERNEL32.dll!VerifyVersionInfoW": 4, "KERNEL32.dll!GetCurrentProcess": 14, "ADVAPI32.dll!OpenProcessToken": 1, "ADVAPI32.dll!GetTokenInformation": 2, "KERNEL32.dll!CloseHandle": 34, "ADVAPI32.dll!RegQueryValueExW": 7, "ADVAPI32.dll!RegCloseKey": 24, "ADVAPI32.dll!RegEnumValueW": 3, "ADVAPI32.dll!RegOpenKeyExW": 6, "KERNEL32.dll!ExpandEnvironmentStringsW": 4, "KERNEL32.dll!WaitForSingleObject": 2, "KERNEL32.dll!CreateFileW": 9, "KERNEL32.dll!ReleaseMutex": 3, "KERNEL32.dll!GetFileSizeEx": 2, "KERNEL32.dll!WriteFile": 7, "KERNEL32.dll!GetModuleFileNameW": 4, "SHLWAPI.dll!PathFindFileNameW": 1, "KERNEL32.dll!GetFileAttributesW": 5, "KERNEL32.dll!RemoveDirectoryW": 2, "KERNEL32.dll!CreateMutexW": 1, "KERNEL32.dll!GetTempPathW": 1, "SHELL32.dll!SHGetFolderPathW": 1, "KERNEL32.dll!GetCurrentProcessId": 3, "KERNEL32.dll!GetCurrentThreadId": 12, "KERNEL32.dll!WaitForSingleObjectEx": 9, "KERNEL32.dll!FormatMessageA": 1, "KERNEL32.dll!LocalFree": 7, "KERNEL32.dll!FormatMessageW": 2, "KERNEL32.dll!CreateEventA": 3, "KERNEL32.dll!SetEvent": 18, "KERNEL32.dll!OutputDebugStringW": 2, "KERNEL32.dll!QueryPerformanceFrequency": 2, "KERNEL32.dll!QueryPerformanceCounter": 3, "KERNEL32.dll!GetProcessTimes": 1, "KERNEL32.dll!GetSystemTimeAsFileTime": 4, "OLEAUT32.dll!VariantCopy": 1, "OLEAUT32.dll!LoadTypeLib": 2, "OLEAUT32.dll!LoadRegTypeLib": 1, "KERNEL32.dll!GetUserDefaultUILanguage": 1, "KERNEL32.dll!GetSystemDefaultLangID": 1, "KERNEL32.dll!GetVersionExW": 3, "KERNEL32.dll!GetSystemInfo": 2, "SETUPAPI.dll!SetupDiEnumDeviceInfo": 1, "SETUPAPI.dll!CM_Get_DevNode_Status": 2, "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 7, "SETUPAPI.dll!SetupGetStringFieldW": 2, "SETUPAPI.dll!SetupDiOpenDevRegKey": 1, "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1, "SETUPAPI.dll!SetupDiSetSelectedDevice": 1, "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1, "SETUPAPI.dll!SetupGetFieldCount": 1, "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1, "OLEAUT32.dll!SafeArrayGetVartype": 1, "OLEAUT32.dll!SafeArrayDestroy": 3, "OLEAUT32.dll!SafeArrayCopy": 1, "OLEAUT32.dll!SafeArrayLock": 3, "OLEAUT32.dll!SafeArrayGetLBound": 3, "OLEAUT32.dll!SafeArrayGetUBound": 3, "KERNEL32.dll!GetProcAddress": 61, "KERNEL32.dll!GetModuleHandleExW": 2, "KERNEL32.dll!FreeLibrary": 8, "KERNEL32.dll!LoadLibraryW": 2, "OLEAUT32.dll!SafeArrayUnlock": 3, "ADVAPI32.dll!RegDeleteValueW": 1, "ADVAPI32.dll!RegQueryInfoKeyW": 2, "ADVAPI32.dll!RegOpenCurrentUser": 1, "ADVAPI32.dll!RegEnumKeyExW": 1, "ADVAPI32.dll!RegDeleteKeyW": 1, "OLEAUT32.dll!SafeArrayCreate": 2, "KERNEL32.dll!LocalAlloc": 5, "KERNEL32.dll!GetFullPathNameW": 2, "KERNEL32.dll!lstrcmpW": 1, "KERNEL32.dll!LoadLibraryExW": 15, "KERNEL32.dll!GetModuleFileNameA": 2, "ADVAPI32.dll!LsaNtStatusToWinError": 1, "KERNEL32.dll!GetStringTypeW": 4, "KERNEL32.dll!TryEnterCriticalSection": 2, "KERNEL32.dll!GetModuleHandleW": 11, "KERNEL32.dll!CreateEventW": 2, "KERNEL32.dll!GetTickCount": 1, "KERNEL32.dll!Sleep": 2, "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 3, "KERNEL32.dll!CompareStringW": 2, "KERNEL32.dll!GetLocaleInfoW": 12, "KERNEL32.dll!LCMapStringW": 2, "KERNEL32.dll!GetCPInfo": 5, "KERNEL32.dll!CreateDirectoryW": 1, "KERNEL32.dll!SetFileAttributesW": 2, "KERNEL32.dll!DeleteFileW": 1, "KERNEL32.dll!MoveFileExW": 1, "KERNEL32.dll!GetFileInformationByHandle": 1, "KERNEL32.dll!DeviceIoControl": 1, "KERNEL32.dll!AreFileApisANSI": 2, "KERNEL32.dll!IsDebuggerPresent": 3, "KERNEL32.dll!ResetEvent": 2, "KERNEL32.dll!SetUnhandledExceptionFilter": 3, "KERNEL32.dll!UnhandledExceptionFilter": 3, "KERNEL32.dll!TerminateProcess": 3, "KERNEL32.dll!ChangeTimerQueueTimer": 1, "KERNEL32.dll!CreateThread": 1, "KERNEL32.dll!CreateTimerQueueTimer": 1, "KERNEL32.dll!DeleteTimerQueueTimer": 1, "KERNEL32.dll!GetLogicalProcessorInformation": 2, "KERNEL32.dll!GetNumaHighestNodeNumber": 1, "KERNEL32.dll!GetProcessAffinityMask": 2, "KERNEL32.dll!GetThreadPriority": 1, "KERNEL32.dll!RegisterWaitForSingleObject": 2, "KERNEL32.dll!SetThreadAffinityMask": 1, "KERNEL32.dll!SetThreadPriority": 1, "KERNEL32.dll!SignalObjectAndWait": 1, "KERNEL32.dll!SwitchToThread": 1, "KERNEL32.dll!TlsAlloc": 5, "KERNEL32.dll!TlsFree": 5, "KERNEL32.dll!TlsGetValue": 4, "KERNEL32.dll!TlsSetValue": 4, "KERNEL32.dll!UnregisterWait": 1, "KERNEL32.dll!FreeLibraryAndExitThread": 1, "KERNEL32.dll!GetCurrentThread": 6, "KERNEL32.dll!GetThreadTimes": 1, "KERNEL32.dll!GetModuleHandleA": 1, "KERNEL32.dll!VirtualAlloc": 1, "KERNEL32.dll!VirtualFree": 1, "KERNEL32.dll!VirtualProtect": 1, "KERNEL32.dll!InterlockedFlushSList": 23, "KERNEL32.dll!UnregisterWaitEx": 1, "KERNEL32.dll!InterlockedPopEntrySList": 13, "KERNEL32.dll!InterlockedPushEntrySList": 21, "KERNEL32.dll!ReleaseSemaphore": 2, "KERNEL32.dll!DuplicateHandle": 2, "KERNEL32.dll!QueryDepthSList": 17, "KERNEL32.dll!CreateTimerQueue": 1, "KERNEL32.dll!RtlUnwind": 3, "KERNEL32.dll!IsProcessorFeaturePresent": 4, "KERNEL32.dll!ExitProcess": 1, "KERNEL32.dll!GetTimeZoneInformation": 1, "KERNEL32.dll!EnumSystemLocalesW": 4, "KERNEL32.dll!GetDateFormatW": 1, "KERNEL32.dll!GetTimeFormatW": 1, "KERNEL32.dll!GetUserDefaultLCID": 3, "KERNEL32.dll!IsValidLocale": 2, "KERNEL32.dll!GetACP": 6, "KERNEL32.dll!GetStartupInfoW": 1, "KERNEL32.dll!GetFileType": 2, "KERNEL32.dll!GetStdHandle": 1, "KERNEL32.dll!FlushFileBuffers": 1, "KERNEL32.dll!GetConsoleCP": 1, "KERNEL32.dll!GetConsoleMode": 2, "KERNEL32.dll!ReadFile": 4, "KERNEL32.dll!SetFilePointerEx": 1, "KERNEL32.dll!FindFirstFileExA": 1, "KERNEL32.dll!FindClose": 1, "KERNEL32.dll!FindNextFileA": 1, "KERNEL32.dll!GetOEMCP": 1, "KERNEL32.dll!IsValidCodePage": 3, "KERNEL32.dll!GetCommandLineA": 1, "KERNEL32.dll!GetCommandLineW": 1, "KERNEL32.dll!GetEnvironmentStringsW": 1, "KERNEL32.dll!FreeEnvironmentStringsW": 1, "KERNEL32.dll!SetEnvironmentVariableA": 1, "KERNEL32.dll!SetStdHandle": 1, "KERNEL32.dll!ReadConsoleW": 1, "KERNEL32.dll!WriteConsoleW": 2, "KERNEL32.dll!OpenEventA": 2, "KERNEL32.dll!GlobalMemoryStatusEx": 1 }, "complete_linear_sweep": true }