{
  "path": "Installer2\\InstallerCore\\NVI2UI.DLL",
  "sha256": "e0840001809399d9028d5edeeccd12b30c3dcbd2196742b04a902dd1a6989bb2",
  "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof",
  "sections": [
    {
      "name": ".text",
      "raw_bytes": 1358848,
      "processed_bytes": 1358848,
      "instructions": 457089,
      "skipdata_bytes": 20
    }
  ],
  "utc": "2026-11-11T21:40:25.371806+00:00",
  "instructions": 457089,
  "skipdata_bytes": 20,
  "calls": 35402,
  "api_reference_counts": {
    "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 28,
    "KERNEL32.dll!GetLastError": 161,
    "OLEAUT32.dll!VariantInit": 419,
    "OLEAUT32.dll!VariantClear": 583,
    "KERNEL32.dll!FindResourceW": 7,
    "KERNEL32.dll!WideCharToMultiByte": 16,
    "KERNEL32.dll!ExpandEnvironmentStringsW": 4,
    "ADVAPI32.dll!RegQueryValueExW": 10,
    "ADVAPI32.dll!RegOpenKeyExW": 24,
    "ADVAPI32.dll!RegCloseKey": 41,
    "KERNEL32.dll!QueryPerformanceCounter": 3,
    "KERNEL32.dll!QueryPerformanceFrequency": 2,
    "KERNEL32.dll!LeaveCriticalSection": 141,
    "KERNEL32.dll!CloseHandle": 45,
    "KERNEL32.dll!SetEvent": 6,
    "OLEAUT32.dll!SysFreeString": 61,
    "GDI32.dll!DeleteObject": 41,
    "OLEAUT32.dll!SysStringLen": 80,
    "GDI32.dll!RemoveFontResourceExW": 1,
    "KERNEL32.dll!ReleaseMutex": 4,
    "KERNEL32.dll!LocalFree": 7,
    "KERNEL32.dll!HeapDestroy": 2,
    "KERNEL32.dll!HeapAlloc": 6,
    "KERNEL32.dll!WriteFile": 8,
    "OLEAUT32.dll!SysAllocStringLen": 10,
    "KERNEL32.dll!FindResourceExW": 1,
    "SHELL32.dll!SHGetPathFromIDListW": 2,
    "USER32.dll!SendMessageW": 165,
    "OLEAUT32.dll!VariantChangeType": 30,
    "GDI32.dll!DeleteDC": 12,
    "KERNEL32.dll!SetLastError": 88,
    "KERNEL32.dll!GetTempPathW": 1,
    "SHELL32.dll!SHGetFolderPathW": 1,
    "KERNEL32.dll!GetCurrentProcessId": 3,
    "KERNEL32.dll!GetFileAttributesW": 7,
    "KERNEL32.dll!RemoveDirectoryW": 2,
    "USER32.dll!IsRectEmpty": 5,
    "GDI32.dll!SelectObject": 87,
    "GDI32.dll!SetTextColor": 27,
    "USER32.dll!DrawTextW": 16,
    "KERNEL32.dll!WaitForSingleObject": 5,
    "KERNEL32.dll!CreateFileW": 11,
    "USER32.dll!GetClientRect": 60,
    "USER32.dll!ClientToScreen": 18,
    "USER32.dll!GetParent": 21,
    "USER32.dll!ScreenToClient": 23,
    "GDI32.dll!CreateCompatibleDC": 11,
    "GDI32.dll!BitBlt": 10,
    "KERNEL32.dll!HeapFree": 10,
    "KERNEL32.dll!EnterCriticalSection": 113,
    "OLEAUT32.dll!VariantCopy": 24,
    "KERNEL32.dll!GetCurrentProcess": 8,
    "KERNEL32.dll!GetProcessTimes": 1,
    "KERNEL32.dll!GetSystemTimeAsFileTime": 3,
    "KERNEL32.dll!GetProcessHeap": 13,
    "KERNEL32.dll!GetModuleFileNameW": 6,
    "SHLWAPI.dll!PathFindFileNameW": 1,
    "KERNEL32.dll!HeapSize": 2,
    "KERNEL32.dll!GetFileSizeEx": 5,
    "KERNEL32.dll!CreateMutexW": 2,
    "KERNEL32.dll!VerSetConditionMask": 5,
    "KERNEL32.dll!VerifyVersionInfoW": 4,
    "ADVAPI32.dll!OpenProcessToken": 1,
    "ADVAPI32.dll!GetTokenInformation": 2,
    "KERNEL32.dll!OutputDebugStringW": 2,
    "SHELL32.dll!SHBrowseForFolderW": 1,
    "ole32.dll!CoTaskMemFree": 13,
    "USER32.dll!InvalidateRect": 35,
    "USER32.dll!UpdateWindow": 5,
    "GDI32.dll!CreateCompatibleBitmap": 6,
    "USER32.dll!GetWindowLongW": 54,
    "USER32.dll!SetWindowLongW": 37,
    "USER32.dll!GetWindowRect": 31,
    "USER32.dll!SetWindowPos": 18,
    "KERNEL32.dll!HeapReAlloc": 2,
    "ADVAPI32.dll!RegEnumValueW": 2,
    "ADVAPI32.dll!RegCreateKeyExW": 1,
    "KERNEL32.dll!LoadResource": 1,
    "KERNEL32.dll!LockResource": 1,
    "KERNEL32.dll!SizeofResource": 1,
    "KERNEL32.dll!CreateEventA": 3,
    "KERNEL32.dll!GetCurrentThreadId": 22,
    "KERNEL32.dll!WaitForSingleObjectEx": 2,
    "KERNEL32.dll!FormatMessageA": 1,
    "KERNEL32.dll!FormatMessageW": 2,
    "KERNEL32.dll!GetModuleHandleW": 16,
    "KERNEL32.dll!GetProcAddress": 21,
    "KERNEL32.dll!OutputDebugStringA": 1,
    "USER32.dll!UnregisterClassW": 1,
    "KERNEL32.dll!LoadLibraryW": 3,
    "KERNEL32.dll!DeleteCriticalSection": 93,
    "OLEAUT32.dll!SysAllocString": 22,
    "USER32.dll!IsWindow": 31,
    "USER32.dll!ReleaseCapture": 6,
    "USER32.dll!TrackMouseEvent": 6,
    "GDI32.dll!SetBkMode": 30,
    "GDI32.dll!GetStockObject": 12,
    "GDI32.dll!SetBkColor": 7,
    "GDI32.dll!CreateSolidBrush": 22,
    "USER32.dll!SetRect": 2,
    "GDI32.dll!RectVisible": 2,
    "USER32.dll!LoadCursorW": 23,
    "KERNEL32.dll!ResumeThread": 2,
    "USER32.dll!AttachThreadInput": 1,
    "ole32.dll!CoInitializeEx": 1,
    "ole32.dll!CoUninitialize": 1,
    "USER32.dll!PostQuitMessage": 2,
    "USER32.dll!DestroyWindow": 26,
    "USER32.dll!PostMessageW": 14,
    "USER32.dll!GetMessageW": 3,
    "USER32.dll!TranslateMessage": 2,
    "USER32.dll!DispatchMessageW": 2,
    "KERNEL32.dll!RaiseException": 4,
    "USER32.dll!CreateWindowExW": 1,
    "USER32.dll!GetClassInfoExW": 1,
    "USER32.dll!RegisterClassExW": 1,
    "USER32.dll!GetWindowTextLengthW": 6,
    "USER32.dll!GetWindowTextW": 6,
    "USER32.dll!GetDC": 14,
    "KERNEL32.dll!MulDiv": 51,
    "USER32.dll!PtInRect": 6,
    "USER32.dll!GetScrollInfo": 13,
    "USER32.dll!GetCapture": 6,
    "USER32.dll!RedrawWindow": 12,
    "GDI32.dll!CreatePen": 7,
    "GDI32.dll!RoundRect": 1,
    "ole32.dll!CoCreateInstance": 9,
    "KERNEL32.dll!MultiByteToWideChar": 14,
    "USER32.dll!LoadIconW": 2,
    "USER32.dll!DestroyIcon": 6,
    "USER32.dll!DefWindowProcW": 8,
    "USER32.dll!SetFocus": 3,
    "USER32.dll!MoveWindow": 10,
    "SHELL32.dll!SHGetFileInfoW": 2,
    "USER32.dll!SetWindowTextW": 5,
    "KERNEL32.dll!GetExitCodeThread": 1,
    "USER32.dll!CallWindowProcW": 10,
    "GDI32.dll!GetTextExtentPoint32W": 2,
    "GDI32.dll!CreateFontIndirectW": 3,
    "GDI32.dll!AddFontResourceExW": 1,
    "GDI32.dll!GetDeviceCaps": 12,
    "USER32.dll!GetSysColor": 2,
    "USER32.dll!ReleaseDC": 13,
    "ole32.dll!OleUninitialize": 2,
    "ole32.dll!OleInitialize": 2,
    "KERNEL32.dll!GlobalAlloc": 4,
    "KERNEL32.dll!GlobalLock": 4,
    "KERNEL32.dll!GlobalUnlock": 4,
    "ole32.dll!CreateStreamOnHGlobal": 3,
    "USER32.dll!IsWindowVisible": 3,
    "USER32.dll!FillRect": 17,
    "GDI32.dll!ExcludeClipRect": 1,
    "USER32.dll!GetClassNameW": 1,
    "KERNEL32.dll!lstrcmpW": 2,
    "USER32.dll!CharNextW": 5,
    "ole32.dll!CLSIDFromString": 1,
    "ole32.dll!CLSIDFromProgID": 1,
    "ole32.dll!CoGetClassObject": 1,
    "OLEAUT32.dll!LoadTypeLib": 4,
    "ole32.dll!CoTaskMemAlloc": 5,
    "USER32.dll!CopyRect": 2,
    "OLEAUT32.dll!LoadRegTypeLib": 1,
    "USER32.dll!CreateAcceleratorTableW": 1,
    "USER32.dll!InvalidateRgn": 1,
    "ole32.dll!CreateBindCtx": 1,
    "ole32.dll!OleLockRunning": 2,
    "USER32.dll!BeginPaint": 8,
    "USER32.dll!EndPaint": 10,
    "USER32.dll!GetFocus": 1,
    "USER32.dll!IsChild": 1,
    "USER32.dll!GetWindow": 2,
    "USER32.dll!GetDlgItem": 3,
    "USER32.dll!DestroyAcceleratorTable": 1,
    "USER32.dll!SetCapture": 5,
    "ole32.dll!StringFromGUID2": 2,
    "USER32.dll!ShowWindow": 3,
    "GDI32.dll!GetObjectW": 1,
    "USER32.dll!GetDesktopWindow": 2,
    "OLEAUT32.dll!OleCreateFontIndirect": 1,
    "USER32.dll!RegisterWindowMessageW": 2,
    "USER32.dll!CopyImage": 1,
    "KERNEL32.dll!LoadLibraryA": 1,
    "USER32.dll!SetCursor": 1,
    "USER32.dll!SetRectEmpty": 1,
    "KERNEL32.dll!CreateEventW": 3,
    "USER32.dll!GetMenu": 2,
    "USER32.dll!AdjustWindowRectEx": 2,
    "USER32.dll!SystemParametersInfoW": 1,
    "USER32.dll!MonitorFromWindow": 1,
    "USER32.dll!GetMonitorInfoW": 1,
    "USER32.dll!MapWindowPoints": 1,
    "SHELL32.dll!ExtractIconW": 1,
    "USER32.dll!GetDialogBaseUnits": 2,
    "dwmapi.dll!DwmSetWindowAttribute": 3,
    "GDI32.dll!Rectangle": 4,
    "GDI32.dll!TextOutW": 1,
    "USER32.dll!PeekMessageW": 1,
    "USER32.dll!KillTimer": 6,
    "USER32.dll!MessageBoxW": 3,
    "USER32.dll!SetTimer": 2,
    "USER32.dll!GetDCEx": 1,
    "USER32.dll!GetWindowDC": 5,
    "USER32.dll!GetSystemMenu": 1,
    "USER32.dll!EnableMenuItem": 2,
    "KERNEL32.dll!GetCurrentThread": 2,
    "KERNEL32.dll!SetThreadPriority": 2,
    "GDI32.dll!CreateRectRgn": 1,
    "USER32.dll!SetWindowRgn": 8,
    "ADVAPI32.dll!RegQueryInfoKeyW": 3,
    "ADVAPI32.dll!RegDeleteKeyW": 3,
    "KERNEL32.dll!EncodePointer": 4,
    "KERNEL32.dll!DecodePointer": 6,
    "KERNEL32.dll!GetThreadLocale": 3,
    "KERNEL32.dll!SetThreadLocale": 6,
    "USER32.dll!IsDialogMessageW": 1,
    "GDI32.dll!CreateRoundRectRgn": 7,
    "GDI32.dll!MoveToEx": 5,
    "GDI32.dll!LineTo": 5,
    "USER32.dll!GetScrollBarInfo": 43,
    "USER32.dll!GetSystemMetrics": 2,
    "USER32.dll!SetScrollInfo": 1,
    "KERNEL32.dll!GetTickCount": 1,
    "UxTheme.dll!SetWindowTheme": 2,
    "USER32.dll!GetDlgCtrlID": 2,
    "USER32.dll!SetScrollPos": 1,
    "GDI32.dll!SetTextAlign": 1,
    "KERNEL32.dll!GlobalFree": 1,
    "OLEAUT32.dll!SysStringByteLen": 8,
    "OLEAUT32.dll!SysAllocStringByteLen": 5,
    "gdiplus.dll!GdipCreateFromHDC": 1,
    "gdiplus.dll!GdipDeleteGraphics": 1,
    "gdiplus.dll!GdipDrawImageRectI": 1,
    "gdiplus.dll!GdipSetSmoothingMode": 1,
    "gdiplus.dll!GdipSetPixelOffsetMode": 1,
    "gdiplus.dll!GdipAlloc": 1,
    "gdiplus.dll!GdipFree": 1,
    "gdiplus.dll!GdipLoadImageFromStream": 1,
    "gdiplus.dll!GdipCloneImage": 1,
    "gdiplus.dll!GdipDisposeImage": 1,
    "gdiplus.dll!GdipSetInterpolationMode": 1,
    "gdiplus.dll!GdipGetImageGraphicsContext": 1,
    "gdiplus.dll!GdipGetImageHorizontalResolution": 1,
    "gdiplus.dll!GdipGetImageVerticalResolution": 1,
    "gdiplus.dll!GdipGetImagePixelFormat": 1,
    "gdiplus.dll!GdipCreateBitmapFromScan0": 1,
    "gdiplus.dll!GdipCreateHBITMAPFromBitmap": 1,
    "gdiplus.dll!GdipBitmapSetResolution": 1,
    "gdiplus.dll!GdipDrawImageRect": 1,
    "gdiplus.dll!GdipGetImageWidth": 1,
    "gdiplus.dll!GdipGetImageHeight": 1,
    "gdiplus.dll!GdipSetCompositingMode": 1,
    "gdiplus.dll!GdiplusStartup": 1,
    "gdiplus.dll!GdiplusShutdown": 1,
    "KERNEL32.dll!InitializeCriticalSectionEx": 3,
    "RPCRT4.dll!UuidToStringW": 1,
    "RPCRT4.dll!RpcStringFreeW": 1,
    "KERNEL32.dll!UnmapViewOfFile": 1,
    "KERNEL32.dll!CreateFileMappingW": 1,
    "KERNEL32.dll!MapViewOfFile": 1,
    "ADVAPI32.dll!IsTextUnicode": 1,
    "SHLWAPI.dll!UrlIsW": 1,
    "SHLWAPI.dll!UrlCreateFromPathW": 1,
    "KERNEL32.dll!FlushFileBuffers": 2,
    "KERNEL32.dll!SetFilePointerEx": 7,
    "KERNEL32.dll!ReadFile": 5,
    "KERNEL32.dll!SetEndOfFile": 1,
    "KERNEL32.dll!GetFileTime": 1,
    "OLEAUT32.dll!SafeArrayUnlock": 1,
    "OLEAUT32.dll!SafeArrayDestroy": 1,
    "OLEAUT32.dll!SafeArrayGetVartype": 1,
    "OLEAUT32.dll!SafeArrayCopy": 1,
    "OLEAUT32.dll!SafeArrayLock": 3,
    "OLEAUT32.dll!SafeArrayGetLBound": 1,
    "OLEAUT32.dll!SafeArrayGetUBound": 1,
    "KERNEL32.dll!GetModuleHandleExW": 3,
    "KERNEL32.dll!FreeLibrary": 7,
    "KERNEL32.dll!GetVersionExW": 1,
    "ADVAPI32.dll!RegDeleteValueW": 1,
    "ADVAPI32.dll!RegOpenCurrentUser": 1,
    "ADVAPI32.dll!RegEnumKeyExW": 1,
    "KERNEL32.dll!GetSystemInfo": 1,
    "KERNEL32.dll!LocalAlloc": 3,
    "KERNEL32.dll!GetFullPathNameW": 2,
    "KERNEL32.dll!LoadLibraryExW": 12,
    "KERNEL32.dll!GetModuleFileNameA": 1,
    "KERNEL32.dll!GetStringTypeW": 4,
    "KERNEL32.dll!LCMapStringEx": 4,
    "KERNEL32.dll!GetLocaleInfoEx": 1,
    "KERNEL32.dll!GetCPInfo": 4,
    "KERNEL32.dll!CompareStringEx": 2,
    "KERNEL32.dll!CreateDirectoryW": 1,
    "KERNEL32.dll!SetFileAttributesW": 2,
    "KERNEL32.dll!DeleteFileW": 1,
    "KERNEL32.dll!MoveFileExW": 1,
    "KERNEL32.dll!GetFileInformationByHandle": 1,
    "KERNEL32.dll!DeviceIoControl": 1,
    "KERNEL32.dll!AreFileApisANSI": 2,
    "KERNEL32.dll!IsDebuggerPresent": 3,
    "KERNEL32.dll!LoadLibraryExA": 1,
    "KERNEL32.dll!FlushInstructionCache": 1,
    "KERNEL32.dll!InterlockedPopEntrySList": 2,
    "KERNEL32.dll!VirtualAlloc": 1,
    "KERNEL32.dll!VirtualFree": 1,
    "KERNEL32.dll!InterlockedPushEntrySList": 3,
    "KERNEL32.dll!IsProcessorFeaturePresent": 8,
    "KERNEL32.dll!InitializeSListHead": 2,
    "urlmon.dll!CreateURLMonikerEx": 1,
    "urlmon.dll!CreateAsyncBindCtx": 1,
    "VERSION.dll!GetFileVersionInfoSizeW": 1,
    "VERSION.dll!GetFileVersionInfoW": 1,
    "VERSION.dll!VerQueryValueW": 1,
    "KERNEL32.dll!AcquireSRWLockExclusive": 3,
    "KERNEL32.dll!ReleaseSRWLockExclusive": 3,
    "KERNEL32.dll!WakeAllConditionVariable": 2,
    "KERNEL32.dll!SleepConditionVariableSRW": 1,
    "KERNEL32.dll!SetUnhandledExceptionFilter": 3,
    "KERNEL32.dll!UnhandledExceptionFilter": 3,
    "KERNEL32.dll!TerminateProcess": 3,
    "KERNEL32.dll!InterlockedFlushSList": 1,
    "KERNEL32.dll!RtlUnwind": 2,
    "KERNEL32.dll!TlsAlloc": 2,
    "KERNEL32.dll!TlsFree": 2,
    "KERNEL32.dll!TlsGetValue": 2,
    "KERNEL32.dll!TlsSetValue": 2,
    "KERNEL32.dll!ExitThread": 3,
    "KERNEL32.dll!FreeLibraryAndExitThread": 1,
    "KERNEL32.dll!CreateThread": 2,
    "KERNEL32.dll!ExitProcess": 1,
    "KERNEL32.dll!GetStartupInfoW": 1,
    "KERNEL32.dll!GetFileType": 2,
    "KERNEL32.dll!GetStdHandle": 1,
    "KERNEL32.dll!GetTimeZoneInformation": 1,
    "KERNEL32.dll!EnumSystemLocalesW": 4,
    "KERNEL32.dll!VirtualProtect": 3,
    "KERNEL32.dll!CompareStringW": 1,
    "KERNEL32.dll!FlsAlloc": 1,
    "KERNEL32.dll!FlsFree": 1,
    "KERNEL32.dll!FlsGetValue": 1,
    "KERNEL32.dll!FlsSetValue": 1,
    "KERNEL32.dll!GetDateFormatW": 1,
    "KERNEL32.dll!GetLocaleInfoW": 11,
    "KERNEL32.dll!GetTimeFormatW": 1,
    "KERNEL32.dll!GetUserDefaultLCID": 2,
    "KERNEL32.dll!IsValidLocale": 2,
    "KERNEL32.dll!LCMapStringW": 1,
    "KERNEL32.dll!GetConsoleOutputCP": 1,
    "KERNEL32.dll!GetConsoleMode": 2,
    "KERNEL32.dll!FindFirstFileExW": 1,
    "KERNEL32.dll!FindNextFileW": 1,
    "KERNEL32.dll!FindClose": 2,
    "KERNEL32.dll!GetOEMCP": 1,
    "KERNEL32.dll!GetACP": 3,
    "KERNEL32.dll!IsValidCodePage": 3,
    "KERNEL32.dll!GetCommandLineA": 1,
    "KERNEL32.dll!GetCommandLineW": 1,
    "KERNEL32.dll!GetEnvironmentStringsW": 2,
    "KERNEL32.dll!FreeEnvironmentStringsW": 4,
    "KERNEL32.dll!SetEnvironmentVariableW": 1,
    "KERNEL32.dll!SetStdHandle": 1,
    "KERNEL32.dll!ReadConsoleW": 1,
    "KERNEL32.dll!WriteConsoleW": 2,
    "ADVAPI32.dll!LsaNtStatusToWinError": 1,
    "KERNEL32.dll!OpenEventA": 2,
    "KERNEL32.dll!ResetEvent": 1
  },
  "complete_linear_sweep": true
}