{
  "path": "Installer2\\InstallerCore\\NVI2.DLL",
  "sha256": "fe0397022b4e1bf79c31d55c43fc99792d489a889c8790b712de5a022c7994a4",
  "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof",
  "sections": [
    {
      "name": ".text",
      "raw_bytes": 4385792,
      "processed_bytes": 4385792,
      "instructions": 1385860,
      "skipdata_bytes": 42
    }
  ],
  "utc": "2026-11-11T21:40:50.514466+00:00",
  "instructions": 1385860,
  "skipdata_bytes": 42,
  "calls": 114893,
  "api_reference_counts": {
    "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 128,
    "KERNEL32.dll!GetLastError": 354,
    "OLEAUT32.dll!SysAllocString": 204,
    "OLEAUT32.dll!SysFreeString": 560,
    "OLEAUT32.dll!VariantInit": 1083,
    "OLEAUT32.dll!VariantClear": 2350,
    "OLEAUT32.dll!VariantChangeType": 67,
    "KERNEL32.dll!EnterCriticalSection": 789,
    "KERNEL32.dll!LeaveCriticalSection": 833,
    "OLEAUT32.dll!SysStringLen": 140,
    "OLEAUT32.dll!SysAllocStringLen": 35,
    "KERNEL32.dll!FindResourceW": 5,
    "KERNEL32.dll!LoadResource": 4,
    "KERNEL32.dll!LockResource": 3,
    "KERNEL32.dll!SizeofResource": 4,
    "KERNEL32.dll!WideCharToMultiByte": 15,
    "KERNEL32.dll!HeapAlloc": 3,
    "KERNEL32.dll!HeapFree": 6,
    "KERNEL32.dll!HeapReAlloc": 2,
    "KERNEL32.dll!HeapSize": 2,
    "KERNEL32.dll!HeapDestroy": 2,
    "KERNEL32.dll!GetProcessHeap": 6,
    "KERNEL32.dll!FindResourceExW": 1,
    "KERNEL32.dll!VerSetConditionMask": 5,
    "KERNEL32.dll!VerifyVersionInfoW": 4,
    "KERNEL32.dll!GetCurrentProcess": 44,
    "ADVAPI32.dll!OpenProcessToken": 7,
    "ADVAPI32.dll!GetTokenInformation": 2,
    "KERNEL32.dll!CloseHandle": 101,
    "ADVAPI32.dll!RegOpenKeyExW": 42,
    "ADVAPI32.dll!RegCloseKey": 63,
    "ADVAPI32.dll!RegQueryValueExW": 12,
    "ADVAPI32.dll!RegEnumValueW": 2,
    "KERNEL32.dll!ExpandEnvironmentStringsW": 5,
    "KERNEL32.dll!WaitForSingleObject": 11,
    "KERNEL32.dll!CreateFileW": 23,
    "KERNEL32.dll!ReleaseMutex": 4,
    "KERNEL32.dll!GetFileSizeEx": 5,
    "KERNEL32.dll!WriteFile": 10,
    "KERNEL32.dll!GetModuleFileNameW": 6,
    "SHLWAPI.dll!PathFindFileNameW": 1,
    "KERNEL32.dll!GetFileAttributesW": 7,
    "KERNEL32.dll!RemoveDirectoryW": 6,
    "KERNEL32.dll!CreateMutexW": 3,
    "KERNEL32.dll!GetTempPathW": 1,
    "SHELL32.dll!SHGetFolderPathW": 2,
    "KERNEL32.dll!GetCurrentProcessId": 3,
    "KERNEL32.dll!GetCurrentThreadId": 3,
    "KERNEL32.dll!WaitForSingleObjectEx": 2,
    "KERNEL32.dll!FormatMessageA": 2,
    "KERNEL32.dll!LocalFree": 27,
    "KERNEL32.dll!FormatMessageW": 2,
    "KERNEL32.dll!CreateEventA": 3,
    "KERNEL32.dll!SetEvent": 11,
    "KERNEL32.dll!OutputDebugStringW": 2,
    "KERNEL32.dll!QueryPerformanceFrequency": 2,
    "KERNEL32.dll!QueryPerformanceCounter": 3,
    "KERNEL32.dll!GetProcessTimes": 1,
    "KERNEL32.dll!GetSystemTimeAsFileTime": 4,
    "KERNEL32.dll!GetTickCount": 42,
    "KERNEL32.dll!DeleteCriticalSection": 1091,
    "KERNEL32.dll!GetDiskFreeSpaceW": 10,
    "KERNEL32.dll!OpenEventW": 4,
    "KERNEL32.dll!SetLastError": 108,
    "KERNEL32.dll!Sleep": 17,
    "KERNEL32.dll!CreateEventW": 8,
    "KERNEL32.dll!GetCurrentThread": 2,
    "KERNEL32.dll!SetThreadPriority": 1,
    "RPCRT4.dll!UuidCreate": 5,
    "KERNEL32.dll!WaitForMultipleObjects": 1,
    "OLEAUT32.dll!VariantCopy": 29,
    "OLEAUT32.dll!SafeArrayCopy": 9,
    "OLEAUT32.dll!SafeArrayUnlock": 42,
    "OLEAUT32.dll!SafeArrayDestroy": 41,
    "OLEAUT32.dll!SafeArrayGetVartype": 15,
    "OLEAUT32.dll!SafeArrayLock": 27,
    "OLEAUT32.dll!LoadTypeLib": 4,
    "OLEAUT32.dll!LoadRegTypeLib": 1,
    "KERNEL32.dll!FreeLibrary": 14,
    "KERNEL32.dll!LoadLibraryA": 1,
    "USER32.dll!LoadStringW": 1,
    "KERNEL32.dll!GetUserDefaultLCID": 3,
    "KERNEL32.dll!LCMapStringW": 32,
    "KERNEL32.dll!GetStringTypeExW": 3,
    "KERNEL32.dll!DeleteFileW": 5,
    "KERNEL32.dll!MoveFileExW": 11,
    "KERNEL32.dll!OpenProcess": 3,
    "OLEAUT32.dll!SysStringByteLen": 72,
    "OLEAUT32.dll!SysAllocStringByteLen": 72,
    "OLEAUT32.dll!VarCmp": 1,
    "OLEAUT32.dll!VarBstrCmp": 5,
    "KERNEL32.dll!lstrlenW": 1,
    "OLEAUT32.dll!SafeArrayCreate": 12,
    "OLEAUT32.dll!SafeArrayGetLBound": 27,
    "OLEAUT32.dll!SafeArrayGetUBound": 27,
    "KERNEL32.dll!RaiseException": 6,
    "ole32.dll!CoCreateInstance": 17,
    "ole32.dll!CoInitializeEx": 2,
    "ole32.dll!CoUninitialize": 3,
    "KERNEL32.dll!TlsAlloc": 3,
    "KERNEL32.dll!TlsSetValue": 3,
    "ole32.dll!CoInitializeSecurity": 1,
    "ole32.dll!CoRegisterClassObject": 1,
    "ole32.dll!CoRevokeClassObject": 1,
    "KERNEL32.dll!TlsGetValue": 3,
    "KERNEL32.dll!GetThreadLocale": 5,
    "KERNEL32.dll!SetThreadLocale": 10,
    "ole32.dll!StringFromGUID2": 1,
    "ADVAPI32.dll!RegQueryInfoKeyW": 6,
    "KERNEL32.dll!GetModuleHandleW": 19,
    "KERNEL32.dll!GetProcAddress": 50,
    "ADVAPI32.dll!RegDeleteKeyW": 6,
    "USER32.dll!CharNextW": 23,
    "ole32.dll!CoTaskMemFree": 4,
    "ole32.dll!CoTaskMemRealloc": 1,
    "ole32.dll!CoTaskMemAlloc": 2,
    "KERNEL32.dll!lstrcmpiW": 12,
    "ADVAPI32.dll!RegSetValueExW": 5,
    "OLEAUT32.dll!VarUI4FromStr": 1,
    "ADVAPI32.dll!RegEnumKeyExW": 3,
    "ADVAPI32.dll!RegDeleteValueW": 2,
    "ADVAPI32.dll!RegCreateKeyExW": 2,
    "KERNEL32.dll!LoadLibraryExW": 14,
    "KERNEL32.dll!MultiByteToWideChar": 13,
    "SETUPAPI.dll!CM_Get_Device_IDW": 2,
    "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 6,
    "SETUPAPI.dll!SetupDiGetClassDevsW": 1,
    "KERNEL32.dll!WaitForMultipleObjectsEx": 1,
    "KERNEL32.dll!GetExitCodeThread": 1,
    "KERNEL32.dll!DuplicateHandle": 3,
    "USER32.dll!AllowSetForegroundWindow": 1,
    "SETUPAPI.dll!SetupOpenInfFileW": 10,
    "SETUPAPI.dll!SetupCloseInfFile": 15,
    "SETUPAPI.dll!SetupFindFirstLineW": 5,
    "OLEAUT32.dll!SafeArrayRedim": 2,
    "ADVAPI32.dll!IsValidSecurityDescriptor": 2,
    "ADVAPI32.dll!ConvertSidToStringSidW": 2,
    "ADVAPI32.dll!ConvertSecurityDescriptorToStringSecurityDescriptorW": 4,
    "KERNEL32.dll!EncodePointer": 3,
    "KERNEL32.dll!DecodePointer": 4,
    "ADVAPI32.dll!LookupPrivilegeValueW": 4,
    "ADVAPI32.dll!AdjustTokenPrivileges": 3,
    "ADVAPI32.dll!InitiateSystemShutdownW": 1,
    "OLEAUT32.dll!VariantCopyInd": 1,
    "msi.dll!#116": 7,
    "msi.dll!#70": 1,
    "msi.dll!#92": 1,
    "msi.dll!#32": 1,
    "msi.dll!#159": 1,
    "msi.dll!#160": 1,
    "msi.dll!#141": 2,
    "msi.dll!#281": 2,
    "msi.dll!#88": 1,
    "msi.dll!#157": 1,
    "msi.dll!#8": 1,
    "KERNEL32.dll!GetVersionExW": 4,
    "ADVAPI32.dll!GetSecurityDescriptorControl": 1,
    "ADVAPI32.dll!GetSecurityDescriptorDacl": 3,
    "ADVAPI32.dll!GetSecurityDescriptorSacl": 1,
    "SETUPAPI.dll!CMP_WaitNoPendingInstallEvents": 1,
    "KERNEL32.dll!OpenMutexW": 1,
    "KERNEL32.dll!GetSystemTime": 1,
    "KERNEL32.dll!ResetEvent": 3,
    "KERNEL32.dll!GetCommandLineW": 5,
    "SHLWAPI.dll!PathIsURLW": 3,
    "ADVAPI32.dll!AllocateAndInitializeSid": 3,
    "ADVAPI32.dll!SetEntriesInAclW": 3,
    "ADVAPI32.dll!SetNamedSecurityInfoW": 1,
    "ADVAPI32.dll!FreeSid": 10,
    "KERNEL32.dll!ResumeThread": 2,
    "KERNEL32.dll!IsDebuggerPresent": 5,
    "KERNEL32.dll!DebugBreak": 1,
    "KERNEL32.dll!GetTickCount64": 2,
    "RPCRT4.dll!RpcStringBindingComposeW": 1,
    "RPCRT4.dll!RpcStringFreeW": 2,
    "RPCRT4.dll!RpcBindingFromStringBindingW": 1,
    "RPCRT4.dll!RpcBindingFree": 1,
    "RPCRT4.dll!NdrClientCall2": 13,
    "KERNEL32.dll!VirtualQuery": 2,
    "KERNEL32.dll!GetSystemInfo": 4,
    "KERNEL32.dll!VirtualProtect": 4,
    "KERNEL32.dll!LoadLibraryExA": 1,
    "KERNEL32.dll!GetLocaleInfoW": 13,
    "KERNEL32.dll!FindClose": 3,
    "KERNEL32.dll!GlobalFree": 2,
    "KERNEL32.dll!UnmapViewOfFile": 1,
    "USERENV.dll!UnloadUserProfile": 3,
    "KERNEL32.dll!SetFileAttributesW": 4,
    "KERNEL32.dll!CopyFileExW": 2,
    "KERNEL32.dll!DeviceIoControl": 4,
    "KERNEL32.dll!FindFirstFileW": 2,
    "SHLWAPI.dll!UrlIsW": 1,
    "SHLWAPI.dll!PathCreateFromUrlW": 1,
    "KERNEL32.dll!CreateFileMappingW": 1,
    "KERNEL32.dll!MapViewOfFile": 3,
    "ADVAPI32.dll!GetNamedSecurityInfoW": 1,
    "KERNEL32.dll!GetTempFileNameW": 1,
    "KERNEL32.dll!GetFileTime": 2,
    "KERNEL32.dll!GlobalAlloc": 1,
    "KERNEL32.dll!SetFileTime": 2,
    "ADVAPI32.dll!OpenThreadToken": 1,
    "ADVAPI32.dll!DuplicateToken": 1,
    "ADVAPI32.dll!MapGenericMask": 1,
    "ADVAPI32.dll!AccessCheck": 1,
    "ADVAPI32.dll!RegOpenCurrentUser": 1,
    "KERNEL32.dll!LocalAlloc": 4,
    "ADVAPI32.dll!InitializeSecurityDescriptor": 4,
    "ADVAPI32.dll!RegRenameKey": 1,
    "KERNEL32.dll!FileTimeToSystemTime": 1,
    "RPCRT4.dll!UuidToStringW": 1,
    "RPCRT4.dll!UuidFromStringW": 1,
    "KERNEL32.dll!CreateProcessW": 1,
    "SHELL32.dll!ShellExecuteExW": 1,
    "KERNEL32.dll!GetExitCodeProcess": 1,
    "KERNEL32.dll!GetProcessId": 1,
    "KERNEL32.dll!TerminateProcess": 4,
    "ADVAPI32.dll!SetSecurityDescriptorDacl": 3,
    "KERNEL32.dll!ActivateActCtx": 1,
    "KERNEL32.dll!DeactivateActCtx": 1,
    "KERNEL32.dll!GetModuleHandleExW": 5,
    "KERNEL32.dll!LoadLibraryW": 2,
    "KERNEL32.dll!ReleaseActCtx": 1,
    "KERNEL32.dll!CreateActCtxW": 1,
    "KERNEL32.dll!GetLocalTime": 2,
    "KERNEL32.dll!InitializeCriticalSectionEx": 3,
    "OLEAUT32.dll!SafeArrayGetDim": 1,
    "KERNEL32.dll!SystemTimeToFileTime": 3,
    "SETUPAPI.dll!SetupDiOpenDeviceInfoW": 1,
    "SETUPAPI.dll!SetupDiCreateDeviceInfoList": 1,
    "SETUPAPI.dll!SetupDiSetClassRegistryPropertyW": 2,
    "SETUPAPI.dll!SetupDiSetDeviceRegistryPropertyW": 2,
    "SETUPAPI.dll!SetupDiGetActualSectionToInstallExW": 1,
    "SETUPAPI.dll!SetupDiBuildClassInfoList": 1,
    "SETUPAPI.dll!SetupDiGetDriverInfoDetailW": 5,
    "SETUPAPI.dll!SetupGetFieldCount": 2,
    "SETUPAPI.dll!SetupDiGetDeviceInstallParamsW": 1,
    "SETUPAPI.dll!SetupDiBuildDriverInfoList": 1,
    "SETUPAPI.dll!SetupDiEnumDriverInfoW": 1,
    "SETUPAPI.dll!SetupGetIntField": 1,
    "SETUPAPI.dll!CM_Get_DevNode_Status": 2,
    "SETUPAPI.dll!SetupDiOpenDevRegKey": 1,
    "SETUPAPI.dll!SetupDiDeleteDeviceInfo": 1,
    "SETUPAPI.dll!SetupDiSetDeviceInstallParamsW": 1,
    "SETUPAPI.dll!SetupDiSetSelectedDevice": 1,
    "SETUPAPI.dll!SetupDiSetSelectedDriverW": 1,
    "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 6,
    "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 1,
    "KERNEL32.dll!GetUserDefaultUILanguage": 1,
    "KERNEL32.dll!GetSystemDefaultLangID": 1,
    "WINHTTP.dll!WinHttpOpen": 1,
    "WINHTTP.dll!WinHttpCrackUrl": 1,
    "WINHTTP.dll!WinHttpConnect": 1,
    "WINHTTP.dll!WinHttpCloseHandle": 1,
    "WINHTTP.dll!WinHttpQueryDataAvailable": 1,
    "WINHTTP.dll!WinHttpReadData": 1,
    "WINHTTP.dll!WinHttpOpenRequest": 1,
    "WINHTTP.dll!WinHttpReceiveResponse": 1,
    "WINHTTP.dll!WinHttpSendRequest": 2,
    "WINHTTP.dll!WinHttpSetOption": 1,
    "KERNEL32.dll!FlushFileBuffers": 2,
    "KERNEL32.dll!SetFilePointerEx": 9,
    "KERNEL32.dll!ReadFile": 6,
    "KERNEL32.dll!SetEndOfFile": 5,
    "KERNEL32.dll!GetFullPathNameW": 2,
    "KERNEL32.dll!lstrcmpW": 1,
    "KERNEL32.dll!GetModuleFileNameA": 1,
    "USER32.dll!SendMessageTimeoutW": 1,
    "USER32.dll!GetLastActivePopup": 1,
    "ADVAPI32.dll!CloseServiceHandle": 7,
    "ADVAPI32.dll!ChangeServiceConfigW": 2,
    "ADVAPI32.dll!ControlService": 1,
    "ADVAPI32.dll!ChangeServiceConfig2W": 5,
    "ADVAPI32.dll!OpenSCManagerW": 2,
    "ADVAPI32.dll!CreateServiceW": 1,
    "ADVAPI32.dll!DeleteService": 1,
    "ADVAPI32.dll!QueryServiceConfig2W": 2,
    "ADVAPI32.dll!QueryServiceConfigW": 2,
    "ADVAPI32.dll!QueryServiceStatusEx": 2,
    "ADVAPI32.dll!OpenServiceW": 1,
    "ADVAPI32.dll!StartServiceW": 1,
    "ADVAPI32.dll!QueryServiceObjectSecurity": 4,
    "ADVAPI32.dll!BuildTrusteeWithSidW": 2,
    "ADVAPI32.dll!SetServiceObjectSecurity": 2,
    "USER32.dll!GetSystemMetrics": 1,
    "sfc.dll!SfcIsFileProtected": 1,
    "WINTRUST.dll!WinVerifyTrust": 1,
    "KERNEL32.dll!GetFileSize": 1,
    "KERNEL32.dll!SetFilePointer": 2,
    "KERNEL32.dll!GetFileInformationByHandle": 3,
    "bcrypt.dll!BCryptOpenAlgorithmProvider": 1,
    "bcrypt.dll!BCryptGetProperty": 1,
    "bcrypt.dll!BCryptCloseAlgorithmProvider": 1,
    "bcrypt.dll!BCryptCreateHash": 1,
    "bcrypt.dll!BCryptHashData": 1,
    "bcrypt.dll!BCryptFinishHash": 1,
    "bcrypt.dll!BCryptDestroyHash": 1,
    "USER32.dll!CharUpperW": 1,
    "KERNEL32.dll!GetCurrentDirectoryW": 1,
    "KERNEL32.dll!GetProcessAffinityMask": 1,
    "KERNEL32.dll!GetModuleHandleA": 1,
    "KERNEL32.dll!GlobalMemoryStatus": 1,
    "KERNEL32.dll!VirtualAlloc": 2,
    "KERNEL32.dll!VirtualFree": 2,
    "KERNEL32.dll!InitializeCriticalSection": 1,
    "KERNEL32.dll!CreateSemaphoreW": 1,
    "KERNEL32.dll!ReleaseSemaphore": 2,
    "KERNEL32.dll!SetThreadAffinityMask": 1,
    "KERNEL32.dll!GetStringTypeW": 4,
    "KERNEL32.dll!ReleaseSRWLockExclusive": 5,
    "KERNEL32.dll!AcquireSRWLockExclusive": 6,
    "KERNEL32.dll!TryAcquireSRWLockExclusive": 2,
    "KERNEL32.dll!GetLocaleInfoEx": 2,
    "KERNEL32.dll!LCMapStringEx": 4,
    "KERNEL32.dll!GetCPInfo": 4,
    "KERNEL32.dll!CompareStringEx": 2,
    "KERNEL32.dll!CreateDirectoryW": 1,
    "KERNEL32.dll!AreFileApisANSI": 2,
    "VERSION.dll!GetFileVersionInfoSizeW": 1,
    "VERSION.dll!GetFileVersionInfoW": 1,
    "VERSION.dll!VerQueryValueW": 1,
    "KERNEL32.dll!WakeAllConditionVariable": 2,
    "KERNEL32.dll!SleepConditionVariableSRW": 1,
    "KERNEL32.dll!InitializeSListHead": 1,
    "KERNEL32.dll!SetUnhandledExceptionFilter": 3,
    "KERNEL32.dll!UnhandledExceptionFilter": 3,
    "KERNEL32.dll!IsProcessorFeaturePresent": 7,
    "KERNEL32.dll!RtlUnwind": 3,
    "KERNEL32.dll!InterlockedFlushSList": 1,
    "KERNEL32.dll!InterlockedPushEntrySList": 1,
    "KERNEL32.dll!TlsFree": 2,
    "KERNEL32.dll!ExitThread": 2,
    "KERNEL32.dll!FreeLibraryAndExitThread": 1,
    "KERNEL32.dll!CreateThread": 1,
    "KERNEL32.dll!ExitProcess": 1,
    "KERNEL32.dll!GetTimeZoneInformation": 1,
    "KERNEL32.dll!EnumSystemLocalesW": 4,
    "KERNEL32.dll!CompareStringW": 1,
    "KERNEL32.dll!FlsAlloc": 1,
    "KERNEL32.dll!FlsFree": 1,
    "KERNEL32.dll!FlsGetValue": 1,
    "KERNEL32.dll!FlsSetValue": 1,
    "KERNEL32.dll!GetDateFormatW": 1,
    "KERNEL32.dll!GetTimeFormatW": 1,
    "KERNEL32.dll!IsValidLocale": 2,
    "KERNEL32.dll!GetStartupInfoW": 1,
    "KERNEL32.dll!GetFileType": 3,
    "KERNEL32.dll!GetStdHandle": 1,
    "KERNEL32.dll!GetConsoleOutputCP": 1,
    "KERNEL32.dll!GetConsoleMode": 2,
    "KERNEL32.dll!ReadConsoleW": 1,
    "KERNEL32.dll!FindFirstFileExW": 1,
    "KERNEL32.dll!FindNextFileW": 1,
    "KERNEL32.dll!GetOEMCP": 1,
    "KERNEL32.dll!GetACP": 3,
    "KERNEL32.dll!IsValidCodePage": 3,
    "KERNEL32.dll!GetCommandLineA": 1,
    "KERNEL32.dll!GetEnvironmentStringsW": 2,
    "KERNEL32.dll!FreeEnvironmentStringsW": 4,
    "KERNEL32.dll!SetEnvironmentVariableW": 1,
    "KERNEL32.dll!SetStdHandle": 2,
    "KERNEL32.dll!WriteConsoleW": 2,
    "KERNEL32.dll!CreateToolhelp32Snapshot": 1,
    "KERNEL32.dll!Process32FirstW": 1,
    "KERNEL32.dll!Process32NextW": 1,
    "ADVAPI32.dll!ConvertStringSidToSidW": 1,
    "ADVAPI32.dll!LsaNtStatusToWinError": 1,
    "KERNEL32.dll!OpenEventA": 2
  },
  "complete_linear_sweep": true
}