Huh. Here’s the whole story:
We found the app for sale on a sketchy mexican website. Ordered the app. We received a .rar file which contained the installer (which I could SWEAR is MY installer) as well as a video with instructions to run the installer, then replace the installed .dll with a modified one provided in the .rar file.
I have not done a binary comparison of the .exe yet. Will do that tomorrow. Will also see if I can determine if the installer they sent over is in fact my original installer or if they re-built an installer that looks, smells, and behaves exactly like mine… but if they did create a new installer, why not include the new .dll so that the user does not need to swap it post-install?
Lots of hinky. Gonna walk away from it until tomorrow. Thanks for all the feedback, everyone!