i highly doubt that piece of code is what they thought was malware, also kinda weird that you're showing ghidra code of a binary while he didnt have any dll from you. he only had the source and was also screensharing and we saw pieces of code that seem to have been chat message commands. i'd...