{ "Constants":[ ] ,"Types":[ { "Name":"AMSI_RESULT" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"AMSI_RESULT_CLEAN","Value":0} ,{"Name":"AMSI_RESULT_NOT_DETECTED","Value":1} ,{"Name":"AMSI_RESULT_BLOCKED_BY_ADMIN_START","Value":16384} ,{"Name":"AMSI_RESULT_BLOCKED_BY_ADMIN_END","Value":20479} ,{"Name":"AMSI_RESULT_DETECTED","Value":32768} ] ,"IntegerBase":"Int32" } ,{ "Name":"AMSI_ATTRIBUTE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"AMSI_ATTRIBUTE_APP_NAME","Value":0} ,{"Name":"AMSI_ATTRIBUTE_CONTENT_NAME","Value":1} ,{"Name":"AMSI_ATTRIBUTE_CONTENT_SIZE","Value":2} ,{"Name":"AMSI_ATTRIBUTE_CONTENT_ADDRESS","Value":3} ,{"Name":"AMSI_ATTRIBUTE_SESSION","Value":4} ,{"Name":"AMSI_ATTRIBUTE_REDIRECT_CHAIN_SIZE","Value":5} ,{"Name":"AMSI_ATTRIBUTE_REDIRECT_CHAIN_ADDRESS","Value":6} ,{"Name":"AMSI_ATTRIBUTE_ALL_SIZE","Value":7} ,{"Name":"AMSI_ATTRIBUTE_ALL_ADDRESS","Value":8} ,{"Name":"AMSI_ATTRIBUTE_QUIET","Value":9} ] ,"IntegerBase":"Int32" } ,{ "Name":"AMSI_UAC_REQUEST_TYPE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"AMSI_UAC_REQUEST_TYPE_EXE","Value":0} ,{"Name":"AMSI_UAC_REQUEST_TYPE_COM","Value":1} ,{"Name":"AMSI_UAC_REQUEST_TYPE_MSI","Value":2} ,{"Name":"AMSI_UAC_REQUEST_TYPE_AX","Value":3} ,{"Name":"AMSI_UAC_REQUEST_TYPE_PACKAGED_APP","Value":4} ,{"Name":"AMSI_UAC_REQUEST_TYPE_MAX","Value":5} ] ,"IntegerBase":"Int32" } ,{ "Name":"AMSI_UAC_TRUST_STATE" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"AMSI_UAC_TRUST_STATE_TRUSTED","Value":0} ,{"Name":"AMSI_UAC_TRUST_STATE_UNTRUSTED","Value":1} ,{"Name":"AMSI_UAC_TRUST_STATE_BLOCKED","Value":2} ,{"Name":"AMSI_UAC_TRUST_STATE_MAX","Value":3} ] ,"IntegerBase":"Int32" } ,{ "Name":"AMSI_UAC_MSI_ACTION" ,"Architectures":[] ,"Platform":null ,"Kind":"Enum" ,"Flags":false ,"Scoped":false ,"Values":[ {"Name":"AMSI_UAC_MSI_ACTION_INSTALL","Value":0} ,{"Name":"AMSI_UAC_MSI_ACTION_UNINSTALL","Value":1} ,{"Name":"AMSI_UAC_MSI_ACTION_UPDATE","Value":2} ,{"Name":"AMSI_UAC_MSI_ACTION_MAINTENANCE","Value":3} ,{"Name":"AMSI_UAC_MSI_ACTION_MAX","Value":4} ] ,"IntegerBase":"Int32" } ,{ "Name":"AMSI_UAC_REQUEST_EXE_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"lpwszApplicationName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszCommandLine","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszDLLParameter","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[ ] } ,{ "Name":"AMSI_UAC_REQUEST_COM_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"lpwszServerBinary","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszRequestor","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"Clsid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]} ] ,"NestedTypes":[ ] } ,{ "Name":"AMSI_UAC_REQUEST_MSI_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"MsiAction","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_MSI_ACTION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ,{"Name":"lpwszProductName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszVersion","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszLanguage","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszManufacturer","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszPackagePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszPackageSource","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"ulUpdates","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ppwszUpdates","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ,{"Name":"ppwszUpdateSources","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]} ] ,"NestedTypes":[ ] } ,{ "Name":"AMSI_UAC_REQUEST_AX_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"lpwszLocalInstallPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszSourceURL","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[ ] } ,{ "Name":"AMSI_UAC_REQUEST_PACKAGED_APP_INFO" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"lpwszApplicationName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpwszCommandLine","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpPackageFamilyName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ,{"Name":"lpApplicationId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[ ] } ,{ "Name":"AMSI_UAC_REQUEST_CONTEXT" ,"Architectures":[] ,"Platform":null ,"Kind":"Struct" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"ulRequestorProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]} ,{"Name":"UACTrustState","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_TRUST_STATE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ,{"Name":"Type","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_TYPE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ,{"Name":"RequestType","Type":{"Kind":"ApiRef","Name":"_RequestType_e__Union","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ,{"Name":"bAutoElevateRequest","Type":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[ { "Name":"_RequestType_e__Union" ,"Architectures":[] ,"Platform":null ,"Kind":"Union" ,"Size":0 ,"PackingSize":0 ,"Fields":[ {"Name":"ExeInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_EXE_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ,{"Name":"ComInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_COM_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ,{"Name":"MsiInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_MSI_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ,{"Name":"ActiveXInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_AX_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ,{"Name":"PackagedAppInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_PACKAGED_APP_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]} ] ,"NestedTypes":[ ] } ] } ,{ "Name":"IAmsiStream" ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Kind":"Com" ,"Guid":"3e47f2e5-81d4-4d3b-897f-545096770373" ,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]} ,"Methods":[ { "Name":"GetAttribute" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"attribute","Type":{"Kind":"ApiRef","Name":"AMSI_ATTRIBUTE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ,{"Name":"dataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"data","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out"]} ,{"Name":"retData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ,{ "Name":"Read" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"position","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ,{"Name":"size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out"]} ,{"Name":"readSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]} ] } ] } ,{ "Name":"IAntimalwareProvider" ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Kind":"Com" ,"Guid":"b2cabfe3-fe04-42b1-a5df-08d483d4d125" ,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]} ,"Methods":[ { "Name":"Scan" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"stream","Type":{"Kind":"ApiRef","Name":"IAmsiStream","TargetKind":"Com","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]} ] } ,{ "Name":"CloseSession" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"Void"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"session","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ] } ,{ "Name":"DisplayName" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"displayName","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["Out"]} ] } ] } ,{ "Name":"IAntimalwareUacProvider" ,"Architectures":[] ,"Platform":null ,"Kind":"Com" ,"Guid":"b2cabfe4-fe04-42b1-a5df-08d483d4d125" ,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]} ,"Methods":[ { "Name":"UacScan" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"context","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_CONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["In"]} ,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]} ] } ,{ "Name":"DisplayName" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"displayName","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["Out"]} ] } ] } ,{ "Name":"IAntimalware" ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Kind":"Com" ,"Guid":"82d29c2e-f062-44e6-b5c9-3d9a2f24a2df" ,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]} ,"Methods":[ { "Name":"Scan" ,"SetLastError":false ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"stream","Type":{"Kind":"ApiRef","Name":"IAmsiStream","TargetKind":"Com","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]} ,{"Name":"provider","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"IAntimalwareProvider","TargetKind":"Com","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]} ] } ,{ "Name":"CloseSession" ,"SetLastError":false ,"ReturnType":{"Kind":"Native","Name":"Void"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":null ,"Attrs":[] ,"Params":[ {"Name":"session","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]} ] } ] } ,{ "Name":"CAntimalware" ,"Architectures":[] ,"Platform":null ,"Kind":"ComClassID" ,"Guid":"fdb00e52-a214-4aa1-8fba-4357bb0072ec" } ,{ "Name":"HAMSICONTEXT" ,"Architectures":[] ,"Platform":null ,"Kind":"NativeTypedef" ,"AlsoUsableFor":null ,"Def":{"Kind":"Native","Name":"IntPtr"} ,"FreeFunc":null } ,{ "Name":"HAMSISESSION" ,"Architectures":[] ,"Platform":null ,"Kind":"NativeTypedef" ,"AlsoUsableFor":null ,"Def":{"Kind":"Native","Name":"IntPtr"} ,"FreeFunc":null } ] ,"Functions":[ { "Name":"AmsiInitialize" ,"SetLastError":false ,"DllImport":"Amsi" ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Attrs":[] ,"Params":[ {"Name":"appName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"amsiContext","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]} ] } ,{ "Name":"AmsiUninitialize" ,"SetLastError":false ,"DllImport":"Amsi" ,"ReturnType":{"Kind":"Native","Name":"Void"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Attrs":[] ,"Params":[ {"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ] } ,{ "Name":"AmsiOpenSession" ,"SetLastError":false ,"DllImport":"Amsi" ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Attrs":[] ,"Params":[ {"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ,{"Name":"amsiSession","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]} ] } ,{ "Name":"AmsiCloseSession" ,"SetLastError":false ,"DllImport":"Amsi" ,"ReturnType":{"Kind":"Native","Name":"Void"} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Attrs":[] ,"Params":[ {"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ] } ,{ "Name":"AmsiScanBuffer" ,"SetLastError":false ,"DllImport":"Amsi" ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Attrs":[] ,"Params":[ {"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ,{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":2}]} ,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]} ,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In","Optional"]} ,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]} ] } ,{ "Name":"AmsiScanString" ,"SetLastError":false ,"DllImport":"Amsi" ,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows10.0.10240" ,"Attrs":[] ,"Params":[ {"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]} ,{"Name":"string","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]} ,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]} ,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In","Optional"]} ,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]} ] } ,{ "Name":"InstallELAMCertificateInfo" ,"SetLastError":true ,"DllImport":"KERNEL32" ,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]} ,"ReturnAttrs":[] ,"Architectures":[] ,"Platform":"windows8.1" ,"Attrs":[] ,"Params":[ {"Name":"ELAMFile","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]} ] } ] ,"UnicodeAliases":[ ] }