Files
marlersoft-win32json/api/System.Antimalware.json
2026-02-15 20:47:45 -07:00

535 lines
22 KiB
JSON

{
"Constants":[],
"Types":[{
"Name":"AMSI_RESULT"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"AMSI_RESULT_CLEAN","Value":0}
,{"Name":"AMSI_RESULT_NOT_DETECTED","Value":1}
,{"Name":"AMSI_RESULT_BLOCKED_BY_ADMIN_START","Value":16384}
,{"Name":"AMSI_RESULT_BLOCKED_BY_ADMIN_END","Value":20479}
,{"Name":"AMSI_RESULT_DETECTED","Value":32768}
]
,"IntegerBase":"Int32"
},{
"Name":"AMSI_ATTRIBUTE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"AMSI_ATTRIBUTE_APP_NAME","Value":0}
,{"Name":"AMSI_ATTRIBUTE_CONTENT_NAME","Value":1}
,{"Name":"AMSI_ATTRIBUTE_CONTENT_SIZE","Value":2}
,{"Name":"AMSI_ATTRIBUTE_CONTENT_ADDRESS","Value":3}
,{"Name":"AMSI_ATTRIBUTE_SESSION","Value":4}
,{"Name":"AMSI_ATTRIBUTE_REDIRECT_CHAIN_SIZE","Value":5}
,{"Name":"AMSI_ATTRIBUTE_REDIRECT_CHAIN_ADDRESS","Value":6}
,{"Name":"AMSI_ATTRIBUTE_ALL_SIZE","Value":7}
,{"Name":"AMSI_ATTRIBUTE_ALL_ADDRESS","Value":8}
,{"Name":"AMSI_ATTRIBUTE_QUIET","Value":9}
]
,"IntegerBase":"Int32"
},{
"Name":"AMSI_UAC_REQUEST_TYPE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"AMSI_UAC_REQUEST_TYPE_EXE","Value":0}
,{"Name":"AMSI_UAC_REQUEST_TYPE_COM","Value":1}
,{"Name":"AMSI_UAC_REQUEST_TYPE_MSI","Value":2}
,{"Name":"AMSI_UAC_REQUEST_TYPE_AX","Value":3}
,{"Name":"AMSI_UAC_REQUEST_TYPE_PACKAGED_APP","Value":4}
,{"Name":"AMSI_UAC_REQUEST_TYPE_MAX","Value":5}
]
,"IntegerBase":"Int32"
},{
"Name":"AMSI_UAC_TRUST_STATE"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"AMSI_UAC_TRUST_STATE_TRUSTED","Value":0}
,{"Name":"AMSI_UAC_TRUST_STATE_UNTRUSTED","Value":1}
,{"Name":"AMSI_UAC_TRUST_STATE_BLOCKED","Value":2}
,{"Name":"AMSI_UAC_TRUST_STATE_MAX","Value":3}
]
,"IntegerBase":"Int32"
},{
"Name":"AMSI_UAC_MSI_ACTION"
,"Architectures":[]
,"Platform":null
,"Kind":"Enum"
,"Flags":false
,"Scoped":false
,"Values":[
{"Name":"AMSI_UAC_MSI_ACTION_INSTALL","Value":0}
,{"Name":"AMSI_UAC_MSI_ACTION_UNINSTALL","Value":1}
,{"Name":"AMSI_UAC_MSI_ACTION_UPDATE","Value":2}
,{"Name":"AMSI_UAC_MSI_ACTION_MAINTENANCE","Value":3}
,{"Name":"AMSI_UAC_MSI_ACTION_MAX","Value":4}
]
,"IntegerBase":"Int32"
},{
"Name":"AMSI_UAC_REQUEST_EXE_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"lpwszApplicationName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszCommandLine","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszDLLParameter","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"AMSI_UAC_REQUEST_COM_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"lpwszServerBinary","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszRequestor","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"Clsid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"AMSI_UAC_REQUEST_MSI_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"MsiAction","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_MSI_ACTION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
,{"Name":"lpwszProductName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszVersion","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszLanguage","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszManufacturer","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszPackagePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszPackageSource","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"ulUpdates","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ppwszUpdates","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
,{"Name":"ppwszUpdateSources","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"AMSI_UAC_REQUEST_AX_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"lpwszLocalInstallPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszSourceURL","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"AMSI_UAC_REQUEST_PACKAGED_APP_INFO"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"lpwszApplicationName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpwszCommandLine","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpPackageFamilyName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
,{"Name":"lpApplicationId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
},{
"Name":"AMSI_UAC_REQUEST_CONTEXT"
,"Architectures":[]
,"Platform":null
,"Kind":"Struct"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"ulRequestorProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
,{"Name":"UACTrustState","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_TRUST_STATE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
,{"Name":"Type","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_TYPE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
,{"Name":"RequestType","Type":{"Kind":"ApiRef","Name":"_RequestType_e__Union","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
,{"Name":"bAutoElevateRequest","Type":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[{
"Name":"_RequestType_e__Union"
,"Architectures":[]
,"Platform":null
,"Kind":"Union"
,"Size":0
,"PackingSize":0
,"Attrs":[]
,"Fields":[
{"Name":"ExeInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_EXE_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
,{"Name":"ComInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_COM_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
,{"Name":"MsiInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_MSI_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
,{"Name":"ActiveXInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_AX_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
,{"Name":"PackagedAppInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_PACKAGED_APP_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
]
,"NestedTypes":[]
}]
},{
"Name":"IAmsiStream"
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Kind":"Com"
,"Guid":"3e47f2e5-81d4-4d3b-897f-545096770373"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
,"Methods":[{
"Name":"GetAttribute"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"attribute","Type":{"Kind":"ApiRef","Name":"AMSI_ATTRIBUTE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
,{"Name":"dataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"data","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out"]}
,{"Name":"retData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
},{
"Name":"Read"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"position","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
,{"Name":"size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out"]}
,{"Name":"readSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
]
}]
},{
"Name":"IAntimalwareProvider"
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Kind":"Com"
,"Guid":"b2cabfe3-fe04-42b1-a5df-08d483d4d125"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
,"Methods":[{
"Name":"Scan"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"stream","Type":{"Kind":"ApiRef","Name":"IAmsiStream","TargetKind":"Com","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"CloseSession"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"Void"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"session","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
]
},{
"Name":"DisplayName"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"displayName","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["Out"]}
]
}]
},{
"Name":"IAntimalwareUacProvider"
,"Architectures":[]
,"Platform":null
,"Kind":"Com"
,"Guid":"b2cabfe4-fe04-42b1-a5df-08d483d4d125"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
,"Methods":[{
"Name":"UacScan"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"context","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_CONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["In"]}
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"DisplayName"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"displayName","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["Out"]}
]
}]
},{
"Name":"IAntimalwareProvider2"
,"Architectures":[]
,"Platform":null
,"Kind":"Com"
,"Guid":"7c1e6570-3f73-4e0f-8ad4-98b94cd3290f"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IAntimalwareProvider","TargetKind":"Com","Api":"System.Antimalware","Parents":[]}
,"Methods":[{
"Name":"Notify"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"appName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"pResult","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
}]
},{
"Name":"IAntimalware"
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Kind":"Com"
,"Guid":"82d29c2e-f062-44e6-b5c9-3d9a2f24a2df"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
,"Methods":[{
"Name":"Scan"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"stream","Type":{"Kind":"ApiRef","Name":"IAmsiStream","TargetKind":"Com","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
,{"Name":"provider","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"IAntimalwareProvider","TargetKind":"Com","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"CloseSession"
,"SetLastError":false
,"ReturnType":{"Kind":"Native","Name":"Void"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"session","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
]
}]
},{
"Name":"IAntimalware2"
,"Architectures":[]
,"Platform":null
,"Kind":"Com"
,"Guid":"301035b5-2d42-4f56-8c65-2dcaa7fb3cdc"
,"Attrs":[]
,"Interface":{"Kind":"ApiRef","Name":"IAntimalware","TargetKind":"Com","Api":"System.Antimalware","Parents":[]}
,"Methods":[{
"Name":"Notify"
,"SetLastError":false
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"appName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"pResult","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
}]
},{
"Name":"CAntimalware"
,"Architectures":[]
,"Platform":null
,"Kind":"ComClassID"
,"Guid":"fdb00e52-a214-4aa1-8fba-4357bb0072ec"
},{
"Name":"HAMSICONTEXT"
,"Architectures":[]
,"Platform":null
,"Kind":"NativeTypedef"
,"AlsoUsableFor":null
,"Def":{"Kind":"Native","Name":"IntPtr"}
,"FreeFunc":null
,"InvalidHandleValue":0
},{
"Name":"HAMSISESSION"
,"Architectures":[]
,"Platform":null
,"Kind":"NativeTypedef"
,"AlsoUsableFor":null
,"Def":{"Kind":"Native","Name":"IntPtr"}
,"FreeFunc":null
,"InvalidHandleValue":0
}],
"Functions":[{
"Name":"AmsiInitialize"
,"SetLastError":false
,"DllImport":"Amsi.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Attrs":[]
,"Params":[
{"Name":"appName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"amsiContext","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"AmsiUninitialize"
,"SetLastError":false
,"DllImport":"Amsi.dll"
,"ReturnType":{"Kind":"Native","Name":"Void"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Attrs":[]
,"Params":[
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"AmsiOpenSession"
,"SetLastError":false
,"DllImport":"Amsi.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Attrs":[]
,"Params":[
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
,{"Name":"amsiSession","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"AmsiCloseSession"
,"SetLastError":false
,"DllImport":"Amsi.dll"
,"ReturnType":{"Kind":"Native","Name":"Void"}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Attrs":[]
,"Params":[
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
]
},{
"Name":"AmsiScanBuffer"
,"SetLastError":false
,"DllImport":"Amsi.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Attrs":[]
,"Params":[
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
,{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":2}]}
,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In","Optional"]}
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"AmsiNotifyOperation"
,"SetLastError":false
,"DllImport":"Amsi.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":null
,"Attrs":[]
,"Params":[
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
,{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":2}]}
,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"AmsiScanString"
,"SetLastError":false
,"DllImport":"Amsi.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows10.0.10240"
,"Attrs":[]
,"Params":[
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
,{"Name":"string","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In","Optional"]}
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
]
},{
"Name":"InstallELAMCertificateInfo"
,"SetLastError":true
,"DllImport":"KERNEL32.dll"
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
,"ReturnAttrs":[]
,"Architectures":[]
,"Platform":"windows8.1"
,"Attrs":[]
,"Params":[
{"Name":"ELAMFile","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
]
}],
"UnicodeAliases":[
]
}