mirror of
https://github.com/marlersoft/win32json
synced 2026-06-21 13:57:33 +00:00
535 lines
22 KiB
JSON
535 lines
22 KiB
JSON
{
|
|
"Constants":[{
|
|
"Name":"CAntimalware"
|
|
,"Type":{"Kind":"Native","Name":"Guid"}
|
|
,"ValueType":"String"
|
|
,"Value":"fdb00e52-a214-4aa1-8fba-4357bb0072ec"
|
|
,"Attrs":[]
|
|
}],
|
|
|
|
"Types":[{
|
|
"Name":"AMSI_RESULT"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"AMSI_RESULT_CLEAN","Value":0}
|
|
,{"Name":"AMSI_RESULT_NOT_DETECTED","Value":1}
|
|
,{"Name":"AMSI_RESULT_BLOCKED_BY_ADMIN_START","Value":16384}
|
|
,{"Name":"AMSI_RESULT_BLOCKED_BY_ADMIN_END","Value":20479}
|
|
,{"Name":"AMSI_RESULT_DETECTED","Value":32768}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"AMSI_ATTRIBUTE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"AMSI_ATTRIBUTE_APP_NAME","Value":0}
|
|
,{"Name":"AMSI_ATTRIBUTE_CONTENT_NAME","Value":1}
|
|
,{"Name":"AMSI_ATTRIBUTE_CONTENT_SIZE","Value":2}
|
|
,{"Name":"AMSI_ATTRIBUTE_CONTENT_ADDRESS","Value":3}
|
|
,{"Name":"AMSI_ATTRIBUTE_SESSION","Value":4}
|
|
,{"Name":"AMSI_ATTRIBUTE_REDIRECT_CHAIN_SIZE","Value":5}
|
|
,{"Name":"AMSI_ATTRIBUTE_REDIRECT_CHAIN_ADDRESS","Value":6}
|
|
,{"Name":"AMSI_ATTRIBUTE_ALL_SIZE","Value":7}
|
|
,{"Name":"AMSI_ATTRIBUTE_ALL_ADDRESS","Value":8}
|
|
,{"Name":"AMSI_ATTRIBUTE_QUIET","Value":9}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"AMSI_UAC_REQUEST_TYPE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"AMSI_UAC_REQUEST_TYPE_EXE","Value":0}
|
|
,{"Name":"AMSI_UAC_REQUEST_TYPE_COM","Value":1}
|
|
,{"Name":"AMSI_UAC_REQUEST_TYPE_MSI","Value":2}
|
|
,{"Name":"AMSI_UAC_REQUEST_TYPE_AX","Value":3}
|
|
,{"Name":"AMSI_UAC_REQUEST_TYPE_PACKAGED_APP","Value":4}
|
|
,{"Name":"AMSI_UAC_REQUEST_TYPE_MAX","Value":5}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"AMSI_UAC_TRUST_STATE"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"AMSI_UAC_TRUST_STATE_TRUSTED","Value":0}
|
|
,{"Name":"AMSI_UAC_TRUST_STATE_UNTRUSTED","Value":1}
|
|
,{"Name":"AMSI_UAC_TRUST_STATE_BLOCKED","Value":2}
|
|
,{"Name":"AMSI_UAC_TRUST_STATE_MAX","Value":3}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"AMSI_UAC_MSI_ACTION"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Enum"
|
|
,"Flags":false
|
|
,"Scoped":false
|
|
,"Values":[
|
|
{"Name":"AMSI_UAC_MSI_ACTION_INSTALL","Value":0}
|
|
,{"Name":"AMSI_UAC_MSI_ACTION_UNINSTALL","Value":1}
|
|
,{"Name":"AMSI_UAC_MSI_ACTION_UPDATE","Value":2}
|
|
,{"Name":"AMSI_UAC_MSI_ACTION_MAINTENANCE","Value":3}
|
|
,{"Name":"AMSI_UAC_MSI_ACTION_MAX","Value":4}
|
|
]
|
|
,"IntegerBase":"Int32"
|
|
},{
|
|
"Name":"AMSI_UAC_REQUEST_EXE_INFO"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"lpwszApplicationName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszCommandLine","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszDLLParameter","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
},{
|
|
"Name":"AMSI_UAC_REQUEST_COM_INFO"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"lpwszServerBinary","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszRequestor","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"Clsid","Type":{"Kind":"Native","Name":"Guid"},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
},{
|
|
"Name":"AMSI_UAC_REQUEST_MSI_INFO"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"MsiAction","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_MSI_ACTION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszProductName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszVersion","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszLanguage","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszManufacturer","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszPackagePath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszPackageSource","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"ulUpdates","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"ppwszUpdates","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
,{"Name":"ppwszUpdateSources","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
},{
|
|
"Name":"AMSI_UAC_REQUEST_AX_INFO"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"lpwszLocalInstallPath","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszSourceURL","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
},{
|
|
"Name":"AMSI_UAC_REQUEST_PACKAGED_APP_INFO"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"lpwszApplicationName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpwszCommandLine","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpPackageFamilyName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
,{"Name":"lpApplicationId","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
},{
|
|
"Name":"AMSI_UAC_REQUEST_CONTEXT"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Struct"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"ulLength","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"ulRequestorProcessId","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":[]}
|
|
,{"Name":"UACTrustState","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_TRUST_STATE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
,{"Name":"Type","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_TYPE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
,{"Name":"RequestType","Type":{"Kind":"ApiRef","Name":"_RequestType_e__Union","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
,{"Name":"bAutoElevateRequest","Type":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[{
|
|
"Name":"_RequestType_e__Union"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Union"
|
|
,"Size":0
|
|
,"PackingSize":0
|
|
,"Attrs":[]
|
|
,"Fields":[
|
|
{"Name":"ExeInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_EXE_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
,{"Name":"ComInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_COM_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
,{"Name":"MsiInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_MSI_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
,{"Name":"ActiveXInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_AX_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
,{"Name":"PackagedAppInfo","Type":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_PACKAGED_APP_INFO","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":[]}
|
|
]
|
|
,"NestedTypes":[]
|
|
}]
|
|
},{
|
|
"Name":"IAmsiStream"
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Kind":"Com"
|
|
,"Guid":"3e47f2e5-81d4-4d3b-897f-545096770373"
|
|
,"Attrs":[]
|
|
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
|
|
,"Methods":[{
|
|
"Name":"GetAttribute"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"attribute","Type":{"Kind":"ApiRef","Name":"AMSI_ATTRIBUTE","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"dataSize","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"data","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out"]}
|
|
,{"Name":"retData","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"Read"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"position","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
|
|
,{"Name":"size","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"buffer","Type":{"Kind":"LPArray","NullNullTerm":false,"CountConst":-1,"CountParamIndex":1,"Child":{"Kind":"Native","Name":"Byte"}},"Attrs":["Out"]}
|
|
,{"Name":"readSize","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"UInt32"}},"Attrs":["Out"]}
|
|
]
|
|
}]
|
|
},{
|
|
"Name":"IAntimalwareProvider"
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Kind":"Com"
|
|
,"Guid":"b2cabfe3-fe04-42b1-a5df-08d483d4d125"
|
|
,"Attrs":[]
|
|
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
|
|
,"Methods":[{
|
|
"Name":"Scan"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"stream","Type":{"Kind":"ApiRef","Name":"IAmsiStream","TargetKind":"Com","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"CloseSession"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"Native","Name":"Void"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"session","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"DisplayName"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"displayName","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
}]
|
|
},{
|
|
"Name":"IAntimalwareUacProvider"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Com"
|
|
,"Guid":"b2cabfe4-fe04-42b1-a5df-08d483d4d125"
|
|
,"Attrs":[]
|
|
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
|
|
,"Methods":[{
|
|
"Name":"UacScan"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"context","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_UAC_REQUEST_CONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["In"]}
|
|
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"DisplayName"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"displayName","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
}]
|
|
},{
|
|
"Name":"IAntimalwareProvider2"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Com"
|
|
,"Guid":"7c1e6570-3f73-4e0f-8ad4-98b94cd3290f"
|
|
,"Attrs":[]
|
|
,"Interface":{"Kind":"ApiRef","Name":"IAntimalwareProvider","TargetKind":"Com","Api":"System.Antimalware","Parents":[]}
|
|
,"Methods":[{
|
|
"Name":"Notify"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
|
|
,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"appName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"pResult","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
}]
|
|
},{
|
|
"Name":"IAntimalware"
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Kind":"Com"
|
|
,"Guid":"82d29c2e-f062-44e6-b5c9-3d9a2f24a2df"
|
|
,"Attrs":[]
|
|
,"Interface":{"Kind":"ApiRef","Name":"IUnknown","TargetKind":"Com","Api":"System.Com","Parents":[]}
|
|
,"Methods":[{
|
|
"Name":"Scan"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"stream","Type":{"Kind":"ApiRef","Name":"IAmsiStream","TargetKind":"Com","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
,{"Name":"provider","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"IAntimalwareProvider","TargetKind":"Com","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"CloseSession"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"Native","Name":"Void"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"session","Type":{"Kind":"Native","Name":"UInt64"},"Attrs":["In"]}
|
|
]
|
|
}]
|
|
},{
|
|
"Name":"IAntimalware2"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"Com"
|
|
,"Guid":"301035b5-2d42-4f56-8c65-2dcaa7fb3cdc"
|
|
,"Attrs":[]
|
|
,"Interface":{"Kind":"ApiRef","Name":"IAntimalware","TargetKind":"Com","Api":"System.Antimalware","Parents":[]}
|
|
,"Methods":[{
|
|
"Name":"Notify"
|
|
,"SetLastError":false
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In"]}
|
|
,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"appName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"pResult","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
}]
|
|
},{
|
|
"Name":"HAMSICONTEXT"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"NativeTypedef"
|
|
,"AlsoUsableFor":null
|
|
,"Def":{"Kind":"Native","Name":"IntPtr"}
|
|
,"FreeFunc":null
|
|
,"InvalidHandleValue":0
|
|
},{
|
|
"Name":"HAMSISESSION"
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Kind":"NativeTypedef"
|
|
,"AlsoUsableFor":null
|
|
,"Def":{"Kind":"Native","Name":"IntPtr"}
|
|
,"FreeFunc":null
|
|
,"InvalidHandleValue":0
|
|
}],
|
|
|
|
"Functions":[{
|
|
"Name":"AmsiInitialize"
|
|
,"SetLastError":false
|
|
,"DllImport":"Amsi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"appName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"amsiContext","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"AmsiUninitialize"
|
|
,"SetLastError":false
|
|
,"DllImport":"Amsi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"Void"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"AmsiOpenSession"
|
|
,"SetLastError":false
|
|
,"DllImport":"Amsi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"amsiSession","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"AmsiCloseSession"
|
|
,"SetLastError":false
|
|
,"DllImport":"Amsi.dll"
|
|
,"ReturnType":{"Kind":"Native","Name":"Void"}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
]
|
|
},{
|
|
"Name":"AmsiScanBuffer"
|
|
,"SetLastError":false
|
|
,"DllImport":"Amsi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":2}]}
|
|
,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In","Optional"]}
|
|
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"AmsiNotifyOperation"
|
|
,"SetLastError":false
|
|
,"DllImport":"Amsi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":null
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"buffer","Type":{"Kind":"PointerTo","Child":{"Kind":"Native","Name":"Void"}},"Attrs":["In",{"Kind":"MemorySize","BytesParamIndex":2}]}
|
|
,{"Name":"length","Type":{"Kind":"Native","Name":"UInt32"},"Attrs":["In"]}
|
|
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"AmsiScanString"
|
|
,"SetLastError":false
|
|
,"DllImport":"Amsi.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"HRESULT","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows10.0.10240"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"amsiContext","Type":{"Kind":"ApiRef","Name":"HAMSICONTEXT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In"]}
|
|
,{"Name":"string","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Const"]}
|
|
,{"Name":"contentName","Type":{"Kind":"ApiRef","Name":"PWSTR","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In","Optional","Const"]}
|
|
,{"Name":"amsiSession","Type":{"Kind":"ApiRef","Name":"HAMSISESSION","TargetKind":"Default","Api":"System.Antimalware","Parents":[]},"Attrs":["In","Optional"]}
|
|
,{"Name":"result","Type":{"Kind":"PointerTo","Child":{"Kind":"ApiRef","Name":"AMSI_RESULT","TargetKind":"Default","Api":"System.Antimalware","Parents":[]}},"Attrs":["Out"]}
|
|
]
|
|
},{
|
|
"Name":"InstallELAMCertificateInfo"
|
|
,"SetLastError":true
|
|
,"DllImport":"KERNEL32.dll"
|
|
,"ReturnType":{"Kind":"ApiRef","Name":"BOOL","TargetKind":"Default","Api":"Foundation","Parents":[]}
|
|
,"ReturnAttrs":[]
|
|
,"Architectures":[]
|
|
,"Platform":"windows8.1"
|
|
,"Attrs":[]
|
|
,"Params":[
|
|
{"Name":"ELAMFile","Type":{"Kind":"ApiRef","Name":"HANDLE","TargetKind":"Default","Api":"Foundation","Parents":[]},"Attrs":["In"]}
|
|
]
|
|
}],
|
|
|
|
"UnicodeAliases":[
|
|
]
|
|
}
|