|
|
- #nullable enable
- using System;
- using System.Collections.Generic;
- using System.Linq;
- using System.Runtime.InteropServices;
- using System.Text;
- using System.Threading.Tasks;
-
- namespace IPA.AntiMalware.WinAPI
- {
- [Guid("82d29c2e-f062-44e6-b5c9-3d9a2f24a2df")]
- [ComVisible(true)]
- internal interface IAntimalware
- {
- void Scan([In] IAmsiStream stream, [Out] out AmsiResult result, [Out] out IAntimalwareProvider provider);
- void CloseSession([In] ulong session);
- }
-
- [Guid("3e47f2e5-81d4-4d3b-897f-545096770373")]
- [ComVisible(true)]
- internal interface IAmsiStream
- {
- unsafe void GetAttribute([In] AmsiAttribute attribute, [In] uint dataSize, [Out] byte* buffer, out uint writtenData);
- unsafe void Read([In] ulong position, [In] uint dataSize, [Out] byte* buffer, out uint readSize);
- }
-
- [Guid("b2cabfe3-fe04-42b1-a5df-08d483d4d125")]
- [ComVisible(true)]
- internal interface IAntimalwareProvider
- {
- [return: MarshalAs(UnmanagedType.LPWStr)] string DisplayName();
-
- AmsiResult Scan([In] IAmsiStream stream);
- void CloseSession([In] ulong session);
- }
-
- internal enum AmsiAttribute
- {
- AppName = 0,
- ContentName = 1,
- ContentSize = 2,
- ContentAddress = 3,
- Session = 4,
- RedirectChainSize = 5,
- RedirectChainAddress = 6,
- AllSize = 7,
- AllAddress = 8,
- }
- }
|