patsig.h

Go to the documentation of this file.

/*
 * Copyright (c) 2020 Bitdefender
 * SPDX-License-Identifier: Apache-2.0
 */
#ifndef _PATSIG_H_
#define _PATSIG_H_

#include "introtypes.h"

#define SIG_MAX_PATTERN             128u
#define SIG_NOT_FOUND               0xFFFFFFFF
#define SIG_FOUND                   0

#pragma pack(push)
#pragma pack(1)

typedef struct _PATTERN_SIGNATURE
{
    DWORD       Length;         
    DWORD       SignatureId;    
    DWORD       Offset;         
    INT64       AuxData;        
    WORD        Pattern[SIG_MAX_PATTERN];
} PATTERN_SIGNATURE, *PPATTERN_SIGNATURE;

#pragma pack(pop)

DWORD
IntPatternMatch(
    _In_ const BYTE *Buffer,
    _In_ DWORD SigCount,
    _In_ const PATTERN_SIGNATURE *Sigs
    );

DWORD
IntPatternMatchAllOffsets(
    _In_ const BYTE *Buffer,
    _In_ const DWORD BufferSize,
    _In_ DWORD SigCount,
    _In_ const PATTERN_SIGNATURE *Sigs
    );

#endif // _PATSIG_H_