File tree 1 file changed +5
-11
lines changed
1 file changed +5
-11
lines changed Original file line number Diff line number Diff line change @@ -22,14 +22,16 @@ rule:
22
22
- de5f2dd641b3e75eea6e4575b0ba4a48:0x140002180
23
23
features :
24
24
# Classic GDI Capture
25
- - or :
25
+
26
+ - or :
26
27
- and :
27
28
- or :
28
29
- api : user32.GetWindowDC
29
30
- api : user32.GetDC
30
31
- and :
31
32
- api : gdi32.CreateDC
32
- - string : " DISPLAY"
33
+ - optional :
34
+ - string : " DISPLAY"
33
35
- or :
34
36
- api : gdi32.BitBlt
35
37
- api : gdi32.GetDIBits
@@ -47,26 +49,18 @@ rule:
47
49
- and :
48
50
- api : BitBlt
49
51
- api : System.Drawing.Graphics::CopyFromScreen
50
-
51
52
- and :
52
- - or :
53
- - api : " GetDC"
54
- - and :
55
- - api : " CreateDC"
56
- - optional :
57
- - string : " DISPLAY"
58
53
- or :
59
54
- and :
60
55
- api : " SelectObject"
61
56
- api : " DrawText"
62
57
- and :
63
- - api : " CreateCompatibleDC"
64
- - api : " CreateCompatibleBitmap"
65
58
- or :
66
59
- api : " BitBlt"
67
60
- api : " StretchBlt"
68
61
- api : " PrintWindow"
69
62
63
+
70
64
# GDI+ Graphics API chain
71
65
- and :
72
66
- api : " GdipCreateBitmapFromScan0"
You can’t perform that action at this time.
0 commit comments