Create read-initialization-file.yml

2026-06-08 15:41:20 +00:00 · 2020-07-23 13:07:16 -04:00
parent d7a30cb933
commit eb2ffe5b68
1 changed files with 18 additions and 0 deletions
@@ -0,0 +1,18 @@
+rule:
+  meta:
+    name: read initialization file
+    namespace: host-interaction/file-system/read
+    author: "@_re_fox"
+    scope: function
+  examples:
+    - 1d8fd13c890060464019c0f07b928b1a:0x401070
+  features:
+    - and:
+      - or:
+        - api: GetPrivateProfileInt
+        - api: GetPrivateProfileString
+        - api: GetPrivateProfileSection
+        - api: GetPrivateProfileSectionNames
+      - string: /\.ini/i
+      - optional:
+        - api: GetFullPathName