diff --git a/tests/fixtures.py b/tests/fixtures.py index 0f70a9ab..eec1012e 100644 --- a/tests/fixtures.py +++ b/tests/fixtures.py @@ -630,7 +630,7 @@ DYNAMIC_FEATURE_PRESENCE_TESTS = sorted( ("0000a657", "process=(2852:3052),thread=2804", capa.features.insn.Number(0x000000EC), True), ("0000a657", "process=(2852:3052),thread=2804", capa.features.insn.Number(110173), False), # thread/string call argument - ("0000a657", "process=(2852:3052),thread=2804", capa.features.common.String("NtQuerySystemInformation"), True), + ("0000a657", "process=(2852:3052),thread=2804", capa.features.common.String("SetThreadUILanguage"), True), ("0000a657", "process=(2852:3052),thread=2804", capa.features.common.String("nope"), False), ], # order tests by (file, item) @@ -657,7 +657,7 @@ DYNAMIC_FEATURE_COUNT_TESTS = sorted( "0000a657", "process=(1180:3052)", capa.features.common.String("C:\\Users\\comp\\AppData\\Roaming\\Microsoft\\Jxoqwnx\\jxoqwn.exe"), - 1, + 2, ), ("0000a657", "process=(1180:3052)", capa.features.common.String("nope"), 0), # thread/api calls @@ -667,8 +667,8 @@ DYNAMIC_FEATURE_COUNT_TESTS = sorted( ("0000a657", "process=(2852:3052),thread=2804", capa.features.insn.Number(0x000000EC), 1), ("0000a657", "process=(2852:3052),thread=2804", capa.features.insn.Number(110173), 0), # thread/string call argument - ("0000a657", "process=(2852:3052),thread=2804", capa.features.common.String("NtQuerySystemInformation"), True), - ("0000a657", "process=(2852:3052),thread=2804", capa.features.common.String("nope"), False), + ("0000a657", "process=(2852:3052),thread=2804", capa.features.common.String("SetThreadUILanguage"), 1), + ("0000a657", "process=(2852:3052),thread=2804", capa.features.common.String("nope"), 0), ], # order tests by (file, item) # so that our LRU cache is most effective.