From 21adb2b9d14d7ae4368bd1b29890ffa0fbbafa4e Mon Sep 17 00:00:00 2001 From: William Ballenthin Date: Mon, 10 Aug 2020 18:16:14 -0600 Subject: [PATCH] tests: lancelot: formatting --- tests/test_lancelot_features.py | 14 ++------------ 1 file changed, 2 insertions(+), 12 deletions(-) diff --git a/tests/test_lancelot_features.py b/tests/test_lancelot_features.py index bb399cb0..e46f9dfb 100644 --- a/tests/test_lancelot_features.py +++ b/tests/test_lancelot_features.py @@ -251,20 +251,10 @@ def parametrize(params, values, **kwargs): ("mimikatz", "function=0x4556E5", capa.features.insn.API("advapi32.LsaQueryInformationPolicy"), True), ("mimikatz", "function=0x4556E5", capa.features.insn.API("LsaQueryInformationPolicy"), True), # insn/api: x64 - ( - "kernel32-64", - "function=0x180001010", - capa.features.insn.API("api-ms-win-core-rtlsupport-l1-1-0.RtlVirtualUnwind"), - True, - ), + ("kernel32-64", "function=0x180001010", capa.features.insn.API("RtlVirtualUnwind"), True,), ("kernel32-64", "function=0x180001010", capa.features.insn.API("RtlVirtualUnwind"), True), # insn/api: x64 thunk - ( - "kernel32-64", - "function=0x1800202B0", - capa.features.insn.API("api-ms-win-core-rtlsupport-l1-1-0.RtlCaptureContext"), - True, - ), + ("kernel32-64", "function=0x1800202B0", capa.features.insn.API("RtlCaptureContext"), True,), ("kernel32-64", "function=0x1800202B0", capa.features.insn.API("RtlCaptureContext"), True), # insn/string ("mimikatz", "function=0x40105D", capa.features.String("SCardControl"), True),