extractors: viv: match flirt signatures [wip]

tests/test_function_id.py

@@ -0,0 +1,25 @@
+import capa.features.insn
+
+from fixtures import pma16_01_extractor, get_function, extract_function_features
+
+
+def test_function_id_alloca_probe(pma16_01_extractor):
+    assert pma16_01_extractor.is_library_function(0x403970) == True
+    assert pma16_01_extractor.get_function_name(0x403970) == "__alloca_probe"
+
+
+def test_function_id_spawnlp(pma16_01_extractor):
+    # 0x405714 is __spawnlp which requires recursive match of __spawnvp at 0x407FAB 
+    # (and __spawnvpe at 0x409DE8)
+    assert pma16_01_extractor.is_library_function(0x405714) == True
+    assert pma16_01_extractor.get_function_name(0x405714) == "__spawnlp"
+
+
+def test_function_id_api_feature(pma16_01_extractor):
+    f = get_function(pma16_01_extractor, 0x4011D0)
+    features = extract_function_features(pma16_01_extractor, f)
+
+    for feature in features.keys():
+        print(feature)
+
+    assert capa.features.insn.API("__alloca_probe") in features