capa: identify capabilities in executable files