Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Unsupported API stats to help contributors

See original GitHub issue

First off, thanks for releasing this tool.

I ran speakeasy against the Malpedia corpus (https://malpedia.caad.fkie.fraunhofer.de/) to get a rough estimate of how many samples successfully emulate with/without tossing errors. While running this test I gathered up a list of the count of unsupported API functions that were causing emulation to halt.

I understand a github issue may not be the best place to store this information. It may be useful for someone looking to contribute by going after the highly used API’s first.

The result of ~4k samples (truncating results at 15 - the data has a long tail of one-off’s) (Updated: 2022-02-17 running against c94bb629e8ecc1ab00b326b3e2919365c4bbc66d)

    150 advapi32.CryptImportKey
    128 advapi32.ConvertStringSecurityDescriptorToSecurityDescriptorA
    122 msvbvm60.ordinal_100
    102 user32.OpenInputDesktop
    100 kernel32.LocalFileTimeToFileTime
     99 msvcrt._wgetenv
     96 advapi32.EventRegister
     75 comctl32.ordinal_17
     71 gdi32.GetSystemPaletteEntries
     64 mfc42.ordinal_1576
     60 kernel32.HeapValidate
     56 advapi32.RegCreateKeyExA
     55 kernel32.GetThreadPreferredUILanguages
     54 advapi32.InitializeSecurityDescriptor
     52 shell32.SHGetSpecialFolderPathA
     45 advapi32.RegCreateKeyExW
     41 kernel32.GetTimeZoneInformation
     40 msvcrt.__p___initenv
     31 shlwapi.PathFileExistsW
     30 userenv.GetUserProfileDirectoryW
     30 kernel32.GetTempFileNameA
     29 user32.GetWindowRect
     27 kernel32.SetFileAttributesW
     27 kernel32.SetFileAttributesA
     27 iphlpapi.GetAdaptersInfo
     26 user32.MapVirtualKeyW
     25 oleaut32.SysAllocStringLen
     24 kernel32.InitializeSRWLock
     23 user32.RegisterClipboardFormatA
     22 shell32.SHGetSpecialFolderPathW
     22 ntdll.VerSetConditionMask
     21 user32.GetCursorInfo
     21 urlmon.ObtainUserAgentString
     20 user32.RegisterClassA
     20 kernel32.GetProcessAffinityMask
     19 wininet.HttpAddRequestHeadersA
     19 oleaut32.ordinal_2
     19 kernel32.RtlPcToFileHeader
     19 kernel32.GetSystemWow64DirectoryA
     19 advapi32.RegSetValueExA
     18 kernel32.SetFilePointerEx
     18 advapi32.SetEntriesInAclA
     17 msvcrt.atexit
     17 advapi32.RegisterServiceCtrlHandlerExW
     16 oleaut32.SysReAllocStringLen
     15 ntdll.RtlAdjustPrivilege
     15 msvcrt._ismbblead
     15 kernel32.SetProcessShutdownParameters
     15 kernel32.GlobalMemoryStatusEx
     15 kernel32.FreeResource
     15 gdiplus.GdiplusStartup

In addition to the above data, Malpedia publicly posts an API frequency graph: https://malpedia.caad.fkie.fraunhofer.de/stats/api_dll_frequencies