`cxx/VirusAnalysis.*xx` has unfinished functions (static analysis, process executables.) Do this as `cxx/ClassPortableExecutable.*xx`

[SwuduSusuwu]

cxx/VirusAnalysis.hxx#L42

/* Static analysis */
/* @throw bad_alloc */
const std::vector<std::string> importedFunctionsList(const PortableExecutable &); /* TODO */
...
/* Analysis sandbox */
const VirusAnalysisResult straceOutputsAnalysis(const FilePath &straceDumpPath); /* TODO: regex */

Lots to do. If you want this: respond that you wish more resources go to this, or contribute.

[SwuduSusuwu]

Can reuse LLVM's clang --analyze to do static analysis? llvm/llvm-project#86600 (comment)

[SwuduSusuwu]

Progress is just: this now loads executables from disk.
+PortableExecutableBytecode Initializes bytecode..@ef71ad0
?ClassPortableExecutableBytecode Load to string,@efe1d2c

[SwuduSusuwu]

Miniscule progress (signatureAnalysis() "processes" executables):
?signatureAnalysis() If match, output sig+offset.@3d064ac
?virusAnalysisTests() False negative tests, cache@09bd2d3

[SwuduSusuwu]

https://dl.acm.org/doi/full/10.1145/3546946 uses artificial neural tissue to disassemble executables; perhaps this has use for static analysis.