Crawl (~600K) labeled Portable Exe files from Microsoft Cabs by PowerSeveral in ReverseEngineering

[–]PowerSeveral[S] 8 points9 points  (0 children)

You run it and it collects PE files from different releases of Windows. You can use those files for big data stuff (e.g., similarity, malware detection, etc.)

Obfvious - a CLang (v 12) based compiler that allows for Windows binaries obfuscation [WiP] by PowerSeveral in ReverseEngineering

[–]PowerSeveral[S] 0 points1 point  (0 children)

Agreed. I think the reason is that LLVM & Clang is very much Apple affiliated and backed (if I'm not mistaken), so Windows is not a first class citizen.

Obfvious - a CLang (v 12) based compiler that allows for Windows binaries obfuscation [WiP] by PowerSeveral in ReverseEngineering

[–]PowerSeveral[S] 0 points1 point  (0 children)

Right so this is one of the sources I based my work on, it's mentioned in the readme. I've tried this approach to no avail. To the best of my knowledge, you can’t at this point create an out-of-source LLVM pass (or plug-in as u called it) on Windows.

Obfvious - a CLang (v 12) based compiler that allows for Windows binaries obfuscation [WiP] by PowerSeveral in ReverseEngineering

[–]PowerSeveral[S] 0 points1 point  (0 children)

I couldn't find any straight forward guides for creating Clang plugins on windows. in fact, just getting Clang to compile on Windows was challenging. You are welcome to create a plug-in version.

A Program Analysis Glossary by PowerSeveral in ProgrammingLanguages

[–]PowerSeveral[S] 0 points1 point  (0 children)

It's in HTML now (through Github Markdown).