[mshockwave]

> This means I can't feed any function as-is (even a tiny one). I need to manually cut out the loop body.

> It doesn't support branches at all. I know it's a very hard problem, but that's the problem I have

Shameless self-plug: https://github.com/securesystemslab/LLVM-MCA-Daemon

[fschutze]

Can you provide a bit more context why the MCA-Daemon is preferred? Looks interesting, but I don't fully get it.