McSema binary lifter

McSema binary lifter
[Google Scholar]

Notes: remill library, LLVM compiler, ISA specification, binary lifter, binary analysis, reverse engineering
Papers: dasgupta:pldi:2020

McSema is an executable lifter. It translates (“lifts”) executable binaries from native machine code to LLVM bitcode. It uses the Remill library for disassembly and binary lifting of individual instructions. It uses IDAPro for control-flow graph (CFG) recovery.

Slides


Remill binary lifting library