Revisiting 2000 cuts using Binary Ninja’s new decompiler

Summary: Vector35 released a decompiler to Binary Ninja's development branch, built on a High Level IL that abstracts the existing Low Level and Medium Level ILs with dead code elimination, constant folding, and switch recovery. Revisiting a 2000 cuts challenge, the author shows the decompiler reduces 43 disassembly instructions to 17 in MLIL and six in the decompiler, and re-solves a stack canary extraction task more concisely with the HLIL API.
What you should know: The author plans to point the decompiler at architectures other decompilers don't support, such as MIPS, 68k, and 6502 - meaning reverse engineering coverage may extend to firmware and embedded targets that previously required manual IL scripting.

Read the original at Trail of Bits Blog ↗