Path of Rev.ng: From Raw Bytes to CodeQL on Decompiled Code

This conference talk from Recon Conference demonstrates the capabilities of the rev.ng decompiler, a FLOSS (Free/Libre Open Source Software) tool built on LLVM and QEMU. Follow along with a hands-on, step-by-step demonstration showing how to transform raw binary files into decompiled C code. Learn about rev.ng's LLVM IR-based intermediate representation and discover how to leverage tools like KLEE for symbolic execution, CodeQL, and clang-static-analyzer to identify bugs in the decompiled output. The 56-minute presentation covers creating and loading raw binaries, producing disassembly, adding function prototypes, generating decompiled code, importing from various formats (ELF, DWARF, PE/COFF, PDB, Mach-O, and .idb), analyzing code with various tools, and understanding rev.ng's current capabilities and future directions. Presented by Alessandro Di Federico and Pietro Fezzardi, co-founders of rev.ng Labs, who share their expertise in binary analysis, decompilation, and software security.