TECH Signal 404
ddisasm: A fast and accurate disassembler
Ddisasm is a disassembler that produces reassemblable output using datalog-based analysis and the GTIRB intermediate representation.
For engineers working with binary analysis or reverse engineering, this tool reduces the manual effort required to recover accurate assembly from stripped or obfuscated binaries. The ability to reassemble modified code programmatically enables automation of tasks like patching, hardening, or decompilation. However, its reliance on datalog and GTIRB may introduce a learning curve for teams unfamiliar with these frameworks.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Ddisasm uses datalog to infer code locations, symbols, and function boundaries from ELF/PE binaries.
Output is emitted in GTIRB, an intermediate representation designed for binary rewriting and reassembly.
Supports x86, ARM, and MIPS architectures, with Docker-based deployment for immediate use.
THE CLUSTER