GrammaTech DDisasm
Fast disassembler producing reassemblable assembly code using Datalog
Fast disassembler producing reassemblable assembly code using Datalog
Checked October 2026.
DDisasm is a disassembler that produces assembly code accurate enough to be reassembled. The tool is implemented using the Datalog (souffle) declarative logic programming language to compile disassembly rules and heuristics.
The disassembly process begins by parsing ELF file information and decoding a superset of possible instructions to create an initial set of datalog facts. These facts are analyzed to identify code locations, symbolization, and function boundaries.
The results of this analysis produce a refined set of datalog facts that are translated to the GTIRB (GrammaTech Intermediate Representation for Binaries) intermediate representation for binary analysis and reverse engineering.
The GTIRB pretty printer can be used to convert the GTIRB output to reassemblable assembly code. The tool is available as a Docker image for quick deployment and testing.
DDisasm was developed with support from the Navy and the Office of Naval Research. The underlying research was published in a USENIX paper titled "Datalog Disassembly" which received a distinguished paper award.
Sign in with a free account to see the full list.
Sign in with a free account to see the full list.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Common questions about GrammaTech DDisasm: features, pricing and alternatives.
GrammaTech DDisasm is a product by GrammaTech in the Malware Analysis category. It covers Binary Analysis, Open Source and Reverse Engineering.
GrammaTech DDisasm is free. Download and setup instructions are at https://grammatech.com/ddisasm/.
Alternatives to GrammaTech DDisasm listed on CybersecTools:
Compare all GrammaTech DDisasm alternatives at https://cybersectools.com/alternatives/grammatech-ddisasm
GrammaTech DDisasm is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Multi-engine file malware detection platform for securing business apps.
Multi-engine AI file analysis platform for malware detection via SaaS or on-prem.
Deep learning-based malware analysis & threat contextualization platform.
Tool for fingerprinting malware HTTP requests.
A process scanning tool that detects and dumps malicious implants, shellcodes, hooks, and memory patches in running processes.
Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,032 products.
Connect your AI
