v.1.1.0 released - www.arkdasm.com

+ added debugger memory snapshot feature
+ added debugger exception handling settings
+ added new command: bpdll
+ improvements, bug fixes

Hi.
I see that the debugger do a analysis like IDA do before starting to debug itself the target.
That analysis is done each time the executable is loaded even is the same and not modified. Can you do a file that keep the analysis and if the CRC change analyse again else is a waste of time to wait each time for the analysis to complete.
Or i am wrong?

Hi giv, you're wrong cause its not analysis its mostly rebasing hash maps (comments, labels, xref, etc.) to new imagebase, creating a new debugger database and stashing the current one cause it will be restored when debugger exits (assuming you don't use memory snapshot feature). Full analysis is done only at the beginning that is when you load a new file into disassembly.

Oh i see.
I have made a quick test.
Load a file twice.
But it seems that ASLR is the fault witch make the program rebase all times the hash maps.
The hash maps are stored relative to VA or RVA of the file or is another pointer?

VA but if your file is big and it takes too much time to rebase I'd suggest to use another debugger

VA is a bad option concerning ASLR.
I have made a simple test.
Load Total Commander 64 bit executable.
It have few MB as you may know.
The process take about one minute one a Core 2 Quad Q6666 at 2.4x4Mhz and 6 Gb RAM under Win 8.1.
The rebasing is done every time i load the file even is small.
The referencing to the RVA as pointer will avoid this issue IMHO.

well, it all depends on your hardware I just check totalcmd64.exe on my 4 year old laptop i7-2620M @ 2.70 Ghz, 8 GB RAM Win7 it takes about 3-4 seconds.

Ah.
I have a i7 3.3Ghz quad laptop with Win 8.1 X64, 12 GB DDR3 and 256GB SSD but i did not tested because is only for Tom&Jerry kids games.
I thougth is not suitable to reverse on a laptop.
And my 2.4 Ghz Q6660 Quad is suitable for reverse a 3 MB program....
I will test on the laptop when is free and i will tell you the result.
:)

Even if nothing changed, re-uploaded on 2018-08-04.
Never forget this tool!

@cyberbob
Did you stop developing ArkDasm. It was a nice project. Why no updates?

Yeah, its stopped I'm working on version2 (actually it's new project but some code is shared with ArkDasm). Advantages over ArkDasm:

• cross platform (Win/Linux/Mac)

• multi-arch (x86, x64, Arm32, Arm64, MIPS 32)

• supported file types: ELF32, ELF64, PE64, raw binary.

• RetDec decompiler support (press F5 on a function to get C code just like in IDA)

No release date but I'm leaning toward releasing Pre-Alpha sooner than later ;) (depends on my free time)

Sorry for using and opening this old thread
Always used HDasm for x86 and KI told me ArkDasm is best alternative for x64
Website is down, so can anyone give me this Disassembler, however?
Everything is appreciated, PM, or a link for VIP's or whatever
And yes I have IDA, Ghidra and so on, but they don't work like HDasm did, so hope for ArkDasm

ArkDasm v1.1.0 (May 27, 2015)

Requirements:
Visual Studio 2013 run-times (msvcp120.dll, msvcr112.dll)

https://mega.nz/file/BAZyyJgA#Z-teXZsi46VE8KIEFzxEzvD4qvl5NT8U0KJ_4TKw97A

MarcElBichon suggestion and AI convinced me to resurrect the project ;) so here it is v1.2.0

https://github.com/arkup/arkDasm/releases/tag/1.2.0

Changelog:

- added MCP support for the disassembler and debugger
- added Functions and Strings windows
- added support for conditional software breakpoints
- introduced a proper multi-pane IDE layout as the default workspace
- added Find hex search over the database and live process memory
- added recently opened files and a new Welcome dialog with file selection
- switched from DIA to DbgHelp for debug information handling
- added execution commands: g, t, p, gu, break, detach
- added breakpoint commands: bl, bc, bd, be
- added inspection commands: ~, r, rr, u, lm, x, strings, writemem
- added memory dump commands: db, dw, dd, dq
- added dps, which dumps pointers annotated with the symbol each one points at
- added File - Unload to close a file without leaving the program
- switched to Zydis disassembler library, replacing Capstone
- updated Qt to 6.8.3
- minor bug fixes and improvements

Hi,

I ported my TriCore decompiler to x64 and integrated it into arkDasm.

Here are some results: https://arkdasm.com/x64Deer_WindowsTerminal.html

Just press Tab to turn assembly into C, complete with editable variable names and comments. Press Space or Ctrl to see the corresponding assembly code in a tooltip.

AI helped with the tedious parts, including lifting, casting checks, and verifying the accuracy of the decompilation.
You can even debug the decompiled code using step-over, step-into, and breakpoints. The decompiler engine is also accessible to AI agents through MCP.

https://github.com/arkup/arkDasm/releases

Changelog:

v1.3.0 (October 2026)
+ added x64 decompiler
+ added debugging on the decompiled C code : step over and step into C lines, breakpoints
+ added MCP tools to read the decompiled C and name its variables
+ added MCP tools to start, terminate and detach the debuggee, with a new permission to start the process
+ minor bug fixes and improvements