August 8, 2026

Code dies, comes back, comments scream

DDisasm: Reversible (bi-directional) Disassembler

A tool that takes apps apart and puts them back together has commenters losing it

TLDR: DDisasm is a tool that can take a finished program apart and help rebuild it, which is a big deal for security research and software tinkering. Commenters were split between total amazement that it works at all and nervous questions about whether edited programs still run properly.

A niche reverse-engineering tool somehow sparked main-character energy in the comments. DDisasm is basically a program that can take compiled software apart, turn it into readable code-like text, and then help put it back together again. That alone had one commenter sounding like they’d seen a magic trick at close range, declaring they were "amazed, astonished, stunned, thrilled, and in disbelief" before landing the ultimate nerd compliment: it actually works. On the internet, that is basically a standing ovation.

But of course, the crowd didn’t stay calm for long. Another commenter instantly zoomed past the wow factor and into hard-core skepticism, asking the question everyone was thinking in plain English: if you change things, does the program still survive, or does it explode? In other words, is this a miracle tool or just a very fancy way to break software with extra steps? That uncertainty became the thread’s mini-drama: believers calling it brilliant, doubters asking whether the "rebuild" promise holds up when real edits happen.

Then came the delightfully nerdy side quest: one person got distracted by the fact that DDisasm uses a logic language called Soufflé and basically reacted like a foodie spotting a rare dessert: "ooh souffle!" That quickly turned into anxious curiosity about whether the whole thing should become too big and messy to handle. So the vibe was equal parts hype, suspicion, and geeky thirst: a digital autopsy tool that has fans cheering, skeptics poking holes, and bystanders making casserole jokes while the experts argue over whether this is genius or chaos.

Key Points

  • DDisasm is described as a fast disassembler implemented in Datalog with Soufflé, intended to generate assembly that can be reassembled.
  • Its pipeline parses ELF and PE binaries, decodes a superset of instructions into Datalog facts, analyzes those facts for code locations, symbolization, and function boundaries, and translates the results into GTIRB.
  • The tool supports ELF on Linux and PE on Windows, along with x86_32, x86_64, ARM32, ARM64, and MIPS32 architectures.
  • The article provides a Docker-based workflow for compiling an example, disassembling it to GTIRB, modifying it via GTIRB tools, and regenerating a binary or assembly listing with gtirb-pprinter.
  • The article includes contributor credits and cites research papers on Datalog Disassembly, GTIRB, and a 2025 IEEE paper on disassembly using weighted interval scheduling with learned weights.

Hottest takes

"amazed, astonished, stunned, thrilled, and in disbelief" — aboardRat4
"it actually works" — aboardRat4
"ooh souffle!" — sterlind
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.