ArtCraft rebuilt Photoshop in Rust and killed binary secrecy

The open-source project REA (Reverse Engineer Anything) connects reverse-engineering tools including Ghidra and Hopper to AI agents via the Model Context Protocol (MCP) and command-line interfaces. According to geekpark, REA's GitHub repository grew from fewer than 10,000 stars on October 6 to more than 110,000 stars by October 12. According to woshipm, the repository approached 100,000 stars as developers realized that agentic workflows could automate the inspection of compiled software.

Practical demonstrations confirm that speed. Geekpark reported that reverse engineer Maurice Heumann ran over a dozen Claude Code and Codex agents in parallel using Hex-Rays' official Model Context Protocol (MCP) to decompile 99% of a shooter game's functions into C++ source code. Heumann stated that 83% of those decompiled C++ functions compiled into binary code identical byte-for-byte to the original game program.

Local machine code can no longer conceal proprietary algorithms. Once AI agents reproduce compiled logic at this fidelity, desktop binaries become functionally transparent, forcing commercial software into cloud-locked architectures.

How agentic decompilation unpacks desktop binaries

Agentic decompilation bridges static analysis software and large language models through standardized protocols. The open-source REA project, short for Reverse Engineer Anything, connects disassemblers including Ghidra, IDA, Hopper, and JADX to AI coding agents via the Model Context Protocol (MCP) alongside command-line interfaces. Human engineers once inspected assembly instructions manually. Autonomous agents now query disassembler outputs directly, isolating functions before generating source code.

REA grew from fewer than 10,000 stars on October 6 to more than 110,000 stars by October 12, reaching 120,000 stars on GitHub, according to woshipm. Sharing the project on X, Matthew Berman commented 'Software is done'.

Early benchmarks highlight the speed of this architecture. Reverse engineer Maurice Heumann ran over a dozen Claude Code and Codex agents in parallel through Hex-Rays' official Model Context Protocol interface. That setup decompiled 99% of a shooter game's functions into C++ source code. Heumann stated that 83% of those decompiled functions compiled into binary code identical byte-for-byte to the original game program. In a separate test reported by geekpark, Duncan Ogilvie, developer of the x64dbg debugger and creator of IDA Pro MCP, solved all challenges in Google's FLARE team annual Flare-On competition in approximately one hour using an IDA MCP plugin.

Production codebases resist straightforward extraction. Elias Bachaalany, co-author of Practical Reverse Engineering, publicly characterized the viral promotion around REA as hype. Duncan Ogilvie stated that he does not believe providing more tools to an AI model improves its performance. According to geekpark, security blogger Xuan Yuan Zhi Feng claimed that AI easily decompiles unpacked or lightly packed programs, but cannot breach heavy virtualization protections such as VMProtect. The blogger also criticized REA for lacking dynamic debugging capabilities.

Why feeding decompiled code to an LLM destroys clean-room defenses

In 1982, Compaq reverse-engineered the IBM PC BIOS through strict clean-room design. An engineering team examined IBM's code and produced functional specifications, while a separate team wrote a new BIOS solely from those functional notes. No engineer touched both sides. According to woshipm, developer Brandon Thomas took a radically different path, using Claude Opus 5.5 to reverse engineer and rewrite seven Adobe software applications in Rust. Thomas declared on Hacker News that traditional software was finished after he rebuilt the entirety of Photoshop in one attempt.

A single automated agent cannot replicate that human firewall. When one model ingests decompiled binary logic and generates the replacement Rust source, the legal boundary between specification and copying collapses.

Iplaysoft described ArtCraft as an open-source creative suite using clean-room reimplementation, but commercial legal history suggests courts will disagree. In the 2003 Bowers v. Baystate Technologies case, the United States Court of Appeals for the Federal Circuit ruled that contractual bans on reverse engineering are legally enforceable, according to geekpark. European Union law invalidates contractual provisions prohibiting decompilation for interoperability. Even so, running disassembly through an automated model creates immediate copyright exposure.

Other developers recognize the hazard. Geekpark reported that a project recreating Photoshop explicitly barred team members from using Ghidra and REA out of concern over copyright lawsuits. Game publishers act just as aggressively. Legal departments from Rockstar Games, Activision, and Bethesda intervened to shut down unauthorized browser-playable versions of their games, according to geekpark. Thomas started ArtCraft after Adobe charged cancellation penalties on monthly-paid annual plans, woshipm noted. The automated pipeline works, but the legal armor is gone.

The local performance advantages of native Rust tooling

ArtCraft desktop applications run natively on Windows, macOS, and Linux, with browser-based versions enabled through WebAssembly. They interface directly with native graphics APIs: DirectX 12 on Windows, Metal on macOS, and Vulkan on Linux. This low-level rendering avoids virtual machine overhead. In benchmark testing recorded by iplaysoft, VectorCraft rendered 20,000 geometric layers in 27 milliseconds while maintaining a frame rate of 120 frames per second.

Format reverse-engineering matches this hardware performance. In a test on 309 PSD test files from psd-tools, PhotoCraft correctly rendered 307 files following a secondary save, matching Photoshop pixel-for-pixel across 116 shape layers. The local compositor handles 16 non-destructive adjustment layers alongside 27 blend modes with immediate feedback. More than 70 filters execute locally with real-time preview capabilities.

PhotoCraft processes smart selection and subject identification entirely on local hardware without transmitting data to cloud servers. According to iplaysoft, the developers estimate PhotoCraft covers approximately 60% of professional daily creative workflows.

Local execution also changes how editing suites are automated. ArtCraft applications share an underlying registry of more than 500 functional commands, enabling direct command-line execution alongside JSON control channels. External agents drive these routines through the Model Context Protocol (MCP). While appinn observes that most tools remain in an alpha stage and cannot open Adobe Premiere or After Effects project files, the architecture discards legacy technical debt. The developers omit.8BF filter plugins and ExtendScript in favor of a WebAssembly plugin architecture. Released under MIT and Apache-2.0 licenses, these binaries run free of recurring subscriptions.

Proprietary Software vs. Clean-Room Reimplementation vs. Agentic Decompilation

Adoption and Risk Matrix for ArtCraft Native Tools and AI Reverse-Engineering Workflows

• High-throughput local graphics manipulation or programmatic editing via AI agents Adopt VectorCraft or PhotoCraft. Benchmark testing demonstrates VectorCraft rendering 20,000 geometric layers in 27 milliseconds at 120 frames per second. Furthermore, PhotoCraft renders 307 out of 309 PSD test files from psd-tools identically pixel-for-pixel across 116 shape layers and exposes an underlying registry of over 500 functional commands scriptable via the Model Context Protocol (MCP), CLI, and JSON control channels.
• Video production or visual effects pipelines requiring native Adobe project file exchange Do not transition to FilmCraft or EffectCraft. Most tools in the ArtCraft suite are in the alpha development stage, and the source material explicitly notes they cannot natively open Adobe Premiere or After Effects project files.
• Environments dependent on legacy third-party Photoshop plugins or ExtendScript scripts Retain incumbent software. ArtCraft does not support legacy.8BF filter plugins or ExtendScript, and its replacement plugin architecture based on WebAssembly remains in development.
• Auditing or reverse-engineering binaries protected by modern code virtualization Do not rely on agent-driven reverse engineering pipelines like REA. While AI agents can decompile unpacked or lightly packed binaries, sources state AI currently cannot breach heavy virtualization protections such as VMProtect, and REA specifically lacks dynamic debugging capabilities.
• Rebuilding proprietary software components under strict intellectual property exposure constraints Do not route decompiled binaries through REA, Ghidra, or coding agents into reimplementation workflows. In Bowers v. Baystate Technologies (2003), the US Federal Circuit held that contractual prohibitions against reverse engineering in software licenses are legally enforceable, and developers recreating Photoshop explicitly barred team members from using Ghidra and REA to mitigate copyright lawsuit risks.

How binary vulnerability forces software into cloud-only architectures

According to woshipm, Eric S. Raymond observed that the era of software secrecy is approaching its close, leaving software stripped of obscurity as a defensible advantage. The breakdown is already visible in protocol extraction. Developers have turned to AI models to deconstruct proprietary communication protocols, successfully porting Apple's AirDrop to Linux and controlling residential air conditioning through a Mac menu bar application. When automated tools decode compiled binary behavior in minutes, client binaries offer zero concealment.

Code shipped to user machines cannot remain private. If a client binary cannot hide its internal mechanisms, vendors must retreat behind remote server walls.

This migration tracks a realignment of competitive defenses. As woshipm contributor Hua Shu argues, automated reverse engineering strikes directly at replication costs, yet leaves structural moats like network effects and switching costs intact. Writer Digital Life Kazik, also cited by woshipm, argues that when AI renders code duplication trivial, securing positive and valuable attention becomes the sole defensible moat remaining. ArtCraft demonstrates this exact boundary. According to iplaysoft, ArtCraft licenses its desktop software under open-source MIT and Apache-2.0 terms, reserving commercial paywalls strictly for optional, cloud-based AI video generation services.

Proprietary computation is consequently shifting toward managed infrastructure. For serverless workflows, appinn notes that OpenList-Worker provides an official TypeScript serverless port of OpenList capable of running on Cloudflare Workers and Tencent Cloud EdgeOne. Meanwhile, local-first tools thrive openly on consumer devices. Appinn highlights Hister, a local search tool for Windows, macOS, and Linux that indexes full-text web history via Chrome or Firefox extensions and answers queries through the Model Context Protocol (MCP).

Teams constructing local alternatives can assemble their stack from open tools tracked by woshipm. GPUI Kit provides a component library built on GPUI for Rust desktop applications across macOS and Windows, adding about 1,950 GitHub stars in September. Worktrunk also added about 1,950 GitHub stars that month by automating Git worktree creation and directory cleanup for concurrent AI agents. Isolation protects the boundary.

Any code packaged inside a local binary is functionally public. Commercial teams must shift proprietary algorithms behind authenticated server APIs before an automated agent recreates them.

Auditing those agent skills requires equal precision. NVIDIA open-sourced SkillSpector to scan AI agent skills across repositories and archives for prompt injection, data exfiltration, unsafe code, and permission risks. The scanner added about 3,500 GitHub stars in September as developers began vetting autonomous pipelines.

For readers outside China

• Availability: ArtCraft desktop applications run natively on Windows, macOS, and Linux (interfacing directly with DirectX 12, Metal, and Vulkan), with web-based access supported via WebAssembly. Application installation, updating, and maintenance are handled by the open-source ArtCraft Launcher. Most applications in the suite are currently in alpha status. Reverse Engineer Anything (REA) is available as an open-source project on GitHub. The source material does not report any geographical restrictions or export blocks impacting users outside China.
• Pricing: ArtCraft desktop software applications are free and published under open-source MIT and Apache-2.0 licenses. Commercial fees are charged only for optional cloud-based AI video generation services; there are no subscription tiers or cancellation penalties for running the local desktop creative suite.
• Closest Western equivalents: Adobe Creative Cloud (Photoshop, Illustrator, Premiere Pro, Lightroom, Acrobat Pro, After Effects, InDesign); Ghidra; IDA Pro; Hopper; JADX
• Data residency: PhotoCraft processes smart selection and subject identification workloads entirely on local hardware without sending data to cloud servers. All standard ArtCraft desktop operations run locally on native graphics APIs. For users choosing the optional cloud-based AI video generation services that carry commercial fees, the source material does not disclose server locations, data transmission routes, or remote data retention policies.

Sources

• woshipm 当AI可以逆向一切的时候，我们还剩下些什么？ https://woshipm.com/ai/6477608.html
• appinn 10 个有意思的 GitHub 项目：比亚迪用上 CarPlay、翻译扫描 PDF，还有一本人生指南 https://appinn.com/10-tools-github
• iplaysoft 免费开源版 Adobe 全家桶！ArtCraft 像素级复刻 PS / AE / PR / AI 等软件 https://iplaysoft.com/artcraft.html
• geekpark 一周 10 万星，AI「逆向一切」，但大家不要过于兴奋 https://geekpark.net/news/372263
• woshipm AI开始逆向一切，你电脑里的每个软件都要被迫开源了。 https://woshipm.com/ai/6476550.html
• woshipm 盘点 20 个 9 月份 GitHub 上顶顶顶的开源项目。 https://woshipm.com/share/6473850.html