# Curated reverse engineering resources · Page 33

> Page 33 of 52, entries 3,201–3,300. 5,191 tools, projects, integrations, case studies, and references for websites, games, apps, native binaries, firmware, and communication protocols.

Source-reviewed means descriptions were checked against primary documentation. Each entry page lists the full requirements and sources; this page shows their counts and the review date.

- HTML: <https://awesomerea.org/resources/page/33/>
- JSON: <https://awesomerea.org/api/v1/resources.json>
- 简体中文: <https://awesomerea.org/zh/resources/page/33/index.md>

## Apps (100)

- [ODIS file unpacker](https://awesomerea.org/resources/odis-file-unpacker/index.md): Tool · ODIS file unpacker extracts protected Java classes from ODIS plugin JARs and files from its DIDB data archives. The author traces AES class decryption and Blowfish ECB data decryption through debugging, a Java agent and decompiled class code; some extracted files also require GZIP decompression.
- [netdumper](https://awesomerea.org/resources/netdumper/index.md): Tool · netdumper extracts loaded .NET assemblies from Windows processes through the CLR Data Access Component. It enumerates AppDomains and assemblies, recovers JIT method IL, converts memory layouts to PE files, and repairs damaged PE headers or metadata streams for subsequent inspection.
- [Sandwitcher](https://awesomerea.org/resources/sandwitcher/index.md): Tool · Sandwitcher instruments Java and Kotlin method calls in Android apps by replacing ART method entry points with a trampoline through Pine and LSPlant. Its AAR exposes callbacks before and after the original call to inspect or change arguments and results and inspect thrown exceptions; it also includes a demo application.
- [Zygisk - Frida Gadget](https://awesomerea.org/resources/zygisk-fridagadget/index.md): Tool · Zygisk - Frida Gadget loads Frida Gadget into selected Android app processes for runtime instrumentation. A configuration file selects packages, process names, ABIs, and profiles; deployment scripts place Gadget and its configuration in the app's native library directory before the Zygisk loader starts it.
- [dnlib](https://awesomerea.org/resources/dnlib/index.md): Tool · dnlib is a .NET library for reading and writing modules and assemblies. It provides access to metadata, method bodies, resources, and PDB files.
- [View8](https://awesomerea.org/resources/view8/index.md): Tool · View8 is a static analysis tool that decompiles serialized V8 bytecode (JSC) files into readable JavaScript-like text. It can also export opcodes, parsed objects, and function trees organized by declarations, calls, or references.
- [Soot](https://awesomerea.org/resources/soot/index.md): Tool · Soot is a Java optimization framework for analyzing and transforming Java bytecode. It provides four intermediate representations, including forms suited to optimization, decompilation, and code inspection.
- [DroidLysis](https://awesomerea.org/resources/droidlysis/index.md): Tool · DroidLysis is a pre-analysis tool for Android apps that disassembles samples, organizes their contents, and flags code patterns for further inspection. It accepts APK, DEX, ODEX, ARM executable, ZIP, RAR, and directory inputs.
- [VirtualXposed](https://awesomerea.org/resources/virtualxposed/index.md): Tool · VirtualXposed is an Android app that runs Xposed modules alongside apps in a virtual environment without root access, an unlocked bootloader, or a custom system image. It is based on VirtualApp and epic.
- [EdXposed Framework](https://awesomerea.org/resources/edxposed/index.md): Tool · EdXposed is a Riru module that provides an Xposed-compatible ART hooking framework for Android 8.0 through 11. It lets Xposed modules change system and app behavior without modifying APKs.
- [Vector Framework](https://awesomerea.org/resources/vector-lsposed/index.md): Tool · Vector Framework is a Zygisk module that provides ART hooking for Android apps. It supports Xposed APIs and lets modules change app and system behavior in memory without modifying APK files.
- [JustTrustMe](https://awesomerea.org/resources/justtrustme/index.md): Tool · JustTrustMe is an Xposed module that disables SSL certificate checks in Android apps. It can help expose network traffic from apps that use certificate pinning.
- [DexSQL](https://awesomerea.org/resources/dexsql/index.md): Tool · Queries classes, methods, fields, strings, call edges and Smali disassembly across Android APK and DEX files with SQL. Shipped as a single prebuilt binary that runs either as a local stdio MCP server (`dexsql mcp`) or as a standalone CLI (`dexsql query`).
- [smali/baksmali (Google fork)](https://awesomerea.org/resources/google-smali/index.md): Tool · Assemble and disassemble Android DEX bytecode using Google’s continuation of smali/baksmali.
- [JD-Core](https://awesomerea.org/resources/jd-core/index.md): Tool · Embed the Java decompiler engine used by JD-GUI through loader and printer interfaces.
- [Mono.Cecil](https://awesomerea.org/resources/mono-cecil/index.md): Tool · Inspect and modify .NET metadata and CIL code without loading target assemblies through Reflection.
- [Apk Dependency Graph](https://awesomerea.org/resources/apk-dependency-graph/index.md): Tool · Apk Dependency Graph reads an APK and writes an HTML view of class coupling. Windows is started with run.bat and Unix with run.sh; both take the APK path and a filterset JSON file, and the repository includes a default filterset. The README says the repository is no longer supported.
- [apk2gold](https://awesomerea.org/resources/apk2gold/index.md): Tool · apk2gold is a command-line wrapper that decompiles an Android APK toward a single source tree. The README says it combines apktool, dex2jar, and JD-GUI, keeps the Smali output, and tries to restore R.* resource names from inlined resource integers. It says the result is for reading and is not meant to compile.
- [AndroidProjectCreator](https://awesomerea.org/resources/android-project-creator/index.md): Tool · AndroidProjectCreator converts an APK into an Android Studio project using multiple open-source decompilers. The README says unavailable tools are mirrored in the author's GitHub repositories and that copyright remains with the original creators. Further documentation is linked from maxkersten.nl.
- [apkx](https://awesomerea.org/resources/apkx/index.md): Tool · apkx is a Python wrapper around free dex converters and Java decompilers that extracts Java source from an APK. The README's install steps clone the repository and run sudo ./install.sh, and they require a JRE on PATH. enjarify additionally requires Python.
- [Helios](https://awesomerea.org/resources/helios-decompiler/index.md): Tool · Helios is a Java reverse engineering application with a file browser and editor. For class files it offers a choice of decompilers and disassemblers, and for other files it shows hex and plain text.
- [JavaDecompileTool-GUI](https://awesomerea.org/resources/java-decompile-tool-gui/index.md): Tool · JavaDecompileTool-GUI is a desktop front end for the fernflower Java decompiler. The README says version 1.1 decompiles WAR and JAR files, can extract a JAR from a WAR, and bundles JRE 11.
- [dncil](https://awesomerea.org/resources/dncil/index.md): Tool · dncil is a Python library that disassembles .NET Common Intermediate Language. It parses method headers, instructions, and exception handlers and exposes them through an object-oriented API.
- [droidsaw](https://awesomerea.org/resources/droidsaw/index.md): Tool · droidsaw is a Rust decompiler for Android DEX files and Hermes bundles. It decompiles DEX classes to Java and Hermes functions to JavaScript, and it can follow a value from JavaScript across the React Native bridge into Java. The README says preservation mode recovered 5,767 F-Droid DEX files bit for bit, and that Hermes bytecode round-trips on versions 84, 96, 98, and 99.
- [dotscope](https://awesomerea.org/resources/dotscope/index.md): Tool · dotscope is a Rust framework that parses, disassembles, and modifies .NET PE assemblies and CIL without Windows or the .NET runtime. It reads ECMA-335 metadata tables, builds control-flow and call graphs, and can inject methods. The README lists deobfuscation passes for ConfuserEx, BitMono, JIEJIE.NET, and Obfuscar.
- [JD-GUI](https://awesomerea.org/resources/jd-gui/index.md): Tool · JD-GUI is a standalone graphical utility that displays Java source reconstructed from .class files and browses methods and fields. ./gradlew build writes jd-gui-x.y.z.jar plus Windows, macOS, deb, and rpm packages. It launches with java -jar or as jd-gui.exe on Windows and JD-GUI on macOS.
- [CFR](https://awesomerea.org/resources/cfr/index.md): Tool · CFR decompiles Java class files and jars, including Java 9, 12, and 14 features, and is written in Java 6. The main class is org.benf.cfr.reader.Main. A jar path plus --outputdir writes the decompiled files. mvn compile builds it. Since 0.145, binaries are published with GitHub release tags and on Maven Central as org.benf:cfr.
- [Krakatau](https://awesomerea.org/resources/krakatau/index.md): Tool · Krakatau assembles and disassembles Java bytecode, including obfuscated class files, and can reassemble the text back into a class file. krak2 dis writes assembly, and --roundtrip keeps a bit-for-bit reassembly. krak2 asm assembles .j files. The assembler syntax covers the Java 27 bytecode specification. The v2 decompiler is unfinished, so decompilation still uses Krakatau v1 on the master branch. cargo build --release produces target/release/krak2.
- [ApkToolPlus](https://awesomerea.org/resources/apktoolplus/index.md): Tool · ApkToolPlus is a graphical APK analysis tool. It decompiles, rebuilds, and signs APKs, shows AndroidManifest.xml, the signature, and the version, and converts among jar, class, dex, and smali. It can view multi-dex source. The project is an IntelliJ IDEA project and uses Ant. The main class is com.linchaolong.apktoolplus.Main. Build, Artifacts, ApkToolPlus writes ApkToolPlus.jar under out/artifacts/ApkToolPlus.
- [Procyon](https://awesomerea.org/resources/procyon/index.md): Tool · Procyon is a Java metaprogramming suite. procyon-decompiler is a standalone front end for the Java decompiler in procyon-compilertools, with its dependencies embedded in the JAR. The compiler toolset also inspects class metadata and bytecode. The libraries are published on Maven Central under the group org.bitbucket.mstrobel.
- [onekey-decompile-apk](https://awesomerea.org/resources/onekey-decompile-apk/index.md): Tool · onekey-decompile-apk runs apktool, dex2jar, and JD-GUI in one step. Dropping an APK on _onekey-decompile-apk.bat writes a directory of apktool output and a jar of the same name. The reviewed release uses apktool 1.4.1. apktool.jar d -d decodes resources, and d2j-dex2jar writes the classes.
- [Show Java](https://awesomerea.org/resources/show-java/index.md): Tool · Show Java decompiles APK, JAR, and dex files on an Android device, including layouts, drawables, menus, AndroidManifest, and image assets. Version 3.0 can use CFR 0.140, JaDX 0.9.0, or Fernflower commit a0a8f0a. CFR runs from Jelly Bean upward. JaDX and Fernflower run on Nougat and Oreo. Output is written to a show-java folder on the device storage. The Play Store listing is version 3.0.5, and the GitHub build is 3.0.6.
- [JADXecute](https://awesomerea.org/resources/jadxecute/index.md): Tool · JADXecute is a JADX plugin that runs Java against the open jadx-gui session, so a script can print or change parts of the decompiler output. The repository is based on JADX 1.4.7 and ships a JADX build with the plugin embedded. Usage examples are in the project wiki.
- [JD-Eclipse](https://awesomerea.org/resources/jd-eclipse/index.md): Tool · JD-Eclipse is an Eclipse plug-in that shows Java source for class files during debugging. ./gradlew build writes build/distributions/jd-eclipse-x.y.z.zip. Eclipse installs it from Help, Install New Software, by dropping that zip onto the dialog. The default association for a class file without source is JD Class File Viewer. Preferences live under Java, Decompiler.
- [Old Rod](https://awesomerea.org/resources/oldrod/index.md): Tool · Old Rod disassembles a .NET executable protected by the KoiVM virtualizer in ConfuserEx and recompiles that VM code to CIL. OldRod.exe --help lists the options. --output-directory sets the output folder, and --koi-stream-name, --entry-type, and --run-sig-1 override detection. --config takes a constants map such as doc/example-config.json. Builds use MSBuild in Visual Studio or Rider. AppVeyor publishes binaries. AsmResolver, Rivers, and Newtonsoft.Json are dependencies.
- [Tika JTD+](https://awesomerea.org/resources/tika-jtd-plus/index.md): Tool · Tika JTD+ parses Ichitaro .jtd, .jtt and .jttc documents for Apache Tika, extracting text, metadata and approximate table structure. Its Kotlin implementation reads OLE2 containers and document streams, while accompanying specifications record recovered container, text and embedded-object formats.
- [NPatch](https://awesomerea.org/resources/npatch/index.md): Tool · NPatch adds an Xposed loader and Vector hooking core to Android APKs so Xposed modules can run without root access. Local mode lets NPatch Manager change modules and scope without repatching the APK; integrated mode embeds modules in the patched APK.
- [Aegis: trace a login-code calculation](https://awesomerea.org/resources/rea-aegis-case/index.md): Case study · An official APK investigation follows TOTP methods in Aegis and publishes artifact identities and selected Evidence.
- [Notion: trace the clipboard bridge](https://awesomerea.org/resources/rea-notion-case/index.md): Case study · Trace a packaged Electron clipboard path using REA findings and separate source inspection; the dynamic wrapper remains a stated limit.
- [PicoPrint: LX-D02 printer investigation](https://awesomerea.org/resources/picoprint-rea-investigation/index.md): Case study · The author describes REA-assisted Android investigation followed by separate Hermes decompilation to support a Windows BLE printer.
- [ReaCut: video-editor reconstruction](https://awesomerea.org/resources/reacut-reconstruction/index.md): Case study · An independent video editor whose authors document REA-assisted investigation of Jianying/CapCut behavior and project formats. The public implementation includes a local timeline, FFmpeg export and an experimental, lossy draft importer.
- [CF632BLE: a local client from scale-protocol research](https://awesomerea.org/resources/cf632ble-case/index.md): Case study · Reimplements the CF632BLE scale’s BLE protocol and body-composition calculations from research on the vendor’s Unique Health Android app. A static Web Bluetooth client receives measurements, manages device profiles and keeps its history in browser storage.
- [zee-rp: reconstructing supported Axure RP 11 document operations](https://awesomerea.org/resources/zee-rp-case/index.md): Case study · Reads and rewrites supported native Axure RP 11 documents through a binary-record codec, reference-aware cloning and constrained interaction writers. CLI and MCP interfaces expose inspected edits while keeping offline structure checks separate from native application acceptance.
- [Virtual Desktop Streamer: rehosting the platform layer on Linux](https://awesomerea.org/resources/vd-streamer-linux-case/index.md): Case study · An author-reported Claude Code and REA workflow replaces the macOS streamer’s capture, encoding, audio and input layer with Linux implementations while reusing vendor protocol libraries. The documented result targets desktop streaming and video playback, not Windows-only VR game streaming.
- [Open Claude UI: REA-informed interface reference components](https://awesomerea.org/resources/open-claude-ui-case/index.md): Case study · Publishes React components, motion helpers and design-system notes derived from the author’s reported REA investigation of Claude Desktop. It is useful as an interface-reconstruction case, with version-specific observations; a complete assistant application and backend clone remain outside the documented scope.
- [PlxNative: reconstructing a native webOS media-client interface](https://awesomerea.org/resources/plx-native-case/index.md): Case study · An unofficial Plex client built after the author investigated LG webOS native media interfaces with Ghidra and coding agents. It draws its own Rust/OpenGL interface and uses the television’s decoder, with documented host, simulator and real-device test tiers.
- [Windows Calculator: reconstructing percentage rules](https://awesomerea.org/resources/rea-calculator-percent-case/index.md): Case study · REA’s case traces the installed Windows Calculator model DLL to explain different percentage behavior for multiplication/division and other operations. An analyst-selected function is interpreted against public Microsoft source and demonstrated with fixed browser examples.
- [Feishu: an author-reported isolated second app instance](https://awesomerea.org/resources/feishu-dual-instance-case/index.md): Case study · The author reports using Codex and REA analysis to adapt a separate macOS Feishu copy with its own application identity, data directory and single-instance lock. The account describes local signing and separation checks while retaining the original app unchanged.
- [PhotoCraft: editor workflow reconstruction and PSD round-trip boundaries](https://awesomerea.org/resources/photocraft-case/index.md): Case study · The authors describe this Rust image editor as a clean-room reimplementation of Photoshop-style workflows. Its document engine, UI and automation interfaces share editing commands, while the source distinguishes PSD editor round trips from byte preservation in the standalone file codec.
- [WordCraft: document workflow reconstruction and bounded DOCX compatibility](https://awesomerea.org/resources/wordcraft-case/index.md): Case study · The authors describe WordCraft as a clean-room Rust implementation of familiar Microsoft Word workflows. It provides its own document model, layout engine and DOCX reader/writer, with desktop and browser interfaces; source tests exercise selected editing and file-preservation behavior.
- [GridCraft: spreadsheet workflow reconstruction and XLSX round-trip limits](https://awesomerea.org/resources/gridcraft-case/index.md): Case study · The authors describe GridCraft as a clean-room Rust implementation of Excel-style spreadsheet workflows. A workbook model, formula parser and dependency-driven recalculation are connected to XLSX I/O and a shared editing-command layer for desktop, browser and automation interfaces.
- [DeckCraft: presentation workflow reconstruction and bounded PPTX interchange](https://awesomerea.org/resources/deckcraft-case/index.md): Case study · The authors describe DeckCraft as a clean-room Rust implementation of PowerPoint-style presentation workflows. Its slide model, rendering and command layers support desktop/browser editing and PPTX interchange; reviewed source tests check constructed decks and selected preserved package parts.
- [Ledger Reborn: an independent accounting app informed by QuickBooks study](https://awesomerea.org/resources/ledger-reborn-accounting-case/index.md): Case study · The maintainer reports using REA and Ghidra to study selected QuickBooks Desktop for Mac behavior, then independently implements a local accounting application. Its Python/SQLite engine persists double-entry journals, invoices, inventory and payments, while public synthetic fixtures test bounded accounting and rollback behavior.
- [Pocket Tasks: reconstructing task state and persistence](https://awesomerea.org/resources/pocket-tasks-reconstruction-case/index.md): Case study · A teaching case with disclosed prior source access carries a REA-assisted investigation of a small command-line app into a separate Node implementation. It preserves observed task editing, persistence and selection behavior, then compares scoped outputs against fixed expectations and captured reference sessions.
- [Open Scrantic: reconstructing the Johnny Castaway screensaver engine](https://awesomerea.org/resources/open-scrantic-screensaver-case/index.md): Case study · Reconstructs the Johnny Castaway screensaver engine in Rust, with author-disclosed REA and Claude Code use. It reads original files to run recovered animation scripts and calendar-based story state on modern desktops; documented deviations and limited tests stop short of complete behavioral equivalence.
- [Screen Studio: an author-reported REA study of auto-zoom rules](https://awesomerea.org/resources/screen-studio-auto-zoom-case/index.md): Case study · The author reports using REA to map Screen Studio’s Electron package, reading six auto-zoom and cursor rules from its obfuscated code with Claude Code’s help, and having Claude Code write an independent recorder and renderer from those rules. The article describes the commands, evidence, a cursor-alignment check and the clone’s gaps; neither the clone nor the decoded code is published.
- [Claude Code background lab: an REA-informed reimplementation of a desktop animation](https://awesomerea.org/resources/claude-code-background-lab-case/index.md): Case study · Reimplements the glyph-wind background of the Claude desktop app’s Claude Code New session view as an offline WebGL2 page with a 38-slider control panel. The author reports a static REA investigation of the desktop shell and its remote web bundle, followed by a newly written renderer that reuses recovered timing and layout values. It shares the original’s visual vocabulary and interaction model.
- [Notes CSV export: an author-reported REA check of reconstruction oracles](https://awesomerea.org/resources/rea-notes-csv-oracle-mutation-case/index.md): Case study · A Chinese article breaks three versions of a Python CSV exporter that reproduces the Notes teaching app shipped with REA. It shows that a simple export-and-read-back test passes all three, while byte comparisons against the official JavaScript formatter on 215 fixed inputs catch each one. The author also connects REA 6.5.0 over MCP, reruns its JavaScript analysis and checks that an edited evidence record is rejected on import; the article studies acceptance checks.
- [Sofa TV Browser: a remote-friendly BrowseHere alternative](https://awesomerea.org/resources/sofa-tv-browser-browsehere-case/index.md): Case study · An Android TV browser follows BrowseHere's remote-control interaction design with its own implementation. The author reports using REA to inspect the BrowseHere APK and Claude to build Sofa; the repository documents APK releases, screenshots and current feature limits.
- [FastView-REA: a Rust reconstruction of Fast View 5](https://awesomerea.org/resources/fastview-rea-relay-analysis-rebuild-case/index.md): Case study · A Rust desktop reconstruction of Mekhanotronika Fast View 5 uses REA and Ghidra research to reproduce oscillogram analysis and relay-characteristic views. The project publishes behavioral specifications, factual indexes, screenshots and cross-platform builds, with explicit format and visual-fidelity gaps.
- [DiskLens: a WinDirStat-derived disk usage analyzer](https://awesomerea.org/resources/disklens-windirstat-rea-case/index.md): Case study · A Rust/Tauri disk analyzer combines REA/Ghidra investigation of WinDirStat 2.5.0 with source-code ports of its treemap and color handling. Its documentation distinguishes binary-confirmed findings from source-derived algorithms and leaves several file actions and Windows integrations untested.
- [SoundConnect Desktop: a Windows client reusing a reviewed headset engine](https://awesomerea.org/resources/soundconnect-desktop-rea-engine-case/index.md): Case study · A Windows Sony-headphone client adopts existing libmdr/libmdr-bt engine DLLs after a documented REA-assisted binary inventory and source review. The desktop interface is modeled on Sound Connect, while protocol implementation and device support are inherited.
- [rec-rs: an OBS-informed Rust recorder for macOS](https://awesomerea.org/resources/rec-rs-obs-rea-recorder-case/index.md): Case study · A macOS recorder is informed by OBS architecture research using REA package inspection, platform tools and public source references. It offers screen/camera recording and streaming with a deliberately smaller scene/source feature set; the research notes record unavailable native-analysis providers.
- [Sketch: a Paper-shell-informed native Rust canvas](https://awesomerea.org/resources/sketch-paper-rea-canvas-case/index.md): Case study · A Rust canvas models Paper-like editing behavior after REA investigation of the Paper Desktop shell. The hosted editor was not recovered: research separates observed shell integration from inferred editor features, and the new geometric document model differs from Paper HTML/CSS.
- [CADCraft: a clean-room CAD and drafting application in Rust](https://awesomerea.org/resources/cadcraft-case/index.md): Case study · The authors describe CADCraft as an open-source, clean-room computer-aided design and drafting application built in pure Rust. The README documents a 2D/3D CAD workflow with a command line, object snaps, layers, dimensions, hatches, blocks and DXF, and calls the project early development.
- [DesignCraft: a clean-room page layout and publishing studio in Rust](https://awesomerea.org/resources/designcraft-case/index.md): Case study · The authors describe DesignCraft as an open-source, clean-room page layout and desktop publishing studio built in pure Rust. The README documents native and WebAssembly builds and calls the project pre-alpha.
- [EffectCraft: a clean-room motion graphics and compositing studio in Rust](https://awesomerea.org/resources/effectcraft-case/index.md): Case study · The authors describe EffectCraft as an open-source, clean-room motion graphics and visual effects studio built in pure Rust. The README documents native and WebAssembly builds and estimates about 91% of its tracked features.
- [FigCraft: a clean-room interface design and prototyping tool in Rust](https://awesomerea.org/resources/figcraft-case/index.md): Case study · The authors describe FigCraft as an open-source, clean-room interface design and prototyping tool built in pure Rust. The README documents native and WebAssembly builds and estimates about 49% of the parity needed to replace proprietary design tools for real work.
- [FilmCraft: a clean-room nonlinear video editor in Rust](https://awesomerea.org/resources/filmcraft-case/index.md): Case study · The authors describe FilmCraft as an open-source, clean-room nonlinear video editor built in pure Rust. The README documents native and WebAssembly builds and reports about 86% feature breadth and about 56% readiness for real production work.
- [LightCraft: a clean-room photo library and raw developer in Rust](https://awesomerea.org/resources/lightcraft-case/index.md): Case study · The authors describe LightCraft as an open-source, clean-room non-destructive photo library and raw developer built in pure Rust. The README documents native and WebAssembly builds and calls the project alpha.
- [PdfCraft: a clean-room PDF reader and editor in Rust](https://awesomerea.org/resources/pdfcraft-case/index.md): Case study · The authors describe PdfCraft as an open-source, clean-room PDF reader and editor built in pure Rust. The README documents native and WebAssembly builds and reports 57% of tracked features and 94% of commands.
- [SoundCraft: a clean-room digital audio workstation in Rust](https://awesomerea.org/resources/soundcraft-case/index.md): Case study · The authors describe SoundCraft as an open-source, clean-room digital audio workstation built in pure Rust. The README documents native and WebAssembly builds and reports 94% menu coverage, about 70% feature presence and roughly 40% readiness for real work.
- [VectorCraft: a clean-room vector illustration application in Rust](https://awesomerea.org/resources/vectorcraft-case/index.md): Case study · The authors describe VectorCraft as an open-source, clean-room vector illustration application built in pure Rust. The README documents native and WebAssembly builds and reports about 88% of core menu items.
- [Picture Man: a Rust rebuild of the Windows 3.x image editor](https://awesomerea.org/resources/pictureman-case/index.md): Case study · A cross-platform Rust rebuild of Picture Man 1.55 (1991-1993), the true-color image editor for Windows 3.x, per the project README. The README says no original source survived and the algorithms were recovered by disassembling PMAN.EXE and its converter DLLs.
- [RE:Notepad: rebuilding Windows 10 Notepad behavior in Rust](https://awesomerea.org/resources/renotepad-case/index.md): Case study · RE:Notepad reconstructs Windows 10 Notepad behavior in a Rust and Win32 editor with a Windows 11-style interface. The author reports using REA and Ghidra to inspect notepad.exe and records function-linked findings on encoding detection, line endings and editing behavior in a separate specification.
- [Audionic Trance Airbud 850: reconstructing BLE controls for Linux](https://awesomerea.org/resources/audionic-trance-airbud-850-case/index.md): Case study · A Linux client reconstructs Audionic Trance Airbud 850 BLE controls from analysis of the Audionic Suite Android app and Jieli SDK references. It implements RCSP framing, mutual authentication and GTK controls for battery status, audio modes and EQ; the author reports using REA with JADX during the static investigation.
- [JTrac 3: an issue tracker rebuilt after REA analysis of JTrac 2.3.3](https://awesomerea.org/resources/jtrac-3-case/index.md): Case study · JTrac 3 is an independent issue tracker informed by the author's REA MCP study of the JTrac 2.3.3 WAR. Inspection of its bytecode and application files informed a feature catalogue and persistence model; the new implementation uses Java 25, Spring Boot 4, React 19 and PostgreSQL 18 for workflows, custom fields and issue management.
- [Reversed engineering Icsee: a macOS camera viewer informed by REA research](https://awesomerea.org/resources/reversed-engineering-icsee-case/index.md): Case study · Reversed engineering Icsee is a Swift macOS viewer for local iCSee and Xiongmai cameras, informed by REA inspection of an Android app and native SDK and by authenticated RTSP tests. It provides multiview video, local authentication, camera controls and SD-card recording access through a separate macOS implementation.
- [qcywatch: a QCY Watch GT2 client built from its BLE protocol and face format](https://awesomerea.org/resources/qcywatch-case/index.md): Case study · qcywatch reconstructs QCY Watch GT2 control and watch-face upload from the QCY Android app, BLE captures and face files. Its Linux scripts create and upload faces, read device information and battery state, sync time and send notifications. The author reports using REA to recover the face container layout.
- [hexgrab: rebuilding a color picker from a REA study of PowerToys](https://awesomerea.org/resources/hexgrab-case/index.md): Case study · hexgrab is a Windows WPF color picker built after a REA investigation of the shipped PowerToys Color Picker. The author documents findings from its .NET and native DLLs, including timer-based pixel sampling and clipboard retries, then implements a smaller picker with a global hotkey, screen overlay and HEX copying.
- [Windows Live Mail 2012: UI and resource format reconstruction](https://awesomerea.org/resources/wlm2012-research-case/index.md): Case study · Windows Live Mail 2012 research reconstructs the Japanese edition's UI layout, resource and message-store formats from an owned installation. The author used REA for PE resource inventory, Ghidra for DLL loader analysis and Python decoders to document UIB layouts, RLE images, ribbon definitions and ESE read status. The rebuilt mail app remains private; the repository publishes tools, specifications and findings.
- [anova-power-cli: reconstructing G*Power one-way ANOVA calculations](https://awesomerea.org/resources/anova-power-cli-case/index.md): Case study · anova-power-cli reconstructs G*Power 3.1.9.7's one-way ANOVA power calculations in a Python CLI and MCP service. The author describes inspecting G*Power with REA and Ghidra, collecting GUI outputs, and implementing five calculation modes; the author reports 245 matching fields across the stated comparison set. The optional Claude agent and its evaluation code are present, with a live LLM evaluation still pending.
- [Plaude Archiver: local Plaud Note Pro recording transfer](https://awesomerea.org/resources/plaude-archiver-case/index.md): Case study · Plaude Archiver reconstructs the Plaud Note Pro recording transfer protocol from analysis of the Android app, using REA and JADX in the documented workflow. Its macOS client obtains account keys once, establishes the encrypted BLE session, downloads recordings and decrypts them to Ogg Opus files. Protocol notes cover GATT characteristics, packet framing and handshake variants.
- [OpenPDF Studio: rebuilding PDF editing interactions from WPS PDF research](https://awesomerea.org/resources/openpdf-studio-case/index.md): Case study · OpenPDF Studio builds a local macOS PDF editor informed by REA-assisted observation of WPS Office 12.1.28496's PDF interface. Its research records editing interactions and limited Mach-O module inspection, while the implementation uses React, Electron, PyMuPDF and Apple Vision for text and image edits, conversion and OCR.
- [Keymarks: reconstructing Powermarks 3.5 bookmarks and workflows](https://awesomerea.org/resources/keymarks-case/index.md): Case study · Keymarks rebuilds Powermarks 3.5's keyword-based bookmark workflow as a Windows Tauri app with SQLite search and a browser extension. Its author used REA with Ghidra to recover the undocumented pm35.htm record layout from pm.exe and implemented import and export for that format. A separate feature inventory draws on the original manual, changelog, settings and executable strings.
- [MiPods: reconstructing Xiaomi earbuds control on macOS](https://awesomerea.org/resources/mipods-case/index.md): Case study · MiPods reconstructs Xiaomi earbuds control in a macOS menu-bar app using a recovered BLE GATT protocol. Its Swift core handles battery readings, device information and model-dependent noise controls, while research notes document hardware probes, vendor-app analysis and recording-transfer exchanges. A separate report describes REA-assisted analysis of Xiaomi's Mac app.
- [Taskly: rebuilding Trello's Electron desktop shell](https://awesomerea.org/resources/taskly-trello-shell-case/index.md): Case study · Taskly is an offline kanban app whose Electron desktop shell was reconstructed from Trello's app.asar using REA. The analysis covers window inventory, geometry, IPC channels and preloads; the board interface and local document storage are new implementation work. A separate report records the investigated package and recovered shell details.
- [mystery-sdl: porting the Mystery screen saver to SDL2](https://awesomerea.org/resources/mystery-sdl-case/index.md): Case study · mystery-sdl ports the Microsoft Plus! Mystery screen saver to SDL2 on Linux. After REA-assisted analysis of the original binaries, it reimplements sprite, animation and sound services in C, translates the plugin logic, and reads scene data from the user's Mystery.dll.
- [LSX II Volume Fixer: reconstructing volume behavior](https://awesomerea.org/resources/kef-lsx-volume-case/index.md): Case study · Uses measured USB-volume behavior and a macOS audio proxy to map volume keys to a KEF LSX II’s LAN control. The project reports more even steps while forwarding USB audio; the speaker firmware is unchanged.
- [UU Remote on Linux: an unofficial protocol implementation](https://awesomerea.org/resources/uu-remote-linux-protocol-case/index.md): Case study · Implements an unofficial native Linux host for NetEase UU Remote, using protocol behavior the maintainer says was recovered from official-client traffic and shipped programs. The Rust implementation connects selected desktop, input and auxiliary-tool channels to Linux services; an additional Linux viewer remains experimental. The author attributes development to Claude and Codex, without establishing REA use.
- [TCLimate: reconstructing selected TCL Home cloud controls](https://awesomerea.org/resources/tclimate-cloud-controls-case/index.md): Case study · Implements selected TCL Home air-conditioner controls and electricity reporting in a native macOS menu-bar app. It adapts earlier community protocol work and documents an Android-module investigation to recover a separate statistics request. Reported validation checks cloud state.
- [Browserbase plugin: re-hosting Claude in Chrome’s browser bridge](https://awesomerea.org/resources/browserbase-claude-chrome-bridge-case/index.md): Case study · Stands in for the Claude in Chrome extension side of Claude Code’s local browser bridge and runs the requested actions in Browserbase cloud browsers. The author’s thread describes the reverse-engineered framing, a 4-byte little-endian length before each JSON tool call, and the plugin maps 17 named tools onto Stagehand/CDP operations. It is an archived interoperability shim with several placeholder tools.
- [Visor: an independent Ray-Ban Meta glasses client](https://awesomerea.org/resources/visor-ray-ban-meta-client-case/index.md): Case study · Implements an Android replacement for the Meta AI companion app that speaks the Ray-Ban Meta glasses’ own Bluetooth and Wi-Fi Direct protocol, imports media, exposes settings and answers “Hey Meta” with a model the user chooses. The project wiki documents the link layers, encryption, services and Meta-side ownership steps, and lists 153 open questions. Testing is on real glasses rather than test suites, so behavior beyond the stated model and firmware remains unverified.
- [wine-uwp: running packaged Windows Store apps on a patched Wine](https://awesomerea.org/resources/wine-uwp-store-apps-case/index.md): Case study · Extends Wine 11.17 so that signed MSIX Store apps, with Shapr3D as the main target, install and run on Linux without their source or symbols. About 49,000 changed lines add a DirectComposition implementation, composition swap chains and an app-model host, while Microsoft’s own XAML and app-model DLLs, harvested from a Windows 11 image on the user’s machine, run unmodified. The author says Claude did most of the reverse engineering and code; app support is uneven and checked by a project regression suite.
- [RKD Telemetry Extractor: decoding Race-Keeper track-day recordings](https://awesomerea.org/resources/rkd-telemetry-extractor-case/index.md): Case study · Documents the proprietary .rkd telemetry format written by Race-Keeper “Instant Video” recorders, whose bundled player runs only on Windows, and implements matching Python and Go parsers that export GPS and IMU channels as Telemetry Overlay CSV and GPX. The author credits Claude Code with the hex-dump analysis and hypothesis testing, anchored by known car IDs, circuit location and speeds. Field meanings rest on physical cross-checks from the author’s own recordings, and several record types remain partly unknown.
- [Elgato HDR: a userspace capture path for the Elgato 4K X’s 10-bit mode](https://awesomerea.org/resources/elgato-hdr-uvc-capture-case/index.md): Case study · A native macOS app that reaches the Elgato 4K X capture card’s 10-bit P010 video mode, which the project says Apple’s built-in webcam driver does not expose to apps. A root helper detaches that driver and runs the card’s USB Video Class streaming directly through libusb, feeding a Metal HDR viewer, an HDR10 recorder and an editor. Latency figures and device coverage remain author-reported.
- [LGwebOS-menubar: a native macOS remote for LG webOS TVs](https://awesomerea.org/resources/lgwebos-menubar-remote-case/index.md): Case study · A native macOS menu-bar app that pairs with an LG webOS TV over its local encrypted WebSocket interface to launch apps, switch inputs, adjust volume and picture settings, send pointer input and cast selected media. The project credits the public Connect SDK for webOS protocol behavior and reuses PyWebOSTV’s registration manifest. Testing covers one TV on webOS 5.0.
- [Galaxy Buds Client: an unofficial manager built on Samsung’s earbud protocol](https://awesomerea.org/resources/galaxy-buds-client-protocol-case/index.md): Case study · Reimplements control of Samsung Galaxy Buds over their proprietary RFCOMM serial protocol in a cross-platform desktop and Android manager. The author reports recovering the message format by analyzing the earbuds’ binary stream and disassembling Samsung’s official Android apps, and publishes partial packet notes for the 2019 Buds and the Buds+. Beyond the official app’s settings, it exposes battery statistics, diagnostics, factory self-tests, hidden debug information and firmware flashing for supported models.
- [Wino Mail: recreating Windows Mail and Calendar](https://awesomerea.org/resources/wino-mail-case/index.md): Case study · Native Windows client that aims to preserve the familiar Windows Mail and Calendar experience while rebuilding its functionality. The upstream README documents a WinUI 3 interface, mail and calendar providers, contacts, tasks and offline workflows.
- [ScooterLink: reconstructing Honda RoadSync’s handlebar-button protocol](https://awesomerea.org/resources/scooterlink-honda-roadsync-case/index.md): Case study · Replaces Honda RoadSync’s Apple Music-only media control with an iOS app that pairs with a Honda PCX 2025 TFT dash over Bluetooth Low Energy and turns handlebar presses into system-wide commands for any player. The author documents the dash’s BLE services, key exchange, button registration and event bytes, reportedly worked out from the official Android app and logged traffic. Results are author-reported on one PCX125, and the protocol notes separate confirmed from unverified parts.
