# Curated reverse engineering resources · Page 35

> Page 35 of 52, entries 3,401–3,500. 5,191 tools, projects, integrations, case studies, and references for websites, games, apps, native binaries, firmware, and communication protocols.

Source-reviewed means descriptions were checked against primary documentation. Each entry page lists the full requirements and sources; this page shows their counts and the review date.

- HTML: <https://awesomerea.org/resources/page/35/>
- JSON: <https://awesomerea.org/api/v1/resources.json>
- 简体中文: <https://awesomerea.org/zh/resources/page/35/index.md>

## Apps (74)

- [XY Remote: reconstructing XinYi amplifier BLE control](https://awesomerea.org/resources/xy-remote-sinilink-ble-case/index.md): Case study · XY Remote reconstructs BLE control for XinYi Sinilink amplifier boards in an iOS app and Swift library. Protocol notes derived from the vendor Android app's Hermes bytecode describe GATT service AE00, frame assembly, checksums, commands and the connection handshake. The author reports testing against app logic and a simulated amplifier.
- [RideLink: reconstructing TVS SmartXonnect scooter communication](https://awesomerea.org/resources/ridelink-tvs-smartxonnect-case/index.md): Case study · RideLink reconstructs TVS SmartXonnect scooter communication in an Android companion app. Protocol notes derived from static analysis of TVS Connect 8.13.2 map BLE GATT characteristics, connection steps and navigation and telemetry frames. The app forwards map directions and phone events to the display and records ride data.
- [lumalou: reconstructing Fisher-Price Lumalou BLE control](https://awesomerea.org/resources/lumalou-case/index.md): Case study · lumalou reconstructs local Bluetooth LE control of the Fisher-Price Lumalou bedtime device after its companion app was discontinued. Python and TypeScript implementations perform the MPID handshake with P-256 key exchange and AES-128-CTR framing, then control lights, audio, schedules and routines. The repository includes protocol documentation, shared test vectors and a browser client.
- [Scarlett MixControl: rebuilding control of first-generation Scarlett interfaces](https://awesomerea.org/resources/scarlett-mixcontrol-1stgen-case/index.md): Case study · Scarlett MixControl replaces Focusrite's MixControl 1.10.6 on modern macOS for first-generation Scarlett interfaces. The Swift app exposes matrix mixing, output and capture routing, metering and presets through USB control requests. Its command mapping comes from signal tables extracted from the original application and disassembly of routing functions.
- [Mi Fitness Sync: reconstructing workout retrieval from the Android app](https://awesomerea.org/resources/mi-fitness-sync-case/index.md): Case study · Mi Fitness Sync reconstructs workout retrieval from the Mi Fitness Android app and implements a Python CLI for activity export and Strava uploads. Its JADX-based notes map Xiaomi Passport authentication, activity API calls and FDS download handling. The client decrypts workout blobs and exports available data as GPX, TCX or FIT.
- [SSL Console Control: reconstructing mixing-console UDP control](https://awesomerea.org/resources/ssl-console-control-case/index.md): Case study · SSL Console Control implements Python control of SSL Matrix-family and Sigma mixing consoles over their native UDP protocols. The author derived Matrix behavior from a Java control app and packet captures, and Sigma behavior from Android APK decompilation and ARM Thumb2 analysis. A terminal interface and CLI expose channels, routing and session controls.
- [logitech-ipc-protocol: reconstructing Logi Options+ agent messages](https://awesomerea.org/resources/logitech-ipc-protocol-case/index.md): Case study · logitech-ipc-protocol reconstructs the Logi Options+ agent's local IPC messages for querying devices and changing their active host. Its notes specify binary framing, JSON request paths and protobuf payload types across macOS sockets and Windows named pipes. The repository includes client scripts and records a Windows 2.7 change that routes access through the app's renderer relay.
- [samsung-notes-format: decoding Samsung Notes handwriting](https://awesomerea.org/resources/samsung-notes-format-case/index.md): Case study · samsung-notes-format reconstructs the handwriting geometry stored in Samsung Notes .sdocx files. Its Python reader parses page objects and pen-stroke deltas, then renders strokes to SVG; accompanying notes describe the ZIP container and structures traced through a jadx decompilation of the Android app.
- [cam-server: reconstructing the Digicam Print Channel backend](https://awesomerea.org/resources/cam-server-case/index.md): Case study · cam-server implements a backend for the Digicam Print Channel, producing responses in the format the client expects and rendering images from its templates. Its Python code serializes response fields as key-value lines and parses page, image, text and background settings for output.
- [bline: decoding LINE voice-call traffic](https://awesomerea.org/resources/bline-line-voip-case/index.md): Case study · bline investigates an earlier LINE voice-call stack and supplies tools for its custom ZLIB-compressed SIP data. The repository includes a compression and decompression library, a command-line pipe utility and a Kaitai Struct definition for heartbeat messages.
- [WazeTripper: reconstructing Tripper Pod navigation over BLE](https://awesomerea.org/resources/wazetripper-case/index.md): Case study · WazeTripper connects Waze navigation to a Royal Enfield Tripper Pod by patching a Waze Android APK and sending commands over a reconstructed BLE interface. Its protocol notes cover the Pod's GATT transport, packet fields and confidence levels, while the build scripts download Waze and inject Java hooks for navigation events.
- [device-reveng: rebuilding a Choiceway GT6-EAU head unit stack](https://awesomerea.org/resources/device-reveng-head-unit-case/index.md): Case study · device-reveng investigates a Choiceway GT6-EAU Android car head unit and rebuilds its launcher and operating-system layer. Findings on OEM applications, AIDL interfaces, camera behavior and the MCU serial link support a Kotlin/Compose launcher and Riposte OS images assembled from the owner's firmware backup.
- [VTech Baby Pro Bridge: reconstructing local camera streaming](https://awesomerea.org/resources/vtech-baby-pro-bridge-case/index.md): Case study · VTech Baby Pro Bridge reconstructs local streaming from an RM-series camera through TUTK/Kalay and VTech's X25519 and ChaCha20-Poly1305 layer. Its C bridge serves video through RTSP, WebRTC and HLS, while companion scripts probe the owner's paired Android app for connection values and use SDK libraries extracted from that app.
- [Reengineering Project for ibisPaint: investigating artwork and brush formats](https://awesomerea.org/resources/reeng-ibispaint-case/index.md): Case study · Reengineering Project for ibisPaint investigates the app's IPV artwork, IPCF configuration and IPBZ brush QR formats. It records IPV chunk fields, provides a hex pattern and Python parsing scripts, and notes version data and deflate-compressed brush content in IPBZ QR data.
- [caniOn Rebirth: reconstructing the Mitsubishi ZEV CAN client and protocol](https://awesomerea.org/resources/canion-rebirth-case/index.md): Case study · caniOn Rebirth reconstructs the Mitsubishi ZEV CAN protocol used by the caniOn v152 Android app for the i-MiEV, iOn and C-Zero. It documents frame identifiers and signal scaling, implements a JVM protocol engine with CLI and Android clients, and supplies a script that patches a user-provided APK to use standard ELM327 commands.
- [AionLink Open: investigating ICCOA CarLink connectivity for the GAC AION i60](https://awesomerea.org/resources/aionlink-open-case/index.md): Case study · AionLink Open investigates ICCOA CarLink connectivity for the GAC AION i60 through static analysis of Android APKs and an independently written Android client. Its Kotlin modules cover BLE discovery and GATT inspection, experimental Wi-Fi Direct and USB transport, UCar framing and authentication probes; the author reports that an ICCOA session and projection on the vehicle remain unconfirmed.
- [claude-peer: reconstructing Claude's local peer IPC](https://awesomerea.org/resources/claude-peer-ipc-case/index.md): Case study · claude-peer reconstructs the local Unix socket peer exchange used by Claude Code and Claude Desktop. Its protocol notes describe session registration, token authentication and line-delimited JSON frames; a Node.js CLI and SDK discover active sessions, send messages and register external peers.
- [Nona: reconstructing Redmi Note 10 Pro Max camera remosaic conditions](https://awesomerea.org/resources/nona-camera-remosaic-case/index.md): Case study · Nona investigates the Redmi Note 10 Pro Max camera's 108 MP remosaic behavior and implements a Camera2 app around the observed ISO and AecLux conditions. The research log describes vendor stream configurations, empty full-resolution RAW buffers and the processed YUV path; the app exposes live status, exposure assistance and image-processing controls.
- [elevenlabs-reader-cli: reconstructing Reader app streaming](https://awesomerea.org/resources/elevenlabs-reader-cli-case/index.md): Case study · elevenlabs-reader-cli is a Python command-line client for creating ElevenLabs Reader documents and streaming their audio through the Reader WebSocket. It follows the mobile app’s captured authentication flow, using Firebase tokens for account access and an App Check token and device ID for WebSocket streaming, with playback and optional live text preview.
- [Yi M1: reconstructing wireless camera control and live view](https://awesomerea.org/resources/xiaoyi-m1-liveview-case/index.md): Case study · Yi M1 wireless protocol research reconstructs the camera’s BLE pairing, Wi-Fi handoff, HTTP remote-control commands and UDP live-view frame format. Python scripts demonstrate pairing, starting remote control and extracting JPEG previews with accompanying settings from findings based on Yi Mirrorless Android decompilation and traffic captures.
- [TelloPython: reconstructing app-only Tello drone commands](https://awesomerea.org/resources/tellopython-case/index.md): Case study · TelloPython implements Python control of Tello drone functions available through its mobile app beyond the documented API. Its notes describe recovering command IDs and packet fields through Android app decompilation and Xposed hooks, then using those findings for joystick movement and flip commands.
- [Humax-CLI: reconstructing IR4000HD remote control](https://awesomerea.org/resources/humax-cli-case/index.md): Case study · Humax-CLI implements terminal control of the Humax IR4000HD receiver from findings the author attributes to reversing its Android app. A Python script sends button commands to the receiver over UDP and exposes listed codes for navigation, recording, playback and device controls.
- [Swish QR format: mapping payment QR payloads](https://awesomerea.org/resources/swish-qr-format-case/index.md): Case study · Swish QR format documents QR-code payloads for Swish payments. It describes type prefixes A, B and C, their number, amount and message fields, and the bit flags that mark fields as editable. Type D is listed but its format remains undocumented.
- [baseus-desktop: reconstructing Baseus earbuds control](https://awesomerea.org/resources/baseus-desktop-case/index.md): Case study · baseus-desktop reconstructs Baseus earbuds control in a Windows and Linux desktop client. Frida scripts and Bluetooth captures inform packet tables for the Bass BP1 Pro ANC and BP1 Ultra; Rust crates implement framing, per-model decoding and BLE transport. The app exposes battery status, noise controls, EQ presets and other supported device settings.
- [Samsung Cloud Notes: reconstructing cloud note access](https://awesomerea.org/resources/samsung-cloud-notes-case/index.md): Case study · Samsung Cloud Notes reconstructs access to Samsung's private note-sync services in Mac, iOS, Android and command-line clients. Its research documents static analysis and runtime observation of Windows components, observed cloud endpoints and XML structures. The clients browse and edit supported typed-text notes, keep local caches and export note content.
- [Music Tag Desktop: reconstructing an Android music tagger for Windows](https://awesomerea.org/resources/music-tag-desktop-case/index.md): Case study · Music Tag Desktop reconstructs the behavior of Android Music Tag 1.2.5.2 as a Windows music-tag editor. Its investigation traces Java code, the native libmain.so library, resources, and music-service request logic; the Python and PySide6 app handles local tags, lyrics, artwork, and metadata matching.
- [vector-studio-re: reconstructing Vector Studio's automation protocol](https://awesomerea.org/resources/vector-studio-re-case/index.md): Case study · vector-studio-re reconstructs the automation interface of Vector Studio 0.1.11 from its shipped Linux AppImage. Extraction scripts unpack app.asar and split the Electron bundle into modules; protocol notes document the loopback JSON RPC endpoint, authentication and operations. A standard-library Python client and stdio MCP bridge call the recovered interface.
- [AirTray: reconstructing an Elgin Air cloud client](https://awesomerea.org/resources/airtray-case/index.md): Case study · AirTray reconstructs an Elgin Air app client as a Windows system-tray controller for compatible air conditioners. It signs in with the owner's account, discovers registered devices, reads their state and sends temperature, mode and power commands through the cloud service. The author reports live validation on one authorized device and account.
- [HikVision QR export decoder: reconstructing Hik-Connect device exports](https://awesomerea.org/resources/hikvision-qr-export-case/index.md): Case study · HikVision QR export decoder reconstructs the format of Hik-Connect device export QR codes and provides a Python decoder and renewal command. The author traces Base64 and zlib layers, field separators, device credentials, and expiration data, then describes using Ghidra to identify the native library’s encryption routine.
- [ShatteredGlass: reconstructing SwiftUI Liquid Glass effects](https://awesomerea.org/resources/shatteredglass-case/index.md): Case study · ShatteredGlass reconstructs SwiftUI's Liquid Glass appearance on macOS using a layered Core Animation view. Its documented hierarchy combines CABackdropLayer, CASDFLayer, CASDFElementLayer, SDFPortalLayer and filters for backdrop distortion and edge highlights.
- [Grok3API: reconstructing Grok’s mobile gRPC client](https://awesomerea.org/resources/grok3api-mobile-grpc-case/index.md): Case study · Grok3API implements a Python client for Grok’s mobile gRPC interface. It serializes protobuf requests, wraps them in gRPC frames, and parses streamed response chunks into Pydantic models. The repository includes protobuf definitions and examples for sending messages and continuing conversations.
- [Things Cloud Python client: reconstructing to-do requests](https://awesomerea.org/resources/things-cloud-api-case/index.md): Case study · The Things Cloud Python client reconstructs part of the service's request behavior from traffic produced by the Mac app. It implements account login and creation or editing of to-dos and projects, while documenting that some exchanged field meanings remain unknown.
- [NVFC: recovering undocumented NvAPI GPU controls](https://awesomerea.org/resources/nvfc-case/index.md): Case study · NVFC implements undocumented NvAPI interfaces for NVIDIA GPU monitoring and configuration. The author recovered the interfaces by observing nvapi_QueryInterface calls in existing utilities; the C++ tool reads clocks, voltage, temperature and fan state and can set fan behavior.
- [SingStar Mic: reconstructing the microphone app protocol](https://awesomerea.org/resources/singstar-mic-protocol-case/index.md): Case study · SingStar Mic documentation reconstructs the Android and iOS app's local discovery, catalogue and game-service exchanges. It specifies UDP and HTTP ports, packet structure, commands, audio format and acknowledgement behavior, with a Python proof-of-concept server.
- [Techstream for Linux: recovering Toyota diagnostic formats and workflows](https://awesomerea.org/resources/techstream-linux-case/index.md): Case study · Techstream for Linux reconstructs selected Toyota and Lexus diagnostic resource formats, command behavior and transport handling in a Python GTK4 workbench. It browses local CT and DDB data, decodes recordings and replays diagnostic sessions using synthetic fixtures. The author reports that physical vehicle communication remains unconfirmed.
- [Fluval Plant Pro 4.0: reconstructing BLE light control](https://awesomerea.org/resources/fluval-plant-pro-4-ble-case/index.md): Case study · The Fluval Plant Pro 4.0 project reconstructs the light's CBOR-over-BLE control protocol from the FluvalConnect Android app. An ESP32 ESPHome configuration sends commands through vendor service FFF0 and exposes power, five color channels, schedules and state updates to Home Assistant.
- [xtractedott: reconstructing the OTT compressor DSP core](https://awesomerea.org/resources/xtractedott-case/index.md): Case study · xtractedott reconstructs portions of Xfer Records' OTT VST multiband compressor in C. Its source covers three-band crossover filters, upward and downward compression, envelope following and parameter mapping. The author describes the code as partly incorrect and unable to build.
- [OpenApe: reconstructing the Call of Duty 4 Asset Manager](https://awesomerea.org/resources/openape-case/index.md): Case study · OpenApe reimplements the Call of Duty 4 mod tools' asset_manager.exe as a C++20 desktop editor. The author attributes its format knowledge to machine-assisted analysis of decompiled binaries. It reads GDF definitions and GDT game data, and previews models, animations and materials using the game's compiled shaders.
- [EOO: a Nintendo DS Wii-connection utility decompilation](https://awesomerea.org/resources/eoo-wii-connection-utility-case/index.md): Case study · EOO reconstructs the Nintendo DS Wii connection utility stored in Pokémon Diamond and Pearl. Its ARM7 and ARM9 assembly and C sources build an NDS image identified by SHA-1. Contributor guidance describes replacing extracted assembly with C that compiles to the same instructions.
- [PictoChat: a matching DSi system-title decompilation](https://awesomerea.org/resources/pictochat-dsi-decomp-case/index.md): Case study · PictoChat's standalone DSi system title is being reconstructed as matching C source for its ARM components. The workflow extracts a player's own title and BIOS dumps, compiles candidate functions with mwccarm and compares bytes with relocation awareness. The author reports 1,048 matched functions out of a current estimate of 1,551.
- [LibrePods: AirPods features on Android and Linux through a reverse-engineered protocol](https://awesomerea.org/resources/librepods-airpods-protocol-case/index.md): Case study · Implements the proprietary protocol that AirPods use with Apple devices, which the author reports reverse-engineering, so that Android and Linux apps can switch noise-control modes, read ear detection and accurate battery levels, and use conversational awareness, head gestures and hearing-aid settings. The repository documents captured packet formats, opcodes and control commands alongside the Android app and the Linux app. Several features need root on Android or remain experimental.
- [OpenHaystack: tracking tags that use Apple Find My](https://awesomerea.org/resources/openhaystack-find-my-case/index.md): Case study · OpenHaystack uses a reconstructed Apple Find My protocol to build personal Bluetooth tracking tags and a Mac app that queries their location reports.
- [PC-BASIC: a GW-BASIC-family interpreter](https://awesomerea.org/resources/pcbasic-interpreter-case/index.md): Case study · A cross-platform interpreter for GW-BASIC, BASICA, PCjr Cartridge BASIC, and Tandy 1000 GWBASIC. Release v2.0.8 is commit 6a3a035b0a1c1029d48bc9284e642b6b4bd64fb5; the shipped program tests/basic/gwbasic/PRINT_USING_scientific/TEST.BAS is compared byte for byte with model/OUTPUT.TXT.
- [ReactOS: a Windows NT-compatible operating system](https://awesomerea.org/resources/reactos-nt-compatible-case/index.md): Case study · Builds an open operating system intended to run applications and drivers written for the Windows NT family. The README focuses compatibility work on Windows Server 2003 and installs onto a FAT16 or FAT32 boot partition.
- [viaduct: a Linux port of NetNewsWire](https://awesomerea.org/resources/viaduct-netnewswire-case/index.md): Case study · A Linux RSS reader in Rust and GTK4 that the README calls a port of NetNewsWire. A local OPML file is the account input; cargo build --release writes target/release/viaduct, and the CI workflow runs cargo test --workspace.
- [zalo-linux: a Linux package of the Zalo desktop app](https://awesomerea.org/resources/zalo-linux-desktop-case/index.md): Case study · Repackages VNG's Zalo desktop app for Linux from the official macOS installer. The harness builds a .deb, and a headless smoke script expects the extracted bundle to open a window.
- [Free-BBN: recreating the PlayStation Broadband Navigator dashboard](https://awesomerea.org/resources/free-bbn-case/index.md): Case study · Free-BBN recreates the PlayStation Broadband Navigator dashboard as a PS2 homebrew application built with ps2sdk and gsKit. Its source implements the execution core, menu rendering, music and sound effects, with partial FMV playback. The author describes the project as a paused proof of concept.
- [Serato Tags: reconstructing Serato DJ GEOB metadata](https://awesomerea.org/resources/serato-tags-case/index.md): Case study · Serato Tags reconstructs the GEOB metadata structures that Serato DJ stores in audio files. Its investigation and field notes cover version data, BPM and gain, beat grids, hot cues, saved loops and waveform overviews, with sample tag dumps and Python inspection scripts.
- [lsdj-decomp: matching Little Sound Dj 9.4.2 reconstruction](https://awesomerea.org/resources/lsdj-9-4-2-decomp-case/index.md): Case study · lsdj-decomp reconstructs Little Sound Dj 9.4.2 using tracked symbol maps, ROM analysis tools and C translations substituted into locally generated RGBDS assembly. The author reports an exact full-image comparison from a user-supplied ROM and 174 C functions matching 12,918 original bytes.
- [Moonlight Windows: reconstructing NVIDIA GameStream for Windows](https://awesomerea.org/resources/moonlight-windows-gamestream-case/index.md): Case study · Moonlight Windows recreates NVIDIA Shield GameStream access on Windows and Windows Phone 8.1 after reverse engineering the Shield streaming software. Its WinRT client discovers compatible PCs, pairs with them and streams games from a host PC.
- [sas7bdat: reconstructing the SAS7BDAT database format](https://awesomerea.org/resources/sas7bdat-format-study-case/index.md): Case study · sas7bdat reconstructs the binary layout of SAS7BDAT database files by examining sample databases for interoperability with R. Its format study covers headers, pages, subheaders, packed data, platform differences and compression, alongside a prototype R reader.
- [Outlook drag and drop: decoding RenPrivateMessages clipboard data](https://awesomerea.org/resources/outlook-dnd-protocol-case/index.md): Case study · The Outlook drag-and-drop investigation decodes the RenPrivateMessages OLE clipboard stream to recover identifiers of the original Outlook message. It records field lengths, MAPI folder and store IDs, message class, subject and entry ID, with a C# WPF example that reads the data.
- [hbkit: reconstructing Synology Hyper Backup archives](https://awesomerea.org/resources/hbkit-hyper-backup-format-case/index.md): Case study · hbkit reconstructs the Synology Hyper Backup .hbk archive format and implements a Python file-recovery tool. Its specification separates layouts established by file reconstruction from those read from HyperBackupExplorer disassembly or inferred from observations. The CLI and terminal interface browse, extract and check archived files against stored MD5 and CRC32 values.
- [Murmelbahn: decoding GraviTrax course files](https://awesomerea.org/resources/murmelbahn-case/index.md): Case study · Murmelbahn decodes GraviTrax course data obtained through the Ravensburger app API and presents course details and bills of materials in a web app. The author used ImHex to work out changing file formats and includes a schema and parser for recent course versions.
- [LSDisJ: disassembling Little Sound DJ](https://awesomerea.org/resources/lsdisj-case/index.md): Case study · LSDisJ disassembles Little Sound DJ Game Boy ROM versions 9.2.L and 8.5.1 from user-provided copies. It generates assembly using rgbds, keeps symbol and annotation files, and includes Python helpers for comparing ROM bytes and counting unresolved calls.
- [HoMM3 Horn of the Abyss: reconstructing map-editor classes](https://awesomerea.org/resources/h3maped-decomp-case/index.md): Case study · The h3maped project reconstructs C++ classes from the HoMM3 Horn of the Abyss map editor's executable. It uses IDA disassembly, RTTI, MFC message maps and dialog resources to recover class relationships, handlers and fields, recording original addresses alongside the reconstructed files.
- [Wii Motion Plus Demo Video Player: Wii decompilation](https://awesomerea.org/resources/wii-motion-plus-demo-video-player-case/index.md): Case study · Wii Motion Plus Demo Video Player reconstructs a Wii video-player program found in several games. The repository contains C++ source, symbols and split configuration, with instructions for building from a user's game copy and inspecting object differences with objdiff.
- [Cordial: hosting the Roblox Android client on Linux](https://awesomerea.org/resources/cordial-roblox-linux-case/index.md): Case study · Cordial hosts the unmodified Roblox Android client on Linux through a ported bionic linker, ELF import resolution and substitutes for Android JNI and framework calls. Its Rust and C++ runtime supports x86-64 and aarch64 builds, with Wayland as the primary display backend.
- [Little Sound Dj: matching Game Boy disassembly and C recovery](https://awesomerea.org/resources/lsdj-9-4-0-decomp-case/index.md): Case study · The LSDj project reconstructs Little Sound Dj 9.4.0 with symbol maps, matching C functions and an RGBDS assembly tree generated from the user's ROM. Its tools trace reachable code, recover code/data boundaries and compare rebuilt bytes; documentation covers the music data model, save format and link-cable synchronization.
- [VitalWear: recreating Vital Bracelet BE on Wear OS](https://awesomerea.org/resources/vitalwear-case/index.md): Case study · VitalWear recreates Bandai Vital Bracelet BE gameplay as a Wear OS watch app with a phone companion. It loads user-supplied 1.0.B firmware and DIM or BE Memory card images, validates cards against a physical bracelet, and implements character training, battles and adventures.
- [Moonglow Toolset: rebuilding the Aurora module editor](https://awesomerea.org/resources/moonglow-toolset-case/index.md): Case study · Moonglow Toolset reimplements the Aurora module editor for Neverwinter Nights: Enhanced Edition in Rust, egui and wgpu. It reads game data from a local installation and edits areas, blueprints, scripts and modules; its authors compare output against Aurora and the game and publish findings on GFF, 2DA and editor behavior.
- [cpr2rpp: reconstructing the Cubase 12 project format](https://awesomerea.org/resources/cpr2rpp-case/index.md): Case study · cpr2rpp documents the empirically recovered Cubase 12 CPR project format and converts selected project data into REAPER RPP files. Its parser extracts audio-event timing and sources, mixer faders, pan, EQ bands, sends and pool clip metadata. Format notes describe the named-record grammar and compact arrangement-event encoding.
- [wii-news-channel: a matching Wii News Channel decompilation](https://awesomerea.org/resources/wii-news-channel-case/index.md): Case study · wii-news-channel reconstructs the USA v7 Wii News Channel as C/C++ source intended to build a byte-identical main.dol. Its symbol and split maps support function-level comparison with objdiff, while a separate branch adapts the channel to a native PC runtime.
- [TraktorMappingFileFormat: Traktor Pro controller-mapping format](https://awesomerea.org/resources/traktor-mapping-file-format-case/index.md): Case study · TraktorMappingFileFormat documents the controller-mapping data stored in Traktor Pro 2.x TSI files. A 010 Editor script extracts the encoded mapping payload, while a binary template describes big-endian record headers, devices, MIDI definitions, ports and mapping settings. Sample TSI files accompany the tools.
- [AvatarEditorRecomp: a Kinect-preview Avatar Editor PC port](https://awesomerea.org/resources/avatar-editor-recomp-case/index.md): Case study · AvatarEditorRecomp statically recompiles the Fall 2010 Kinect-preview Xbox 360 Avatar Editor into a PC application with ReXGlue. Its code provides a native D3D12 renderer, avatar asset handling, item-catalog search and keyboard or XInput control. The build uses a user-provided editor executable and matching dashboard assets.
- [perception-pnrf: PNRF measurement format reconstruction](https://awesomerea.org/resources/perception-pnrf-case/index.md): Case study · perception-pnrf documents the reverse-engineered PNRF measurement file format used by HBK Perception and provides Python and C# parsers. Its specification covers the NSS container, waveform and event channels, calibration and metadata. A command-line dump tool displays recording structure and sample previews.
- [metars_cgi: reconstructing the NCAR Java METAR viewer server](https://awesomerea.org/resources/metars-cgi-case/index.md): Case study · metars_cgi reconstructs the data server used by NCAR's Java METAR viewer. Its PHP scripts answer the viewer applet's requests from a MySQL or MariaDB METAR database, while a Python script fetches updates from NOAA. The author uses decompiled applet binaries to guide the reconstruction and notes unresolved handling of cloud-layer chunks.
- [Xbox Demos Decompilation: a functional reconstruction of the Xbox demo launcher](https://awesomerea.org/resources/xbox-demos-decompilation-case/index.md): Case study · Xbox Demos Decompilation reconstructs the Xbox application that launches videos and demos from the North American BLiNX: The Time Sweeper disc. Its nonmatching source aims to reproduce the launcher's behavior and documents Bink video support, an unused animated background and unfinished alternative graphics code.
- [ag-psd: reconstructing PSD document reading and writing](https://awesomerea.org/resources/ag-psd-case/index.md): Case study · ag-psd reconstructs reading and writing of Photoshop PSD documents in JavaScript and TypeScript using format references and trial and error. It handles document structure, layer and composite image data, masks and selected metadata, with examples for Node.js and browsers.
- [locus-poi-db: LoMaps POI database format](https://awesomerea.org/resources/locus-poi-db-case/index.md): Case study · locus-poi-db investigates the POI database format used with LocusMaps LoMaps. Its project page lists a format document and SQL schema.
- [JADX-AI-MCP](https://awesomerea.org/resources/jadx-ai-mcp/index.md): Integration · JADX plugin paired with a Python MCP server to inspect decompiled Android classes, resources, cross-references and debugger context.
- [apktool-mcp-server](https://awesomerea.org/resources/apktool-mcp-server/index.md): Integration · Python MCP server that drives a local Apktool install so agents can decode APKs; list, read, search and edit smali and resource files; read AndroidManifest.xml and apktool.yml; and rebuild the project.
- [frida-mcp (yfe404)](https://awesomerea.org/resources/frida-mcp-yfe404/index.md): Integration · Frida MCP server with persistent instrumentation sessions, runtime inspection and Android static-to-dynamic navigation.
- [Super Trouper](https://awesomerea.org/resources/super-trouper/index.md): Integration · Single-binary Frida MCP server for discovering devices, managing process sessions and loading instrumentation scripts.

## Native binaries (26)

- [Ghidra](https://awesomerea.org/resources/ghidra/index.md): Tool · Open-source analysis suite for disassembly, decompilation, graphs and Java/Python automation across executable formats.
- [radare2](https://awesomerea.org/resources/radare2/index.md): Tool · Scriptable command-line framework for inspecting, disassembling, debugging and modifying binaries across many architectures.
- [Cutter](https://awesomerea.org/resources/cutter/index.md): Tool · Rizin-powered graphical reverse-engineering workspace with extensible views and Ghidra decompiler integration.
- [Qiling](https://awesomerea.org/resources/qiling/index.md): Tool · Python emulation framework that adds OS, filesystem and API behavior around CPU emulation for instrumented binary analysis.
- [Unicorn Engine](https://awesomerea.org/resources/unicorn/index.md): Tool · Multi-architecture CPU emulator for executing selected instruction ranges with register, memory and hook control.
- [angr](https://awesomerea.org/resources/angr/index.md): Tool · Python binary-analysis framework combining control-flow recovery, symbolic execution, data-flow analysis and decompilation.
- [LIEF](https://awesomerea.org/resources/lief/index.md): Tool · Library for structured parsing and modification of executable formats including ELF, PE and Mach-O.
- [Capstone](https://awesomerea.org/resources/capstone/index.md): Tool · Disassembly library with architecture-neutral APIs and instruction details for custom binary-analysis pipelines.
- [ImHex](https://awesomerea.org/resources/imhex/index.md): Tool · Hex editor with a binary-pattern language, structured data inspection and visual tools for understanding file formats.
- [x64dbg](https://awesomerea.org/resources/x64dbg/index.md): Tool · Windows binary debugger with disassembly, memory views and plugins for analyzing programs without source code.
- [GDB](https://awesomerea.org/resources/gdb/index.md): Tool · Native and remote debugger for controlling execution and inspecting live or crashed program state.
- [rr](https://awesomerea.org/resources/rr/index.md): Tool · Records process execution and replays it under GDB, enabling repeatable inspection and reverse execution.
- [Diaphora](https://awesomerea.org/resources/diaphora/index.md): Tool · IDA-based binary diffing that matches functions and transfers names, comments and types between analyzed versions.
- [BinDiff](https://awesomerea.org/resources/bindiff/index.md): Tool · Compares disassembled binaries to find matching functions and changed code across versions.
- [Detect It Easy](https://awesomerea.org/resources/detect-it-easy/index.md): Tool · Format-aware file identification and static inspection using parsers, signatures and programmable heuristics.
- [r2frida](https://awesomerea.org/resources/r2frida/index.md): Tool · Use radare2 commands and Frida instrumentation together to inspect local or remote process memory, symbols, classes, and runtime calls on desktop and mobile targets.
- [Kaitai Struct](https://awesomerea.org/resources/kaitai-struct/index.md): Tool · Turn documented binary layouts into reusable parsers for files and network packets. A .ksy specification can be inspected with visualizers and compiled to multiple languages, helping preserve reverse-engineered format knowledge in interoperable implementations.
- [GoReSym](https://awesomerea.org/resources/goresym/index.md): Tool · Recover Go build metadata, function names and address ranges, source file and line tables, embedded types and strings from Go binaries, including stripped and some malformed unpacked samples. JSON output can be imported into IDA Pro with the included IDAPython script.
- [rev.ng](https://awesomerea.org/resources/revng/index.md): Tool · Open-source decompilation pipeline that lifts x86-64, AArch64, i386, ARM and MIPS code with QEMU, runs LLVM-based analyses and emits C designed to be valid and recompilable. Data layout analysis infers structures from pointer use; an editable YAML model and Python or TypeScript wrappers support automation. Its VSCode-based UI is a separate closed-beta product, with commercial plans announced.
- [Rizin](https://awesomerea.org/resources/rizin/index.md): Tool · Command-line reverse-engineering framework that began as a fork of radare2. The rizin shell analyzes and disassembles binaries, debugs programs and works as a scriptable hex editor, while rz-* tools cover binary-format information, assembly, diffing, hashing, pattern search and FLIRT signatures. The README lists dozens of architectures, bytecode formats and file formats from ELF, PE and Mach-O to dyld caches and BIOS/UEFI images; rzpipe scripts it from Python, Rust, Go and other languages. Cutter is the separate GUI built on it.
- [Decompiler Explorer](https://awesomerea.org/resources/decompiler-explorer/index.md): Tool · Web service at dogbolt.org that runs one small uploaded executable through many decompilers and shows their C-like output side by side, described as Compiler Explorer in reverse. The pinned source has runners for angr, Binary Ninja, Boomerang, dewolf, Ghidra, Hex-Rays, Kuna, REC Studio, Reko, Relyze, RetDec, rev.ng and Snowman, which helps compare how different decompilers render the same code.
- [pwndbg](https://awesomerea.org/resources/pwndbg/index.md): Tool · Python plug-in that loads into GDB, or runs as a REPL around LLDB, to make live program state easier to inspect. Each stop prints a context of registers, stack, call frames and annotated disassembly with recursively dereferenced pointers; commands cover memory maps, search, telescoping, heap allocators and Go values, with Capstone/Unicorn emulation and decompiler integration for IDA, Binary Ninja, Ghidra and angr-management. The README lists Linux ELF, macOS Mach-O, QEMU user/system and embedded Cortex-M or RISC-V/32 debugging.
- [DynamoRIO](https://awesomerea.org/resources/dynamorio/index.md): Tool · Runtime code manipulation system for building dynamic tools that observe or transform any part of an unmodified program while it runs. Its API and IA-32/AMD64/ARM/AArch64 instruction manipulation library allow arbitrary changes to application instructions, not only inserted callouts. The release package bundles tools including drcov for code coverage, drltrace for library-call tracing, drstrace for Windows system calls, drmemtrace instruction and memory traces and the drdisas disassembler. It is a framework for building instrumentation tools, distinct from Frida's scripting of live processes.
- [Decompyle++ (pycdc)](https://awesomerea.org/resources/pycdc/index.md): Tool · C++ disassembler and decompiler for compiled Python bytecode that aims to support bytecode from any Python version. pycdas prints the disassembly of a .pyc file, and pycdc prints reconstructed Python source to stdout with errors on stderr; both also accept raw marshalled code objects when the Python version is given on the command line. The source carries opcode tables for Python 1.0 through 3.13.
- [cwe_checker](https://awesomerea.org/resources/cwe-checker/index.md): Tool · Static analyzer from Fraunhofer FKIE that searches binary executables, mainly Linux and Unix ELF files, for code paths matching Common Weakness Enumeration bug classes such as buffer overflows, use-after-free and double free, NULL pointer dereferences, format strings and integer overflows. Ghidra disassembles the binary into a common intermediate representation on which its checks run, from simple heuristics to abstract-interpretation data-flow analysis, so it covers the CPU architectures Ghidra supports, including x86, ARM, MIPS and PowerPC. Warnings are printed as text or JSON, and a bundled Ghidra script annotates them in the disassembly for manual review.
- [FLARE-VM](https://awesomerea.org/resources/flare-vm/index.md): Tool · Mandiant FLARE installer that sets up and maintains a Windows virtual machine for reverse engineering and malware analysis. Its PowerShell script uses Boxstarter and Chocolatey to install packages from the separate VM-Packages feed and the Chocolatey community feed, chosen in a GUI or a custom config.xml that also sets environment paths, the taskbar layout and post-install registry, service and path settings. The reviewed default configuration lists 137 packages, among them Ghidra, IDA Free, x64dbg, dnSpyEx, capa, FLOSS, PE-sieve, FakeNet-NG and Wireshark; scripts in its virtualbox folder build, snapshot and export FLARE-VM and REMnux VMs in VirtualBox.