| Anti-debugging ptrace and timing self-checks |
Kernel-level syscall interception and instruction-counter patching |
APC-queueing Early-Bird NtQueueApcThreadEx special-user-APC code-injection |
KeInsertQueueApc kernel-trace and suspended-thread alertable-state audit |
Call-stack-spoofing synthetic-frame UWOP_SET_FPREG unwind-code abuse |
PE .pdata UNWIND_INFO frame-offset validation against real call-sites |
Compiled-C-20 <format> std::make_format_args type-erased descriptor bit-packing |
64-bit packed-type-id-array extraction or custom formatter<T>::parse vtable |
Compiled-C-20 std::ranges lazy-adaptor pipeline fusion |
Nested template-adaptor struct-layout flattening to single-loop decompiler AST |
Compiled-C-20 std::variant visitation jump-table double-dispatch matrix |
2D function-pointer array-indexing lifting to std::visit type-switch AST |
Compiled-C-23 std::expected monadic and_then/transform branch-inlining |
Union-storage has-value-bool offset-pattern lifting to monadic-chain AST |
| Compiled-C-23 std::mdspan layout-stride index linearization |
Dot-product extent-stride array-multiplication lifting to multi-index subscript AST |
Compiled-Go sync.OnceValue closure-capture state struct |
Atomic done-uint32 and captured-result-slot offset-pattern recognition |
Compiled-Go 1.22-plus- runtime.pcHeader inlined-call-tree pctab delta-varint |
gopclntab funcdata inline-tree table-unrolling and parent-PC frame reconstruction |
Compiled-Go 1.23 iter.Seq range-over-func coroutine-yield closure-trampoline |
Yield-boolean return-check loop-unrolling and state-struct decompilation |
| Compiled-Go 1.23 unique.Make weak-pointer interning |
Concurrent-hash-trie abi.Type lookup-call pattern-recognition in decompiler |
Compiled-Haskell GHC RaiseAsync stack-unwinding loop |
Update-frame and catch-frame info-pointer walk in runtime-system stack-chunk |
Compiled-Rust core::fmt::Arguments static-piece-slice pointer-interleaving |
Format-string piece-slice and ArgumentV1 formatter-fn array pairing in AST |
Compiled-Rust core::ops::Coroutine state-machine discriminant-table jump |
Pin-mut-self offset-0 tag-switch reconstruction to yield-point CFG |
Compiled-Rust panic_bounds_check slice-index branch elimination |
Dominator-tree bounds-branch folding to high-level slice-indexing syntax |
| Compiled-Rust async-trait boxed-Future pin-projection vtable-shim |
Heap-allocated Pin<Box<dyn Future>> poll-fn wrapper-stripping in decompiler |
| Compiled-Rust Error::provide type-id demand dispatch |
TypeId-comparison chain in Provider trait-method lifting to context-type table |
Compiled-Swift @Observable ObservationRegistrar _$observationRegistrar access-track |
KeyPath-tracking access/withMutation wrapper-call stripping in AST |
Compiled-Swift @Sendable actor swift_task_switch hop |
Default-actor-executor queue-pointer tracking and async-continuation CFG link |
| Compiled-Swift 6 @isolated(any) executor extraction |
Thick-function context-tuple actor-pointer extraction at offset-plus-8 in AST |
Compiled-Swift async-function @_silgen_name swift_task_alloc continuation frame |
AsyncContext-chain frame-pointer walking and resume-partial-function graph |
| Complex C-family virtual method table hierarchy |
Constructor cross-reference analysis and vtable struct recovery |
| Control-flow-guard (CFG) indirect-call bitmap-check instrumentation |
GuardCFCheckFunctionPointer xrefs analysis and valid-target table dump |
Coroutine-state-machine C-20 co_await promise-frame heap-allocation layout |
Resume-destroy function-pointer pair at frame-offset-0 and state-index switch |
| CPS-transformed continuation-passing-style compiled Scheme/SML closure-chain |
Tail-call continuation-argument data-flow linking and direct-style AST lift |
| Delete-pending file-section Process-Ghosting image execution |
NtCreateSection before SetInformationFile delete-disposition kernel trace |
| Direct-system-call (Hell-Gate/Halos-Gate) SSN resolution |
PEB export-address-table sorting trace and syscall opcode scanning |
| Division-by-constant magic-multiplier compiler optimization idiom |
Hacker-Delight multiplicative-inverse back-calculation to original divisor |
| Dynamically resolved Windows API import table |
API hash dictionary precomputation and memory-dump import fixing |
Early-Cascade-Injection g_pfnSE_DllLoaded Shim-Engine callback pointer hijack |
Cross-process .mrdata ntdll shim-pointer decryption and encode-pointer |
| Encrypted configuration strings in malware memory |
Emulated stack-string decryption and cross-reference scripting |
| Exception-handler-based control-flow obfuscation (VEH/SEH) |
Exception-directory unwind-table parsing and KiUserExceptionDispatcher hook |
| Ghostly-Hollowing delete-pending section EntryPoint hijack |
Image-section file-object DeletePending flag-audit and thread-context RIP check |
Hardware-breakpoint-less PAGE_GUARD exception-chain packer single-step tracer |
STATUS_GUARD_PAGE_VIOLATION VEH-handler address-table logging and NOP-patch |
Hardware-breakpoint-spoofing NtGetContextThread debug-register clearing |
Syscall-stub inline-patch detection and kernel-mode ETHREAD trap-frame check |
| Heaven-Gate 32-bit-to-64-bit WoW64 far-jump segment switch |
0x33 code-segment far-call disassembly switching and x64 context tracing |
| Inlined C-template STL-vector/map container memory-layout operations |
Pointer-triplet size-capacity stride pattern matching in decompiler AST |
| Mixed-boolean-arithmetic obfuscated expression trees |
Term-rewriting synthesis and SMT solver algebraic simplification |
| Mockingjay RWX-section vulnerable-signed-DLL self-injection without VirtualProtect |
PE-section-header IMAGE_SCN_MEM_EXECUTE combined with WRITE audit |
Module-overloading decoy-DLL NtMapViewOfSection RWX-to-RX permission-flip |
ETW MiMapViewOfImageSection backing-file vs execution-address cross-check |
| Module-stomping / DLL-hollowing in-memory code-section replacement |
VAD-tree section-object file-backing comparison against on-disk PE .text |
| NaN-boxing IEEE-754 tagged-pointer representation in VM |
Upper-16-bit payload-tag bitmask-shift pattern recognition in decompiler |
| Nanomite-protected self-debugging child process binary |
Debug-event exception table extraction and int3 branch restoration |
| Obfuscated .NET Babel-Obfuscator virtualized-MSIL switch-opcode method-dispatcher |
DynamicMethod IL-byte-array reflection-dump and stack-type-state simulation |
| Obfuscated .NET ConfuserEx compressor-stub LZMA-decrypted module-cctor |
GCHandle.Alloc pinned-byte-array dump at Assembly.Load JIT-hook breakpoint |
| Obfuscated .NET EazFuscator local-variable encryption stream |
Method-body AES-CBC resource-stream hook and IL-generator dynamic-method dump |
| Obfuscated .NET KoiVM custom-register stack-machine |
VM-export-id table-reconstruction and CIL-instruction devirtualizer synthesis |
| Obfuscated .NET MindLated/NetShield proxy-delegate Calli-instruction table |
Module-cctor RuntimeMethodHandle resolution-loop emulation and IL patch |
| Obfuscated Android multi-dex encrypted classloader |
ART OpenCommon memory-hook dumping and DexFile header repair |
Obfuscated Android-360-Jiagu .init_proc compressed DEX-loader |
art::DexFile::OpenMemory libc-mmap breakpoint and OatHeader magic-repair |
Obfuscated Android-Bangcle/SecNeo libsecexe.so /proc/self/maps ptrace-anti-debug |
Clone-thread PTRACE_ATTACH self-trace bypass and decrypted-DEX mmap hook |
Obfuscated Android-DexGuard native-bridge JNI_OnLoad string-decryptor register-array |
Unicorn-engine ARM64 emulation of .init_array and RegisterNatives dump |
| Obfuscated Android-Ijiami libexec.so code-item unpacking |
Dalvik DexFile struct-pointer array-hook after JNI_OnLoad and method-body repair |
Obfuscated Android-Tencent-Legu libshella.so bytecode substitution |
Dalvik-opcode lookup-table extraction from native .rodata and Dex-patching |
Obfuscated Android-Virbox libvj.so custom-linker SO-header section-stripping |
Dynamic soinfo list-walking in linker64 and reconstructed-ELF dumping |
Obfuscated C-binary Movfuscator MOV-only Turing-complete loop |
Memory-mapped ALU-lookup-table recognition and instruction-idiom control-flow lift |
| Obfuscated CodeVirtualizer Metamorphic-x86 handler-instruction substitution |
Dynamic symbolic-execution trace-normalization and algebraic dead-store elimination |
| Obfuscated control-flow flattened function dispatcher |
Symbolic execution and dominance-tree dispatcher deobfuscation |
| Obfuscated Denuvo-style x64-virtualizer CPUID/RDTSC entropy-seeded MBA-handlers |
Single-step hypervisor trace-slicing with constant-seeded taint-simplification |
| Obfuscated ELF rodata XOR-encrypted string array |
Cross-reference loop emulation with Unicorn Engine and string patching |
| Obfuscated FinSpy/FinFisher VM-protected x86-branch-table indirect jump |
Concrete-execution trace-recording with Triton and branch-condition synthesis |
Obfuscated Go-binary burrow/gobfuscate reflect-method-hash runtime-lookup |
Type-descriptor uncommonType method-offset-table walk and symbol restore |
Obfuscated Go-binary garble XOR-split literal strings |
pclntab-header magic-recovery and stack-slice runtime-decryption AST folding |
| Obfuscated Go-garble-tiny stripped-line-table function recovery |
Moduledata pclntable function-entry boundary-carving and call-graph rebuild |
| Obfuscated JScrambler polymorphic control-flow flattening |
Babel-AST dead-branch constant-folding and string-array rotation-unshift inline |
Obfuscated LLVM-Hikari FunctionWrapper indirect-call thunk-table indirection |
Global-pointer-array constant-propagation and direct-call target inlining |
| Obfuscated LLVM-IR pass control-flow bogus branches |
LLVM-IR optimization pass deobfuscation and Z3 path-feasibility pruning |
| Obfuscated macOS-Swift relative protocol-witness-table pointer |
__swift5_proto 32-bit relative-offset resolving to nominal-type-descriptor |
| Obfuscated OLLVM prime-polynomial opaque predicate |
Modulo-arithmetic invariant-synthesis and Z3-solver dead-branch elimination |
| Obfuscated Python frozen-bytecode executable bundle |
Marshal code-object extraction and opcode-remap table inversion |
Obfuscated Rust-binary goldberg procedural-macro string-encryptor state-machine |
Stack-array loop-unrolling and constant-evaluation pass in Ghidra/BinaryNinja |
| Obfuscated Themida/WinLicense CISC-to-RISC virtual-machine rolling-key handler |
Symbolic taint-simplification of VM-context struct and handler-graph merge |
Obfuscated Tigress EncodeArithmetic MBA identities |
256-entry truth-table synthesis and PolyBoRi Groebner-basis reduction |
| Obfuscated VMProtect multi-handler rolling-decryption bytecode pointer |
Symbolic taint-slicing of handler-table updates and LLVM-IR devirtualization |
Obfuscated Windows-malware Ekko ROP-sleep timer |
SystemFunction032 RC4-key-struct extraction from queued-APC context-array |
| Obfuscated Windows-malware Foliage APC-sleep encryption |
NtContinue context-ROP gadget-chain extraction from worker-thread APC queue |
| Obscured Java or .NET intermediate bytecode |
Metadata token deobfuscation and bytecode-to-AST decompilation |
| Opaque predicates injecting dead-code branches |
Abstract interpretation value-range analysis and invariant pruning |
Phantom-DLL-hollowing transacted-NTFS NtCreateTransaction section-mapping |
ObpCreateHandle file-object transaction-context check and memory-section diff |
| Pointer-swizzling relative-offset 32-bit-in-64-bit memory-mapped database file |
Base-address addition-idiom recognition in decompiler and custom-pointer typing |
| Polymorphic decryption stub in file-infecting virus |
CPU emulator sandbox single-stepping until code-execution cross-over |
Pool-Party TP_TIMER worker-factory WindowStartLinks red-black-tree insertion |
Remote-process _TP_DIRECT / _TP_TIMER queue-node inspection and trace |
| Position-independent shellcode with getpc stub |
Emulated shellcode harness execution and API-call hooking |
| Position-independent switch-case relative-offset jump table |
Base-register plus scaled-byte/dword-offset slicing to case-target basic blocks |
Process-Herpaderping file-content modification after NtCreateSection mapping |
IRP_MJ_CLEANUP vs section-creation file-hash discrepancy kernel-callback trace |
| Register-allocated bitfield-packing C-compiler mask-and-shift idioms |
Decompiler bit-range data-flow coalescing and struct-bitfield declaration |
| Return-address-spoofing and call-stack hiding thunks |
Shadow-stack binary instrumentation and unwind-info table analysis |
| Runtime-packed malware binary payload |
Dynamic breakpoint unpacking at original entry point |
| Self-modifying code rewriting instructions at runtime |
Dynamic binary instrumentation write-watchpoint page-guard tracing |
| SIMD-vectorized string-search hash loop in binary |
Intrinsic-instruction lane-permutation lifting to scalar-equivalent C loop |
Stack-moonwalking synthetic-unwind UWOP_ALLOC_LARGE ROP-gadget frame-spoofing |
Real-stack-pointer vs .pdata virtual-unwind frame-size consistency check |
Stack-spoofing RtlUserFiberStart fiber-context switch implant evasion |
TEB Tib.FiberData pointer-inspection and hidden-stack-allocation VAD scan |
| Stack-string byte-by-byte MOV-immediate construction in malware |
Static basic-block constant-propagation folding and ASCII-run extraction |
| Statically linked firmware C-library functions |
Function-prologue byte-trie FLIRT/FID signature generation and matching |
| Stomped-Module KnownDlls Copy-on-Write page discrepancy |
Working-set SharedOriginal bit-zero inspection on executable image-backed pages |
| Stripped native executable without symbol table |
Recursive-descent disassembly and library function signature matching |
| Stripped statically linked Go binary |
Compiler metadata section parsing and type-descriptor recovery |
Syscall-stomping clean-ntdll hollow-function delayed-execution gadget |
Export-function prologue-breakpoint coupled with return-address stack-walk |
| Tail-call-optimized mutual-recursion state-machine in stripped C-binary |
Jump-target SCC strongly-connected-component condensation to single loop |
Thread-pool wait-packet TpAllocWait indirect-ntdll callback-execution evasion |
Worker-factory _TP_WAIT queue-inspection and NtAssociateWaitCompletionPacket |
| Threadless-injection remote-function-hook via export-table-offset overwrite |
NtWriteVirtualMemory on remote .data-pointer chain without CreateThread |
| Tigress-virtualized C-function with split-opaque-predicate handlers |
Dynamic taint-guided LLVM-IR lifting and de-virtualization pass synthesis |
| Timer-queue ROP sleep-obfuscation in malware |
CreateTimerQueueTimer NtContinue context-struct capture before memory crypt |
Transacted-Hollowing / Process-Doppelgänging NtCreateProcessEx from rollback |
KTM transaction-handle state inspection before NtRollbackTransaction call |
Undocumented Ableton-Live .als MIDI-clip automation-envelope float-hex |
Decompressed XML <ArrangerAutomation> point-event parsing and IEEE-hex decode |
Undocumented Adobe-PSD .psb 16-bit layer-channel block |
8BIM-tagged Additional-Layer-Information parsing and horizontal-delta predictor |
Undocumented Affinity-Photo .afphoto persona-document fat-block serialization |
Magic 0x004BFF41 block-allocation-table parsing and zlib-tile stitching |
Undocumented After-Effects .aep RIFX expression-tree |
Big-endian LIST/Utf8 chunk-hierarchy parsing and ExtendScript AST extract |
| Undocumented Apache-Parquet Dremel repetition-and-definition-level RLE-bit-packing |
Page-header Thrift-compact-protocol parsing and hybrid bit-packed/RLE decode |
Undocumented Apple-CoreML .mlmodelc Espresso neural-network model.espresso.net |
PBKDF2/AES weight-blob model.espresso.weights unpacking and layer-JSON map |
| Undocumented Apple-ProRes 422/4444 frame-header slice-quantization matrix |
icpf-atom big-endian header-parsing and VLC-run-level DCT coefficient trace |
Undocumented ArchiCAD .pln binary object-database stream |
Hierarchical chunk-directory offset-walk and GDL-parameter bytecode dump |
Undocumented Autodesk-Revit .rvt OLE2-compound-file compact-stream schema |
Structured-Storage stream-directory unpacking and UTF-16 element-class ID map |
| Undocumented automotive-ECU XCP calibration memory map |
XCP-on-CAN SHORT_UPLOAD address-polling and lookup-table axis detection |
| Undocumented Bitwig-Studio .bwproject modulation-matrix chunk |
End-of-central-directory offset-jump and custom-varint device-slot ID mapping |
Undocumented Blender .blend SDNA type-directory |
DNA1-block struct-field-offset dictionary parsing and pointer-size remap |
| Undocumented Bluetooth host-controller-interface vendor opcodes |
HCI snoop log correlation with baseband firmware dispatch tables |
Undocumented Cinema-4D .Redshift .rs proxy-scene-mesh attribute-chunk |
Block-header tag-length-value stream-walking and half-float UV-array decode |
Undocumented Clip-Studio-Paint .clip SQLite-embedded-chunk layer-canvas |
CSFCHUNK header-offset carving, embedded-SQLite extraction, and RLE-tile unpack |
| Undocumented closed-source database storage engine |
Page-layout hex diffing with system-call I/O trace correlation |
| Undocumented CNC binary G-code post-processor format |
Single-axis linear-move step-increment diffing and floating-point IEEE scan |
| Undocumented CNC Fanuc-FOCAS TCP-port-8193 protocol frame |
FlibHndl handshake-packet capture and PMC-address read/write opcode mapping |
| Undocumented CoDeSys-V3 PLC-runtime LZS-protocol block-transfer |
3S-header channel-ID session-handshake capture and online-change symbol dump |
Undocumented Cubase .cpr RIFF track-archive |
Big-endian RIFF-chunk tree-unwrapping and VST-automation float-curve extraction |
Undocumented Dassault-CATIA .CATPart CGM-container topological-B-rep stream |
Compound-document RootCGM stream-extraction and tag-opcode geometry trace |
Undocumented DaVinci-Resolve .drp project-archive timeline-blob serialization |
Zlib-compressed hex-blob decoding in XML fields and node-graph reconstruction |
Undocumented Epic-Games Easy-Anti-Cheat .eac kernel-heartbeat packet-encryption |
VM-handler dynamic taint-tracing of IRP_MJ_DEVICE_CONTROL input-output buffers |
| Undocumented Final-Cut-Pro .fcpbundle flexolibrary catalog |
CoreData Z_PRIMARYKEY object-graph reconstruction and timeline-clip plist unpack |
| Undocumented fitness-tracker ANT-plus FE-C resistance profile |
8-byte broadcast data-page-0x10/0x33 capture and slope-grade resistance injection |
Undocumented FL-Studio .flp event-id byte-word-dword-text TLV-stream |
FLhd/FLdt chunk-header parsing and varint-length parameter-event decoding |
| Undocumented flight-simulator UDP telemetry struct |
Floating-point IEEE-754 byte-alignment sliding-window correlation with UI |
Undocumented Garmin .fit Flexible-and-Interoperable-Data-Transfer definition-message |
Local-message-type header-bitmask parsing and developer-field scale/offset map |
| Undocumented glibc link_map pointer-mangling XOR guard |
PTR_MANGLE fs:0x30 thread-control-block random-canary extraction |
| Undocumented industrial-scale RS-232 weight-frame BCC checksum |
Frame-delimiter capture across calibrated-weight steps and XOR-checksum solve |
| Undocumented inter-process communication RPC schema |
Interface definition language reconstruction from marshaling stubs |
| Undocumented iOS Objective-C block-literal captured-variable layout |
__NSConcreteStackBlock descriptor-struct parsing and invoke-fptr recovery |
| Undocumented legacy DOS real-mode overlay manager |
Segment-relocation table parsing and interrupt-vector call tracing |
| Undocumented legacy Visual-Basic-6 P-code native executable |
VBHeader structure parsing and WKTVB P-code opcode table disassembly |
| Undocumented Linux generic-netlink policy attribute table |
nla_policy array static-binary extraction and netlink-family ID mapping |
| Undocumented Linux-auditd netlink rule-filter bytecode expression |
Kernel audit_filter_rules comparator-tree walk and field-bitmask dump |
Undocumented Linux-cgroup-v2 cgroup.procs eBPF BPF_PROG_TYPE_CGROUP_SKB attach |
bpf_link kernel-object ID-enumeration and attached-bytecode bpftool dump |
Undocumented Linux-perf perf_event_open ring-buffer perf_event_mmap_page tail |
User-space data_head/data_tail memory-barrier race and AUX-area trace |
| Undocumented Linux-systemd D-Bus private-socket binary marshaling |
busctl monitor eavesdropping and sd-bus vtable signature extraction |
Undocumented Logic-Pro .logicx binary track-automation |
Magic-header 0x2347c0e5 section-table walk and MIDI-event delta-tick decode |
Undocumented macOS neagent XPC configuration dictionary |
NEConfigurationManager Mach-message unarchiving and VPN-plugin IPC trace |
Undocumented macOS syspolicyd notarization-ticket SQLite schema |
/var/db/SystemPolicyConfiguration/ExecPolicy table-dump and CDHash lookup |
Undocumented macOS App-Sandbox .sb compiled bytecode |
Reverse-compilation of binary-sandbox-profile DFA-nodes to TinyScheme rules |
| Undocumented macOS DriverKit user-space RPC dispatch |
IOUserServer Mach-message ID-to-vtable-index table parsing |
| Undocumented macOS EndpointSecurity shared-memory message ring |
libEndpointSecurity client-cache reverse-engineering and event-type map |
| Undocumented macOS KEXT KPI vtable layout |
Mach-O __kmod_init analysis and OSMetaClass constructor hierarchy trace |
| Undocumented mainframe EBCDIC flat-file record layout |
Statistical byte-offset entropy clustering and Cobol copybook inference |
| Undocumented mainframe TN3270 screen-field map |
3270 data-stream attribute-byte sniffing and BMS map-macro reconstruction |
| Undocumented Maya-Binary .mb IFF-FOR4 DAG-node |
8-byte-aligned FOR4/CIMG tag-tree walking and NURBS-knot float-array unpack |
| Undocumented medical-HL7-FHIR binary-CBOR/Turtle custom-extension profile |
StructureDefinition canonical-URL resolution and differential-element diffing |
| Undocumented medical-ultrasound raw RF file format |
Frame-rate header-dimension correlation and Hilbert-envelope image plotting |
| Undocumented Native-Instruments .nicnt container format |
Magic-header 0x2F5C204E offset-table walking and embedded-plist resource carve |
Undocumented Nintendo-Switch .nca XTS-AES-128 section-header key-area |
Header-key-0/1 retail-keyblob unwrap and HierarchicalIntegrity hash-tree check |
| Undocumented Oracle-Database TNS-TTC OALL8 RPC-call marshaling |
Packet-type-0x06 Data-frame function-code-0x03/0x5E cursor-bind parameter diff |
| Undocumented PlayStation-5 Prospero-SELF signed-ELF segment-pager encryption |
Segment-table B-tree hash-block verification and hypervisor-decrypted page dump |
| Undocumented PLC IEC-61131-3 compiled machine-code runtime |
Runtime task-scheduler symbol hooking and cyclic I/O memory mapping |
| Undocumented PostgreSQL binary-COPY base-10000 numeric |
16-bit weight-and-sign header-parsing and base-10000 int16 array decimal conversion |
| Undocumented proprietary 3D graphics shader pipeline |
RenderDoc frame-buffer interception and SPIR-V/DXBC shader disassembly |
| Undocumented proprietary audio DSP filter coefficients |
Impulse-response Dirac-delta injection and FFT transfer-function fit |
| Undocumented proprietary automated-teller-machine CEN/XFS SPI service-provider |
WFPExecute command-code interception and physical-dispenser status-struct map |
| Undocumented proprietary building-elevator CANopen-Lift CiA-417 PDO-mapping |
Object-dictionary index-0x6000 SDO-read scanning and floor-call state trace |
| Undocumented proprietary CAD-file binary B-rep geometry |
Hex-chunk differential saving of primitive shapes and parser tracing |
| Undocumented proprietary e-book DRM-container page-permutation table |
Renderer memory-buffer page-hook capture and PRNG seed inversion |
| Undocumented proprietary network wire protocol |
Packet capture differential analysis and grammar inference |
| Undocumented proprietary point-of-sale magnetic-stripe track-encryption |
MSR-reader USB-HID report hooking and DUKPT key-derivation trace |
| Undocumented proprietary printer-language raster command stream |
Virtual USB-printer port capture and bitmap-band differential decoding |
| Undocumented proprietary railway-signaling Eurobalise-telegram 1023-bit BCH-scrambling |
LFSR-descrambling polynomial inversion and 11-to-10-bit packet-header parse |
| Undocumented proprietary relational-database wire authentication |
Man-in-the-middle proxy socket hooking and challenge-hash trace |
| Undocumented proprietary semiconductor-equipment SECS-II/HSMS TCP-port-5000 stream |
Stream-Function SxFy header-byte decoding and item-format-code tree dump |
| Undocumented proprietary smart-inverter Modbus-SunSpec private-register map |
Model-ID 64xxx block-read scanning and solar-irradiance correlation |
| Undocumented proprietary smart-lock BLE-advertising manufacturer-specific-data 0xFF |
Company-ID prefix-filtering and rolling-counter AES-ECB beacon-payload diff |
| Undocumented proprietary solar-microinverter PLC power-line burst-telemetry |
Zero-crossing coupling-capacitor capture and FSK-packet CRC-16 polynomial |
Undocumented Reaktor .ens DSP-core macro graph |
Compressed-chunk header-carving and audio-port wire-adjacency list recovery |
| Undocumented Reason .rns IFF-CAT cable-routing |
Big-endian PROP-chunk key-value unwrapping and CV/audio-jack ID linking |
| Undocumented SAP-GUI DIAG-protocol dynamic-compression LZH-stream framing |
Dispatcher port-3200 NI-header stripping and screen-atom token-id decoding |
| Undocumented semiconductor-tester STDF binary wafer-map datalog |
Record-type/subtype byte-stream parsing and wafer-coordinate bin plotting |
| Undocumented Siemens-S7comm-Plus TIA-Portal TLS-wrapped object-ID variable-access |
OMS-object hierarchy-id browsing and anti-replay integrity-hash key extraction |
| Undocumented smart-TV UPnP private-SOAP action schema |
SSDP device-description XML scraping and SOAP-body parameter fuzzing |
| Undocumented smart-watch BLE protobuf-over-GATT framing |
HCI-snoop GATT-write reassembly and raw-varint protoc --decode_raw probing |
| Undocumented SolidWorks .sldprt Parasolid-XT stream |
OLE2 Contents-stream Blowfish/XOR-obfuscation stripping and B-rep entity parse |
Undocumented Source-2 .vmdl_c RERL external-reference |
Resource-Introspection-Manifest DATA-block struct-reflection and mesh unpack |
| Undocumented stock-exchange ITCH/OUCH binary order-book stream |
SoupBinTCP frame-length unwrapping and nanosecond-timestamp message-type clustering |
| Undocumented Tajima embroidery-file ternary-stitch jump encoding |
Balanced-ternary X/Y step-increment decoding and color-change stop-code map |
| Undocumented telecom-billing ASN.1 TAP3 call-detail record |
Tag-Length-Value recursive-bitstream tree-dumping and schema-tag inference |
Undocumented Unity Addressables catalog.bin bucket-map |
Base64-or-binary BucketData-offset-array parsing and AssetBundle-CRC stripping |
Undocumented Unreal-Engine-5 .uasset Zen bulk-data |
PackageSummary name-map array-parsing and export-bundle dependency-graph dump |
| Undocumented USB device host-controller driver commands |
USB request block sniffing and descriptors state-machine replay |
| Undocumented VoIP-phone SCCP binary control framing |
Length-prefixed TCP-port-2000 packet diffing across softkey button presses |
| Undocumented Windows COM/DCOM binary interface vtables |
Type-library resource extraction and CoCreateInstance proxy tracing |
| Undocumented Windows RPC-over-HTTP proxy state machine |
ETW Microsoft-Windows-RPC event tracing and MIDL stub decompilation |
Undocumented Windows-kernel ksecdd.sys LSA-mode SpAcceptLsaModeContext table |
Security-package function-table pointer-array dump and SSP-IPC message trace |
| Undocumented Windows-kernel EtwTi threat-intelligence provider enable-mask |
EtwThreatIntProvRegHandle _ETW_SILODRIVERSTATE callback-array walking |
Undocumented Windows-kernel Filter-Manager _FLT_VOLUME callback-node array |
CallbackNodes doubly-linked-list walking and pre/post-operation IRP trace |
Undocumented Windows-kernel Object-Manager _OBJECT_TYPE_INITIALIZER callback |
ObRegisterCallbacks altitude-list walking and procedure-pointer offset dump |
| Undocumented Windows-kernel PatchGuard KPCR context-timer obfuscation |
Hypervisor breakpoint-on-execute DPC-routine trapping and XOR-key recovery |
Undocumented Windows-kernel Wfp-Callout FwpsCalloutRegister classifyFn table |
Netio.sys FeCalloutTable array-indexing and layer-GUID filter enumeration |
| Unidentified cryptographic constant in binary blob |
Entropy scanning and S-box byte-signature pattern matching |
| Unknown Ada-GNAT secondary-stack and tagged-type dispatch |
Tag-pointer vtable-prologue disassembly and __gnat_rcheck exception mapping |
| Unknown Adobe-Flash ActionScript-3 ABC bytecode logic |
SWF tag decompression and AVM2 stack-machine control-flow decompilation |
| Unknown Android JNI native method bindings |
RegisterNatives dynamic hook interception and JNIEnv offset tracing |
| Unknown binary file format structure layout |
Dynamic taint tracking of file-read offsets and field parsing |
| Unknown binary regex DFA state-transition table |
Static array-index transition-graph extraction and Thompson NFA inversion |
| Unknown bundled-JavaScript module dependency graph |
AST scope-hoisting wrapper-function splitting and source-map heuristic match |
| Unknown camera-RAW Bayer lossless-Huffman table |
Dark-frame constant-pixel bitstream analysis and prefix-tree reconstruction |
| Unknown cardiology SCP-ECG rhythm-strip Huffman table |
Section-ID header-pointer parsing and bimodal first-difference decoding |
Unknown Cinema-4D .c4d HyperFile polygon-object vertex-array |
Chunk-ID 0x433444 hierarchy-traversal and 64-bit-float point-tag extraction |
| Unknown Clipper Summer-87 p-code symbol-table segment |
Plankalkül-style symbol-table-header scan and virtual-machine eval-loop trace |
| Unknown compiled C-struct alignment padding layout |
Memory-access offset stride analysis and pahole-style type reconstruction |
| Unknown compiled Crystal-or-D-language garbage-collected slice-fat-pointer ABI |
Register-pair length-pointer calling-convention trace and typeid-vtable scan |
| Unknown compiled Erlang-BEAM bytecode instruction stream |
IFF chunk-header unpacking and BEAM register-machine opcode decompilation |
| Unknown compiled Fortran-gfortran array-descriptor dope-vector stride-and-bounds |
Rank-and-dimension-triplet stack-frame offset analysis and column-major loop lift |
Unknown compiled Haskell-GHC info-table-provenance -finfo-table-map DWARF-less |
Closure-entry negative-offset info-struct parsing and cost-centre-stack walk |
| Unknown compiled Julia-sysimage method-instance dispatch table |
jl_method_instance_t AST-slot deserialization and LLVM-bitcode dumping |
| Unknown compiled Kotlin-Native reference-counting object header |
TLS thread-state frame-slot tracing and type-info vtable slot resolution |
| Unknown compiled Oberon type-descriptor module-anchor pointer |
Module-init prologue global-table walk and type-extension level-array check |
| Unknown compiled OCaml closure-application block header |
Caml-heap block-header tag-byte mask and caml_apply arity-thunk recovery |
| Unknown compiled RTTI class-inheritance hierarchy |
vtable negative-offset pointer resolution and __class_type_info parsing |
| Unknown compiled Rust-binary enum-discriminant niche-optimization layout |
MIR-equivalent assembly pattern matching and DWARF-less tag-offset trace |
| Unknown compiled Swift-binary witness-table protocol-conformance dispatch |
__swift5_proto metadata section parsing and existential-container recovery |
| Unknown compiled Zig error-union payload layout |
Tag-enum branch-table disassembly and stack-return-slot offset analysis |
| Unknown compiled-Mojo/MLIR SIMD-vectorized struct-register-passing ABI |
LLVM-dialect vector-splat and extractelement pattern-lifting to Mojo types |
Unknown compiled-Nim async-macro FutureBase closure-iterator switch |
Heap-env-object :state integer-switch unrolling to linear async/await CFG |
| Unknown compiled-Nim sink-destroy move-flag elision |
Stack-local zero-assignment after-move pattern-matching and destructor-pair fold |
| Unknown compiled-V-language or-Nim C-backend mangled-module-prefix symbol |
Deterministic C-identifier-mangling rule inversion and struct-typedef recovery |
Unknown compiled-Zig MultiArrayList single-allocation slice-offset computation |
Capacity-multiplied field-size byte-offset arithmetic folding to SOA struct |
| Unknown compiled-Zig comptime-specialized generic-monomorphization function-clones |
Identical-CFG structural-hashing and constant-operand parameterization |
| Unknown compiled-Zig PackedStruct bitfield read-modify-write |
Unaligned bitmask-and-shift sequence coalescing to bit-offset struct fields |
| Unknown compiled-Zig struct-of-arrays SOA-pointer-stride loop vectorization |
Multi-base-pointer synchronized-index induction-variable coalescing in decompiler |
| Unknown Delphi DFM event-handler bindings |
RCDATA TForm resource extraction and published-method RTTI table linking |
| Unknown DICOM-RT-Plan multi-leaf-collimator jaw-position block |
Private-tag 300A-group leaf-jaw-position float-array parsing and beam-geometry |
| Unknown Electron ASAR-packaged desktop app logic |
Archive header unpacking and V8 bytecode snapshot decompilation |
| Unknown Flutter/Dart AOT-compiled snapshot object pool |
libapp.so ObjectPool deserialization and Dart-specific register-ABI lifting |
| Unknown game engine asset archive format |
File-open hook logging and decompression buffer memory dumping |
Unknown Godot .pck encrypted GDScript-bytecode .gdc |
32-byte AES-256 key-extraction from binary .data and token-stream decompile |
| Unknown GraphQL closed backend schema introspection |
Field-suggestion error-message probing and AST query reconstruction |
| Unknown Haskell STG-closure info-table layout |
Info-pointer backwards-offset table parsing and thunk-entry graph recovery |
Unknown Houdini .bgeo JSON-binary-JBL token dictionary |
Magic 0x7F424A73 header-parsing and shared-string-table array-index decode |
Unknown Kontakt .nki synthesizer sample-zone monolith |
Zlib-compressed XML-header carving and ncw lossless-audio bit-packing decode |
| Unknown legacy FoxPro compiled p-code overlay |
Tokenized expression-table extraction and symbol-dictionary reconstruction |
| Unknown legacy mainframe COBOL business rules |
Static program slicing and control-flow domain model extraction |
| Unknown legacy PowerBuilder p-code DataWindow syntax |
PBL-library directory-entry carving and DataWindow .srd source extraction |
Unknown legacy-dBASE .ntx B-tree index key-expression |
Header root-page offset parsing and fixed-length ASCII sort-key extraction |
| Unknown LuaJIT precompiled bytecode chunk logic |
Bytecode header version stripping and register-VM AST decompilation |
| Unknown macOS Universal-Binary fat-header architecture-specific slice |
lipo fat_arch structure parsing and cross-ISA function-graph diffing |
| Unknown meteorological NEXRAD radar radial-moment block |
Bzip2 volume-scan block decompression and azimuth-gate reflectivity mapping |
| Unknown Nim-ORC cyclic-reference-counting destructor vtable |
TNimTypev2 header-flag inspection and eqdestroy hook call-graph tracing |
| Unknown Objective-C runtime class hierarchy |
Mach-O metadata segment parsing and selector cross-reference recovery |
| Unknown Odin-compiler implicit context-struct allocator parameter |
Hidden first-or-last register-parameter context-pointer propagation analysis |
| Unknown proprietary compression-algorithm sliding-window dictionary |
Entropy-block boundary detection and bitstream-reader dynamic tainting |
| Unknown proprietary Daw-project Ableton/FL-Studio compressed-chunk arrangement |
Gzip/Zlib container-stream unpacking and TLV-tag parameter-automation diff |
| Unknown proprietary lighting-console MA-Lighting/ETC-Eos showfile compressed-XML |
Gzip-header stream-carving and DMX-universe fixture-patch table reconstruction |
Unknown proprietary ophthalmology-OCT Carl-Zeiss/Heidelberg .fda/.e2e B-scan |
Chunk-directory offset-table parsing and 16-bit log-intensity Zlib-unpack |
| Unknown proprietary video codec bitstream syntax |
Reference decoder dynamic tracing and macroblock entropy mapping |
| Unknown Protocol-Buffers compiled schema descriptor |
Embedded wire-type descriptor pool extraction and .proto synthesis |
| Unknown React-Native Hermes precompiled-bytecode string table |
Hermes-header magic-version parsing and hbcdump register-opcode lifting |
Unknown Rekordbox .anlz beat-grid waveform tag |
FourCC-tagged big-endian chunk-header parsing and RGB-waveform byte-unpack |
Unknown RPG-Maker .rgss3a XOR-encrypted archive key |
Linear-congruential multiplier-stepx7-plus-3 key-recovery from magic-header |
Unknown Rust-async Future generator-enum poll dispatch |
Discriminant-switch loop-lifting and pinned-stack-slot live-variable recovery |
Unknown Scala-JVM LambdaMetaFactory closure serialization |
BootstrapMethods attribute-table parsing and $anonfun method-handle trace |
| Unknown seismic SEG-Y extended-EBCDIC trace header |
Byte-offset variance across shot-gather traces and IBM-float conversion |
Unknown Sony-PlayStation-4/5 .pkg PFS-filesystem outer-inner-layer AES-XTS |
EKPFS-derived tweak-key sector-decryption and superblock inode-table walk |
| Unknown unexported OS kernel symbol addresses |
Heuristic prologue-signature scanning and kallsyms table recovery |
| Unknown Unity IL2CPP native game metadata |
global-metadata.dat string-type header parsing and libil2cpp symbol mapping |
Unknown Unreal-Engine IoStore .utoc AES-encrypted chunk |
AES-256 key-schedule memory-search and .ucas Oodle-Kraken decompression |
| Unknown uploaded PLC ladder hex-instruction block |
Mnemonic round-trip compilation diffing and opcode bitfield masking |
Unknown VisualWorks-Smalltalk .im object-memory snapshot image |
Object-table oops-header format parsing and CompiledMethod bytecode disassembly |
| Unknown VST-plugin preset binary chunk |
Host-DAW parameter-automation sweep and getChunk binary diffing |
| Unknown WebAssembly linear-memory struct field offsets |
Dynamic memory-access trace clustering and DWARF-less type inference |
Unknown Wolfram-Mathematica .mx platform-dependent binary-dump symbol-table |
Version-header deserialization-loop tracing and DownValues-expression tree dump |
| Unreadable machine-code control-flow logic |
Intermediate-representation lifting and data-flow decompilation |
Vectored-Exception-Handler hardware-breakpoint Dr0-Dr3 hookless API-detour |
CONTEXT Rip modification inside VEH chain and Dr7 local-enable trace |
| Virtual-machine protected bytecode handler loop |
Dynamic instruction tracing and virtual-opcode semantics lifting |
Windows-ALPC NtAlpcSendWaitReceivePort direct-callback TpAllocAlpcCompletion |
ALPC-port attribute-flags inspection and target-process worker-thread stack walk |
Windows-Thread-Pool TpAllocAlpcCompletion direct-IO-completion callback injection |
ALPC-port completion-list _TP_ALPC structure-overwrite inspection in target |
XOR-linked-list single-pointer npx traversal idiom |
Previous-XOR-next address-accumulator loop recognition in decompiler SSA |