Skip to content
@AirFoundation

AirFoundation

僕たちはひとつの輪。

AirFoundation

AirFoundation

Java, below the source.

GitHub Website Email


 About

AirFoundation is an open research organization focused on Java runtime internals — we study what happens after javac compiles your source and before the CPU executes the result.

Our work spans three layers of the Java execution stack:


01 / CLASS

Java Reversing

Inspect compiled behavior, protection layers, and transformed control flow.

0: aload_0
1: invokestatic  #42
4: areturn


02 / NATIVE

x64 / Native

Trace the boundary where managed Java enters native execution.

mov  rax, [rbp-08h]
test rax, rax
jne  short loc_1402A


03 / JVM

JVM Bytecode

Recover, analyze, and rewrite class-level instructions.

ClassReader(bytes)
  .accept(visitor, 0)
// ASM9


 Research Map

%%{init: {'theme': 'base', 'themeVariables': { 'primaryColor': '#2E66D5', 'primaryTextColor': '#E2E9F0', 'primaryBorderColor': '#27BCD0', 'lineColor': '#27BCD0', 'secondaryColor': '#171D27', 'tertiaryColor': '#606D7D', 'fontSize': '13px'}}}%%
flowchart TD
    A["☕ Java Application Layer"] --> B["🔍 Decompilation & Analysis"]
    A --> C["🛡️ Protection Mechanisms"]
    B --> D["📦 Bytecode Inspection\naload · invokestatic · areturn"]
    B --> E["🔗 Control Flow Recovery"]
    C --> F["🔐 Obfuscation Analysis"]
    C --> G["🧬 Code Transformation"]
    D --> H["⚙️ JVM Runtime\nClassReader / ASM9"]
    E --> H
    F --> I["💻 Native Boundary\nmov rax · test · jne"]
    G --> I
    H --> J["🎯 AirFoundation\nOpen Runtime Research"]
    I --> J

    style A fill:#2E66D5,stroke:#27BCD0,color:#E2E9F0
    style B fill:#171D27,stroke:#2E66D5,color:#E2E9F0
    style C fill:#171D27,stroke:#2E66D5,color:#E2E9F0
    style D fill:#171D27,stroke:#27BCD0,color:#E2E9F0
    style E fill:#171D27,stroke:#27BCD0,color:#E2E9F0
    style F fill:#171D27,stroke:#27BCD0,color:#E2E9F0
    style G fill:#171D27,stroke:#27BCD0,color:#E2E9F0
    style H fill:#2E66D5,stroke:#27BCD0,color:#E2E9F0
    style I fill:#2E66D5,stroke:#27BCD0,color:#E2E9F0
    style J fill:#27BCD0,stroke:#171D27,color:#171D27
Loading

 What We Do

🔬 Bytecode Analysis

  • JVM instruction-level inspection and rewriting
  • Class file format parsing with ASM / ObjectWeb
  • Constant pool & method descriptor recovery
  • Stack frame verification & type inference

🛡️ Protection Research

  • Control flow obfuscation analysis
  • String encryption & resource hiding patterns
  • Class loader isolation & reflection guards
  • Anti-tamper & integrity verification schemes

💻 Native Bridge

  • JNI boundary tracing & marshalling analysis
  • x64 disassembly of JIT-compiled hot paths
  • Native method registration & symbol resolution
  • GC safepoint & stack map interaction

⚙️ Runtime Internals

  • HotSpot JVM execution engine behavior
  • Class loading delegation & module boundaries
  • Serviceability Agent & diagnostic tooling
  • JVMTI instrumentation & agent attachment

 Toolchain

Java ASM JVM x64 IDA Ghidra JVMTI JNI

┌──────────────────────────────────────────────────────────────────────────┐
│                         AirFoundation Toolchain                         │
├──────────────────┬──────────────────┬──────────────────┬────────────────┤
│   Analysis       │   Bytecode       │   Native         │   Runtime      │
├──────────────────┼──────────────────┼──────────────────┼────────────────┤
│ CFR / Procyon    │ ASM 9 (ObjectWeb)│ IDA Pro          │ HotSpot JVMTI  │
│ JD-GUI           │ Javassist        │ Ghidra           │ SA Agent       │
│ Fernflower       │ BCEL             │ x64dbg           │ JFR / JMC      │
│ Recaf            │ ByteBuddy        │ Radare2          │ async-profiler │
└──────────────────┴──────────────────┴──────────────────┴────────────────┘

 Workflow

%%{init: {'theme': 'base', 'themeVariables': { 'primaryColor': '#171D27', 'primaryTextColor': '#E2E9F0', 'primaryBorderColor': '#2E66D5', 'lineColor': '#27BCD0', 'fontSize': '13px'}}}%%
sequenceDiagram
    participant SRC as ☕ .java Source
    participant CLS as 📦 .class Bytecode
    participant JVM as ⚙️ JVM Runtime
    participant JIT as 💻 JIT / Native
    participant AF as 🎯 AirFoundation

    SRC->>CLS: javac compile
    CLS->>JVM: ClassLoader.defineClass()
    JVM->>JIT: HotSpot C2 / Graal
    JIT->>JIT: x64 machine code

    AF-->>CLS: Bytecode analysis & rewriting
    AF-->>JVM: JVMTI instrumentation
    AF-->>JIT: Native boundary tracing
    AF-->>SRC: Decompilation & recovery
Loading

 Open Source

We publish tools, libraries, and research artifacts as open-source repositories under this organization. Explore our work:

Browse Repos


 Connect

GitHub   Email   Website


> GOTO github.com/AirFoundation_

© 2026 AirFoundation Technology — Java, below the source.

Popular repositories Loading

  1. Exhibition-Reborn Exhibition-Reborn Public archive

    Love From Bzdhyp&AirFoundation™

    Java 7 2

  2. Edfaiths-Shit-Opensrc Edfaiths-Shit-Opensrc Public

    人人都是曹新卫 曹源巅峰时期:2018年水影杀穿整个hyp,2019年欣欣创始人,2020年花雨庭空岛9000淘汰分封顶,2021年创造gapple,一人杀穿空岛,2022年vs gm公益,2023年六秒灭欣欣车队,2024年联手欣欣有了logo并担任花雨庭天花板、起床天花板、空岛天花板、职业天花板、钢琴代言人曹家,随便拿出一个事迹都够一个dev封神了。开挂?他不开照样牛逼

    5

  3. Naven-NoAuth Naven-NoAuth Public archive

    Naven.Tech

    Java 4 1

  4. c2j-native-deobfuscator c2j-native-deobfuscator Public

    Forked from gaoyu06/c2j-native-deobfuscator

    A deobfuscator for native-obfuscator and similar obfuscation tools, designed to restore Java bytecode from native-protected binaries.

    Python 3

  5. Obfuscate-Annotation Obfuscate-Annotation Public

    Zelix Klass Master & JNIC Native Obfuscator 's Obfuscate Annotation

    PowerShell 2

  6. Ichino Ichino Public

    一个八个塑料按键游戏的辅助程式

    Dart 1

Repositories

Showing 9 of 9 repositories

Most used topics

Loading…