I'm sorry to disappoint you :) I discovered this via a coverage based fuzzing engine with a dictionary (containing those magic numbers). Said fuzzing engine is

I'm sorry to disappoint you :) I discovered this via a coverage based fuzzing engine with a dictionary (containing those magic numbers). Said fuzzing engine is similar to libFuzzer, but I have designed it with a focus on fuzzing closed source Windows binaries (PE).