01
Client
Workspace
The workspace uploads a file and shows the metadata and disassembly returned by the API.
Reverse engineering
Understand What's Beneath the Binary.
Upload a compiled file and read its structure. The workspace identifies the format, extracts metadata, and lists the disassembly. Decompilation and virtual machines are not part of this release.
Pipeline
From the file to a reading.
Binary, disassembly, decompilation, then analysis. The panels are a guided illustration of that order. unveil has not analyzed a file.
BINARY → DISASSEMBLY → DECOMPILATION → ANALYSIS
Not a live analysis
ELF header · illustration
A compiled file is only bytes until it is identified. The rows below are a familiar ELF opening, shown so the pipeline has a start. They were not read from an upload.
7f 45 4c 46 02 01 01 00 00 00 00 00 00 00 00 00 02 00 3e 00 01 00 00 00 example.o · x86-64 · not analyzed
Process
Identify and disassemble run in the API.
The API identifies a binary and lists executable instructions. Pseudocode appears only when Ghidra is installed. Interpretation and virtual machines are later phases.
01
Identify
The API checks a compiled file before reading it. Format, architecture, and entry metadata are stored on the job. The file is not executed.
02
Disassemble
Capstone disassembles executable sections into addresses, mnemonics, and operands. Unsupported architectures are reported instead of invented listings.
03
Decompile
The worker calls Ghidra headless when it is installed. It is not installed on this host, and the public site does not run it. Failed or missing decompilation stays empty.
04
Interpret
Agents are planned to read those artifacts, alongside a call graph. Isolated dynamic analysis waits on a Linux host with KVM. Neither is available.
Capabilities
What this release can run.
Intake, metadata, and disassembly run in the API. Ghidra is in the worker and idle until it is installed. Agents and virtual machines are not part of this release.
Capability
Intended role
This release
Binary intake
Intended roleValidate and identify a compiled file
This releaseAPI service
Metadata
Intended roleLIEF reads structure from the file
This releaseAPI service
Disassembly
Intended roleCapstone lists machine instructions
This releaseAPI service
Pseudocode
Intended roleGhidra reconstructs a C-like reading
This releaseNot installed
Call graph
Intended roleFunctions and their references
This releaseNot installed
Agents
Intended roleNotes grounded in the artifacts above
This releaseNot started
Dynamic analysis
Intended roleDisposable QEMU guest on a KVM host
This releaseHost required
This release
What this release runs.
The workspace can identify a binary and disassemble it. These figures are not a sample analysis, and they do not include decompilation or a virtual machine.
Live
Binary uploads
On
Disassembly
Off
Decompilation
Off
Virtual machines
Architecture
Three parts of a session.
The workspace and the static worker exist. Ghidra stays idle until it is installed. The VM host is not running.
02
Workers
Static analysis
The worker runs LIEF and Capstone. It calls Ghidra only when DECODE_GHIDRA_HOME is set. That path is empty here.
03
Host
Isolated execution
Authorized dynamic analysis is planned as a disposable QEMU guest on Linux KVM. This Windows PC cannot provide that host.
Status
What exists, and what does not.
Uploads, format identification, metadata, and disassembly are live in the workspace. Ghidra decompilation is not installed. Agents and virtual machines are not running.
01
Visual identity
unveil mark, black canvas, and the marketing layout.
Live
02
Product narrative
The site describes reverse engineering of compiled software.
Live
03
Upload and jobs
The workspace accepts ELF, PE, and Mach-O, then returns a finished job.
Live
04
Static engines
LIEF and Capstone run in the worker. Ghidra is wired and stays idle until it is installed.
Partial
05
Analysis agents
Interpretation that cites disassembly and pseudocode.
Not started
06
VM host
QEMU on Linux KVM. Firecracker is optional and later. Docker is not a substitute.
Host required
Workspace
Open the workspace.
The workspace accepts a compiled file and returns its metadata and disassembly. The file is not executed. Decompilation and virtual machines are not available.