Reverse engineering, redefined

Deconstruct anything.
Stay Undisputed.

A precision-built reverse engineering suite — disassembly, decompilation, security analysis, and AI-assisted insight in one fast workspace. Crafted by a single independent developer, with AI along for the ride.

Download Undisputed Explore the features

Built for analysts, researchers, and security engineers.

Undisputed v2.0

Every feature, in one place

A full-spectrum reverse engineering platform — from disassembly and decompilation to security analysis, exploitation, and AI-assisted workflows.

Core Reverse Engineering

PE (PE32/PE32+), ELF, Mach-O, and DEX (Android) format support
Capstone disassembler — x86/x64/ARM/ARM64 with instruction classification
Hex-Rays-like decompiler: 30+ IR opcodes, SSA form, phi nodes, expression trees
Optimizations: constant folding, copy propagation, DCE, CSE, strength reduction
Structure recovery: if/else, loops, switch/case, ternaries, structs, arrays
Type system: stack frame analysis, variable & type inference, API return DB
Output: pseudo-C, plain English, IR dump, CFG dump, optimized IR

Security Analysis

Entropy scanner with block-by-block map and risk levels
Crypto detection: AES, RSA, MD5/SHA, RC4, DES with confidence scores
Anti-debug detection with bypass suggestions
Packer detection — 20+ packers (UPX, Themida, VMProtect, Armadillo…)
Vulnerability scanner with CWE ID mapping and severity scoring
Aggregated 0-100 risk report with recommendations

Deobfuscation

Family detection: VMProtect, Themida, Tigress, OLLVM, Confuser, Enigma…
VM pattern & control-flow-flattening detection
Virtualization, mutation, and interpreter/handler table analysis
Opcode decoding

Unpacking

Automated auto-unpack attempts
Multi-layer packing detection
Step-by-step manual unpacking guide

Exploit Development

ROP gadget finder, categorized by instruction type
Byte pattern scanner with wildcards (??)
Cyclic pattern generator for offset detection
Bad character scanner and NOP sled detector
Egg hunter, multi-platform shellcode templates
Buffer overflow analyzer and exploit report generator

Binary Patching

Byte patching with original/replacement tracking
NOP regions, JMP/CALL insertion, INT3 breakpoints, byte toggling
Named patch groups
Export to IDC, IDAPython, and visual diff output

RTTI Analysis

MSVC RTTI scanning and type hierarchy reconstruction
VTable scanning and virtual function enumeration
Class hierarchy with depth tracking
C++ name demangling and RTTI pointer validation

Signature System

Default crypto, API, STL, and CRT signature library
Byte pattern + mask matching
FLIRT export (IDA-compatible) and IDA pattern generation
Create signatures from selection

Bookmarks

Address, label, note, color, category, and priority
Color-coded, category-filtered, and searchable
Import/export with persistent storage
Numbered bookmarks (1-9)

Export & Reporting

Full styled multi-section HTML reports
JSON, Markdown, plain text, and CSV exports
Formatted disassembly listing
IDA summary: functions, xrefs, comments, names

IDA Pro Feature Parity

Function renaming, prototypes, calling conventions
Regular, repeatable, and antecedent comments
Structures (incl. bitfields), enums, typedefs, segments
Cross-references: call, jump, data read/write
Full IDC & IDAPython script generation from all annotations

AI Integration

10 providers: OpenRouter, Groq, Anthropic, Ollama, OpenAI…
Together, Cohere, DeepSeek, Mistral, Perplexity
Custom OpenAI-compatible endpoint support
Local model support via Ollama (CodeLlama, DeepSeek Coder…)

AI Tools & Modes

19 function-calling tools: summary, pseudocode, disasm, xrefs…
rename_function, add_comment, set_bookmark, apply_patch, nop_region
generate_yara_rule and byte search
Prompt modes: Ask, Triage, Patch, YARA, Names, Explain
Multi-turn conversation with tool result feedback loops

Dependency Analysis

DLL classification (system / Microsoft / third-party / suspicious)
Network indicator extraction (URLs, IPs, ports, protocols)
Crypto, persistence, and privilege-escalation detection
Risk scoring and deep call-chain analysis

Symbol Server

Microsoft Symbol Server support
PDB download and caching
Symbol demangling
Address-to-symbol resolution

Navigation

Forward/back address-based history
Jump to address or offset
Address bar with immediate navigation

UI & Workflow

Dynamic, closeable, categorized tabs
Resizable function sidebar with filter
Code viewport: syntax highlighting, double-click jump, context menu
Floating xref popup, collapsible output panel, info-rich footer
Keyboard shortcuts: F5, Ctrl+O, Ctrl+C/A, X, Back/Shift+Back

Theming

Dark and light themes, full VS Code-like palette
17+ theme properties, 30+ SVG icons
JetBrains Mono font embedded

Settings

30+ options across theme, fonts, and display
Toggle entropy/crypto/anti-debug/string scans
Intel/AT&T syntax, bytes-per-line, colorize
Auto-backup, auto-save bookmarks, symbol cache config

Data Formats

.rvcfg project save format (paths, names, comments, patches)
IDC & IDAPython scripts
FLIRT signatures and YARA rules
JSON / HTML / Markdown / Text / CSV reports

Products in development

The Undisputed ecosystem is growing. Here's what's shipping today and what's next on the bench.

Available

Undisputed Core

The flagship reverse engineering engine. Disassembly, decompilation, and AI-assisted control-flow analysis in a single, fast workspace.

In Development

Radiant AV

A next-generation antivirus layer built on the same analysis core — detecting threats through behavior and structure rather than signatures alone.

Currently in active development.