disassemble
Disassemble code at any address and get categorized CALL/JMP lists to quickly map control flow and locate function boundaries.
Instructions
Disassemble instructions with auto call/jump analysis. Returns instructions plus categorized lists of CALLs and JMPs.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| count | No | 5-10 = quick peek; 30-50 = function head; 100+ = full functions. | |
| address | No | Memory address as hex string. ALWAYS use '0x' prefix. Examples: '0x401000', '0x7FFE0308', '0x00007FF7C0001234'. WARNING: without '0x' prefix, '401000' is treated as decimal 401000, not hex 0x401000. If omitted, current RIP is used. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Structured result data (varies by tool) | |
| error | No | ||
| details | No | Detailed text breakdown | |
| success | Yes | ||
| summary | Yes | One-line human-readable result | |
| suggested_next_tools | No | Tools recommended to call next based on this result |