disassemble_raw_offset
Disassemble raw bytes at a given file offset by reading from any file and converting to assembly instructions, supporting multiple architectures and configurable parameters.
Instructions
Read raw bytes at a file offset and disassemble them.
Unlike disassemble_at_address, this uses a raw file offset instead of a virtual address.
Args: file_path: Absolute path to the file (any file, not limited to PE/ELF). offset: File offset as hex string (e.g. "0x400"). size: Number of bytes to read. Default: 256. arch: CPU architecture. Default: x86_64. base_address: Display base address for disassembly. Defaults to offset value. max_instructions: Maximum instructions to disassemble. Default: 50.
Returns: Disassembly output at the file offset.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| file_path | Yes | ||
| offset | Yes | ||
| size | No | ||
| arch | No | x86_64 | |
| base_address | No | ||
| max_instructions | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |