Skip to main content
Glama

disassemble_range

Decode a byte range of a native PE (x86-64) starting at an RVA into assembly instructions. Optionally records the range as a function in an autopsy database.

Instructions

Disassemble an arbitrary byte range of a native PE (x86-64) starting at an RVA. Resolves the RVA to its section and file offset, reads ONLY that slice (read-only on the binary), and decodes it with Capstone. Returns the instruction listing. If db_path or game_path is given AND the binary is catalogued in that autopsy DB, the decoded instructions are also summarized into The Model as a 'function' row spanning the range (provenance=verified for the bytes). Pure read-only when no DB is supplied.

Input Schema

NameRequiredDescriptionDefault
rvaYesRelative virtual address to start at (e.g. 0x1000).
lengthNoNumber of bytes to disassemble (default 256, clamped to the section).
db_pathNoOptional .autopsy.db for writeback.
game_pathNoOptional game dir; its default .autopsy DB is used if db_path is omitted.
binary_pathYesPath to the PE (.exe/.dll) to disassemble.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.4

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses read-only behavior on the binary, the conditional Model writeback, and clarifies 'Pure read-only when no DB is supplied.' It does not cover error/edge behavior (out-of-range RVA, clamping details beyond the schema), so it stops short of fully transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, front-loaded with the core action and the read/write consequence, then the conditional side effect. Mostly efficient, though the final 'Pure read-only' sentence slightly restates the earlier 'read-only on the binary'.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no annotations and no output schema, the description covers return value ('instruction listing') and the side-effect contract adequately. It leaves error handling and behavior when the RVA/section is invalid unspecified, but the essential call-time information is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents all five parameters with examples and defaults. The description adds relational context for db_path/game_path (writeback triggers only when the binary is catalogued), but this is largely redundant with the schema's own descriptions of those params. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a precise verb+resource: disassemble an arbitrary byte range of a native PE (x86-64) starting at an RVA. The 'arbitrary byte range ... starting at an RVA' framing implicitly distinguishes it from the sibling disassemble_function (which targets a named function), so an agent can tell them apart without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explains the condition under which writeback occurs ('If db_path or game_path is given AND the binary is catalogued'), which is useful context, but it never explicitly says when to choose this over disassemble_function or rva_to_offset. Usage is left implied by the RVA-based framing rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools