re_disasm
Disassemble code at a specified address and perform reverse-engineering analysis including vtables, RTTI, function signatures, and bounds checking.
Instructions
Disassembly & code analysis. ops: disasm {address,count?,size?,bytes?}, vtable {address,max_entries?,disasm_preview?}, rtti {object_address} (address of an object instance; first qword must be its vtable ptr), gensig {address,length?}, bounds {address}, analyze_fn {address,max_size?}
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| op | Yes | Operation | |
| size | No | disasm: max bytes to read (default 256, max 4096) | |
| bytes | No | disasm: include per-instruction raw bytes (default false) | |
| count | No | disasm: instruction count (default 10, max 1024) | |
| length | No | gensig: byte count (default 32, max 256) | |
| address | No | Target hex address (most ops) | |
| max_size | No | analyze_fn: max bytes to analyze (default 4096, max 64KB) | |
| max_entries | No | vtable: max entries (default 50, max 512) | |
| disasm_preview | No | vtable: disasm first insns of each entry (default false) | |
| object_address | No | rtti: address of an object instance (its first qword is the vtable pointer) |