Disassembler Objects
Disassembler objects enable the ability to disassemble code for a specific architecture.
Name | Return Type | Signature | Description |
---|---|---|---|
DisassembleBlocks | collection of basic block | DisassembleBlocks(address) | Starts disassembling at address and returns a collection of basic blocks. The disassembly here is linearly forward from address on an instruction-by-instruction basis. Since this is not performing complete flow analysis of a function, it is entirely possible that there may be jumps into the middle of blocks returned by this method. There will only be a single exit point from each; however. |
DisassembleInstructions | collection of instruction | DisassembleInstructions(address) | Starts disassembling at address. |
DisassembleFunction | collection of basic block | DisassembleFunction(address) | Assuming a function starts at address, this performs a complete flow analysis of the function. The result is a collection of basic blocks with one entry point and one exit point. |
GetRegister | register | GetRegister(regId) | Returns a register object from the given register id. |
The disassembler provided here has significantly better disassembly output if full symbolic information is present for the disassembled function (e.g.: it will utilize address and operand size to determine what field of a struct/union is being touched).
A given instance of a disassembler may cache a significant amount of data in order to provide a better experience.