Edit

Share via


Disassembler Objects

Summary

Disassembler objects enable the ability to disassemble code for a specific architecture.

Object Methods

Name Return Type Signature Description
DisassembleBlocks collection of basic block DisassembleBlocks(address) Starts disassembling at address and returns a collection of basic blocks. The disassembly here is linearly forward from address on an instruction-by-instruction basis. Since this is not performing complete flow analysis of a function, it is entirely possible that there may be jumps into the middle of blocks returned by this method. There will only be a single exit point from each; however.
DisassembleInstructions collection of instruction DisassembleInstructions(address) Starts disassembling at address.
DisassembleFunction collection of basic block DisassembleFunction(address) Assuming a function starts at address, this performs a complete flow analysis of the function. The result is a collection of basic blocks with one entry point and one exit point.
GetRegister register GetRegister(regId) Returns a register object from the given register id.

Remarks

The disassembler provided here has significantly better disassembly output if full symbolic information is present for the disassembled function (e.g.: it will utilize address and operand size to determine what field of a struct/union is being touched).

A given instance of a disassembler may cache a significant amount of data in order to provide a better experience.