Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object model

Cisco Talos detailed a new approach to reverse engineering that pairs local AI agents with traditional analysis tools like the VB6 disassembler vbdec. Instead of awkwardly bolting AI onto the software, vbdec exposes its parsed data through a live COM interface.

Analysis tools do not need AI built in to support agentic workflows; they simply need to expose their data through an external scripting interface.   Even traditional graphical user interface (GUI) applications can be made AI-accessible by publishing their internal object models, allowing agents to query and automate analysis without modifying the core application.   This approach can often be implemented with surprisingly little engineering effort, leveraging existing scripting technologies and application data structures.

  By exposing structured data rather than adding predefined AI features, users can extend a tool's capabilities through prompts, turning new analyses into workflows instead of product feature requests.