Query Tab Reference

The Query tab provides an interactive chat interface for questions about your binary, with context macros, MCP tools, and the ReAct agent.

Query Tab Interface

Purpose

The Query tab enables free-form conversation with the LLM about your binary. It supports:

UI Elements

Chat History

The left panel shows saved conversations:

Response Area

The main panel displays:

Input Area

At the bottom:

Enhancement Options

Option Description
Use RAG Include document context from the RAG index
Use MCP Tools Enable tool calling
Agentic Mode (ReAct) Enable autonomous investigation

Context Macros

Macros are replaced with binary context before the query is sent:

Macro Description
#func Current function code (decompiler or disassembly)
#addr Data at the current address
#line Current line (decompiler or disassembly)
#range(start, end) Data in an address range

Example:

What vulnerabilities exist in #func?

MCP Tool Calling

When Use MCP Tools is enabled, the LLM can call tools to gather information:

Typical tool usage: - Decompile current function - Get cross-references - Navigate to addresses - Query the semantic graph

ReAct Agent (Agentic Mode)

The ReAct agent performs multi-step investigations:

  1. Plan: Create investigation steps
  2. Investigate: Call tools to gather information
  3. Reflect: Adjust plan if needed
  4. Synthesize: Provide final answer

Use ReAct for: - Complex investigations - Vulnerability hunting - Call graph analysis - Exploratory reverse engineering

Edit Mode

The Query tab supports editing chat history: