search_pattern
Search memory for byte patterns with ?? wildcards (hex) to locate instructions or data during debugging and reverse engineering.
Instructions
Search memory for a byte pattern with ?? wildcards. Examples: 'CC' (INT3), '0F 31' (RDTSC), 'E9 ?? ?? ?? ??' (JMP rel32).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| module | No | Optional module name to limit search scope (faster). | |
| pattern | Yes | Hex bytes separated by spaces, '??' as wildcard. Examples: '90 90 90', 'E8 ?? ?? ?? ??', '48 89 ?? 24'. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Structured result data (varies by tool) | |
| error | No | ||
| details | No | Detailed text breakdown | |
| success | Yes | ||
| summary | Yes | One-line human-readable result | |
| suggested_next_tools | No | Tools recommended to call next based on this result |