search_pattern
Search process memory for hex byte patterns with wildcard support, using '??' to match any byte. Specify an optional module name to limit the search scope and speed up analysis.
Instructions
Search memory for a byte pattern with ?? wildcards. Examples: 'CC' (INT3), '0F 31' (RDTSC), 'E9 ?? ?? ?? ??' (JMP rel32).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| module | No | Optional module name to limit search scope (faster). | |
| pattern | Yes | Hex bytes separated by spaces, '??' as wildcard. Examples: '90 90 90', 'E8 ?? ?? ?? ??', '48 89 ?? 24'. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Structured result data (varies by tool) | |
| error | No | ||
| details | No | Detailed text breakdown | |
| success | Yes | ||
| summary | Yes | One-line human-readable result | |
| suggested_next_tools | No | Tools recommended to call next based on this result |