scan_first
Initiate a first memory scan on an attached process to count matches based on value, type, and comparison criteria. Supports exact, range, and change detection scans.
Instructions
Run a first scan over the attached process and return the match count.
scan_type: exact, bigger, smaller, between (needs value2), unknown,
changed, unchanged, increased, decreased, increasedby, decreasedby.
For 'unknown' start a value-agnostic scan, then narrow with scan_next.
Use scan_results to page through matches.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| stop | No | ||
| start | No | ||
| value | No | ||
| value2 | No | ||
| only_one | No | ||
| scan_type | No | exact | |
| value_type | No | 4byte |