Skip to main content
Glama

scan_pattern

Read-onlyIdempotent

Scans game modules for hexadecimal AOB byte patterns with wildcards to locate hook targets when symbols are stripped or metadata/RVA lookup cannot resolve them.

Instructions

在游戏模块里做 AOB(特征码)扫描。这是兜底手段 —— 优先用元数据 + RVA 定位。

⚠️ 这是兜底手段。优先用元数据 + RVA 定位: 本工具集的核心优势就是「不用扫内存也能找到 Hook 落点」。 只有当符号被剥离、或目标是原生代码时,才用扫描。

Args: pattern: 十六进制特征码,支持通配符 "??"。 例:"48 8B ?? ?? E8"。 module: 限定模块名(默认当前 IL2CPP 模块)。 max_results: 最多返回多少个命中。

Input Schema

NameRequiredDescriptionDefault
moduleNo
patternYes
max_resultsNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/non-destructive/openWorld, and the description adds that the default scope is the current IL2CPP module and that this is the discouraged path — implying it is more costly than symbol lookup. It does not explicitly state the cost or that scanning a large module can be slow, but nothing contradicts the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and the fallback warning, then a clean Args block. The warning is, however, stated twice almost verbatim (bold line plus the ⚠️ paragraph), which is redundant text that could be trimmed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 3-parameter tool with no output schema, the definition never says what a hit looks like — module + RVA, absolute address, or count — nor whether offsets are relative to the module base, which matters since the whole point is to feed a hook target. Adequate but leaves the return shape to guesswork.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must carry the load and it does: it gives the pattern syntax (hex with "??" wildcards) plus a concrete example "48 8B ?? ?? E8", states module defaults to the current IL2CPP module, and explains max_results as a cap on hits returned.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete verb+resource: perform an AOB (signature) scan inside a game module. It also positions the tool against the sibling approach (metadata + RVA via find_hook_target), so an agent can tell immediately what this does and what it is not for.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly names itself as the fallback (兜底手段) and says to prefer metadata + RVA localization first, then gives the precise conditions where scanning is warranted: symbols stripped, or target is native code. Both when-to-use and when-not-to-use are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.