Skip to content

lcmem Commands

NNKtv28 edited this page Sep 28, 2026 · 1 revision

Run every command as python -m lcmem <command> from the repository root.

Process and metadata

Command Does
info process, modules, memory layout, metadata status
types [pattern] list types in the assembly
type <Name> one type's fields and predicted offsets
fields <pattern> search fields across every type (--scannable for numeric only)

Scanning

Command Does
scan <value> first scan. -t f32, -m greater/less/between
refine <mode> [value] narrow results: exact, changed, unchanged, increased, decreased, ...
results show current hits
setall <value> write to every hit

See Scanning.

Direct access

Command Does
read <addr> / write <addr> / dump <addr> read, write or hex-dump an address
watch <addr> poll and print changes
aob "48 8B ?? 89" byte-signature search, ?? is a wildcard

Managed objects

Command Does
strings <text> find managed System.String objects
identify <addr> which class this object is
class <Name> find a MonoClass
instances <Name> find every live instance of a class
object <addr> read an object's fields through metadata

Patches and shell

Command Does
patch list / patch apply <name> / patch revert see [[Patches
shell interactive session that keeps scan results in memory

Clone this wiki locally