ERC.XDBG

ERC --help
ERC --pattern c 5000
get the ASCII value of the hex bytes found in EIP, by right-clicking on EIP and 
selecting Modify Value, or by clicking on EIP and then clicking Enter. Once we do, 
we will see various representations of the EIP value, with ASCII being the last one

CALCULATING EIP OFFSET

x64DBG > LogTab
 Command: ERC --pattern o 1hF0

AUTOMATIC OFFSET DETECTION

x64DBG > LogTab
 Command: ERC --findNRP

Last updated