ERC.XDBG
ERC --help
ERC --pattern c 5000
get the ASCII value of the hex bytes found in EIP, by right-clicking on EIP and
selecting Modify Value, or by clicking on EIP and then clicking Enter. Once we do,
we will see various representations of the EIP value, with ASCII being the last one
CALCULATING EIP OFFSET
x64DBG > LogTab
Command: ERC --pattern o 1hF0
AUTOMATIC OFFSET DETECTION
x64DBG > LogTab
Command: ERC --findNRP

Last updated