Ephex - Revision history

CCRDude: added group

2008-02-22T08:53:18Z

added group

← Older revision		Revision as of 08:53, 22 February 2008
Line 5:		Line 5:
	\|VARIANTS =		\|VARIANTS =
	\|PEVERSION = ??? < 1.5.4.5		\|PEVERSION = ??? < 1.5.4.5
			\|GROUP = Binary Anywhere Matching
	}}Bytes with offset from entry point, ?? as wildcard allowed.		}}Bytes with offset from entry point, ?? as wildcard allowed.

CCRDude: added info box

2008-02-21T19:02:38Z

added info box

← Older revision		Revision as of 19:02, 21 February 2008
Line 1:		Line 1:
	{{~~AdvFileParam~~\|ephex}}		{{AdvParamInfo
	Bytes with offset from entry point, ?? as wildcard allowed.		\|SYNTAX = ephex
			\|TITLESYNTAX = ephex
			\|PREVIOUS =
			\|VARIANTS =
			\|PEVERSION = ??? < 1.5.4.5
			}}Bytes with offset from entry point, ?? as wildcard allowed.

	==Usage==		==Usage==

CCRDude: New page: {{AdvFileParam|ephex}} Bytes with offset from entry point, ?? as wildcard allowed. ==Usage== ephex=|[hh[hh[hh[hh]...]]] ===Examples=== ephex=0|558BEC83C4F0 Would dete...

2008-02-18T19:00:47Z

New page: {{AdvFileParam|ephex}} Bytes with offset from entry point, ?? as wildcard allowed. ==Usage== ephex=<offset(int)>|<hh>[hh[hh[hh[hh]...]]] ===Examples=== ephex=0|558BEC83C4F0 Would dete...

New page

{{AdvFileParam|ephex}}
Bytes with offset from entry point, ?? as wildcard allowed.

==Usage==
ephex=<offset(int)>|<hh>[hh[hh[hh[hh]...]]]

===Examples===
ephex=0|558BEC83C4F0

Would detect the following code at the entry point of the file:
PUSH EBP
MOV EBP, ESP
ADD ESP, F0

===Description===
Use ''offset'' to specify an offset to the file ''entry point'' (has to be a Portable Executable file).

==See also==

===Similar parameters===
* [[begin(searcharea)]]
* [[end(searcharea)]]
* [[findbinary(searcharea)]]
* [[findtext(searcharea)]]
* [[greptext(searcharea)]]
* [[section(searcharea)]]

===Similar commands===