Display using wildcard byte or character eg ??

[Chandlr]

Hi iam wondering if its possible to detect opcodes and display output offset as wildcard bytes eg ?? just like PEiD signatures.

I noticed the code: if (ins.InstID = INST_ID_MOV) and ((ins.Arg1.Reg = REG_EAX) and (ins.Arg2.Flags > 0)) then so is it possible to change the offsets bytes to ?? then display the opcode bytes ? :)

[MahdiSafsafi]

Hi, I'm just confused. What offset you mean ? can you please provide more information ?

[Chandlr]

Something like this S:=TRegEx.Replace(S, '([0-9A-F]{2})*(['+IntToHex( SwapEndian(ins.Disp.Value ) )+']){2}', '??'); and S being Opcodes .. ive figured that out now ;) iam somewhat new to regex sorry :)

[MahdiSafsafi]

No, this is not supported for the moment.

[Chandlr]

hi check my rep, "x64dbg_LabelSigDB" it does this with your code :)