first bytes regexp matcher