Formatting mask for mask attack

[epixoip]

You'll need to generate an hcmask file with multiple masks to cover all of the possible positions, but honestly a rule-based attack with the appropriate substitutions might be a better approach.