Page 4 of 4
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 25 Mar 2015, 14:40
by tic
Which compiler are you using? I was just wanting to test this application so downloaded
x86_64-w64-mingw32-gcc-4.9.2.exe
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 25 Mar 2015, 14:45
by nnnik
I use an assembly compiler for all tasks I'm doing in MCode.
Its not quite comfortable but useable.
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 20 Nov 2019, 00:40
by guest3456
nnnik wrote: ↑30 Sep 2013, 12:00
3. an MCode Function:
I use this one:
Code: Select all
MCode(mcode)
{
static e := {1:4, 2:1}, c := (A_PtrSize=8) ? "x64" : "x86"
if (!regexmatch(mcode, "^([0-9]+),(" c ":|.*?," c ":)([^,]+)", m))
return
if (!DllCall("crypt32\CryptStringToBinary", "str", m3, "uint", 0, "uint", e[m1], "ptr", 0, "uint*", s, "ptr", 0, "ptr", 0))
return
p := DllCall("GlobalAlloc", "uint", 0, "ptr", s, "ptr")
if (c="x64")
DllCall("VirtualProtect", "ptr", p, "ptr", s, "uint", 0x40, "uint*", op)
if (DllCall("crypt32\CryptStringToBinary", "str", m3, "uint", 0, "uint", e[m1], "ptr", p, "uint*", s, "ptr", 0, "ptr", 0))
return p
DllCall("GlobalFree", "ptr", p)
}
are you sure VirtualProtect is only needed on AHKx64?
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 20 Nov 2019, 13:38
by paulpma
Hi all,
I am a bit new to MCODE, but I have managed to install compiler TDM-GCC-64\bin\gcc.exe and was able to generate MCODE. However, I have been searching for at least couple hours but can't find a way to set compiler to generate MCODE encoding in hexadecimal vs base64(the default). The function is writeen in C.
Any help is appreciated, thank you.
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 20 Nov 2019, 23:38
by paulpma
Someone helped me.. thank you..
You have to change it under "Settings" here
:
"Laszlo Style" for Hex
"Bentschi Style" for Base64
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 21 Nov 2019, 04:12
by nnnik
Which compiler did you use? Also why do you want to use Hex instead of base64?
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 16 Jun 2020, 18:23
by robodesign
What does 1 or 2 stand for before x64/x86? I've seen machine codes using these. For example, in this one : " 2,x86:aipYww==,x64:uCoAAADD ".
Thank you.
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 16 Jun 2020, 18:38
by swagfag
its stupid way of passing CRYPT_STRING_HEX(1) / CRYPT_STRING_BASE64(2) to CryptStringToBinary(), depending on whose mcode functions ure using
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 16 Jun 2020, 18:55
by robodesign
Thank you.... So, if it's bentschi mode /edition , it's in base 64, right ?
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 16 Jun 2020, 19:06
by swagfag
i dont know what betchis looks like
in the one 3 posts above me, yes.
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 16 Jun 2020, 19:38
by joedf
Yes, base64.
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 22 Jul 2023, 09:47
by RaptorX
Sorry to bump this code after so long but I see a lot of examples showing code like this that contain x86 and x64 code:
Code: Select all
MCode("2,x86:i0wkBItEJAiFyXQKjWQkAA+vwUl1+sM=,x64:hcl0Bw+v0f/JdfmLwsM=")
But when I compile code it always shows only the x64 version of it, is there any settings that I should set?
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 22 Jul 2023, 12:36
by joedf
If you mean MCode4GCC, I havent updated in a while so not sure if everything's working fully... but for GCC can specify 32bit or 64bit with the -m32 and -m64 flags
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 22 Jul 2023, 13:01
by RaptorX
joedf wrote: ↑22 Jul 2023, 12:36
If you mean MCode4GCC, I havent updated in a while so not sure if everything's working fully... but for GCC can specify 32bit or 64bit with the -m32 and -m64 flags
I thought about the flags but where can I put them in
MCode4GCC? after the path to the compiler I would assume right?
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 22 Jul 2023, 16:19
by joedf
Yes, that should work. At least, that's what I did in the past. You could also maybe make a small modification in the script for this. I'm thinking about it, but might not get it to it for a while...
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 22 Sep 2023, 22:26
by iseahound
@joedf
In what world would Mcodeforgcc produce outputs ending like this:
Code: Select all
...8D65F45B5E5F5DC3FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
I tried to truncate the code up to c3, and the code still crashes.
It's absolutely bizarre, and I can't figure out why. I asked the AI, as well as looked around at stack overflow.
Specs:
* gcc 13.20 downloaded from
https://winlibs.com/ winlibs personal build version gcc-13.2.0-mingw-w64ucrt-11.0.1-r2
* Running 32-bit compiler
The same exact code works fine when I compile using 64-bit.
https://godbolt.org/z/x1sMP8cGW
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 22 Sep 2023, 22:45
by iseahound
Of course, now that I made a post about it, it suddenly works. Looks like trimming the excess bytes is the solution.
Re: MCode Tutorial (Compiled Code in AHK)
Posted: 25 Sep 2023, 10:49
by joedf
@iseahound Wow ahah, I'm glad it worked out.
I am not entirely sure why, but it seems we can get some junk towards the end.
There's a attempt to truncate some of that, but obviously not all is caught/removed...