Page 4 of 4

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 25 Mar 2015, 14:40
by tic
Which compiler are you using? I was just wanting to test this application so downloaded

x86_64-w64-mingw32-gcc-4.9.2.exe

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 25 Mar 2015, 14:45
by nnnik
I use an assembly compiler for all tasks I'm doing in MCode.
Its not quite comfortable but useable.

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 20 Nov 2019, 00:40
by guest3456
nnnik wrote:
30 Sep 2013, 12:00
3. an MCode Function:
I use this one:

Code: Select all

MCode(mcode)
{
  static e := {1:4, 2:1}, c := (A_PtrSize=8) ? "x64" : "x86"
  if (!regexmatch(mcode, "^([0-9]+),(" c ":|.*?," c ":)([^,]+)", m))
    return
  if (!DllCall("crypt32\CryptStringToBinary", "str", m3, "uint", 0, "uint", e[m1], "ptr", 0, "uint*", s, "ptr", 0, "ptr", 0))
    return
  p := DllCall("GlobalAlloc", "uint", 0, "ptr", s, "ptr")
  if (c="x64")
    DllCall("VirtualProtect", "ptr", p, "ptr", s, "uint", 0x40, "uint*", op)
  if (DllCall("crypt32\CryptStringToBinary", "str", m3, "uint", 0, "uint", e[m1], "ptr", p, "uint*", s, "ptr", 0, "ptr", 0))
    return p
  DllCall("GlobalFree", "ptr", p)
}
are you sure VirtualProtect is only needed on AHKx64?

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 20 Nov 2019, 13:38
by paulpma
Hi all,

I am a bit new to MCODE, but I have managed to install compiler TDM-GCC-64\bin\gcc.exe and was able to generate MCODE. However, I have been searching for at least couple hours but can't find a way to set compiler to generate MCODE encoding in hexadecimal vs base64(the default). The function is writeen in C.
Any help is appreciated, thank you.

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 20 Nov 2019, 23:38
by paulpma
Someone helped me.. thank you..
You have to change it under "Settings" here :thumbup: :
"Laszlo Style" for Hex
"Bentschi Style" for Base64

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 21 Nov 2019, 04:12
by nnnik
Which compiler did you use? Also why do you want to use Hex instead of base64?

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 16 Jun 2020, 18:23
by robodesign
What does 1 or 2 stand for before x64/x86? I've seen machine codes using these. For example, in this one : " 2,x86:aipYww==,x64:uCoAAADD ".

Thank you.

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 16 Jun 2020, 18:38
by swagfag
its stupid way of passing CRYPT_STRING_HEX(1) / CRYPT_STRING_BASE64(2) to CryptStringToBinary(), depending on whose mcode functions ure using

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 16 Jun 2020, 18:55
by robodesign
Thank you.... So, if it's bentschi mode /edition , it's in base 64, right ?

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 16 Jun 2020, 19:06
by swagfag
i dont know what betchis looks like
in the one 3 posts above me, yes.
just follow the code

Re: MCode Tutorial (Compiled Code in AHK)

Posted: 16 Jun 2020, 19:38
by joedf
Yes, base64. :+1: