_SelfDestruct(), AddResToMe()

[trancexx]

While running executable modules are locked in a manner that you can't edit them. Accessible for reading, but not for writing.

This means that in order to modify them you must wait till they are done, start a new process to do a modifications and do what ever you want (if you have enough rights).

Ability to do that without additional module (take this conditionally) improves security of an application and makes it more portable. For example, script in this post deletes itself (compiled or not) after it's done. Script from few posts down (link) adds files dropped on executable to its resource section.

Another example would be to add/update configuration data of the module that is stored within it (attached or as a resource), or to add a sort of hash check with ability to update it.

How to do it?

The idea is this (it's actually very obvious): - make a new process that will wait for the main process to exit and then do desired modifications on the main module.

AutoIt's executables are specific. When you run AutoIt, it will look for the script to interpret and if it finds is it will try to run it, and if not it will exit.

Built-in feature of every AutoIt executable is /AutoIt3ExecuteScript command line switch. It tells interpreter to interpret a script of our desire. I will use that.

Another key moment is creating another process. Writing to hard drive is out of the question (because of the lack of coolness and new problems that could arrive upon that). Solution is much more advanced. I already explained the procedure before (link). It's running executables from memory.

I will, in script that follows, start another process (of my wish) and rewrite its memory space in order for it to act as another interpreter. Another AutoIt interpreter. That new interpreter will execute the same script as the original one, but (and here is the catch) under changed circumstances.

Script is written to initially check for the count of a specific Semaphore object. In case it exists it will execute part of the script that actually does the destruction.

Semaphores are used widely before, there is nothing new to say about them.

Not to quibble more, here's the script:

SelfDestruct.au3

edit: New intro. It was pointed out to me from the different directions that the old one was kind of shitty.

Edited December 10, 2009 by trancexx

[Manko]

That is really cool!

I can't help but feel we ought to have a simpler method... but your's is really high-tech!

/Manko

[dantay9]

Yeah, the code isn't very elegant, but I can't argue with the results. Great job!

[trancexx]

Thanks.

... and I would need your definition of an elegant code.

@Manko, I'm open for ideas.

[czardas]

I already explained it before (link). It's running executables from memory.

Fascinating read. I can't say I understand it all, but it's definately very cool.

[trancexx]

Fascinating read. I can't say I understand it all, but it's definately very cool.

I just reread it, I should work on my English.

[FuryCell]

I dont think a standard batch file runs in a vdm. the VDM is for 16-bit dos apps. However this is pretty cool.

[trancexx]

I dont think a standard batch file runs in a vdm. the VDM is for 16-bit dos apps. However this is pretty cool.

You are absolutely right.

To make it up I wrote another script. This one will add any file you drop on compiled script to its resource section. Look for type RT_RCDATA, name 1 (you can use for example this script to verify).

AddResToMe.au3

New functions are not commented.

I .bet no .bat can do that.

Edited December 10, 2009 by trancexx

[Digisoul]

Awesome script trancexx , 5 stars from me.

[trancexx]

84 104 97 110 107 115

...your sig style.

[FuryCell]

You are absolutely right.

To make it up I wrote another script. This one will add any file you drop on compiled script to its resource section. Look for type RT_RCDATA, name 1 (you can use for example this script to verify).

AddResToMe.au3

New functions are not commented.

I .bet no .bat can do that.

Now thats cool. 5 stars.

[czardas]

I just reread it, I should work on my English.

I thought English was your first language.

[spudw2k]

That AddResToMe script looks very promising, but I can't figure out how to use it properly. After I add a file to the compiled script, it no longer runs.

[trancexx]

Don't use UPX.

[spudw2k]

Don't use UPX.

Yep, that did it. Thanks. I was thinking of making a self-contained archive(like) app. Are there means to remove resources from a compiled script?

[trancexx]

Yep, that did it. Thanks. I was thinking of making a self-contained archive(like) app. Are there means to remove resources from a compiled script?

Of course.

But there could be dependencies between resources. The best advice I can give you is find ResourcesViewerAndCompiler.au3 and _ResDelete() function. That function covers all possible cases.

[spudw2k]

Sweet, thnx. Is there any way to drag multiple files into the compiled script?

edit: Clarification....drag multiple files into a compiled script at once.

Edited December 16, 2009 by spudw2k

[trancexx]

Sweet, thnx. Is there any way to drag multiple files into the compiled script?

edit: Clarification....drag multiple files into a compiled script at once.

Just grab as many files as you like and drop them. Then parse $CmdLine, both in _Do() and _CheckForThingsToDo() functions. That's trivial.

[spudw2k]

I would've thought so too, but my element count in the $CmdLine doesn't seem to change if I drag more than one file.

edit: Nevermind. I was checking the $CmdLine array after the _CheckForThings... func and it changes the array. Thanks.

Edited December 16, 2009 by spudw2k

[trancexx]

I would love to see what will you come up with.

Don't forget to post when ( ) it's done.