What is it? As the name implies, "execute 32-bit DLL file". Its function is to execute internal functions in the DLL file, so that in the process, there will be only processes with DLL backdoors, and thus, the process is hidden. If you see multiple in the system, don't panic, it proves how many DLL files are started. Of course, we can find what these executed DLL files are from where the system automatically loads.
Now, let me introduce this file. As mentioned above, the function is to call the dynamic linking program library in the command line. There is also a file in the system, which means "execute 16-bit DLL file". Please note it here. Let's take a look at the function prototype used:
Void CALLBACK FunctionName (
HWND hwnd,
HINSTANCE hinst,
LPTSTR lpCmdLine,
Int nCmdShow
);
The usage method under the command line is: DLLname, Functionname [Arguments]
DLLname is the DLL file name that needs to be executed; Functionname is the specific introduction function of the DLL file that needs to be executed in the previous chapter; [Arguments] is the specific parameters of the introduction function.
The role of brief discussion (I am a rookie)
Friends who often use Windows 9x must be familiar with these two files. However, since the functions of these two programs were originally limited to use within Microsoft, there must be few friends who really know how to use them. So good, if you don't know, then let me tell you.
First, please do a small experiment (please save the results of the program you are executing in advance, otherwise...): Click "Start - Program - Ms - Dos Method", enter the Dos window, then type , restart windows, and press Enter, and you will see that the machine has been restarted! How about it, isn't it very interesting?
Of course, Rundll's function is not just about restarting your machine. In fact, Rundll, as the name suggests, executes Dll, its function is to call Windows' dynamic link library in the form of a command column. The difference is that the former is a 32-bit link library, while the latter is a 16-bit link library, and their command format is:
，，
There are three points to note here: the file name cannot contain spaces. For example, the file is located in the c:\ProgramFiles\ directory. You need to change this path to c:\Progra~1. The comma between the file name and the Dll entry point must not be missing, otherwise the program will make an error and will not give any information! 3. This is the most important point: Rundll cannot be used to call Dlls with return value parameters, such as GetUserName(), GetTextFace(), etc. in Win32 API. In Visual Basic, a shell is provided to execute external programs in the format:
Shell "Command Column"
If you can use the Shell instructions well, your VB program will have effects that are difficult or even impossible to achieve with other methods: still take restart as an example. The traditional method requires you to first build a module in the VB project, then write the WinAPI statement, and finally call in the program. And now only one sentence:
Shell " , restart windows" is done! Isn't it much more convenient?
In fact, there are unique advantages in calling various Windows control panels and system options. Below, I will list the instructions about Rundll collected on the Internet as follows (very useful, which can save you a lot of time calling the Windows API!!) for everyone to quote in programming:
Command column: ,Control_RunDLL
Function: Display the control panel
Command column: ,Control_RunDLL ,,1
Function: Display the "Control Panel-Assistance Options-Keyboard" option window
Command column: ,Control_RunDLL ,,2
Function: Display the "Control Panel-Assistance Options-Sound" option window
Command column: ,Control_RunDLL ,,3
Function: Display the "Control Panel-Assistance Options-Display" option window
Command column: ,Control_RunDLL ,,4
Function: Display the "Control Panel-Assistance Options-Mouse" option window
Command column: ,Control_RunDLL , 5
Function: Display the "Control Panel-Assistant Options-Traditional" option window
Command column: ,Control_RunDLL @1
Function: Execute the Control Panel - Add New Hardware wizard.
Command column: ,SHHelpShortcuts_RunDLL AddPrinter
Function: Execute the Control Panel - Add New Printer wizard.
Command column: ,Control_RunDLL ,,1
Function: Displays the "Control Panel-Add/Remove Programs-Installation/Uninstall" panel.
Command column: ,Control_RunDLL ,,2
Function: Displays the "Control Panel-Add/Remove Programs-Installation Windows" panel.
Command column: ,Control_RunDLL ,,3
Function: Displays the "Control Panel-Add/Remove Programs-Startup Disk" panel.
Command column: ,Briefcase_Create
Features: Create a new "My Briefcase" on the desktop.
Command column: ,DiskCopyRunDll
Function: Display the copy disk window
Command column: ,NewLinkHere %1
Function: Displays the dialog box of "Create Shortcut", and the location of the created shortcut is determined by the %1 parameter.
Command column: ,Control_RunDLL ,,0
Function: Displays the "Date and Time" option window.
Command column: ,Control_RunDLL ,,1
Function: Display the "Time Zone" option window.
Command column: ,RnaDial [name of a dial-up connection]
Function: Displays the dialing window for a dialing connection. If the connection is already dialed, the window for the current connection status is displayed.
Command column: ,RnaWizard
Function: Displays the window of the "New Dial-up Connection" wizard.
Command column: ,Control_RunDLL ,,0
Function: Display the "Show Properties - Background" option window.
Command column: ,Control_RunDLL ,,1
Function: Display the "Display Properties - Screen Protection" option window.
Command column: ,Control_RunDLL ,,2
Function: Display the "Show Properties - Appearance" option window.
Command column: ,Control_RunDLL ,,3
Function: Display the "Show Properties - Properties" option window.
Command column: ,SHHelpShortcuts_RunDLL FontsFolder
Function: Displays the "Font" folder of Windows.
Command column: ,Control_RunDLL @3
Function: Also displays the "Font" folder of Windows.
Command column: ,SHformatDrive
Function: Display the formatting soft disk dialog box.
Command column: ,Control_RunDLL ,,0
Function: Displays the "Control Panel - Game Controller - General" option window.
Command column: ,Control_RunDLL ,,1
Function: Displays the "Control Panel-Game Controller-Advanced" option window.
Command column: ,PrintHTML (HTML document)
Function: Print HTML documents.
Command column: ,Control_RunDLL
Function: Displays the Microsoft Exchange general options window.
Command column: ,Control_RunDLL @0
Function: Displays the "Control Panel-Mouse" option.
Command column: ,Control_RunDLL @1
Function: Displays the "Control Panel-Keyboard Properties-Speed" option window.
Command column: ,Control_RunDLL @1,,1
Function: Displays the "Control Panel-Keyboard Properties-Language" option window.
Command column: ,Control_RunDLL @2
Function: Display the Windows "Printer" file folder.
Command column: ,Control_RunDLL @3
Function: Display the Windows "Fonts" folder.
Command column: ,Control_RunDLL @4
Function: Display the "Control Panel - Input Method Properties - Input Method" option window.
Command column: ,Control_RunDLL ,,add
Function: Perform the "Add New Modem" wizard.
Command column: ,Control_RunDLL ,,0
Function: Displays the "Control Panel-Multimedia Properties-Audio" property page.
Command column: ,Control_RunDLL ,,1
Function: Display the "Control Panel-Multimedia Properties-Video" property page.
Command column: ,Control_RunDLL ,,2
Function: Display the "Control Panel-Multimedia Properties-MIDI" property page.
Command column: ,Control_RunDLL ,,3
Function: Display the "Control Panel-Multimedia Properties-CD Music" property page.
Command column: ,Control_RunDLL ,,4
Function: Displays the "Control Panel-Multimedia Properties-Device" property page.
Command column: ,Control_RunDLL @1
Function: Displays the "Control Panel-Sound" option window.
Command column: ,Control_RunDLL
Function: Displays the "Control Panel-Network" option window.
Command column: ,Control_RunDLL
Function: Display the ODBC32 data management options window.
Command column: ,OpenAs_RunDLL {drive:\path\filename}
Function: Displays the "Open With" dialog box for the specified file (drive:\path\filename).
Command column: ,Control_RunDLL
Function: Displays the "Control Panel-Password" option window.
Command column: ,Control_RunDLL
Function: Displays the "Control Panel - Power Management Properties" option window.
Command column: ,SHHelpShortcuts_RunDLL PrintersFolder
Function: Display the Windows "Printer" file folder. (Same as ,Control_RunDLL @2)
Command column: ,Control_RunDLL ,,0
Function: Displays the "Control Panel - Regional Settings Properties - Regional Settings" option window.
Command column: ,Control_RunDLL ,,1
Function: Displays the "Control Panel - Regional Settings Properties - Numbers" option window.
Command column: ,Control_RunDLL ,,2
Function: Displays the "Control Panel - Regional Settings Properties - Currency" option window.
Command column: ,Control_RunDLL ,,3
Function: Displays the "Control Panel - Regional Settings Properties - Time" option window.
Command column: ,Control_RunDLL ,,4
Function: Displays the "Control Panel - Regional Settings Properties - Date" option window.
Command column: ,InstallScreenSaver [Flow screen protection file name]
Function: Set the specified screen protection file to the Windows screen saver and display the screen protection properties window.
Command column: ,Control_RunDLL ,,0
Function: Displays the "Control Panel - System Properties - Traditional" attribute window.
Command column: ,Control_RunDLL ,,1
Function: Displays the "Control Panel - System Properties - Device Manager" property window.
Command column: ,Control_RunDLL ,,2
Function: Displays the "Control Panel - System Properties - Hardware Configuration Archives" property window.
Command column: ,Control_RunDLL ,,3
Function: Displays the "Control Panel - System Properties - Performance" attribute window.
Command column: , restartwindows
Function: Forcefully close all programs and restart the machine.
Command column: ,exitwindows
Function: Forcefully close all programs and shut down.
Command column: ,Control_RunDLL
Function: Display the "Dial Properties" option window
Command column: ,Control_RunDLL
Function: Display the "Desktop Subject" option panel
Of course, not only Visual Basic, but other programming languages such as ++ can also use these functions of Rundll by calling external commands. The specific methods will not be described in detail here. Flexible use of Rundll will definitely make your programming easy and achieve twice the result with half the effort!