Introduction to Rundll32.exe command usage

Introduction to Rundll32.exe command usage


What Rundll32.exe is. As implies, "execute a 32-bit DLL file." Its function is to execute the internal functions in the DLL file, so that in the process, there will be only Rundll32.exe, and no DLL back-door process, so that the process of the implementation of the hidden. If you see multiple Rundll32.exe in the system, don't panic, which proves how many DLL files have been started with Rundll32.exe.   Of course, these Rundll32.exe execute DLL files, and we can all find them from where the system is automatically loaded. The following methods are used under the command line: Rundll32.exe dllname,functionname [Arguments]
Dllname is the DLL file name that needs to be executed; functionname is the specific derivation function of the DLL file to be executed before, [Arguments] is the specific parameter of the derivation function.
Here to note three points: 1. DLL file name can not contain spaces, such as the file is located in the C:\ProgramFiles\ directory, you want to change this path to c:\progra~1\;2. The comma between the DLL file name and the DLL entry point cannot be less, otherwise the program will go wrong and no information will be given. 3. This is the most important point: Rundll cannot be used to call DLLs with return value parameters, such as GetUserName (), Gettextface (), and so on in Win32API. In Visual Basic, a directive shell that executes an external program is provided, in the form of:
Shell "command column"
If you can match Rundll32.exe with a good shell command, makes your VB program have an effect that is difficult or impossible to implement in other ways: Still, for example, the traditional method requires you to create a module in the VB project, and then write the WINAPI declaration before you can call in the program. And now just one sentence: the Shell "Rundll32.exe user.exe,restartwindows" is done. is not much more convenient. Other RUNdll.exe methods of use.