Archive: Rundll


Rundll
Hello, i am somewhat experienced with API calls from languages such as vb, vb.net

However, with rundll32, im wondering how the information here was obtained:

http://nsis.sourceforge.net/Opening_...lay_Properties

Does microsoft have a repository of such commands? How can one go about figuring out the arguments to send to a dll for a specific result, such as opening the display properties? How was this figured out? Is there a visual studio tool for this? Could one open the display manager manually, then check a process viewer of some sort to find out what was called? Please help, this subject seems interesting and very useful for scripting.

Thanks!


Try Process Explorer. With Process Explorer look in the properties of rundll32.exe and in Image tab look the command line field.

e.g. Safely remove hardware:
"C:\WINNT\system32\RUNDLL32.EXE" shell32.dll,Control_RunDLL hotplug.dll