China DOS Union

### I. Specific Applications of Modifying DLL Files

In the system's group policy and registry, we can modify some key values to optimize our system and enhance the security of the operating system. However, for functions such as restricting downloads and prohibiting file deletion, we cannot achieve them through the above operations; this can only be done by modifying the system DLL files. Currently, by modifying the system's DLL files, we can achieve functions like prohibiting file deletion, prohibiting IE downloads, prohibiting IE saving as, and prohibiting file open methods.

### II. Functions of Some DLL Files in the System

1. Browselc.dll: The library file DLL structure that IE needs to call is initially this.
2. Shdoclc.dll: System windows and settings, such as deleting files, renaming.
3. Shell32.dll: System windows and settings, such as deleting files, renaming.
4. Cryptui.dll: IE control download and prompt dialog program.

### III. Methods of Modifying DLL Files

1. Download the DLL file modification tool EXESCOPE 6.0 - 6.3 or 6.4 tool.
2. Obtain these linked files: Browselc.dll, Shdoclc.dll, Shell32.dll, and Cryptui.dll. When looking for these files, it is best to mount the hard drive of another machine on this machine, and then start with this machine's operating system and copy these files.
3. When modifying the DLL file, open this key value, and disable the key value to be modified in the right - hand dialog box. Do not delete it, in case of restoration in the future.

### IV. DLL File Modification Secrets

1. Modification method for prohibiting download: Open Shdoclc.dll, modify resources -- dialog box -- 4416, and disable the 4416 key value.
2. Prohibiting adding web pages to favorites: Open Shdoclc.dll, modify resources -- dialog box -- 21400, and disable this key value.
3. Prohibiting malicious web pages from loading controls: Modify the Cryptui.dll file. It is necessary to modify 5 places to completely prohibit. Resources -- dialog box -- 130, resources -- dialog box -- 230, resources -- dialog box -- 4101, resources -- dialog box -- 4104, resources -- dialog box -- 4107. Disable the corresponding key values in each of the above dialog boxes.
4. Prohibiting the system from deleting files: Modify Shell32.dll. This file needs to be modified in 5 places to prohibit the system from deleting files. Resources -- dialog box -- 1011, resources -- dialog box -- 1012, resources -- dialog box -- 1013, resources -- dialog box -- 1021, resources -- dialog box -- 1022. Disable the key values of the above five addresses.
5. Prohibiting files from being renamed: Modify shell32.dll. There are 2 places to modify. Resources -- dialog box -- 1018, resources -- dialog box -- 1019. Disable the corresponding key values of the above two places.
6. Prohibiting the run menu: Modify shell32.dll. Set the resources -- dialog box -- 1018 key value to disabled.
7. Prohibiting system files from being moved: Modify shell32.dll. It is necessary to modify 4 places. Resources -- dialog box -- 1014, resources -- dialog box -- 1015, resources -- dialog box -- 1016, resources -- dialog box -- 1017.
8. Prohibiting target saving as: Modify the Shdoclc.dll file. It is necessary to modify 3 places. Resources -- menu -- 258 -- 257, resources -- menu -- 258 -- 252, resources -- menu -- 24641 -- 2268. In this modification, we need to delete the corresponding key values. After opening this key value, there is deletion in the right - click menu. In resources -- menu -- 24641 -- 2268, there are multiple such key values, and delete them one by one.
9. Prohibiting custom folder options: Modify the Shell32.dll file. It is necessary to modify the following 4 places. Resources -- menu -- 215 -- 28719, resources -- menu -- 216 -- 28719, resources -- menu -- 217 -- 28719, resources -- menu -- 216 -- 28719. Find the above four key values and directly delete them instead of disabling.
10. Prohibiting IE folder options: Modify the Browselc.dll file. It is necessary to modify 3 key values. Resources -- menu -- 263 (there are multiple, please delete) -- 41251 (delete), resources -- menu -- 266 (there are multiple, please delete) -- 41329 (delete), resources -- menu -- 268 -- 41251 (delete). In the above 3 key values, some key values have multiple places, and delete them one by one.
11. Prohibiting 98 file sharing control: Modify Msshrui.dll. It is necessary to modify 2 places. Resources -- dialog box -- 1 -- AutoRadioButton, resources -- dialog box -- 30 -- AutoRadioButton. Disable the key values of the above two places. Other options can be modified according to your own needs. Find the corresponding functional key values and disable the functions you do not need.
12. Prohibiting file open methods: Modify Url.dll. It is necessary to modify 2 places. Resources -- dialog box -- 7000, resources -- dialog box -- 7005. Disable the key values of the above two places.
13. Prohibiting changing the system desktop: Modify Shdoc401.dll. There are 2 places to modify. Resources -- dialog box -- 29952 -- PushButton: Browse, resources -- dialog box -- 29952 -- PushButton: Pattern. Disable the key values of the above two places.
14. Prohibiting system folder customization: Modify Shd401lc.dll. There are 2 places to modify. Resources -- dialog box -- 29957, resources -- dialog box -- 29958. Disable the key values of the above two places.
15. Prohibiting file save path and opening: Modify Comdlg32.dll. There are 2 places to modify. Resources -- dialog box -- 1547, resources -- dialog box -- 1548. Disable the key values of the above two places.

### V. Precautions

1. This article takes the modification of DLL files in the Windows XP/2000 operating system as an example, and it may not be applicable to the Windows 98 operating system. Please pay attention when modifying DLL files.
2. In the operation of prohibiting download, in addition to modifying the prohibited download linked file Shdoclc.dll, it is also necessary to modify the prohibited file saving as linked file Shdoclc.dll. If modifying one linked file cannot achieve the corresponding function, check whether there are key values that need to be modified in other linked files.
3. The modified DLL linked file needs to be imported in DOS mode and the machine restarted to be effective.
4. This article only introduces the frequently used DLL modification options in our daily operations. For other options, please refer to the specific options in the DLL file for modification.
5. Before modifying the DLL file, please back up the original system DLL file in case of modification failure for restoration.

### DLL Modification Instance Explanation

※ About Modification of System Tray Icons ※

Network connection and volume~~~
Both are in the C:\WINDOWS\system32 folder. You can find them.
(Network connection) The icon is in the #1915--#1918 of the netshell.dll icon item.
(Volume) In the stobjec t.dll icon item, it is 230--231. And there is also (volume) in the stobjec t.dll icon item, which is 230--231.

※ About Modification of the Buttons in the Upper - Right Corner of the Open/Save Dialog Box ※

There are also many people who mention the problem of several bitmaps in the upper - right corner of the open and save dialog boxes. Here I will say it again: It is the bitmap items 124--131 in comctl32.dll, and it is under the following two folders.
X:\WINDWOS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
X:\WINDWOS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805

※ About Modification of the IE Download Dialog Box Animation ※

There are also many people asking about the AVI for IE download.
It is in the AVI resource 256 in C:\WINDOWS\system32\SHDOCVW.DLL.

※ About Modification of the Toolbar Buttons of Windows Explorer/IE ※

The replacement position of the toolbar buttons of IE and Windows Explorer is bitmap 204--217 of shell32.dll.
The replacement position of the micro - logo at the corner of IE is bitmap 240--242 in shell32.dll.

※ About Modification of the Shutdown/Logoff Dialog Box ※

The most frequently asked question is about the shutdown and logoff dialog boxes.
Shutdown is in msgina.dll.
Logoff is in shell32.dll.

※ About Modification of the Windows Picture Viewer ※

The picture and fax viewer is also relatively common~~~ The words in the title bar can be modified by the first item of the string inside.
The buttons in the lower row are bitmap items 104-107 of shimgvw.dll.

※ About Modification of the Control Panel Items ※

The positions of the various icons in the classified view of the control panel are icon items 268-276 of shell32.dll.
The various icons in the classic view of the control panel are generally in the corresponding.cpl files in C:\WINDOWS\system32, respectively:
modem.cpl Modem icon
main.cpl Mouse icon
netcpl.cpl Network connection icon
ODBCCP32.CPL ODBC data source
powercfg.cpl Power options
main.cpl Printer and fax icon
intl.cpl Region and language settings icon
appwiz.cpl Add/Remove application icon
mmsys.cpl Sound and multimedia icon
sysdm.cpl System icon
inetcpl.cpl User icon
access.cpl Accessibility options
sysdm.cpl Add new hardware
datetime.cpl Date and time icon
desk.cpl Display properties
main.cpl Font icon
joy.cpl Game controller icon
inetcpl.cpl Internet options icon
main.cpl Keyboard icon
mstask.dll Task plan icon
etc.~~~~~~

Dialog Box for Add/Remove Applications

Many people cannot find the icon of "Set program access and defaults" at the bottom. Here I will also post the picture.
The above three in appwiz.cpl are in bitmap items 101--103, not in the usual icon items.
And the icon at the bottom is in the icon item 114 of moricons.dll.

※ About Modification of the System Properties Dialog Box ※

Many people want to modify the words on the system properties dialog box and the corresponding icons, bitmaps, etc. I have collected the following files for everyone:
Computer name netid.dll (words on the dialog box, dialog box item 112)
Remote remotepg.dll (words on the dialog box, dialog box item 510)
Automatic update wuaueng.dll (words on the dialog box, dialog box item 501)
General, hardware and advanced options sysdm.cpl (words on the dialog box, dialog box item 101)
System restore srrstr.dll (words on the dialog box, dialog box item 11)

※ About Modification of the Display Properties Dialog Box ※

The display properties dialog box is also a primary consideration in everyone's personalization~~
The related files are themeui.dll and shell32.dll~~~

※ Others ※

The icons used in the system messages. Everyone must pay attention to one point when replacing. The format of the icon must be the same as the format of the original icon, otherwise, it may be impossible to enter the system!!! Remember.
This file is: User32.dll icon items 100--105.

Toolbar bitmap replacement: In C:\WINDOWS\PCHEALTH\HELPCTR\Binaries, the bitmap items 300#--303# and icon item 200# in helpctr.exe.
And some icons and bitmaps inside. Download the following file and directly replace the images folder in C:\WINDOWS\PCHEALTH\HELPCTR\System.

Thanks a lot! Support!

When modifying DLL files with EXESCOPE, when importing DLL files, I checked and there are many identical DLL files in the directory with WINDOWS as the root. I don't know how to import them.

Such a good article...

Learned.....Thanks

Passing by and taking a look, there's nothing to say except admiration. Still working on booting, after booting, making a software integration CD, and finally PE, the system. Hey, really don't know how long it will take to learn to be as fluent as the original poster...

Since I've chosen it, I'll keep going.

Bookmarked

Very good. Worth learning

This is very useful. Put it here first. Come back when needed later.

It's really nice!



Thank you very much, the LZ!