0x0000ffff在Windows中dll的默认加载计数？ [英] Is 0x0000ffff the default load count of a dll in windows?

问题描述

使用windbg，得到带有加载计数的dll列表！dlls 命令。观察到许多加载dll的负载计数是 0x0000ffff 。
这是默认值吗？

这是否意味着什么？

  0x00262fa8：C：\WINDOWS\system32\ole32.dll 
 Base 0x774e0000 EntryPoint 0x774fd0b9大小0x0013d000 
标志0x80084006` LoadCount 0x0000ffff TlsIndex 0x00000000 
 LDRP_STATIC_LINK 
 LDRP_IMAGE_DLL 
 LDR **强文本** P_ENTRY_PROCESSED 
 LDRP_PROCESS_ATTACH_CALLED 
  pre> 
 
解决方案
从找到DLL参考计数的隐藏方法：
 
 
 
 DLL的加载计数是一个16位值。如果该值被视为有符号的short，则为-1（0xfffff），则表示DLL是静态链接的，否则动态加载。
 
Using windbg, got the list of dlls with load count by !dlls command. Observed that the load count is 0x0000ffff for many loaded dlls.
Is that a default value ?

Is that mean anything else ? 
      0x00262fa8: C:\WINDOWS\system32\ole32.dll
      Base   0x774e0000  EntryPoint  0x774fd0b9  Size        0x0013d000
      Flags  0x80084006` LoadCount   0x0000ffff  TlsIndex    0x00000000
             LDRP_STATIC_LINK
             LDRP_IMAGE_DLL
             LDR**strong text**P_ENTRY_PROCESSED
             LDRP_PROCESS_ATTACH_CALLED

解决方案
From The Covert Way to find the Reference Count of DLL:

The load count for a DLL is a 16-bit value. If that value, treated as a signed short, is -1 (0xfffff) it indicates the DLL is statically linked, otherwise it's dynamically loaded.

                        
这篇关于0x0000ffff在Windows中dll的默认加载计数？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！