Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 05-14-2016, 16:03
xiaohang99 xiaohang99 is offline
Guest
 
Join Date: Mar 2016
Posts: 3
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 0 Times in 0 Posts
xiaohang99 Reputation: 0
Question vc2010 produced .obj is not a COFF type file ,there is anybody know why?

I try to build a crypto++ .lib file for make .sig file of IDA,building crypto++ .lib was succeeded ,
but when I try to use flair to make .sig , it tell me can't recognize those .obj file type that linked in .lib .

so I open a .obj read it ,and this's what is see .

Quote:
00000000 00 00 FF FF 01 00 4C 01 A6 C8 36 57 38 FE B3 0C ÿÿ L ¦È6W8þ³
00000010 A5 D9 AB 4D AC 9B D6 B6 22 26 53 C2 47 DE 06 00 ¥Ù«M¬›Ö¶"&SÂG?
00000020 13 0C 07 00 A6 C8 36 57 23 DD 06 00 10 00 00 00 ¦È6W#?
00000030 00 00 00 00 2E 64 72 65 63 74 76 65 00 00 00 00 .drectve
00000040 00 00 00 00 51 00 00 00 2C 01 00 00 00 00 00 00 Q ,
00000050 00 00 00 00 00 00 00 00 00 0A 10 00 2E 63 69 6C .cil
00000060 24 66 67 00 00 00 00 00 00 00 00 00 EA 00 00 00 $fg ?
00000070 7D 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 }
00000080 40 00 10 40 2E 63 69 6C 24 67 6C 00 00 00 00 00 @ @.cil$gl
coff type file shold be like this ,first word is magic number 0x14C

Quote:
00000000 4C 01 04 00 0F A3 35 57 D8 0B 00 00 27 00 00 00 L ?W? '
00000010 00 00 00 00 2E 74 65 78 74 00 00 00 00 00 00 00 .text
00000020 00 00 00 00 BB 00 00 00 B4 00 00 00 00 00 00 00 ? ?
00000030 00 00 00 00 00 00 00 00 20 00 50 60 2E 64 61 74 P`.dat
00000040 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000060 40 00 50 C0 2E 64 65 62 75 67 24 53 00 00 00 00 @ P?debug$S
00000070 00 00 00 00 D0 07 00 00 6F 01 00 00 40 09 00 00 ? o @
00000080 00 00 00 00 3A 00 00 00 40 00 10 42 2E 64 65 62 : @ B.deb
00000090 75 67 24 54 00 00 00 00 00 00 00 00 54 00 00 00 ug$T T
000000A0 84 0B 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ?
so what kind file type it is ,it's not COFF or OMF ,definitely not ELF
Reply With Quote
  #2  
Old 05-15-2016, 01:53
Kerlingen Kerlingen is offline
VIP
 
Join Date: Feb 2011
Posts: 324
Rept. Given: 0
Rept. Rcvd 276 Times in 98 Posts
Thanks Given: 0
Thanks Rcvd at 308 Times in 95 Posts
Kerlingen Reputation: 200-299 Kerlingen Reputation: 200-299 Kerlingen Reputation: 200-299
Disable "Link Time Code Generation" in your project.
Reply With Quote
  #3  
Old 05-15-2016, 03:17
gigaman gigaman is offline
Friend
 
Join Date: Jun 2002
Posts: 87
Rept. Given: 0
Rept. Rcvd 3 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 14 Times in 11 Posts
gigaman Reputation: 4
Yep, that's an internal VC format (different for each version of VC) - that only turns into real code when the final module (EXE, DLL, ...) is linked.
Reply With Quote
The Following User Says Thank You to gigaman For This Useful Post:
xiaohang99 (05-15-2016)
  #4  
Old 05-15-2016, 08:43
maktm maktm is offline
Friend
 
Join Date: Apr 2015
Posts: 23
Rept. Given: 0
Rept. Rcvd 4 Times in 2 Posts
Thanks Given: 8
Thanks Rcvd at 16 Times in 8 Posts
maktm Reputation: 4
You can specify the type of object module outputted by changing the switches passed to ml.exe.

https://msdn.microsoft.com/en-us/library/s0ksfwcf.aspx
Reply With Quote
The Following User Says Thank You to maktm For This Useful Post:
xiaohang99 (05-15-2016)
  #5  
Old 05-15-2016, 17:22
xiaohang99 xiaohang99 is offline
Guest
 
Join Date: Mar 2016
Posts: 3
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 2
Thanks Rcvd at 0 Times in 0 Posts
xiaohang99 Reputation: 0
thank you all .
I disable the /LTCG switch £¬ it worked
but when you disable /LTCG switch £¬you also need to disable /GL switch ,that means you will get very large .lib file
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
What type of encryption has been used to Zyxel VMG8924-B10A config file? flightwatch General Discussion 15 08-05-2020 04:20


All times are GMT +8. The time now is 18:10.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )