./FLEXPART_GFORTRAN: file format pei-i386 architecture: i386, flags 0x0000013a: EXEC_P, HAS_DEBUG, HAS_SYMS, HAS_LOCALS, D_PAGED start address 0x00401000 Characteristics 0x127 relocations stripped executable line numbers stripped large address aware 32 bit words Time/Date Fri Nov 4 13:17:48 2011 Magic 010b (PE32) MajorLinkerVersion 2 MinorLinkerVersion 22 SizeOfCode 000dec00 SizeOfInitializedData 00129000 SizeOfUninitializedData 3b57d200 AddressOfEntryPoint 00001000 BaseOfCode 00001000 BaseOfData 000e0000 ImageBase 00400000 SectionAlignment 00001000 FileAlignment 00000200 MajorOSystemVersion 4 MinorOSystemVersion 0 MajorImageVersion 1 MinorImageVersion 0 MajorSubsystemVersion 4 MinorSubsystemVersion 0 Win32Version 00000000 SizeOfImage 3bcdc000 SizeOfHeaders 00000400 CheckSum 007b2ff6 Subsystem 00000003 (Windows CUI) DllCharacteristics 00008000 SizeOfStackReserve 00200000 SizeOfStackCommit 00001000 SizeOfHeapReserve 00100000 SizeOfHeapCommit 00001000 LoaderFlags 00000000 NumberOfRvaAndSizes 00000010 The Data Directory Entry 0 00000000 00000000 Export Directory [.edata (or where ever we found it)] Entry 1 3b6a9000 00000e0c Import Directory [parts of .idata] Entry 2 00000000 00000000 Resource Directory [.rsrc] Entry 3 00000000 00000000 Exception Directory [.pdata] Entry 4 00000000 00000000 Security Directory Entry 5 00000000 00000000 Base Relocation Directory [.reloc] Entry 6 00000000 00000000 Debug Directory Entry 7 00000000 00000000 Description Directory Entry 8 00000000 00000000 Special Directory Entry 9 00000000 00000000 Thread Storage Directory [.tls] Entry a 00000000 00000000 Load Configuration Directory Entry b 00000000 00000000 Bound Import Directory Entry c 3b6a927c 00000218 Import Address Table Directory Entry d 00000000 00000000 Delay Import Directory Entry e 00000000 00000000 CLR Runtime Header Entry f 00000000 00000000 Reserved There is an import table in .idata at 0x3baa9000 The Import Tables (interpreted .idata section contents) vma: Hint Time Forward DLL First Table Stamp Chain Name Thunk 3b6a9000 3b6a9064 00000000 00000000 3b6a9d5c 3b6a927c DLL Name: cygwin1.dll vma: Hint/Ord Member-Name Bound-To 3b6a9494 15 __assert_func 3b6a94a4 18 __ctype_ptr__ 3b6a94b4 31 __errno 3b6a94c0 52 __getreent 3b6a94d0 59 __main 3b6a94dc 182 _dll_crt0@0 3b6a94ec 275 _fopen64 3b6a94f8 290 _fseeko64 3b6a9504 299 _ftello64 3b6a9510 367 _impure_ptr 3b6a9520 426 _lseek64 3b6a952c 461 _open64 3b6a9538 673 abort 3b6a9540 677 access 3b6a954c 687 acos 3b6a9554 707 asin 3b6a955c 708 asinf 3b6a9564 715 atan2 3b6a956c 716 atan2f 3b6a9578 717 atanf 3b6a9580 721 atof 3b6a9588 723 atoi 3b6a9590 724 atol 3b6a9598 741 calloc 3b6a95a4 759 ceil 3b6a95ac 782 close 3b6a95b4 791 cos 3b6a95bc 792 cosf 3b6a95c4 839 cygwin_detach_dll 3b6a95d8 841 cygwin_internal 3b6a95ec 862 dll_dllcrt0 3b6a95fc 900 erff 3b6a9604 911 exit 3b6a960c 912 exp 3b6a9614 917 expf 3b6a961c 929 fclose 3b6a9628 964 fgets 3b6a9630 968 fileno 3b6a963c 975 floor 3b6a9644 992 fprintf 3b6a9650 994 fputc 3b6a9658 995 fputs 3b6a9660 998 fread 3b6a9668 999 free 3b6a9670 1006 fscanf 3b6a967c 1008 fseek 3b6a9684 1039 fwrite 3b6a9690 1054 getc 3b6a9698 1063 getenv 3b6a96a4 1094 getpid 3b6a96b0 1181 isatty 3b6a96bc 1248 log 3b6a96c4 1250 log10f 3b6a96d0 1257 logf 3b6a96d8 1268 lround 3b6a96e4 1269 lroundf 3b6a96f0 1277 malloc 3b6a96fc 1295 memcpy 3b6a9708 1297 memmove 3b6a9714 1299 memset 3b6a9720 1366 perror 3b6a972c 1374 posix_memalign 3b6a9740 1380 pow 3b6a9748 1383 powf 3b6a9750 1385 printf 3b6a975c 1470 putchar 3b6a9768 1473 puts 3b6a9770 1480 qsort 3b6a9778 1487 read 3b6a9780 1493 realloc 3b6a978c 1528 rewind 3b6a9798 1532 rint 3b6a97a0 1616 setvbuf 3b6a97ac 1654 sin 3b6a97b4 1657 sinf 3b6a97bc 1662 snprintf 3b6a97c8 1673 sprintf 3b6a97d4 1674 sqrt 3b6a97dc 1679 sscanf 3b6a97e8 1686 strcasecmp 3b6a97f8 1688 strcat 3b6a9804 1689 strchr 3b6a9810 1691 strcmp 3b6a981c 1693 strcpy 3b6a9828 1695 strdup 3b6a9834 1696 strerror 3b6a9840 1702 strlen 3b6a984c 1707 strncpy 3b6a9858 1712 strrchr 3b6a9864 1717 strtod 3b6a9870 1721 strtok 3b6a987c 1723 strtol 3b6a9888 1740 sysconf 3b6a9894 1743 tan 3b6a989c 1744 tanf 3b6a98a4 1772 tmpnam 3b6a98b0 1774 tolower 3b6a98bc 1775 toupper 3b6a98c8 1794 unlink 3b6a98d4 1815 vfprintf 3b6a98e0 1825 vsprintf 3b6a98ec 1892 write 3b6a9014 3b6a9200 00000000 00000000 3b6a9d6c 3b6a9418 DLL Name: cyggcc_s-1.dll vma: Hint/Ord Member-Name Bound-To 3b6a98f4 37 __divdi3 3b6a9028 3b6a9208 00000000 00000000 3b6a9de0 3b6a9420 DLL Name: cyggfortran-3.dll vma: Hint/Ord Member-Name Bound-To 3b6a9900 47 _gfortran_compare_string 3b6a991c 49 _gfortran_concat_string 3b6a9938 232 _gfortran_internal_pack 3b6a9954 233 _gfortran_internal_unpack 3b6a9970 447 _gfortran_pause_string 3b6a998c 496 _gfortran_runtime_error_at 3b6a99ac 506 _gfortran_set_args 3b6a99c4 507 _gfortran_set_convert 3b6a99dc 512 _gfortran_set_options 3b6a99f4 513 _gfortran_set_record_marker 3b6a9a14 714 _gfortran_st_close 3b6a9a2c 720 _gfortran_st_open 3b6a9a40 721 _gfortran_st_read 3b6a9a54 722 _gfortran_st_read_done 3b6a9a70 723 _gfortran_st_rewind 3b6a9a88 727 _gfortran_st_write 3b6a9aa0 728 _gfortran_st_write_done 3b6a9abc 733 _gfortran_stop_numeric 3b6a9ad8 734 _gfortran_stop_string 3b6a9af0 736 _gfortran_string_index 3b6a9b0c 744 _gfortran_string_trim 3b6a9b24 768 _gfortran_transfer_array 3b6a9b40 769 _gfortran_transfer_character 3b6a9b60 772 _gfortran_transfer_integer 3b6a9b80 774 _gfortran_transfer_real 3b6a903c 3b6a9270 00000000 00000000 3b6a9dfc 3b6a9488 DLL Name: KERNEL32.dll vma: Hint/Ord Member-Name Bound-To 3b6a9b9c 529 GetModuleHandleA 3b6a9bb0 577 GetProcAddress 3b6a9050 00000000 00000000 00000000 00000000 00000000