./FLEXPART_GFORTRAN: file format pei-i386 architecture: i386, flags 0x0000013a: EXEC_P, HAS_DEBUG, HAS_SYMS, HAS_LOCALS, D_PAGED start address 0x00401000 Characteristics 0x127 relocations stripped executable line numbers stripped large address aware 32 bit words Time/Date Fri Nov 4 13:13:25 2011 Magic 010b (PE32) MajorLinkerVersion 2 MinorLinkerVersion 22 SizeOfCode 000dd200 SizeOfInitializedData 00127600 SizeOfUninitializedData c9bbec00 AddressOfEntryPoint 00001000 BaseOfCode 00001000 BaseOfData 000df000 ImageBase 00400000 SectionAlignment 00001000 FileAlignment 00000200 MajorOSystemVersion 4 MinorOSystemVersion 0 MajorImageVersion 1 MinorImageVersion 0 MajorSubsystemVersion 4 MinorSubsystemVersion 0 Win32Version 00000000 SizeOfImage ca31c000 SizeOfHeaders 00000400 CheckSum 007b7e92 Subsystem 00000003 (Windows CUI) DllCharacteristics 00008000 SizeOfStackReserve 00200000 SizeOfStackCommit 00001000 SizeOfHeapReserve 00100000 SizeOfHeapCommit 00001000 LoaderFlags 00000000 NumberOfRvaAndSizes 00000010 The Data Directory Entry 0 00000000 00000000 Export Directory [.edata (or where ever we found it)] Entry 1 c9ce9000 00000e0c Import Directory [parts of .idata] Entry 2 00000000 00000000 Resource Directory [.rsrc] Entry 3 00000000 00000000 Exception Directory [.pdata] Entry 4 00000000 00000000 Security Directory Entry 5 00000000 00000000 Base Relocation Directory [.reloc] Entry 6 00000000 00000000 Debug Directory Entry 7 00000000 00000000 Description Directory Entry 8 00000000 00000000 Special Directory Entry 9 00000000 00000000 Thread Storage Directory [.tls] Entry a 00000000 00000000 Load Configuration Directory Entry b 00000000 00000000 Bound Import Directory Entry c c9ce927c 00000218 Import Address Table Directory Entry d 00000000 00000000 Delay Import Directory Entry e 00000000 00000000 CLR Runtime Header Entry f 00000000 00000000 Reserved There is an import table in .idata at 0xca0e9000 The Import Tables (interpreted .idata section contents) vma: Hint Time Forward DLL First Table Stamp Chain Name Thunk c9ce9000 c9ce9064 00000000 00000000 c9ce9d5c c9ce927c DLL Name: cygwin1.dll vma: Hint/Ord Member-Name Bound-To c9ce9494 1238275220 c9ce94a4 1238275236 c9ce94b4 1238275252 c9ce94c0 1238275264 c9ce94d0 1238275280 c9ce94dc 1238275292 c9ce94ec 1238275308 c9ce94f8 1238275320 c9ce9504 1238275332 c9ce9510 1238275344 c9ce9520 1238275360 c9ce952c 1238275372 c9ce9538 1238275384 c9ce9540 1238275392 c9ce954c 1238275404 c9ce9554 1238275412 c9ce955c 1238275420 c9ce9564 1238275428 c9ce956c 1238275436 c9ce9578 1238275448 c9ce9580 1238275456 c9ce9588 1238275464 c9ce9590 1238275472 c9ce9598 1238275480 c9ce95a4 1238275492 c9ce95ac 1238275500 c9ce95b4 1238275508 c9ce95bc 1238275516 c9ce95c4 1238275524 c9ce95d8 1238275544 c9ce95ec 1238275564 c9ce95fc 1238275580 c9ce9604 1238275588 c9ce960c 1238275596 c9ce9614 1238275604 c9ce961c 1238275612 c9ce9628 1238275624 c9ce9630 1238275632 c9ce963c 1238275644 c9ce9644 1238275652 c9ce9650 1238275664 c9ce9658 1238275672 c9ce9660 1238275680 c9ce9668 1238275688 c9ce9670 1238275696 c9ce967c 1238275708 c9ce9684 1238275716 c9ce9690 1238275728 c9ce9698 1238275736 c9ce96a4 1238275748 c9ce96b0 1238275760 c9ce96bc 1238275772 c9ce96c4 1238275780 c9ce96d0 1238275792 c9ce96d8 1238275800 c9ce96e4 1238275812 c9ce96f0 1238275824 c9ce96fc 1238275836 c9ce9708 1238275848 c9ce9714 1238275860 c9ce9720 1238275872 c9ce972c 1238275884 c9ce9740 1238275904 c9ce9748 1238275912 c9ce9750 1238275920 c9ce975c 1238275932 c9ce9768 1238275944 c9ce9770 1238275952 c9ce9778 1238275960 c9ce9780 1238275968 c9ce978c 1238275980 c9ce9798 1238275992 c9ce97a0 1238276000 c9ce97ac 1238276012 c9ce97b4 1238276020 c9ce97bc 1238276028 c9ce97c8 1238276040 c9ce97d4 1238276052 c9ce97dc 1238276060 c9ce97e8 1238276072 c9ce97f8 1238276088 c9ce9804 1238276100 c9ce9810 1238276112 c9ce981c 1238276124 c9ce9828 1238276136 c9ce9834 1238276148 c9ce9840 1238276160 c9ce984c 1238276172 c9ce9858 1238276184 c9ce9864 1238276196 c9ce9870 1238276208 c9ce987c 1238276220 c9ce9888 1238276232 c9ce9894 1238276244 c9ce989c 1238276252 c9ce98a4 1238276260 c9ce98b0 1238276272 c9ce98bc 1238276284 c9ce98c8 1238276296 c9ce98d4 1238276308 c9ce98e0 1238276320 c9ce98ec 1238276332 c9ce9014 c9ce9200 00000000 00000000 c9ce9d6c c9ce9418 DLL Name: cyggcc_s-1.dll vma: Hint/Ord Member-Name Bound-To c9ce98f4 1238276340 c9ce9028 c9ce9208 00000000 00000000 c9ce9de0 c9ce9420 DLL Name: cyggfortran-3.dll vma: Hint/Ord Member-Name Bound-To c9ce9900 1238276352 c9ce991c 1238276380 c9ce9938 1238276408 c9ce9954 1238276436 c9ce9970 1238276464 c9ce998c 1238276492 c9ce99ac 1238276524 c9ce99c4 1238276548 c9ce99dc 1238276572 c9ce99f4 1238276596 c9ce9a14 1238276628 c9ce9a2c 1238276652 c9ce9a40 1238276672 c9ce9a54 1238276692 c9ce9a70 1238276720 c9ce9a88 1238276744 c9ce9aa0 1238276768 c9ce9abc 1238276796 c9ce9ad8 1238276824 c9ce9af0 1238276848 c9ce9b0c 1238276876 c9ce9b24 1238276900 c9ce9b40 1238276928 c9ce9b60 1238276960 c9ce9b80 1238276992 c9ce903c c9ce9270 00000000 00000000 c9ce9dfc c9ce9488 DLL Name: KERNEL32.dll vma: Hint/Ord Member-Name Bound-To c9ce9b9c 1238277020 c9ce9bb0 1238277040 c9ce9050 00000000 00000000 00000000 00000000 00000000