.: FILE STATUS INFORMATION :. hard links: 1 uid: 500 gid: 500 size: 49152 block size: 4096 block count: 88 last access: Mon Sep 1 19:36:05 2003 last mod: Fri Aug 22 17:04:02 2003 last change: Fri Aug 22 17:04:02 2003 .: CORE ELF HEADER INFORMATION :. capacity: 32 bit (ELFCLASS32) [1] data encoding type: 2's comp, little endian (ELFDATA2LSB) [1] file version: current (EV_CURRENT) [1] OS ABI: Unix System V ABI [0] ABI version: 0 padding bytes: 0 object file type: core file (ET_CORE) [4] architecture: Intel 80386 (EM_NONE) [3] object file version: current (EV_CURRENT) [1] entry point virtual address: 0 program header table file offset: 0x34 section header table file offset: 0 processor speciffic flags: 0 ELF header size: 52 bytes program header table entry size: 32 bytes program header table entry count: 10 section header table entry size: 0 bytes section header table entry count: 0 section header string table index: 0 .: SEGMENT INFORMATION :. type offset vaddress paddress size(file) size(mem) RWX align ============================================================================ NOTE 0x174 0 0 2028 0 0 0 LOAD 0x1000 0x8048000 0 0 4096 0x5 0x1000 LOAD 0x1000 0x8049000 0 4096 4096 0x6 0x1000 LOAD 0x2000 0x40000000 0 0 86016 0x5 0x1000 LOAD 0x2000 0x40015000 0 4096 4096 0x6 0x1000 LOAD 0x3000 0x40016000 0 4096 4096 0x6 0x1000 LOAD 0x4000 0x42000000 0 0 1236992 0x5 0x1000 LOAD 0x4000 0x4212e000 0 12288 12288 0x6 0x1000 LOAD 0x7000 0x42131000 0 8192 8192 0x6 0x1000 LOAD 0x9000 0xbfffd000 0 12288 12288 0x7 0x1000 .: NOTES INFORMATION :. ### found note section at offset: 0x174 ### --- note 0 at offset 0x174 --- padding: 4 bytes note name size: 0x5 bytes note description size: 0x90 bytes note name: CORE note type: PRSTATUS [1] signal number: 8 extra code: 0 errno: 0 current signal: 8 set of pending signals: 0 set of held signals: 0 pid: 4843 ppid: 4843 pgrp: 4843 sid: 4813 user time: 0.0 sec system time: 0.0 sec cumulative user time: 0.0 sec cumulative system time: 0.0 sec bool pr_fpvalid: 0 general purpose registers: ebx: 0x42130a14 ecx: 0x42015554 edx: 0 esi: 0x40015360 edi: 0x8048358 ebp: 0xbfffe268 eax: 0x270f xds: 0x2b xes: 0x2b xfs: 0 xgs: 0x33 orig_eax: 0xffffffff eip: 0x8048318 xcs: 0x23 eflags: 0x10286 esp: 0xbfffe250 xss: 0x2b --- note 1 at offset 0x218 --- padding: 4 bytes note name size: 0x5 bytes note description size: 0x7c bytes note name: CORE note type: PRPSINFO [3] numeric process state: char for pr_state: R zombie: nice val: flag 1: 0 uid: 500 gid: 500 pid: 4843 ppid: 4813 pgrp: 4843 sid: 4813 filename or executable: a.out --- note 2 at offset 0x2a8 --- padding: 4 bytes note name size: 0x5 bytes note description size: 0x6b0 bytes note name: CORE note type: PRXREG [4] next note at 0x7f8 .: ENCLOSED ELF HEADER INFORMATION at 0x1000 :. capacity: 32 bit (ELFCLASS32) [1] data encoding type: 2's comp, little endian (ELFDATA2LSB) [1] file version: current (EV_CURRENT) [1] OS ABI: Unix System V ABI [0] ABI version: 0 padding bytes: 0 object file type: executable file (ET_EXEC) [2] architecture: Intel 80386 (EM_NONE) [3] object file version: current (EV_CURRENT) [1] entry point virtual address: 0x8048244 program header table file offset: 0x34 section header table file offset: 0x1cdc processor speciffic flags: 0 ELF header size: 52 bytes program header table entry size: 32 bytes program header table entry count: 6 section header table entry size: 40 bytes section header table entry count: 34 section header string table index: 31