Merge 892a42da36 into 943743dbaf

Update make-golangci-lint to 1.58.2 from 1.58.1

.github/workflows/ci.yml

@@ -7,7 +7,7 @@ on:
   pull_request:
 
 env:
-  GOLANGCILINT_VERSION: "1.57.2"
+  GOLANGCILINT_VERSION: "1.58.2"
 
 jobs:
   lint:
@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v3
         with:
-          go-version: "1.22.2"
+          go-version: "1.22.3"
       - uses: actions/checkout@v3
       - uses: golangci/golangci-lint-action@v3
         with:
@@ -47,7 +47,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v3
         with:
-          go-version: "1.22.2"
+          go-version: "1.22.3"
       - name: Test
         env:
           GOARCH: ${{ matrix.goarch }}

.github/workflows/release.yml

@@ -15,8 +15,8 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v3
         with:
-          go-version: "1.22.2"
-      - uses: goreleaser/goreleaser-action@v2
+          go-version: "1.22.3"
+      - uses: goreleaser/goreleaser-action@v5
         with:
           distribution: goreleaser
           version: latest

.goreleaser.yml

@@ -59,7 +59,7 @@ brews:
     repository:
       owner: wader
       name: homebrew-tap
-    folder: Formula
+    directory: Formula
     homepage: https://github.com/wader/fq
     description: jq for binary formats
     license: MIT

CHANGES.md

@@ -1,3 +1,88 @@
+# 0.11.0
+
+New iNES/NES 2.0 ROM decoder (thanks @mlofjard) and basic JPEG 2000 format support. jq language improvements and fixes from gojq. And as always various decoder improvements and fixes.
+
+## Changes
+
+- Add `string_truncate` option to configure how to truncate long strings when displaying a decode value tree. `dd`, `dv` etc set truncate length to zero to not truncate. #919
+- gojq updates from upstream:
+  - Implement `ltrim`, `rtrim`, and `trim` functions
+  - Fix object construction with duplicate keys (`{x:0,y:1} | {a:.x,a:.y}`)
+  - Fix `halt` and `halt_error` functions to stop the command execution immediately
+  - Fix variable scope of binding syntax (`"a" as $v | def f: $v; "b" as $v | f`)
+  - Fix `ltrimstr` and `rtrimstr` functions to emit error on non-string input
+  - Fix `nearbyint` and `rint` functions to round ties to even
+  - Improve parser to allow `reduce`, `foreach`, `if`, `try`-`catch` syntax as object values
+  - Remove `pow10` in favor of `exp10`, define `scalbn` and `scalbln` by `ldexp`
+- Fix issue using decode value with `ltrimstr`/`rtrimstr`.
+
+## Format changes
+
+- `fit`
+  - Skip array fields on pre read messages. #878
+  - Fixed subfield referencing fields below self in message. #877
+- `jp2c` New JPEG 2000 codestream decoder. #928
+- `icc_profile` Strip whitespace in header and tag strings. #912
+- `mp4`
+  - Add `jp2c`, `jp2h`, `ihdr` `jP` JPEG 2000 related boxes support. #928
+  - Add `thmb` box support. #897
+  - Turns out for qt brand `hdlr` component name might be zero bytes. #896
+- `nes` New iNES/NES 2.0 ROM decoder (thanks @mlofjard). #893
+
+## Changelog
+
+* f7b067b6 Fixed subfield referencing fields below self in message
+* 9aa99b47 Update docker-golang to 1.22.1 from 1.22.0
+* 0afb5b59 Update docker-golang to 1.22.2 from 1.22.1
+* 2657988d Update github-go-version to 1.22.1 from 1.22.0
+* 33c93918 Update github-go-version to 1.22.2 from 1.22.1
+* a577c398 Update github-golangci-lint to 1.56.2 from 1.56.1
+* 82d96cf9 Update github-golangci-lint to 1.57.0 from 1.56.2
+* 72b4569b Update github-golangci-lint to 1.57.1 from 1.57.0
+* 14aeab0b Update github-golangci-lint to 1.57.2 from 1.57.1
+* 735256b9 Update gomod-golang-x-crypto to 0.20.0 from 0.19.0
+* 043f067f Update gomod-golang-x-crypto to 0.21.0 from 0.20.0
+* 15a7060b Update gomod-golang-x-crypto to 0.22.0 from 0.21.0
+* 85f60df2 Update gomod-golang-x-net to 0.22.0 from 0.21.0
+* 77c000e6 Update gomod-golang-x-net to 0.23.0 from 0.22.0
+* daba6b54 Update gomod-golang-x-net to 0.24.0 from 0.23.0
+* ba9ecb54 Update gomod-golang-x-term to 0.18.0 from 0.17.0
+* b2aa59f7 Update gomod-golang-x-term to 0.19.0 from 0.18.0
+* 1c24f64d Update make-golangci-lint to 1.56.2 from 1.56.1
+* 94e80864 Update make-golangci-lint to 1.57.0 from 1.56.2
+* 4f55b6af Update make-golangci-lint to 1.57.1 from 1.57.0
+* a3b63b10 Update make-golangci-lint to 1.57.2 from 1.57.1
+* 208b3e6b chore: fix function name in comment
+* 621d7f2c decode: Align some heavily used structs to save space
+* ee2ee24d decode: Cleanup io panic a bit
+* e741ca78 doc: Add ImHex to related tools
+* 36e8287c doc: Regenerate after nes and new ansisvg
+* 225fd507 fit: Skip array fields on pre read messages
+* 7500a8b7 fq: Sort formats
+* bf7fa07c fq: Use go 1.20 and cleanup
+* e2670404 gojq: Update fq fork
+* f5fd5873 gojq: Update fq fork
+* ed685116 icc_profile: Strip whitespace in header and tag strings
+* c8f9cdc9 interp: Add string_truncate option
+* 0db671f6 interp: Add todo test for eval error in path
+* ebffb3be jp2c: Add jpeg2000 codestream format
+* 79992b34 jp2c: Fail probe faster
+* 63f7d79c jp2c: Support probe
+* b542ff1d lint: More linters and some fixes
+* c6165c0c mod: go get non-bump tracked modules
+* 1784c438 mp4,avi: Trim spaces for type
+* 2ea70c42 mp4: Add thmb box support
+* 4f90a2ea mp4: Decode jP box
+* 70b1b0d6 mp4: Decode uinf box
+* 87b6c4dd mp4: Fix jp2 test
+* 8009b6f6 mp4: JPEG200 boxes jp2h and ihdr
+* ed3a126f mp4: Turns out for qt brand hdlr component name might be zero bytes
+* f3b54042 nes: Add support for iNES/NES 2.0 ROM files
+* 80bccc91 opus,vorbis: More sym snake_case
+* 08df7f45 pkg/cli/test_exp.sh: use command -v
+* 87052733 pssh_playready: Use snake_case sym values
+* aaa43dfb test: Replace pmezard/go-difflib with go's internal diff
+
 # 0.10.0
 
 Adds support for various LevelDB formats (thanks @mikez) and Garmin Flexible and Interoperable Data Transfer format (FIT) (thanks @mlofjard).
@@ -43,7 +128,6 @@ And as usual some small fixes and dependency updates.
   $ fq -L . -r 'include "to_kml"; to_kml' file.fit > file.kml
   ```
 
-
 - `hevc_sps` Fix some incorrect profile_tier_level decoding. #829
 - `html` Fix issue parsing elements including SOLIDUS "/". #870
   - Upstream issue https://github.com/golang/go/issues/63402

Dockerfile

@@ -1,5 +1,5 @@
 # bump: docker-golang /FROM golang:([\d.]+)/ docker:golang|^1
-FROM golang:1.22.2-bookworm AS base
+FROM golang:1.22.3-bookworm AS base
 
 # expect is used to test cli
 RUN \

Makefile

@@ -61,7 +61,7 @@ gogenerate: always
 lint: always
 # bump: make-golangci-lint /golangci-lint@v([\d.]+)/ git:https://github.com/golangci/golangci-lint.git|^1
 # bump: make-golangci-lint link "Release notes" https://github.com/golangci/golangci-lint/releases/tag/v$LATEST
-	go run github.com/golangci/golangci-lint/cmd/golangci-lint@v1.57.2 run
+	go run github.com/golangci/golangci-lint/cmd/golangci-lint@v1.58.2 run
 
 depgraph.svg: always
 	go run github.com/kisielk/godepgraph@latest github.com/wader/fq | dot -Tsvg -o godepgraph.svg

README.md

@@ -2,25 +2,23 @@
 
 Tool, language and decoders for working with binary data.
 
+TLDR: it aims to be jq, hexdump, dd and gdb for files combined into one.
+
 ![fq demo](doc/demo.svg)
 
-Basic usage is `fq . file` or `fq d file`.
+Basic usage is `fq . file`, `fq d file` or `fq 'some query' file ...`.
 
 For details see [usage.md](doc/usage.md).
 
 ### Background
 
-fq is inspired by the well known jq tool and language that allows you to work with binary formats the same way you would using jq. In addition it can present data like a hex viewer, transform, slice and concatenate binary data. It also supports nested formats and has an interactive REPL with auto-completion.
+fq is inspired by the [jq](https://jqlang.github.io/jq/) tool and language and allows you to work with binary formats in the same way. In addition to using jq expressions it can also present decoded tree structures, transform, slice and concatenate binary data. It also supports nested formats and features an interactive REPL with auto-completion of functions and names.
 
-It was originally designed to query, inspect and debug media codecs and containers like mp4, flac, mp3, jpeg. But since then it has been extended to support a variety of formats like executables, packet captures (with TCP reassembly) and serialization formats like JSON, YAML, XML, ASN1 BER, Avro, CBOR, protobuf. In addition it also has functions to work with URLs, convert to/from hex, number bases, search for things etc.
-
-In summary it aims to be jq, hexdump, dd and gdb for files combined into one.
-
-**NOTE:** fq is still early in development so things might change, be broken or do not make sense. That also means that there is a great opportunity to help out!
+It was originally designed to query, inspect and debug media codecs and containers like MP4, FLAC and JPEG but has since been extended to support a variety of formats like executables, packet captures (with TCP reassembly) and serialization formats like JSON, YAML, XML, CBOR, protobuf. In addition it also has functions to work with URLs, convert to/from hex, number bases, search for patterns etc.
 
 ### Goals
 
-- Make binaries accessible, queryable and sliceable.
+- Make binaries more accessible, queryable and sliceable.
 - Nested formats and bit-oriented decoding.
 - Quick and comfortable CLI tool.
 - Bits and bytes transformations.
@@ -100,6 +98,7 @@ id3v11,
 id3v2,
 ipv4_packet,
 ipv6_packet,
+jp2c,
 jpeg,
 json,
 jsonl,
@@ -242,7 +241,7 @@ apk add -X http://dl-cdn.alpinelinux.org/alpine/edge/testing fq
 
 Make sure you have [go](https://go.dev) 1.20 or later installed.
 
-To install directly from git repository (no clone needed):
+To install directly from git repository (no git clone needed):
 ```sh
 # build and install latest release
 go install github.com/wader/fq@latest
@@ -266,10 +265,6 @@ go build -o fq .
 make test fq
 ```
 
-## TODO and ideas
-
-See [TODO.md](doc/TODO.md)
-
 ## Development and adding a new decoder
 
 See [dev.md](doc/dev.md)
@@ -305,6 +300,10 @@ for inventing the [jq](https://github.com/stedolan/jq) language.
 - [Sustainability of Digital Formats](https://www.loc.gov/preservation/digital/formats/) at Library of Congress.
 - [Data Format Description Language (DFDL)](https://en.wikipedia.org/wiki/Data_Format_Description_Language).
 
+## TODO and ideas
+
+See [TODO.md](doc/TODO.md)
+
 ## License
 
 `fq` is distributed under the terms of the MIT License.

dev/fuzzbytes.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 // tool to convert go fuzz input files to bytes
 // Usage: cat format/testdata/fuzz/FuzzFormats/144bde49b40c90fd05d302ec90b6ddb2b6d6aea553bad520a8b954797e40fe72 | go run dev/fuzzbytes.go | go run .
 package main

dev/tmpl.go

@@ -1,3 +1,5 @@
+//go:build exclude
+
 package main
 
 import (

doc/dev.md

@@ -236,8 +236,8 @@ make test
 go test ./...
 # run all tests for one format
 go test -run TestFormats/mp4 ./format/
-# update all actual outputs in tests
-go test ./... -update
+# update all expected outputs for tests
+go test ./pkg/interp ./format -update
 # update actual output for specific tests
 go run ./format -run TestFormats/elf -update
 # color diff

doc/formats.md

@@ -70,6 +70,7 @@
 |`id3v2`                                                         |ID3v2&nbsp;metadata                                                                                          |<sub>`image`</sub>|
 |`ipv4_packet`                                                   |Internet&nbsp;protocol&nbsp;v4&nbsp;packet                                                                   |<sub>`ip_packet`</sub>|
 |`ipv6_packet`                                                   |Internet&nbsp;protocol&nbsp;v6&nbsp;packet                                                                   |<sub>`ip_packet`</sub>|
+|`jp2c`                                                          |JPEG&nbsp;2000&nbsp;codestream                                                                               |<sub></sub>|
 |`jpeg`                                                          |Joint&nbsp;Photographic&nbsp;Experts&nbsp;Group&nbsp;file                                                    |<sub>`exif` `icc_profile`</sub>|
 |`json`                                                          |JavaScript&nbsp;Object&nbsp;Notation                                                                         |<sub></sub>|
 |`jsonl`                                                         |JavaScript&nbsp;Object&nbsp;Notation&nbsp;Lines                                                              |<sub></sub>|
@@ -86,7 +87,7 @@
 |`mp3_frame`                                                     |MPEG&nbsp;audio&nbsp;layer&nbsp;3&nbsp;frame                                                                 |<sub>`mp3_frame_tags`</sub>|
 |`mp3_frame_vbri`                                                |MP3&nbsp;frame&nbsp;Fraunhofer&nbsp;encoder&nbsp;variable&nbsp;bitrate&nbsp;tag                              |<sub></sub>|
 |`mp3_frame_xing`                                                |MP3&nbsp;frame&nbsp;Xing/Info&nbsp;tag                                                                       |<sub></sub>|
-|[`mp4`](#mp4)                                                   |ISOBMFF,&nbsp;QuickTime&nbsp;and&nbsp;similar                                                                |<sub>`aac_frame` `av1_ccr` `av1_frame` `avc_au` `avc_dcr` `flac_frame` `flac_metadatablocks` `hevc_au` `hevc_dcr` `icc_profile` `id3v2` `image` `jpeg` `mp3_frame` `mpeg_es` `mpeg_pes_packet` `opus_packet` `png` `prores_frame` `protobuf_widevine` `pssh_playready` `vorbis_packet` `vp9_frame` `vpx_ccr`</sub>|
+|[`mp4`](#mp4)                                                   |ISOBMFF,&nbsp;QuickTime&nbsp;and&nbsp;similar                                                                |<sub>`aac_frame` `av1_ccr` `av1_frame` `avc_au` `avc_dcr` `flac_frame` `flac_metadatablocks` `hevc_au` `hevc_dcr` `icc_profile` `id3v2` `image` `jp2c` `jpeg` `mp3_frame` `mpeg_es` `mpeg_pes_packet` `opus_packet` `png` `prores_frame` `protobuf_widevine` `pssh_playready` `vorbis_packet` `vp9_frame` `vpx_ccr`</sub>|
 |`mpeg_asc`                                                      |MPEG-4&nbsp;Audio&nbsp;Specific&nbsp;Config                                                                  |<sub></sub>|
 |`mpeg_es`                                                       |MPEG&nbsp;Elementary&nbsp;Stream                                                                             |<sub>`mpeg_asc` `vorbis_packet`</sub>|
 |`mpeg_pes`                                                      |MPEG&nbsp;Packetized&nbsp;elementary&nbsp;stream                                                             |<sub>`mpeg_pes_packet` `mpeg_spu`</sub>|
@@ -131,12 +132,12 @@
 |[`xml`](#xml)                                                   |Extensible&nbsp;Markup&nbsp;Language                                                                         |<sub></sub>|
 |`yaml`                                                          |YAML&nbsp;Ain't&nbsp;Markup&nbsp;Language                                                                    |<sub></sub>|
 |[`zip`](#zip)                                                   |ZIP&nbsp;archive                                                                                             |<sub>`probe`</sub>|
-|`image`                                                         |Group                                                                                                        |<sub>`gif` `jpeg` `mp4` `png` `tiff` `webp`</sub>|
+|`image`                                                         |Group                                                                                                        |<sub>`gif` `jp2c` `jpeg` `mp4` `png` `tiff` `webp`</sub>|
 |`inet_packet`                                                   |Group                                                                                                        |<sub>`ipv4_packet` `ipv6_packet`</sub>|
 |`ip_packet`                                                     |Group                                                                                                        |<sub>`icmp` `icmpv6` `tcp_segment` `udp_datagram`</sub>|
 |`link_frame`                                                    |Group                                                                                                        |<sub>`bsd_loopback_frame` `ether8023_frame` `ipv4_packet` `ipv6_packet` `sll2_packet` `sll_packet`</sub>|
 |`mp3_frame_tags`                                                |Group                                                                                                        |<sub>`mp3_frame_vbri` `mp3_frame_xing`</sub>|
-|`probe`                                                         |Group                                                                                                        |<sub>`adts` `aiff` `apple_bookmark` `ar` `avi` `avro_ocf` `bitcoin_blkdat` `bplist` `bzip2` `caff` `elf` `fit` `flac` `gif` `gzip` `html` `jpeg` `json` `jsonl` `leveldb_table` `luajit` `macho` `macho_fat` `matroska` `moc3` `mp3` `mp4` `mpeg_ts` `nes` `ogg` `opentimestamps` `pcap` `pcapng` `png` `tar` `tiff` `toml` `tzif` `wasm` `wav` `webp` `xml` `yaml` `zip`</sub>|
+|`probe`                                                         |Group                                                                                                        |<sub>`adts` `aiff` `apple_bookmark` `ar` `avi` `avro_ocf` `bitcoin_blkdat` `bplist` `bzip2` `caff` `elf` `fit` `flac` `gif` `gzip` `html` `jp2c` `jpeg` `json` `jsonl` `leveldb_table` `luajit` `macho` `macho_fat` `matroska` `moc3` `mp3` `mp4` `mpeg_ts` `nes` `ogg` `opentimestamps` `pcap` `pcapng` `png` `tar` `tiff` `toml` `tzif` `wasm` `wav` `webp` `xml` `yaml` `zip`</sub>|
 |`tcp_stream`                                                    |Group                                                                                                        |<sub>`dns_tcp` `rtmp` `tls`</sub>|
 |`udp_payload`                                                   |Group                                                                                                        |<sub>`dns`</sub>|
 

doc/presentations/bts2022/avc_sps_hdr_params.go

@@ -1,3 +1,9 @@
+//go:build exclude
+
+package bts2022
+
+import "github.com/wader/fq/pkg/decode"
+
 func avcHdrParameters(d *decode.D) {
 	cpbCnt := d.FieldUintFn("cpb_cnt", uEV, scalar.UAdd(1))
 	d.FieldU4("bit_rate_scale")
@@ -15,4 +21,4 @@ func avcHdrParameters(d *decode.D) {
 	d.FieldU5("cpb_removal_delay_length", scalar.UAdd(1))
 	d.FieldU5("dpb_output_delay_length", scalar.UAdd(1))
 	d.FieldU5("time_offset_length")
-}
+}

doc/presentations/bts2022/mp3.go

@@ -1,3 +1,7 @@
+//go:build exclude
+
+package bts2022
+
 func decode(d *decode.D) any {
 	d.FieldArray("headers", func(d *decode.D) {
 		for !d.End() {

format/all/all.fqtest

@@ -14,6 +14,7 @@ $ fq -n _registry.groups.probe
   "flac",
   "gif",
   "gzip",
+  "jp2c",
   "jpeg",
   "leveldb_table",
   "luajit",
@@ -27,6 +28,7 @@ $ fq -n _registry.groups.probe
   "opentimestamps",
   "pcap",
   "pcapng",
+  "pe",
   "png",
   "tar",
   "tiff",
@@ -80,6 +82,7 @@ bytes                Raw bytes
 bzip2                bzip2 compression
 caff                 Live2D Cubism archive
 cbor                 Concise Binary Object Representation
+coff                 Common Object File Format
 csv                  Comma separated values
 dns                  DNS packet
 dns_tcp              DNS packet (TCP)
@@ -112,6 +115,7 @@ id3v11               ID3v1.1 metadata
 id3v2                ID3v2 metadata
 ipv4_packet          Internet protocol v4 packet
 ipv6_packet          Internet protocol v6 packet
+jp2c                 JPEG 2000 codestream
 jpeg                 Joint Photographic Experts Group file
 json                 JavaScript Object Notation
 jsonl                JavaScript Object Notation Lines
@@ -135,6 +139,7 @@ mpeg_pes             MPEG Packetized elementary stream
 mpeg_pes_packet      MPEG Packetized elementary stream packet
 mpeg_spu             Sub Picture Unit (DVD subtitle)
 mpeg_ts              MPEG Transport Stream
+msdos_stub           MS-DOS Stub
 msgpack              MessagePack
 nes                  iNES/NES 2.0 cartridge ROM format
 ogg                  OGG file
@@ -143,6 +148,7 @@ opentimestamps       OpenTimestamps file
 opus_packet          Opus packet
 pcap                 PCAP packet capture
 pcapng               PCAPNG packet capture
+pe                   Portable Executable
 pg_btree             PostgreSQL btree index file
 pg_control           PostgreSQL control file
 pg_heap              PostgreSQL heap file

format/all/all.go

@@ -46,6 +46,7 @@ import (
 	_ "github.com/wader/fq/format/opentimestamps"
 	_ "github.com/wader/fq/format/opus"
 	_ "github.com/wader/fq/format/pcap"
+	_ "github.com/wader/fq/format/pe"
 	_ "github.com/wader/fq/format/png"
 	_ "github.com/wader/fq/format/postgres"
 	_ "github.com/wader/fq/format/prores"

format/asn1/asn1_ber.go

@@ -281,7 +281,7 @@ func decodeASN1BERValue(d *decode.D, bib *bitio.Buffer, sb *strings.Builder, par
 			if bib != nil {
 				// TODO: helper?
 				if _, err := bitio.Copy(bib, br); err != nil {
-					d.IOPanic(err, "bitio.Copy")
+					d.IOPanic(err, "value", "bitio.Copy")
 				}
 			}
 			if unusedBitsCount > 0 {
@@ -292,7 +292,7 @@ func decodeASN1BERValue(d *decode.D, bib *bitio.Buffer, sb *strings.Builder, par
 			if bib != nil {
 				// TODO: helper?
 				if _, err := bitio.Copy(bib, br); err != nil {
-					d.IOPanic(err, "bitio.Copy")
+					d.IOPanic(err, "value", "bitio.Copy")
 				}
 			}
 		case class == classUniversal && tag == universalTypeNull:

format/format.go

@@ -89,6 +89,7 @@ var (
 	Bzip2               = &decode.Group{Name: "bzip2"}
 	CAFF                = &decode.Group{Name: "caff"}
 	CBOR                = &decode.Group{Name: "cbor"}
+	COFF                = &decode.Group{Name: "coff"}
 	CSV                 = &decode.Group{Name: "csv"}
 	DNS                 = &decode.Group{Name: "dns"}
 	DNS_TCP             = &decode.Group{Name: "dns_tcp"}
@@ -122,6 +123,7 @@ var (
 	ID3v2               = &decode.Group{Name: "id3v2"}
 	IPv4Packet          = &decode.Group{Name: "ipv4_packet"}
 	IPv6Packet          = &decode.Group{Name: "ipv6_packet"}
+	JP2C                = &decode.Group{Name: "jp2c"}
 	JPEG                = &decode.Group{Name: "jpeg"}
 	JSON                = &decode.Group{Name: "json"}
 	JSONL               = &decode.Group{Name: "jsonl"}
@@ -144,7 +146,8 @@ var (
 	MPEG_PES_Packet     = &decode.Group{Name: "mpeg_pes_packet"}
 	MPEG_SPU            = &decode.Group{Name: "mpeg_spu"}
 	MPEG_TS             = &decode.Group{Name: "mpeg_ts"}
-	MPES_PES            = &decode.Group{Name: "mpeg_pes"}
+	MPEG_PES            = &decode.Group{Name: "mpeg_pes"}
+	MSDOS_Stub          = &decode.Group{Name: "msdos_stub"}
 	MsgPack             = &decode.Group{Name: "msgpack"}
 	NES                 = &decode.Group{Name: "nes"}
 	Ogg                 = &decode.Group{Name: "ogg"}
@@ -153,6 +156,7 @@ var (
 	Opus_Packet         = &decode.Group{Name: "opus_packet"}
 	PCAP                = &decode.Group{Name: "pcap"}
 	PCAPNG              = &decode.Group{Name: "pcapng"}
+	PE                  = &decode.Group{Name: "pe"}
 	Pg_BTree            = &decode.Group{Name: "pg_btree"}
 	Pg_Control          = &decode.Group{Name: "pg_control"}
 	Pg_Heap             = &decode.Group{Name: "pg_heap"}
@@ -403,3 +407,11 @@ type Pg_Heap_In struct {
 type Pg_BTree_In struct {
 	Page int `doc:"First page number in file, default is 0"`
 }
+
+type MS_DOS_Out struct {
+	LFANew int // logical file address for the New Executable header
+}
+
+type COFF_In struct {
+	FilePointerOffset int `doc:"File pointer offset"`
+}

format/gzip/gzip.go

@@ -114,7 +114,7 @@ func gzipDecodeMember(d *decode.D) bitio.ReaderAtSeeker {
 		readCompressedSize, uncompressedBR, err =
 			d.FieldReaderRange("uncompressed", d.Pos(), d.BitsLeft(), rFn)
 		if err != nil {
-			d.IOPanic(err, "TryFieldReaderRange")
+			d.IOPanic(err, "uncompressed", "FieldReaderRange")
 		}
 		d.FieldRawLen("compressed", readCompressedSize)
 		crc32W := crc32.NewIEEE()
@@ -149,7 +149,7 @@ func gzipDecode(d *decode.D) any {
 
 	cbr, err := bitio.NewMultiReader(brs...)
 	if err != nil {
-		d.IOPanic(err, "NewMultiReader")
+		d.IOPanic(err, "members", "NewMultiReader")
 	}
 	dv, _, _ := d.TryFieldFormatBitBuf("uncompressed", cbr, &probeGroup, format.Probe_In{})
 	if dv == nil {

format/id3/id3v2.go

@@ -302,7 +302,7 @@ func textNullLenFn(encoding int, notFoundFixedBytes int) func(d *decode.D) strin
 			func(v uint64) bool { return v == 0 },
 		)
 		if err != nil {
-			d.IOPanic(err, "textNullLenFn")
+			d.IOPanic(err, "", "textNullLenFn")
 		}
 		if offset < 0 {
 			if notFoundFixedBytes < 0 {

format/jpeg/jp2c.go

@@ -0,0 +1,144 @@
+package jpeg
+
+import (
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+	"github.com/wader/fq/pkg/scalar"
+)
+
+func init() {
+	interp.RegisterFormat(
+		format.JP2C,
+		&decode.Format{
+			Description: "JPEG 2000 codestream",
+			Groups:      []*decode.Group{format.Probe, format.Image},
+			DecodeFn:    jp2cDecode,
+			RootName:    "segments",
+			RootArray:   true,
+		})
+}
+
+const (
+	JP2_SOC = 0xff_4f /* start of codestream */
+	JP2_SOT = 0xff_90 /* start of tile */
+	JP2_SOD = 0xff_93 /* start of data */
+	JP2_EOC = 0xff_d9 /* end of codestream */
+	/* fixed information segment */
+	JP2_SIZ = 0xff_51 /* image and tile size */
+	/* functional segments */
+	JP2_COD = 0xff_52 /* coding style default */
+	JP2_COC = 0xff_53 /* coding style component */
+	JP2_RGN = 0xff_5e /* region of interest */
+	JP2_QCD = 0xff_5c /* quantization default */
+	JP2_QCC = 0xff_5d /* quantization component */
+	JP2_POC = 0xff_5f /* progression order change */
+	/* pointer segments */
+	JP2_TLM = 0xff_55 /* tile-part lengths */
+	JP2_PLM = 0xff_57 /* packet length (main header) */
+	JP2_PLT = 0xff_58 /* packet length (tile-part header) */
+	JP2_PPM = 0xff_60 /* packed packet headers (main header) */
+	JP2_PPT = 0xff_61 /* packet packet headers (tile-part header) */
+	/* bitstream internal markers and segments */
+	JP2_SOP = 0xff_91 /* start of packet */
+	JP2_EPH = 0xff_92 /* end of packet header */
+	/* informational segments */
+	JP2_CRG = 0xff_63 /* component registration */
+	JP2_COM = 0xff_64 /* comment */
+)
+
+var jp2Markers = scalar.UintMap{
+	JP2_SOC: {Sym: "soc", Description: "Start of codestream"},
+	JP2_SOT: {Sym: "sot", Description: "Start of tile"},
+	JP2_SOD: {Sym: "sod", Description: "Start of data"},
+	JP2_EOC: {Sym: "eoc", Description: "End of codestream"},
+	JP2_SIZ: {Sym: "siz", Description: "Image and tile size"},
+	JP2_COD: {Sym: "cod", Description: "Coding style default"},
+	JP2_COC: {Sym: "coc", Description: "Coding style component"},
+	JP2_RGN: {Sym: "rgn", Description: "Region of interest"},
+	JP2_QCD: {Sym: "qcd", Description: "Quantization default"},
+	JP2_QCC: {Sym: "qcc", Description: "Quantization component"},
+	JP2_POC: {Sym: "poc", Description: "Progression order change"},
+	JP2_TLM: {Sym: "tlm", Description: "Tile-part lengths"},
+	JP2_PLM: {Sym: "plm", Description: "Packet length (main header)"},
+	JP2_PLT: {Sym: "plt", Description: "Packet length (tile-part header)"},
+	JP2_PPM: {Sym: "ppm", Description: "Packed packet headers (main header)"},
+	JP2_PPT: {Sym: "ppt", Description: "Packet packet headers (tile-part header)"},
+	JP2_SOP: {Sym: "sop", Description: "Start of packet"},
+	JP2_EPH: {Sym: "eph", Description: "End of packet header"},
+	JP2_CRG: {Sym: "crg", Description: "Component registration"},
+	JP2_COM: {Sym: "com", Description: "Comment"},
+}
+
+func jp2cDecode(d *decode.D) any {
+	if d.PeekUintBits(16) != JP2_SOC {
+		d.Fatalf("no SOC marker")
+	}
+
+	seenSOC := false
+	seenSIZ := false
+	seenEOC := false
+
+	for !seenEOC && !d.End() {
+		d.FieldStruct("segment", func(d *decode.D) {
+			marker := d.FieldU16("marker", jp2Markers, scalar.UintHex)
+			switch marker {
+			case JP2_SOC:
+				// zero length
+				seenSOC = true
+				return
+			case JP2_SOD:
+				l, _ := d.PeekFind(16, 8, d.BitsLeft(), func(v uint64) bool {
+					return v == JP2_SOT || v == JP2_EOC
+				})
+				d.FieldRawLen("data", l)
+			case JP2_SOT:
+				d.FieldU16("l_sot")
+				d.FieldU16("i_sot")
+				d.FieldU32("p_sot")
+				d.FieldU8("tp_sot")
+				d.FieldU8("tn_sot")
+			case JP2_SIZ:
+				seenSIZ = true
+				d.FieldU16("l_siz")
+				d.FieldU16("r_siz")
+				d.FieldU32("x_siz")
+				d.FieldU32("y_siz")
+				d.FieldU32("xo_siz")
+				d.FieldU32("yo_siz")
+				d.FieldU32("xt_siz")
+				d.FieldU32("yt_siz")
+				d.FieldU32("xto_siz")
+				d.FieldU32("yto_siz")
+				cSiz := d.FieldU16("c_siz")
+				d.FieldArray("components", func(d *decode.D) {
+					for i := 0; i < int(cSiz); i++ {
+						d.FieldStruct("component", func(d *decode.D) {
+							d.FieldU8("s_sizi")
+							d.FieldU8("xr_sizi")
+							d.FieldU8("yr_sizi")
+						})
+					}
+				})
+
+			case JP2_COM:
+				length := d.FieldU16("length")
+				d.FieldU16("r_cme")
+				d.FieldUTF8("data", int(length-4))
+			case JP2_EOC:
+				// zero length
+				seenEOC = true
+				return
+			default:
+				length := d.FieldU16("length")
+				d.FieldRawLen("data", int64(length-2)*8)
+			}
+		})
+	}
+
+	if !(seenSOC && seenSIZ && seenEOC) {
+		d.Fatalf("SOC, SIZ or EOC marker not found")
+	}
+
+	return nil
+}

format/jpeg/jpeg.go

@@ -124,7 +124,7 @@ var markers = scalar.UintMap{
 	RST6:  {Sym: "rst6", Description: "Restart with modulo 8 count 6"},
 	RST7:  {Sym: "rst7", Description: "Restart with modulo 8 count 7"},
 	SOI:   {Sym: "soi", Description: "Start of image"},
-	EOI:   {Sym: "eoi", Description: "End of image true"},
+	EOI:   {Sym: "eoi", Description: "End of image"},
 	SOS:   {Sym: "sos", Description: "Start of scan"},
 	DQT:   {Sym: "dqt", Description: "Define quantization table(s)"},
 	DNL:   {Sym: "dnl", Description: "Define number of lines"},
@@ -262,6 +262,29 @@ func jpegDecode(d *decode.D) any {
 								}
 							})
 						})
+					case DHT:
+						lH := int64(d.FieldU16("lh"))
+						d.FramedFn(lH*8-16, func(d *decode.D) {
+							d.FieldArray("hs", func(d *decode.D) {
+								for d.NotEnd() {
+									d.FieldStruct("h", func(d *decode.D) {
+										d.FieldU4("tc")
+										d.FieldU4("th")
+										hK := uint64(0)
+										hV := uint64(0)
+										d.FieldArrayLoop("l", func() bool { return hK < 16 }, func(d *decode.D) {
+											hV += d.FieldU8("l")
+											hK++
+										})
+										hK = 0
+										d.FieldArrayLoop("v", func() bool { return hK < hV }, func(d *decode.D) {
+											d.FieldU8("v")
+											hK++
+										})
+									})
+								}
+							})
+						})
 					case RST0, RST1, RST2, RST3, RST4, RST5, RST6, RST7:
 						inECD = true
 					case TEM:

format/jpeg/testdata/4x4.fqtest

@@ -109,15 +109,57 @@ $ fq -d jpeg dv 4x4.jpg
     |                                               |                |    [4]{}: marker 0x66-0x7c (22)
 0x60|                  ff                           |      .         |      prefix: raw bits (valid) 0x66-0x67 (1)
 0x60|                     c4                        |       .        |      code: "dht" (196) (Define Huffman table(s)) 0x67-0x68 (1)
-0x60|                        00 14                  |        ..      |      length: 20 0x68-0x6a (2)
-0x60|                              00 01 00 00 00 00|          ......|      data: raw bits 0x6a-0x7c (18)
-0x70|00 00 00 00 00 00 00 00 00 00 00 08            |............    |
+0x60|                        00 14                  |        ..      |      lh: 20 0x68-0x6a (2)
+    |                                               |                |      hs[0:1]: 0x6a-0x7c (18)
+    |                                               |                |        [0]{}: h 0x6a-0x7c (18)
+0x60|                              00               |          .     |          tc: 0 0x6a-0x6a.4 (0.4)
+0x60|                              00               |          .     |          th: 0 0x6a.4-0x6b (0.4)
+    |                                               |                |          l[0:16]: 0x6b-0x7b (16)
+0x60|                                 01            |           .    |            [0]: 1 l 0x6b-0x6c (1)
+0x60|                                    00         |            .   |            [1]: 0 l 0x6c-0x6d (1)
+0x60|                                       00      |             .  |            [2]: 0 l 0x6d-0x6e (1)
+0x60|                                          00   |              . |            [3]: 0 l 0x6e-0x6f (1)
+0x60|                                             00|               .|            [4]: 0 l 0x6f-0x70 (1)
+0x70|00                                             |.               |            [5]: 0 l 0x70-0x71 (1)
+0x70|   00                                          | .              |            [6]: 0 l 0x71-0x72 (1)
+0x70|      00                                       |  .             |            [7]: 0 l 0x72-0x73 (1)
+0x70|         00                                    |   .            |            [8]: 0 l 0x73-0x74 (1)
+0x70|            00                                 |    .           |            [9]: 0 l 0x74-0x75 (1)
+0x70|               00                              |     .          |            [10]: 0 l 0x75-0x76 (1)
+0x70|                  00                           |      .         |            [11]: 0 l 0x76-0x77 (1)
+0x70|                     00                        |       .        |            [12]: 0 l 0x77-0x78 (1)
+0x70|                        00                     |        .       |            [13]: 0 l 0x78-0x79 (1)
+0x70|                           00                  |         .      |            [14]: 0 l 0x79-0x7a (1)
+0x70|                              00               |          .     |            [15]: 0 l 0x7a-0x7b (1)
+    |                                               |                |          v[0:1]: 0x7b-0x7c (1)
+0x70|                                 08            |           .    |            [0]: 8 v 0x7b-0x7c (1)
     |                                               |                |    [5]{}: marker 0x7c-0x92 (22)
 0x70|                                    ff         |            .   |      prefix: raw bits (valid) 0x7c-0x7d (1)
 0x70|                                       c4      |             .  |      code: "dht" (196) (Define Huffman table(s)) 0x7d-0x7e (1)
-0x70|                                          00 14|              ..|      length: 20 0x7e-0x80 (2)
-0x80|10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................|      data: raw bits 0x80-0x92 (18)
-0x90|00 00                                          |..              |
+0x70|                                          00 14|              ..|      lh: 20 0x7e-0x80 (2)
+    |                                               |                |      hs[0:1]: 0x80-0x92 (18)
+    |                                               |                |        [0]{}: h 0x80-0x92 (18)
+0x80|10                                             |.               |          tc: 1 0x80-0x80.4 (0.4)
+0x80|10                                             |.               |          th: 0 0x80.4-0x81 (0.4)
+    |                                               |                |          l[0:16]: 0x81-0x91 (16)
+0x80|   01                                          | .              |            [0]: 1 l 0x81-0x82 (1)
+0x80|      00                                       |  .             |            [1]: 0 l 0x82-0x83 (1)
+0x80|         00                                    |   .            |            [2]: 0 l 0x83-0x84 (1)
+0x80|            00                                 |    .           |            [3]: 0 l 0x84-0x85 (1)
+0x80|               00                              |     .          |            [4]: 0 l 0x85-0x86 (1)
+0x80|                  00                           |      .         |            [5]: 0 l 0x86-0x87 (1)
+0x80|                     00                        |       .        |            [6]: 0 l 0x87-0x88 (1)
+0x80|                        00                     |        .       |            [7]: 0 l 0x88-0x89 (1)
+0x80|                           00                  |         .      |            [8]: 0 l 0x89-0x8a (1)
+0x80|                              00               |          .     |            [9]: 0 l 0x8a-0x8b (1)
+0x80|                                 00            |           .    |            [10]: 0 l 0x8b-0x8c (1)
+0x80|                                    00         |            .   |            [11]: 0 l 0x8c-0x8d (1)
+0x80|                                       00      |             .  |            [12]: 0 l 0x8d-0x8e (1)
+0x80|                                          00   |              . |            [13]: 0 l 0x8e-0x8f (1)
+0x80|                                             00|               .|            [14]: 0 l 0x8f-0x90 (1)
+0x90|00                                             |.               |            [15]: 0 l 0x90-0x91 (1)
+    |                                               |                |          v[0:1]: 0x91-0x92 (1)
+0x90|   00                                          | .              |            [0]: 0 v 0x91-0x92 (1)
     |                                               |                |    [6]{}: marker 0x92-0x9c (10)
 0x90|      ff                                       |  .             |      prefix: raw bits (valid) 0x92-0x93 (1)
 0x90|         da                                    |   .            |      code: "sos" (218) (Start of scan) 0x93-0x94 (1)
@@ -135,4 +177,4 @@ $ fq -d jpeg dv 4x4.jpg
 0x90|                                    3f bf      |            ?.  |    [7]: raw bits entropy_coded_data 0x9c-0x9e (2)
     |                                               |                |    [8]{}: marker 0x9e-0xa0 (2)
 0x90|                                          ff   |              . |      prefix: raw bits (valid) 0x9e-0x9f (1)
-0x90|                                             d9|               .|      code: "eoi" (217) (End of image true) 0x9f-0xa0 (1)
+0x90|                                             d9|               .|      code: "eoi" (217) (End of image) 0x9f-0xa0 (1)

format/jpeg/testdata/jp2c_3c.jp2.fqtest

@@ -0,0 +1,129 @@
+# jp2c with 3 components
+# gm convert -size 4x4 'gradient:#ff00ff-#00ff00' -colors 254 jp2c_3c.jp2
+$ fq dv jp2c_3c.jp2
+     |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: jp2c_3c.jp2 (mp4) 0x0-0x18a (394)
+     |                                               |                |  boxes[0:4]: 0x0-0x18a (394)
+     |                                               |                |    [0]{}: box 0x0-0xc (12)
+0x000|00 00 00 0c                                    |....            |      size: 12 0x0-0x4 (4)
+0x000|            6a 50 20 20                        |    jP          |      type: "jP" (JPEG 2000 Signature) 0x4-0x8 (4)
+0x000|                        0d 0a 87 0a            |        ....    |      signature: raw bits (valid) 0x8-0xc (4)
+     |                                               |                |    [1]{}: box 0xc-0x20 (20)
+0x000|                                    00 00 00 14|            ....|      size: 20 0xc-0x10 (4)
+0x010|66 74 79 70                                    |ftyp            |      type: "ftyp" (File type and compatibility) 0x10-0x14 (4)
+0x010|            6a 70 32 20                        |    jp2         |      major_brand: "jp2" 0x14-0x18 (4)
+0x010|                        00 00 00 00            |        ....    |      minor_version: 0 0x18-0x1c (4)
+     |                                               |                |      brands[0:1]: 0x1c-0x20 (4)
+0x010|                                    6a 70 32 20|            jp2 |        [0]: "jp2" brand 0x1c-0x20 (4)
+     |                                               |                |    [2]{}: box 0x20-0x4d (45)
+0x020|00 00 00 2d                                    |...-            |      size: 45 0x20-0x24 (4)
+0x020|            6a 70 32 68                        |    jp2h        |      type: "jp2h" (Header) 0x24-0x28 (4)
+     |                                               |                |      boxes[0:2]: 0x28-0x4d (37)
+     |                                               |                |        [0]{}: box 0x28-0x3e (22)
+0x020|                        00 00 00 16            |        ....    |          size: 22 0x28-0x2c (4)
+0x020|                                    69 68 64 72|            ihdr|          type: "ihdr" (Image Header) 0x2c-0x30 (4)
+0x030|00 00 00 04                                    |....            |          width: 4 0x30-0x34 (4)
+0x030|            00 00 00 04                        |    ....        |          height: 4 0x34-0x38 (4)
+0x030|                        00 03                  |        ..      |          nc: 3 0x38-0x3a (2)
+0x030|                              0f               |          .     |          bpc: 16 0x3a-0x3b (1)
+0x030|                                 07            |           .    |          c: "jpeg_2000" (7) 0x3b-0x3c (1)
+0x030|                                    00         |            .   |          unk_c: 0 0x3c-0x3d (1)
+0x030|                                       00      |             .  |          ipr: 0 0x3d-0x3e (1)
+     |                                               |                |        [1]{}: box 0x3e-0x4d (15)
+0x030|                                          00 00|              ..|          size: 15 0x3e-0x42 (4)
+0x040|00 0f                                          |..              |
+0x040|      63 6f 6c 72                              |  colr          |          type: "colr" (Specifies the colourspace of the image) 0x42-0x46 (4)
+0x040|                  01 00 00 00                  |      ....      |          parameter_type: "\x01\x00\x00\x00" 0x46-0x4a (4)
+0x040|                              00 00 10         |          ...   |          data: raw bits 0x4a-0x4d (3)
+     |                                               |                |    [3]{}: box 0x4d-0x18a (317)
+0x040|                                       00 00 00|             ...|      size: 0 (Rest of file) 0x4d-0x51 (4)
+0x050|00                                             |.               |
+0x050|   6a 70 32 63                                 | jp2c           |      type: "jp2c" (JPEG 2000 contiguous codestream) 0x51-0x55 (4)
+     |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|      segments[0:13]: (jp2c) 0x55-0x18a (309)
+     |                                               |                |        [0]{}: segment 0x55-0x57 (2)
+0x050|               ff 4f                           |     .O         |          marker: "soc" (0xff4f) (Start of codestream) 0x55-0x57 (2)
+     |                                               |                |        [1]{}: segment 0x57-0x88 (49)
+0x050|                     ff 51                     |       .Q       |          marker: "siz" (0xff51) (Image and tile size) 0x57-0x59 (2)
+0x050|                           00 2f               |         ./     |          l_siz: 47 0x59-0x5b (2)
+0x050|                                 00 00         |           ..   |          r_siz: 0 0x5b-0x5d (2)
+0x050|                                       00 00 00|             ...|          x_siz: 4 0x5d-0x61 (4)
+0x060|04                                             |.               |
+0x060|   00 00 00 04                                 | ....           |          y_siz: 4 0x61-0x65 (4)
+0x060|               00 00 00 00                     |     ....       |          xo_siz: 0 0x65-0x69 (4)
+0x060|                           00 00 00 00         |         ....   |          yo_siz: 0 0x69-0x6d (4)
+0x060|                                       00 00 00|             ...|          xt_siz: 4 0x6d-0x71 (4)
+0x070|04                                             |.               |
+0x070|   00 00 00 04                                 | ....           |          yt_siz: 4 0x71-0x75 (4)
+0x070|               00 00 00 00                     |     ....       |          xto_siz: 0 0x75-0x79 (4)
+0x070|                           00 00 00 00         |         ....   |          yto_siz: 0 0x79-0x7d (4)
+0x070|                                       00 03   |             .. |          c_siz: 3 0x7d-0x7f (2)
+     |                                               |                |          components[0:3]: 0x7f-0x88 (9)
+     |                                               |                |            [0]{}: component 0x7f-0x82 (3)
+0x070|                                             0f|               .|              s_sizi: 15 0x7f-0x80 (1)
+0x080|01                                             |.               |              xr_sizi: 1 0x80-0x81 (1)
+0x080|   01                                          | .              |              yr_sizi: 1 0x81-0x82 (1)
+     |                                               |                |            [1]{}: component 0x82-0x85 (3)
+0x080|      0f                                       |  .             |              s_sizi: 15 0x82-0x83 (1)
+0x080|         01                                    |   .            |              xr_sizi: 1 0x83-0x84 (1)
+0x080|            01                                 |    .           |              yr_sizi: 1 0x84-0x85 (1)
+     |                                               |                |            [2]{}: component 0x85-0x88 (3)
+0x080|               0f                              |     .          |              s_sizi: 15 0x85-0x86 (1)
+0x080|                  01                           |      .         |              xr_sizi: 1 0x86-0x87 (1)
+0x080|                     01                        |       .        |              yr_sizi: 1 0x87-0x88 (1)
+     |                                               |                |        [2]{}: segment 0x88-0xac (36)
+0x080|                        ff 64                  |        .d      |          marker: "com" (0xff64) (Comment) 0x88-0x8a (2)
+0x080|                              00 22            |          ."    |          length: 34 0x8a-0x8c (2)
+0x080|                                    00 01      |            ..  |          r_cme: 1 0x8c-0x8e (2)
+0x080|                                          43 72|              Cr|          data: "Creator: JasPer Version 2.0.33" 0x8e-0xac (30)
+0x090|65 61 74 6f 72 3a 20 4a 61 73 50 65 72 20 56 65|eator: JasPer Ve|
+0x0a0|72 73 69 6f 6e 20 32 2e 30 2e 33 33            |rsion 2.0.33    |
+     |                                               |                |        [3]{}: segment 0xac-0xba (14)
+0x0a0|                                    ff 52      |            .R  |          marker: "cod" (0xff52) (Coding style default) 0xac-0xae (2)
+0x0a0|                                          00 0c|              ..|          length: 12 0xae-0xb0 (2)
+0x0b0|00 00 00 01 01 05 04 04 00 01                  |..........      |          data: raw bits 0xb0-0xba (10)
+     |                                               |                |        [4]{}: segment 0xba-0xcf (21)
+0x0b0|                              ff 5c            |          .\    |          marker: "qcd" (0xff5c) (Quantization default) 0xba-0xbc (2)
+0x0b0|                                    00 13      |            ..  |          length: 19 0xbc-0xbe (2)
+0x0b0|                                          40 80|              @.|          data: raw bits 0xbe-0xcf (17)
+0x0c0|88 88 90 88 88 90 88 88 90 88 88 90 88 88 90   |............... |
+     |                                               |                |        [5]{}: segment 0xcf-0xe5 (22)
+0x0c0|                                             ff|               .|          marker: "qcc" (0xff5d) (Quantization component) 0xcf-0xd1 (2)
+0x0d0|5d                                             |]               |
+0x0d0|   00 14                                       | ..             |          length: 20 0xd1-0xd3 (2)
+0x0d0|         01 40 80 88 88 90 88 88 90 88 88 90 88|   .@...........|          data: raw bits 0xd3-0xe5 (18)
+0x0e0|88 90 88 88 90                                 |.....           |
+     |                                               |                |        [6]{}: segment 0xe5-0xfb (22)
+0x0e0|               ff 5d                           |     .]         |          marker: "qcc" (0xff5d) (Quantization component) 0xe5-0xe7 (2)
+0x0e0|                     00 14                     |       ..       |          length: 20 0xe7-0xe9 (2)
+0x0e0|                           02 40 80 88 88 90 88|         .@.....|          data: raw bits 0xe9-0xfb (18)
+0x0f0|88 90 88 88 90 88 88 90 88 88 90               |...........     |
+     |                                               |                |        [7]{}: segment 0xfb-0x107 (12)
+0x0f0|                                 ff 90         |           ..   |          marker: "sot" (0xff90) (Start of tile) 0xfb-0xfd (2)
+0x0f0|                                       00 0a   |             .. |          l_sot: 10 0xfd-0xff (2)
+0x0f0|                                             00|               .|          i_sot: 0 0xff-0x101 (2)
+0x100|00                                             |.               |
+0x100|   00 00 00 8d                                 | ....           |          p_sot: 141 0x101-0x105 (4)
+0x100|               00                              |     .          |          tp_sot: 0 0x105-0x106 (1)
+0x100|                  01                           |      .         |          tn_sot: 1 0x106-0x107 (1)
+     |                                               |                |        [8]{}: segment 0x107-0x11d (22)
+0x100|                     ff 5d                     |       .]       |          marker: "qcc" (0xff5d) (Quantization component) 0x107-0x109 (2)
+0x100|                           00 14               |         ..     |          length: 20 0x109-0x10b (2)
+0x100|                                 00 40 80 00 00|           .@...|          data: raw bits 0x10b-0x11d (18)
+0x110|00 00 00 00 00 00 00 88 88 90 88 88 90         |.............   |
+     |                                               |                |        [9]{}: segment 0x11d-0x133 (22)
+0x110|                                       ff 5d   |             .] |          marker: "qcc" (0xff5d) (Quantization component) 0x11d-0x11f (2)
+0x110|                                             00|               .|          length: 20 0x11f-0x121 (2)
+0x120|14                                             |.               |
+0x120|   01 40 80 00 00 00 00 00 00 00 00 00 88 88 90| .@.............|          data: raw bits 0x121-0x133 (18)
+0x130|88 88 90                                       |...             |
+     |                                               |                |        [10]{}: segment 0x133-0x149 (22)
+0x130|         ff 5d                                 |   .]           |          marker: "qcc" (0xff5d) (Quantization component) 0x133-0x135 (2)
+0x130|               00 14                           |     ..         |          length: 20 0x135-0x137 (2)
+0x130|                     02 40 80 00 00 00 00 00 00|       .@.......|          data: raw bits 0x137-0x149 (18)
+0x140|00 00 00 88 88 90 88 88 90                     |.........       |
+     |                                               |                |        [11]{}: segment 0x149-0x188 (63)
+0x140|                           ff 93               |         ..     |          marker: "sod" (0xff93) (Start of data) 0x149-0x14b (2)
+0x140|                                 c0 00 21 07 cf|           ..!..|          data: raw bits 0x14b-0x188 (61)
+0x150|fc 30 08 05 3f cf fc 30 08 05 3f 80 80 80 80 80|.0..?..0..?.....|
+*    |until 0x187.7 (61)                             |                |
+     |                                               |                |        [12]{}: segment 0x188-0x18a (2)
+0x180|                        ff d9|                 |        ..|     |          marker: "eoc" (0xffd9) (End of codestream) 0x188-0x18a (2)

format/jpeg/testdata/test.j2c.fqtest

@@ -0,0 +1,59 @@
+# test probe
+$ fq dv test.j2c
+    |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.[0:9]: test.j2c (jp2c) 0x0-0xa4 (164)
+    |                                               |                |  [0]{}: segment 0x0-0x2 (2)
+0x00|ff 4f                                          |.O              |    marker: "soc" (0xff4f) (Start of codestream) 0x0-0x2 (2)
+    |                                               |                |  [1]{}: segment 0x2-0x2d (43)
+0x00|      ff 51                                    |  .Q            |    marker: "siz" (0xff51) (Image and tile size) 0x2-0x4 (2)
+0x00|            00 29                              |    .)          |    l_siz: 41 0x4-0x6 (2)
+0x00|                  00 00                        |      ..        |    r_siz: 0 0x6-0x8 (2)
+0x00|                        00 00 00 01            |        ....    |    x_siz: 1 0x8-0xc (4)
+0x00|                                    00 00 00 01|            ....|    y_siz: 1 0xc-0x10 (4)
+0x10|00 00 00 00                                    |....            |    xo_siz: 0 0x10-0x14 (4)
+0x10|            00 00 00 00                        |    ....        |    yo_siz: 0 0x14-0x18 (4)
+0x10|                        00 00 00 01            |        ....    |    xt_siz: 1 0x18-0x1c (4)
+0x10|                                    00 00 00 01|            ....|    yt_siz: 1 0x1c-0x20 (4)
+0x20|00 00 00 00                                    |....            |    xto_siz: 0 0x20-0x24 (4)
+0x20|            00 00 00 00                        |    ....        |    yto_siz: 0 0x24-0x28 (4)
+0x20|                        00 01                  |        ..      |    c_siz: 1 0x28-0x2a (2)
+    |                                               |                |    components[0:1]: 0x2a-0x2d (3)
+    |                                               |                |      [0]{}: component 0x2a-0x2d (3)
+0x20|                              0f               |          .     |        s_sizi: 15 0x2a-0x2b (1)
+0x20|                                 01            |           .    |        xr_sizi: 1 0x2b-0x2c (1)
+0x20|                                    01         |            .   |        yr_sizi: 1 0x2c-0x2d (1)
+    |                                               |                |  [2]{}: segment 0x2d-0x51 (36)
+0x20|                                       ff 64   |             .d |    marker: "com" (0xff64) (Comment) 0x2d-0x2f (2)
+0x20|                                             00|               .|    length: 34 0x2f-0x31 (2)
+0x30|22                                             |"               |
+0x30|   00 01                                       | ..             |    r_cme: 1 0x31-0x33 (2)
+0x30|         43 72 65 61 74 6f 72 3a 20 4a 61 73 50|   Creator: JasP|    data: "Creator: JasPer Version 2.0.33" 0x33-0x51 (30)
+0x40|65 72 20 56 65 72 73 69 6f 6e 20 32 2e 30 2e 33|er Version 2.0.3|
+0x50|33                                             |3               |
+    |                                               |                |  [3]{}: segment 0x51-0x5f (14)
+0x50|   ff 52                                       | .R             |    marker: "cod" (0xff52) (Coding style default) 0x51-0x53 (2)
+0x50|         00 0c                                 |   ..           |    length: 12 0x53-0x55 (2)
+0x50|               00 00 00 01 00 05 04 04 00 01   |     .......... |    data: raw bits 0x55-0x5f (10)
+    |                                               |                |  [4]{}: segment 0x5f-0x74 (21)
+0x50|                                             ff|               .|    marker: "qcd" (0xff5c) (Quantization default) 0x5f-0x61 (2)
+0x60|5c                                             |\               |
+0x60|   00 13                                       | ..             |    length: 19 0x61-0x63 (2)
+0x60|         40 80 88 88 90 88 88 90 88 88 90 88 88|   @............|    data: raw bits 0x63-0x74 (17)
+0x70|90 88 88 90                                    |....            |
+    |                                               |                |  [5]{}: segment 0x74-0x80 (12)
+0x70|            ff 90                              |    ..          |    marker: "sot" (0xff90) (Start of tile) 0x74-0x76 (2)
+0x70|                  00 0a                        |      ..        |    l_sot: 10 0x76-0x78 (2)
+0x70|                        00 00                  |        ..      |    i_sot: 0 0x78-0x7a (2)
+0x70|                              00 00 00 2e      |          ....  |    p_sot: 46 0x7a-0x7e (4)
+0x70|                                          00   |              . |    tp_sot: 0 0x7e-0x7f (1)
+0x70|                                             01|               .|    tn_sot: 1 0x7f-0x80 (1)
+    |                                               |                |  [6]{}: segment 0x80-0x96 (22)
+0x80|ff 5d                                          |.]              |    marker: "qcc" (0xff5d) (Quantization component) 0x80-0x82 (2)
+0x80|      00 14                                    |  ..            |    length: 20 0x82-0x84 (2)
+0x80|            00 40 80 00 00 00 00 00 00 00 00 00|    .@..........|    data: raw bits 0x84-0x96 (18)
+0x90|00 00 00 00 00 00                              |......          |
+    |                                               |                |  [7]{}: segment 0x96-0xa2 (12)
+0x90|                  ff 93                        |      ..        |    marker: "sod" (0xff93) (Start of data) 0x96-0x98 (2)
+0x90|                        df f8 90 08 07 80 80 80|        ........|    data: raw bits 0x98-0xa2 (10)
+0xa0|80 80                                          |..              |
+    |                                               |                |  [8]{}: segment 0xa2-0xa4 (2)
+0xa0|      ff d9|                                   |  ..|           |    marker: "eoc" (0xffd9) (End of codestream) 0xa2-0xa4 (2)

format/jpeg/testdata/test.jp2.fqtest

@@ -0,0 +1,98 @@
+# gm convert "xc:#000000" test.jp2
+$ fq dv test.jp2
+    |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: test.jp2 (mp4) 0x0-0xf9 (249)
+    |                                               |                |  boxes[0:4]: 0x0-0xf9 (249)
+    |                                               |                |    [0]{}: box 0x0-0xc (12)
+0x00|00 00 00 0c                                    |....            |      size: 12 0x0-0x4 (4)
+0x00|            6a 50 20 20                        |    jP          |      type: "jP" (JPEG 2000 Signature) 0x4-0x8 (4)
+0x00|                        0d 0a 87 0a            |        ....    |      signature: raw bits (valid) 0x8-0xc (4)
+    |                                               |                |    [1]{}: box 0xc-0x20 (20)
+0x00|                                    00 00 00 14|            ....|      size: 20 0xc-0x10 (4)
+0x10|66 74 79 70                                    |ftyp            |      type: "ftyp" (File type and compatibility) 0x10-0x14 (4)
+0x10|            6a 70 32 20                        |    jp2         |      major_brand: "jp2" 0x14-0x18 (4)
+0x10|                        00 00 00 00            |        ....    |      minor_version: 0 0x18-0x1c (4)
+    |                                               |                |      brands[0:1]: 0x1c-0x20 (4)
+0x10|                                    6a 70 32 20|            jp2 |        [0]: "jp2" brand 0x1c-0x20 (4)
+    |                                               |                |    [2]{}: box 0x20-0x4d (45)
+0x20|00 00 00 2d                                    |...-            |      size: 45 0x20-0x24 (4)
+0x20|            6a 70 32 68                        |    jp2h        |      type: "jp2h" (Header) 0x24-0x28 (4)
+    |                                               |                |      boxes[0:2]: 0x28-0x4d (37)
+    |                                               |                |        [0]{}: box 0x28-0x3e (22)
+0x20|                        00 00 00 16            |        ....    |          size: 22 0x28-0x2c (4)
+0x20|                                    69 68 64 72|            ihdr|          type: "ihdr" (Image Header) 0x2c-0x30 (4)
+0x30|00 00 00 01                                    |....            |          width: 1 0x30-0x34 (4)
+0x30|            00 00 00 01                        |    ....        |          height: 1 0x34-0x38 (4)
+0x30|                        00 01                  |        ..      |          nc: 1 0x38-0x3a (2)
+0x30|                              0f               |          .     |          bpc: 16 0x3a-0x3b (1)
+0x30|                                 07            |           .    |          c: "jpeg_2000" (7) 0x3b-0x3c (1)
+0x30|                                    00         |            .   |          unk_c: 0 0x3c-0x3d (1)
+0x30|                                       00      |             .  |          ipr: 0 0x3d-0x3e (1)
+    |                                               |                |        [1]{}: box 0x3e-0x4d (15)
+0x30|                                          00 00|              ..|          size: 15 0x3e-0x42 (4)
+0x40|00 0f                                          |..              |
+0x40|      63 6f 6c 72                              |  colr          |          type: "colr" (Specifies the colourspace of the image) 0x42-0x46 (4)
+0x40|                  01 00 00 00                  |      ....      |          parameter_type: "\x01\x00\x00\x00" 0x46-0x4a (4)
+0x40|                              00 00 11         |          ...   |          data: raw bits 0x4a-0x4d (3)
+    |                                               |                |    [3]{}: box 0x4d-0xf9 (172)
+0x40|                                       00 00 00|             ...|      size: 0 (Rest of file) 0x4d-0x51 (4)
+0x50|00                                             |.               |
+0x50|   6a 70 32 63                                 | jp2c           |      type: "jp2c" (JPEG 2000 contiguous codestream) 0x51-0x55 (4)
+    |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|      segments[0:9]: (jp2c) 0x55-0xf9 (164)
+    |                                               |                |        [0]{}: segment 0x55-0x57 (2)
+0x50|               ff 4f                           |     .O         |          marker: "soc" (0xff4f) (Start of codestream) 0x55-0x57 (2)
+    |                                               |                |        [1]{}: segment 0x57-0x82 (43)
+0x50|                     ff 51                     |       .Q       |          marker: "siz" (0xff51) (Image and tile size) 0x57-0x59 (2)
+0x50|                           00 29               |         .)     |          l_siz: 41 0x59-0x5b (2)
+0x50|                                 00 00         |           ..   |          r_siz: 0 0x5b-0x5d (2)
+0x50|                                       00 00 00|             ...|          x_siz: 1 0x5d-0x61 (4)
+0x60|01                                             |.               |
+0x60|   00 00 00 01                                 | ....           |          y_siz: 1 0x61-0x65 (4)
+0x60|               00 00 00 00                     |     ....       |          xo_siz: 0 0x65-0x69 (4)
+0x60|                           00 00 00 00         |         ....   |          yo_siz: 0 0x69-0x6d (4)
+0x60|                                       00 00 00|             ...|          xt_siz: 1 0x6d-0x71 (4)
+0x70|01                                             |.               |
+0x70|   00 00 00 01                                 | ....           |          yt_siz: 1 0x71-0x75 (4)
+0x70|               00 00 00 00                     |     ....       |          xto_siz: 0 0x75-0x79 (4)
+0x70|                           00 00 00 00         |         ....   |          yto_siz: 0 0x79-0x7d (4)
+0x70|                                       00 01   |             .. |          c_siz: 1 0x7d-0x7f (2)
+    |                                               |                |          components[0:1]: 0x7f-0x82 (3)
+    |                                               |                |            [0]{}: component 0x7f-0x82 (3)
+0x70|                                             0f|               .|              s_sizi: 15 0x7f-0x80 (1)
+0x80|01                                             |.               |              xr_sizi: 1 0x80-0x81 (1)
+0x80|   01                                          | .              |              yr_sizi: 1 0x81-0x82 (1)
+    |                                               |                |        [2]{}: segment 0x82-0xa6 (36)
+0x80|      ff 64                                    |  .d            |          marker: "com" (0xff64) (Comment) 0x82-0x84 (2)
+0x80|            00 22                              |    ."          |          length: 34 0x84-0x86 (2)
+0x80|                  00 01                        |      ..        |          r_cme: 1 0x86-0x88 (2)
+0x80|                        43 72 65 61 74 6f 72 3a|        Creator:|          data: "Creator: JasPer Version 2.0.33" 0x88-0xa6 (30)
+0x90|20 4a 61 73 50 65 72 20 56 65 72 73 69 6f 6e 20| JasPer Version |
+0xa0|32 2e 30 2e 33 33                              |2.0.33          |
+    |                                               |                |        [3]{}: segment 0xa6-0xb4 (14)
+0xa0|                  ff 52                        |      .R        |          marker: "cod" (0xff52) (Coding style default) 0xa6-0xa8 (2)
+0xa0|                        00 0c                  |        ..      |          length: 12 0xa8-0xaa (2)
+0xa0|                              00 00 00 01 00 05|          ......|          data: raw bits 0xaa-0xb4 (10)
+0xb0|04 04 00 01                                    |....            |
+    |                                               |                |        [4]{}: segment 0xb4-0xc9 (21)
+0xb0|            ff 5c                              |    .\          |          marker: "qcd" (0xff5c) (Quantization default) 0xb4-0xb6 (2)
+0xb0|                  00 13                        |      ..        |          length: 19 0xb6-0xb8 (2)
+0xb0|                        40 80 88 88 90 88 88 90|        @.......|          data: raw bits 0xb8-0xc9 (17)
+0xc0|88 88 90 88 88 90 88 88 90                     |.........       |
+    |                                               |                |        [5]{}: segment 0xc9-0xd5 (12)
+0xc0|                           ff 90               |         ..     |          marker: "sot" (0xff90) (Start of tile) 0xc9-0xcb (2)
+0xc0|                                 00 0a         |           ..   |          l_sot: 10 0xcb-0xcd (2)
+0xc0|                                       00 00   |             .. |          i_sot: 0 0xcd-0xcf (2)
+0xc0|                                             00|               .|          p_sot: 46 0xcf-0xd3 (4)
+0xd0|00 00 2e                                       |...             |
+0xd0|         00                                    |   .            |          tp_sot: 0 0xd3-0xd4 (1)
+0xd0|            01                                 |    .           |          tn_sot: 1 0xd4-0xd5 (1)
+    |                                               |                |        [6]{}: segment 0xd5-0xeb (22)
+0xd0|               ff 5d                           |     .]         |          marker: "qcc" (0xff5d) (Quantization component) 0xd5-0xd7 (2)
+0xd0|                     00 14                     |       ..       |          length: 20 0xd7-0xd9 (2)
+0xd0|                           00 40 80 00 00 00 00|         .@.....|          data: raw bits 0xd9-0xeb (18)
+0xe0|00 00 00 00 00 00 00 00 00 00 00               |...........     |
+    |                                               |                |        [7]{}: segment 0xeb-0xf7 (12)
+0xe0|                                 ff 93         |           ..   |          marker: "sod" (0xff93) (Start of data) 0xeb-0xed (2)
+0xe0|                                       df f8 90|             ...|          data: raw bits 0xed-0xf7 (10)
+0xf0|08 07 80 80 80 80 80                           |.......         |
+    |                                               |                |        [8]{}: segment 0xf7-0xf9 (2)
+0xf0|                     ff d9|                    |       ..|      |          marker: "eoc" (0xffd9) (End of codestream) 0xf7-0xf9 (2)

format/mp4/boxes.go

@@ -53,7 +53,7 @@ var subTypeNames = scalar.StrMapDescription{
 	"subp": "Subpicture",
 	"text": "Text",
 	"tmcd": "Time Code",
-	"url ": "URL",
+	"url":  "URL",
 	"vide": "Video Track",
 }
 
@@ -101,7 +101,7 @@ var dataFormatNames = scalar.StrMapDescription{
 	"encs": "Encrypted Systems stream",
 	"enct": "Encrypted Text",
 	"encv": "Encrypted/protected video",
-	"fdp ": "File delivery hints",
+	"fdp":  "File delivery hints",
 	"fLaC": "Fres Lossless Audio Codec",
 	"g719": "ITU-T Recommendation G.719 (2008)",
 	"g726": "ITU-T Recommendation G.726 (1990)",
@@ -138,13 +138,13 @@ var dataFormatNames = scalar.StrMapDescription{
 	"Opus": "Opus audio coding",
 	"pm2t": "Protected MPEG-2 Transport",
 	"prtp": "Protected RTP Reception",
-	"raw ": "Uncompressed audio",
+	"raw":  "Uncompressed audio",
 	"resv": "Restricted Video",
 	"rm2t": "MPEG-2 Transport Reception",
 	"rrtp": "RTP reception",
 	"rsrp": "SRTP Reception",
 	"rtmd": "Real Time Metadata Sample Entry(XAVC Format)",
-	"rtp ": "RTP Hints",
+	"rtp":  "RTP Hints",
 	"s263": "ITU H.263 video (3GPP format)",
 	"samr": "Narrowband AMR voice",
 	"sawb": "Wideband AMR voice",
@@ -248,7 +248,7 @@ func decodeSampleFlags(d *decode.D) {
 
 func decodeBoxWithParentData(ctx *decodeContext, d *decode.D, parentData any, extraTypeMappers ...scalar.StrMapper) {
 	var dataSize uint64
-	typeMappers := []scalar.StrMapper{boxDescriptions}
+	typeMappers := []scalar.StrMapper{scalar.ActualTrimSpace, boxDescriptions}
 	if len(extraTypeMappers) > 0 {
 		typeMappers = append(typeMappers, extraTypeMappers...)
 	}
@@ -519,7 +519,7 @@ func decodeBox(ctx *decodeContext, d *decode.D, typ string) {
 		d.FieldU8("version")
 		d.FieldU24("flags")
 		d.FieldUTF8NullFixedLen("component_type", 4)
-		subType := d.FieldUTF8("component_subtype", 4, subTypeNames, scalar.ActualTrimSpace)
+		subType := d.FieldUTF8("component_subtype", 4, scalar.ActualTrimSpace, subTypeNames)
 		d.FieldUTF8NullFixedLen("component_manufacturer", 4)
 		d.FieldU32("component_flags")
 		d.FieldU32("component_flags_mask")
@@ -559,12 +559,12 @@ func decodeBox(ctx *decodeContext, d *decode.D, typ string) {
 		var drefURL string
 		d.FieldStructArrayLoop("boxes", "box", func() bool { return i < entryCount }, func(d *decode.D) {
 			size := d.FieldU32("size")
-			typ := d.FieldUTF8("type", 4)
+			typ := d.FieldUTF8("type", 4, scalar.ActualTrimSpace)
 			d.FieldU8("version")
 			d.FieldU24("flags")
 			dataSize := size - 12
 			switch typ {
-			case "url ":
+			case "url":
 				drefURL = d.FieldUTF8("data", int(dataSize))
 			default:
 				d.FieldRawLen("data", int64(dataSize*8))
@@ -589,7 +589,7 @@ func decodeBox(ctx *decodeContext, d *decode.D, typ string) {
 		d.FieldArrayLoop("boxes", func() bool { return i < entryCount }, func(d *decode.D) {
 			d.FieldStruct("box", func(d *decode.D) {
 				size := d.FieldU32("size")
-				dataFormat := d.FieldUTF8("type", 4, dataFormatNames)
+				dataFormat := d.FieldUTF8("type", 4, dataFormatNames, scalar.ActualTrimSpace)
 				subType := ""
 				if t := ctx.currentTrack(); t != nil {
 					t.sampleDescriptions = append(t.sampleDescriptions, sampleDescription{
@@ -1242,7 +1242,7 @@ func decodeBox(ctx *decodeContext, d *decode.D, typ string) {
 				if !d.End() {
 					d.FieldUTF8Null("content_encoding")
 				}
-			case "uri ":
+			case "uri":
 				d.FieldUTF8Null("item_uri_type")
 			}
 		}
@@ -1798,6 +1798,40 @@ func decodeBox(ctx *decodeContext, d *decode.D, typ string) {
 		default:
 			d.FieldRawLen("message_data", d.BitsLeft())
 		}
+	case "jp2h":
+		decodeBoxes(ctx, d)
+	case "ihdr":
+		d.FieldU32("width")
+		d.FieldU32("height")
+		d.FieldU16("nc")
+		d.FieldU8("bpc", scalar.UintActualAdd(1))
+		d.FieldU8("c", scalar.UintMapSymStr{
+			0: "uncompressed",
+			1: "modified_huffman",
+			2: "modified_read",
+			3: "modified_modified_read",
+			4: "jbig_bi_level",
+			5: "jpeg",
+			6: "jpeg_ls",
+			7: "jpeg_2000",
+			8: "jbig2",
+			9: "jbig",
+		})
+		d.FieldU8("unk_c")
+		d.FieldU8("ipr")
+	case "jP":
+		d.FieldRawLen("signature", 4*8, d.AssertBitBuf([]byte{0x0d, 0x0a, 0x87, 0x0a}))
+	case "jp2c":
+		d.FieldFormat("segments", &jp2cGroup, nil)
+	case "uinf":
+		decodeBoxes(ctx, d)
+	case "ulst":
+		nu := d.FieldU16("nu")
+		d.FieldArray("uids", func(d *decode.D) {
+			for i := 0; i < int(nu); i++ {
+				d.FieldRawLen("uid", 128)
+			}
+		})
 
 	default:
 		// there are at least 4 ways to encode udta metadata in mov/mp4 files.

format/mp4/brands.go

@@ -85,7 +85,7 @@ var brandDescriptions = scalar.StrMapDescription{
 	"dv3b": "DMB AF extending dv3a with 3GPP timed text, DID, TVA, REL, IPMP",
 	"dvr1": "DVB RTP",
 	"dvt1": "DVB Transport Stream",
-	"dxo ": "DxO ONE camera",
+	"dxo":  "DxO ONE camera",
 	"emsg": "Event message box present",
 	"F4A":  "Audio for Adobe Flash Player 9+ (.F4A)",
 	"F4B":  "Audio Book for Adobe Flash Player 9+ (.F4B)",
@@ -160,7 +160,7 @@ var brandDescriptions = scalar.StrMapDescription{
 	"pana": "Panasonic Digital Camera",
 	"piff": "Protected Interoperable File Format",
 	"pnvi": "Panasonic Video Intercom Video Intercom",
-	"qt ":  "QuickTime",
+	"qt":   "QuickTime",
 	"risx": "Representation Index Segment used to index MPEG-2 TS based Media Segments",
 	"ROSS": "Ross Video	Ross",
 	"sdv":  "SD Video",

format/mp4/desc.go

@@ -104,7 +104,7 @@ var boxDescriptions = scalar.StrMapDescription{
 	"irot": "Image rotation imir image mirroring",
 	"ispe": "Image spatial extents",
 	"j2kH": "JPEG 2000 header item property",
-	"jP  ": "JPEG 2000 Signature",
+	"jP":   "JPEG 2000 Signature",
 	"jp2c": "JPEG 2000 contiguous codestream",
 	"jp2h": "Header",
 	"jp2i": "Intellectual property information",
@@ -174,7 +174,7 @@ var boxDescriptions = scalar.StrMapDescription{
 	"pssh": "Protection system specific header",
 	"ptle": "Partial Top Level Entry",
 	"reel": "Name of the tape reel",
-	"res ": "Grid resolution",
+	"res":  "Grid resolution",
 	"resc": "Grid resolution at which the image was captured",
 	"resd": "Default grid resolution at which the image should be displayed",
 	"rinf": "Restricted scheme information box",
@@ -255,12 +255,12 @@ var boxDescriptions = scalar.StrMapDescription{
 	"UITS": "Unique Identifier Technology Solution",
 	"ulst": "A list of UUID’s",
 	"urat": "User 'star' rating of the media",
-	"url ": "A URL",
+	"url":  "A URL",
 	"uuid": "User-extension box",
 	"vmhd": "Video media header, overall information (video track only)",
 	"vwdi": "Multiview Scene Information",
 	"wide": "Expansion space reservation",
-	"xml ": "XML container",
+	"xml":  "XML container",
 	"yrrc": "Year when media was recorded",
 
 	// from https://wiki.multimedia.cx/index.php/FFmpeg_Metadata

format/mp4/mp4.go

@@ -19,6 +19,7 @@ import (
 	"cmp"
 	"embed"
 	"fmt"
+	"strings"
 
 	"github.com/wader/fq/format"
 	"github.com/wader/fq/pkg/decode"
@@ -42,6 +43,7 @@ var hevcCDCRGroup decode.Group
 var iccProfileGroup decode.Group
 var id3v2Group decode.Group
 var imageGroup decode.Group
+var jp2cGroup decode.Group
 var jpegGroup decode.Group
 var mp3FrameGroup decode.Group
 var mpegESGroup decode.Group
@@ -82,6 +84,7 @@ func init() {
 				{Groups: []*decode.Group{format.ICC_Profile}, Out: &iccProfileGroup},
 				{Groups: []*decode.Group{format.ID3v2}, Out: &id3v2Group},
 				{Groups: []*decode.Group{format.Image}, Out: &imageGroup},
+				{Groups: []*decode.Group{format.JP2C}, Out: &jp2cGroup},
 				{Groups: []*decode.Group{format.JPEG}, Out: &jpegGroup},
 				{Groups: []*decode.Group{format.MP3_Frame}, Out: &mp3FrameGroup},
 				{Groups: []*decode.Group{format.MPEG_ES}, Out: &mpegESGroup},
@@ -465,14 +468,14 @@ func mp4Decode(d *decode.D) any {
 	if size < 8 {
 		d.Fatalf("first box size too small < 8")
 	}
-	firstType := d.UTF8(4)
+	firstType := strings.TrimSpace(d.UTF8(4))
 	switch firstType {
 	case "styp", // mp4 segment
 		"ftyp", // mp4 file
 		"free", // seems to happen
 		"moov", // seems to happen
 		"pnot", // video preview file
-		"jP  ": // JPEG 2000
+		"jP":   // JPEG 2000
 	default:
 		d.Errorf("no styp, ftyp, free or moov box found")
 	}

format/mp4/testdata/aac.fqtest

@@ -179,7 +179,7 @@ $ fq -d mp4 dv aac.mp4
      |                                               |                |                          boxes[0:1]: 0x413-0x41f (12)
      |                                               |                |                            [0]{}: box 0x413-0x41f (12)
 0x410|         00 00 00 0c                           |   ....         |                              size: 12 0x413-0x417 (4)
-0x410|                     75 72 6c 20               |       url      |                              type: "url " 0x417-0x41b (4)
+0x410|                     75 72 6c 20               |       url      |                              type: "url" 0x417-0x41b (4)
 0x410|                                 00            |           .    |                              version: 0 0x41b-0x41c (1)
 0x410|                                    00 00 01   |            ... |                              flags: 1 0x41c-0x41f (3)
      |                                               |                |                              data: "" 0x41f-0x41f (0)

format/mp4/testdata/av1.fqtest

@@ -164,7 +164,7 @@ $ fq -d mp4 dv av1.mp4
       |                                               |                |                          boxes[0:1]: 0x1345-0x1351 (12)
       |                                               |                |                            [0]{}: box 0x1345-0x1351 (12)
 0x1340|               00 00 00 0c                     |     ....       |                              size: 12 0x1345-0x1349 (4)
-0x1340|                           75 72 6c 20         |         url    |                              type: "url " 0x1349-0x134d (4)
+0x1340|                           75 72 6c 20         |         url    |                              type: "url" 0x1349-0x134d (4)
 0x1340|                                       00      |             .  |                              version: 0 0x134d-0x134e (1)
 0x1340|                                          00 00|              ..|                              flags: 1 0x134e-0x1351 (3)
 0x1350|01                                             |.               |

format/mp4/testdata/avc.fqtest

@@ -182,7 +182,7 @@ $ fq -d mp4 dv avc.mp4
        |                                               |                |                          boxes[0:1]: 0xf06-0xf12 (12)
        |                                               |                |                            [0]{}: box 0xf06-0xf12 (12)
 0x00f00|                  00 00 00 0c                  |      ....      |                              size: 12 0xf06-0xf0a (4)
-0x00f00|                              75 72 6c 20      |          url   |                              type: "url " 0xf0a-0xf0e (4)
+0x00f00|                              75 72 6c 20      |          url   |                              type: "url" 0xf0a-0xf0e (4)
 0x00f00|                                          00   |              . |                              version: 0 0xf0e-0xf0f (1)
 0x00f00|                                             00|               .|                              flags: 1 0xf0f-0xf12 (3)
 0x00f10|00 01                                          |..              |

format/mp4/testdata/dash.fqtest

@@ -197,7 +197,7 @@ $ fq -d mp4 dv dash_audio_init.mp4
      |                                               |                |                          boxes[0:1]: 0x1fa-0x206 (12)
      |                                               |                |                            [0]{}: box 0x1fa-0x206 (12)
 0x1f0|                              00 00 00 0c      |          ....  |                              size: 12 0x1fa-0x1fe (4)
-0x1f0|                                          75 72|              ur|                              type: "url " 0x1fe-0x202 (4)
+0x1f0|                                          75 72|              ur|                              type: "url" 0x1fe-0x202 (4)
 0x200|6c 20                                          |l               |
 0x200|      00                                       |  .             |                              version: 0 0x202-0x203 (1)
 0x200|         00 00 01                              |   ...          |                              flags: 1 0x203-0x206 (3)

format/mp4/testdata/flac.fqtest

@@ -178,7 +178,7 @@ $ fq -d mp4 dv flac.mp4
      |                                               |                |                          boxes[0:1]: 0x40b-0x417 (12)
      |                                               |                |                            [0]{}: box 0x40b-0x417 (12)
 0x400|                                 00 00 00 0c   |           .... |                              size: 12 0x40b-0x40f (4)
-0x400|                                             75|               u|                              type: "url " 0x40f-0x413 (4)
+0x400|                                             75|               u|                              type: "url" 0x40f-0x413 (4)
 0x410|72 6c 20                                       |rl              |
 0x410|         00                                    |   .            |                              version: 0 0x413-0x414 (1)
 0x410|            00 00 01                           |    ...         |                              flags: 1 0x414-0x417 (3)

format/mp4/testdata/fragmented.fqtest

@@ -140,7 +140,7 @@ $ fq -d mp4 dv fragmented.mp4
        |                                               |                |                          boxes[0:1]: 0x185-0x191 (12)
        |                                               |                |                            [0]{}: box 0x185-0x191 (12)
 0x00180|               00 00 00 0c                     |     ....       |                              size: 12 0x185-0x189 (4)
-0x00180|                           75 72 6c 20         |         url    |                              type: "url " 0x189-0x18d (4)
+0x00180|                           75 72 6c 20         |         url    |                              type: "url" 0x189-0x18d (4)
 0x00180|                                       00      |             .  |                              version: 0 0x18d-0x18e (1)
 0x00180|                                          00 00|              ..|                              flags: 1 0x18e-0x191 (3)
 0x00190|01                                             |.               |
@@ -402,7 +402,7 @@ $ fq -d mp4 dv fragmented.mp4
        |                                               |                |                            [0]{}: box 0x36d-0x379 (12)
 0x00360|                                       00 00 00|             ...|                              size: 12 0x36d-0x371 (4)
 0x00370|0c                                             |.               |
-0x00370|   75 72 6c 20                                 | url            |                              type: "url " 0x371-0x375 (4)
+0x00370|   75 72 6c 20                                 | url            |                              type: "url" 0x371-0x375 (4)
 0x00370|               00                              |     .          |                              version: 0 0x375-0x376 (1)
 0x00370|                  00 00 01                     |      ...       |                              flags: 1 0x376-0x379 (3)
        |                                               |                |                              data: "" 0x379-0x379 (0)

format/mp4/testdata/hevc.fqtest

@@ -182,7 +182,7 @@ $ fq -d mp4 dv hevc.mp4
       |                                               |                |                          boxes[0:1]: 0xa06-0xa12 (12)
       |                                               |                |                            [0]{}: box 0xa06-0xa12 (12)
 0x0a00|                  00 00 00 0c                  |      ....      |                              size: 12 0xa06-0xa0a (4)
-0x0a00|                              75 72 6c 20      |          url   |                              type: "url " 0xa0a-0xa0e (4)
+0x0a00|                              75 72 6c 20      |          url   |                              type: "url" 0xa0a-0xa0e (4)
 0x0a00|                                          00   |              . |                              version: 0 0xa0e-0xa0f (1)
 0x0a00|                                             00|               .|                              flags: 1 0xa0f-0xa12 (3)
 0x0a10|00 01                                          |..              |

format/mp4/testdata/in24.fqtest

@@ -170,7 +170,7 @@ $ fq dv in24.mp4
      |                                               |                |                          boxes[0:1]: 0x2d9-0x2e5 (12)
      |                                               |                |                            [0]{}: box 0x2d9-0x2e5 (12)
 0x2d0|                           00 00 00 0c         |         ....   |                              size: 12 0x2d9-0x2dd (4)
-0x2d0|                                       75 72 6c|             url|                              type: "url " 0x2dd-0x2e1 (4)
+0x2d0|                                       75 72 6c|             url|                              type: "url" 0x2dd-0x2e1 (4)
 0x2e0|20                                             |                |
 0x2e0|   00                                          | .              |                              version: 0 0x2e1-0x2e2 (1)
 0x2e0|      00 00 01                                 |  ...           |                              flags: 1 0x2e2-0x2e5 (3)

format/mp4/testdata/lpcm.fqtest

@@ -172,7 +172,7 @@ $ fq dv lpcm.mp4
      |                                               |                |                          boxes[0:1]: 0x411-0x41d (12)
      |                                               |                |                            [0]{}: box 0x411-0x41d (12)
 0x410|   00 00 00 0c                                 | ....           |                              size: 12 0x411-0x415 (4)
-0x410|               75 72 6c 20                     |     url        |                              type: "url " 0x415-0x419 (4)
+0x410|               75 72 6c 20                     |     url        |                              type: "url" 0x415-0x419 (4)
 0x410|                           00                  |         .      |                              version: 0 0x419-0x41a (1)
 0x410|                              00 00 01         |          ...   |                              flags: 1 0x41a-0x41d (3)
      |                                               |                |                              data: "" 0x41d-0x41d (0)

format/mp4/testdata/mp3.fqtest

@@ -178,7 +178,7 @@ $ fq -d mp4 dv mp3.mp4
      |                                               |                |                            [0]{}: box 0x41f-0x42b (12)
 0x410|                                             00|               .|                              size: 12 0x41f-0x423 (4)
 0x420|00 00 0c                                       |...             |
-0x420|         75 72 6c 20                           |   url          |                              type: "url " 0x423-0x427 (4)
+0x420|         75 72 6c 20                           |   url          |                              type: "url" 0x423-0x427 (4)
 0x420|                     00                        |       .        |                              version: 0 0x427-0x428 (1)
 0x420|                        00 00 01               |        ...     |                              flags: 1 0x428-0x42b (3)
      |                                               |                |                              data: "" 0x42b-0x42b (0)

format/mp4/testdata/mpeg2.fqtest

@@ -180,7 +180,7 @@ $ fq -d mp4 dv mpeg2.mp4
       |                                               |                |                          boxes[0:1]: 0x212b-0x2137 (12)
       |                                               |                |                            [0]{}: box 0x212b-0x2137 (12)
 0x2120|                                 00 00 00 0c   |           .... |                              size: 12 0x212b-0x212f (4)
-0x2120|                                             75|               u|                              type: "url " 0x212f-0x2133 (4)
+0x2120|                                             75|               u|                              type: "url" 0x212f-0x2133 (4)
 0x2130|72 6c 20                                       |rl              |
 0x2130|         00                                    |   .            |                              version: 0 0x2133-0x2134 (1)
 0x2130|            00 00 01                           |    ...         |                              flags: 1 0x2134-0x2137 (3)

format/mp4/testdata/opus.fqtest

@@ -175,7 +175,7 @@ $ fq -d mp4 dv opus.mp4
      |                                               |                |                          boxes[0:1]: 0x318-0x324 (12)
      |                                               |                |                            [0]{}: box 0x318-0x324 (12)
 0x310|                        00 00 00 0c            |        ....    |                              size: 12 0x318-0x31c (4)
-0x310|                                    75 72 6c 20|            url |                              type: "url " 0x31c-0x320 (4)
+0x310|                                    75 72 6c 20|            url |                              type: "url" 0x31c-0x320 (4)
 0x320|00                                             |.               |                              version: 0 0x320-0x321 (1)
 0x320|   00 00 01                                    | ...            |                              flags: 1 0x321-0x324 (3)
      |                                               |                |                              data: "" 0x324-0x324 (0)

format/mp4/testdata/png.mp4.fqtest

@@ -182,7 +182,7 @@ $ fq dv png.mp4
      |                                               |                |                            [0]{}: box 0x20e-0x21a (12)
 0x200|                                          00 00|              ..|                              size: 12 0x20e-0x212 (4)
 0x210|00 0c                                          |..              |
-0x210|      75 72 6c 20                              |  url           |                              type: "url " 0x212-0x216 (4)
+0x210|      75 72 6c 20                              |  url           |                              type: "url" 0x212-0x216 (4)
 0x210|                  00                           |      .         |                              version: 0 0x216-0x217 (1)
 0x210|                     00 00 01                  |       ...      |                              flags: 1 0x217-0x21a (3)
      |                                               |                |                              data: "" 0x21a-0x21a (0)

format/mp4/testdata/png_no_hdlr.mp4.fqtest

@@ -144,7 +144,7 @@ $ fq dv png_no_hdlr.mp4
      |                                               |                |                          boxes[0:1]: 0x17c-0x188 (12)
      |                                               |                |                            [0]{}: box 0x17c-0x188 (12)
 0x170|                                    00 00 00 0c|            ....|                              size: 12 0x17c-0x180 (4)
-0x180|75 72 6c 20                                    |url             |                              type: "url " 0x180-0x184 (4)
+0x180|75 72 6c 20                                    |url             |                              type: "url" 0x180-0x184 (4)
 0x180|            00                                 |    .           |                              version: 0 0x184-0x185 (1)
 0x180|               00 00 01                        |     ...        |                              flags: 1 0x185-0x188 (3)
      |                                               |                |                              data: "" 0x188-0x188 (0)

format/mp4/testdata/stz2.fqtest

@@ -174,7 +174,7 @@ $ fq -d mp4 'dv' stz2.mp4
      |                                               |                |                          boxes[0:1]: 0x1aa-0x1b6 (12)
      |                                               |                |                            [0]{}: box 0x1aa-0x1b6 (12)
 0x1a0|                              00 00 00 0c      |          ....  |                              size: 12 0x1aa-0x1ae (4)
-0x1a0|                                          75 72|              ur|                              type: "url " 0x1ae-0x1b2 (4)
+0x1a0|                                          75 72|              ur|                              type: "url" 0x1ae-0x1b2 (4)
 0x1b0|6c 20                                          |l               |
 0x1b0|      00                                       |  .             |                              version: 0 0x1b2-0x1b3 (1)
 0x1b0|         00 00 01                              |   ...          |                              flags: 1 0x1b3-0x1b6 (3)

format/mp4/testdata/uinf.mp4.fqtest

@@ -0,0 +1,22 @@
+$ fq -d mp4 -o force=true dv uinf.mp4
+    |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: uinf.mp4 (mp4) 0x0-0x64 (100)
+    |                                               |                |  boxes[0:1]: 0x0-0x64 (100)
+    |                                               |                |    [0]{}: box 0x0-0x64 (100)
+0x00|00 00 00 64                                    |...d            |      size: 100 0x0-0x4 (4)
+0x00|            75 69 6e 66                        |    uinf        |      type: "uinf" (A tool by which a vendor may provide access to additional information associated with a UUID) 0x4-0x8 (4)
+    |                                               |                |      boxes[0:2]: 0x8-0x64 (92)
+    |                                               |                |        [0]{}: box 0x8-0x32 (42)
+0x00|                        00 00 00 2a            |        ...*    |          size: 42 0x8-0xc (4)
+0x00|                                    75 6c 73 74|            ulst|          type: "ulst" (A list of UUID’s) 0xc-0x10 (4)
+0x10|00 02                                          |..              |          nu: 2 0x10-0x12 (2)
+    |                                               |                |          uids[0:2]: 0x12-0x32 (32)
+0x10|      6a 70 6a 70 6a 70 6a 70 6a 70 6a 70 6a 70|  jpjpjpjpjpjpjp|            [0]: raw bits uid 0x12-0x22 (16)
+0x20|6a 70                                          |jp              |
+0x20|      61 62 61 62 61 62 61 62 61 62 61 62 61 62|  ababababababab|            [1]: raw bits uid 0x22-0x32 (16)
+0x30|61 62                                          |ab              |
+    |                                               |                |        [1]{}: box 0x32-0x64 (50)
+0x30|      00 00 00 32                              |  ...2          |          size: 50 0x32-0x36 (4)
+0x30|                  75 72 6c 20                  |      url       |          type: "url" (A URL) 0x36-0x3a (4)
+0x30|                              00 00 00 00 68 74|          ....ht|          data: raw bits 0x3a-0x64 (42)
+0x40|74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 70 6c 61|tp://www.openpla|
+*   |until 0x63.7 (end) (42)                        |                |

format/mp4/testdata/vorbis.fqtest

@@ -180,7 +180,7 @@ $ fq -d mp4 dv vorbis.mp4
       |                                               |                |                            [0]{}: box 0x35e-0x36a (12)
 0x0350|                                          00 00|              ..|                              size: 12 0x35e-0x362 (4)
 0x0360|00 0c                                          |..              |
-0x0360|      75 72 6c 20                              |  url           |                              type: "url " 0x362-0x366 (4)
+0x0360|      75 72 6c 20                              |  url           |                              type: "url" 0x362-0x366 (4)
 0x0360|                  00                           |      .         |                              version: 0 0x366-0x367 (1)
 0x0360|                     00 00 01                  |       ...      |                              flags: 1 0x367-0x36a (3)
       |                                               |                |                              data: "" 0x36a-0x36a (0)

format/mp4/testdata/vp9.fqtest

@@ -163,7 +163,7 @@ $ fq -d mp4 dv vp9.mp4
       |                                               |                |                          boxes[0:1]: 0x16e9-0x16f5 (12)
       |                                               |                |                            [0]{}: box 0x16e9-0x16f5 (12)
 0x16e0|                           00 00 00 0c         |         ....   |                              size: 12 0x16e9-0x16ed (4)
-0x16e0|                                       75 72 6c|             url|                              type: "url " 0x16ed-0x16f1 (4)
+0x16e0|                                       75 72 6c|             url|                              type: "url" 0x16ed-0x16f1 (4)
 0x16f0|20                                             |                |
 0x16f0|   00                                          | .              |                              version: 0 0x16f1-0x16f2 (1)
 0x16f0|      00 00 01                                 |  ...           |                              flags: 1 0x16f2-0x16f5 (3)

format/mpeg/mpeg_pes.go

@@ -16,7 +16,7 @@ var mpegSpuGroup decode.Group
 
 func init() {
 	interp.RegisterFormat(
-		format.MPES_PES,
+		format.MPEG_PES,
 		&decode.Format{
 			Description: "MPEG Packetized elementary stream",
 			DecodeFn:    pesDecode,

format/pe/coff.go

@@ -0,0 +1,717 @@
+package pe
+
+// string table:
+// .coff.pointer_to_symbol_table as $off | .coff.number_of_symbols as $n | ($off+($n*18)) as $o | (tobytes[$o:$o+4] | explode | reverse |tobytes |  tonumber) as $s | tobytes[$o:$o+$s] | dd
+
+// https://osandamalith.com/2020/07/19/exploring-the-ms-dos-stub/
+// https://learn.microsoft.com/en-us/windows/win32/debug/pe-format
+// https://upload.wikimedia.org/wikipedia/commons/1/1b/Portable_Executable_32_bit_Structure_in_SVG_fixed.svg
+
+import (
+	"encoding/binary"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+	"github.com/wader/fq/pkg/scalar"
+)
+
+func init() {
+	interp.RegisterFormat(
+		format.COFF,
+		&decode.Format{
+			Description: "Common Object File Format",
+			DecodeFn:    peCoffStubDecode,
+			DefaultInArg: format.COFF_In{
+				FilePointerOffset: 0,
+			},
+		})
+}
+
+const (
+	peFormat32     = 0x10b
+	peFormat32Plus = 0x20b
+)
+
+var peFormatNames = scalar.UintMapSymStr{
+	peFormat32:     "pe32",
+	peFormat32Plus: "pe32+",
+}
+
+const (
+	MachineTypeUNKNOWN = 0x0
+	MachineTypeALPHA   = 0x184
+	MachineTypeALPHA64 = 0x284
+	MachineTypeAM33    = 0x1d3
+	MachineTypeAMD64   = 0x8664
+	MachineTypeARM     = 0x1c0
+	MachineTypeARM64   = 0xaa64
+	MachineTypeARMNT   = 0x1c4
+	// duplicate
+	// MachineTypeAXP64       = 0x284
+	MachineTypeEBC         = 0xebc
+	MachineTypeI386        = 0x14c
+	MachineTypeIA64        = 0x200
+	MachineTypeLOONGARCH32 = 0x6232
+	MachineTypeLOONGARCH64 = 0x6264
+	MachineTypeM32R        = 0x9041
+	MachineTypeMIPS16      = 0x266
+	MachineTypeMIPSFPU     = 0x366
+	MachineTypeMIPSFPU16   = 0x466
+	MachineTypePOWERPC     = 0x1f0
+	MachineTypePOWERPCFP   = 0x1f1
+	MachineTypeR4000       = 0x166
+	MachineTypeRISCV32     = 0x5032
+	MachineTypeRISCV64     = 0x5064
+	MachineTypeRISCV128    = 0x5128
+	MachineTypeSH3         = 0x1a2
+	MachineTypeSH3DSP      = 0x1a3
+	MachineTypeSH4         = 0x1a6
+	MachineTypeSH5         = 0x1a8
+	MachineTypeTHUMB       = 0x1c2
+	MachineTypeWCEMIPSV2   = 0x169
+)
+
+var MachineTypeNames = scalar.UintMapSymStr{
+	MachineTypeUNKNOWN: "unknown",
+	MachineTypeALPHA:   "alpha",
+	MachineTypeALPHA64: "alpha64",
+	MachineTypeAM33:    "am33",
+	MachineTypeAMD64:   "amd64",
+	MachineTypeARM:     "arm",
+	MachineTypeARM64:   "arm64",
+	MachineTypeARMNT:   "armnt",
+	//MachineTypeAXP64:        "axp64",
+	MachineTypeEBC:         "ebc",
+	MachineTypeI386:        "i386",
+	MachineTypeIA64:        "ia64",
+	MachineTypeLOONGARCH32: "loongarch32",
+	MachineTypeLOONGARCH64: "loongarch64",
+	MachineTypeM32R:        "m32r",
+	MachineTypeMIPS16:      "mips16",
+	MachineTypeMIPSFPU:     "mipsfpu",
+	MachineTypeMIPSFPU16:   "mipsfpu16",
+	MachineTypePOWERPC:     "powerpc",
+	MachineTypePOWERPCFP:   "powerpcfp",
+	MachineTypeR4000:       "r4000",
+	MachineTypeRISCV32:     "riscv32",
+	MachineTypeRISCV64:     "riscv64",
+	MachineTypeRISCV128:    "riscv128",
+	MachineTypeSH3:         "sh3",
+	MachineTypeSH3DSP:      "sh3dsp",
+	MachineTypeSH4:         "sh4",
+	MachineTypeSH5:         "sh5",
+	MachineTypeTHUMB:       "thumb",
+	MachineTypeWCEMIPSV2:   "wcemipsv2",
+}
+
+const (
+	SubSystemUNKNOWN                  = 0
+	SubSystemNATIVE                   = 1
+	SubSystemWINDOWS_GUI              = 2
+	SubSystemWINDOWS_CUI              = 3
+	SubSystemOS2_CUI                  = 5
+	SubSystemPOSIX_CUI                = 7
+	SubSystemNATIVE_WINDOWS           = 8
+	SubSystemWINDOWS_CE_GUI           = 9
+	SubSystemEFI_APPLICATION          = 10
+	SubSystemEFI_BOOT_SERVICE_DRIVER  = 11
+	SubSystemEFI_RUNTIME_DRIVER       = 12
+	SubSystemEFI_ROM                  = 13
+	SubSystemXBOX                     = 14
+	SubSystemWINDOWS_BOOT_APPLICATION = 16
+)
+
+var subSystemNames = scalar.UintMapSymStr{
+	SubSystemUNKNOWN:                  "unknown",
+	SubSystemNATIVE:                   "native",
+	SubSystemWINDOWS_GUI:              "windows_gui",
+	SubSystemWINDOWS_CUI:              "windows_cui",
+	SubSystemOS2_CUI:                  "os2_cui",
+	SubSystemPOSIX_CUI:                "posix_cui",
+	SubSystemNATIVE_WINDOWS:           "native_windows",
+	SubSystemWINDOWS_CE_GUI:           "windows_ce_gui",
+	SubSystemEFI_APPLICATION:          "efi_application",
+	SubSystemEFI_BOOT_SERVICE_DRIVER:  "efi_boot_service_driver",
+	SubSystemEFI_RUNTIME_DRIVER:       "efi_runtime_driver",
+	SubSystemEFI_ROM:                  "efi_rom",
+	SubSystemXBOX:                     "xbox",
+	SubSystemWINDOWS_BOOT_APPLICATION: "windows_boot_application",
+}
+
+const (
+	symClassEndOfFunction   = 0xff // A special symbol that represents the end of function, for debugging purposes.
+	symClassNull            = 0    // No assigned storage class.
+	symClassAutomatic       = 1    // The automatic (stack) variable. The Value field specifies the stack frame offset.
+	symClassExternal        = 2    // A value that Microsoft tools use for external symbols. The Value field indicates the size if the section number is IMAGE_SYM_UNDEFINED (0). If the section number is not zero, then the Value field specifies the offset within the section.
+	symClassStatic          = 3    // The offset of the symbol within the section. If the Value field is zero, then the symbol represents a section name.
+	symClassRegister        = 4    // A register variable. The Value field specifies the register number.
+	symClassExternalDef     = 5    // A symbol that is defined externally.
+	symClassLabel           = 6    // A code label that is defined within the module. The Value field specifies the offset of the symbol within the section.
+	symClassUndefinedLabel  = 7    // A reference to a code label that is not defined.
+	symClassMemberOfStruct  = 8    // The structure member. The Value field specifies the n th member.
+	symClassArgument        = 9    // A formal argument (parameter) of a function. The Value field specifies the n th argument.
+	symClassStructTag       = 10   // The structure tag-name entry.
+	symClassMemberOfUnion   = 11   // A union member. The Value field specifies the n th member.
+	symClassUnionTag        = 12   // The Union tag-name entry.
+	symClassTypeDefinition  = 13   // A Typedef entry.
+	symClassUndefinedStatic = 14   // A static data declaration.
+	symClassEnumTag         = 15   // An enumerated type tagname entry.
+	symClassMemberOfEnum    = 16   // A member of an enumeration. The Value field specifies the n th member.
+	symClassRegisterParam   = 17   // A register parameter.
+	symClassBitField        = 18   // A bit-field reference. The Value field specifies the n th bit in the bit field.
+	symClassBlock           = 100  // A .bb (beginning of block) or .eb (end of block) record. The Value field is the relocatable address of the code location.
+	symClassFunction        = 101  // A value that Microsoft tools use for symbol records that define the extent of a function: begin function (.bf ), end function ( .ef ), and lines in function ( .lf ). For .lf records, the Value field gives the number of source lines in the function. For .ef records, the Value field gives the size of the function code.
+	symClassEndOfStruct     = 102  // An end-of-structure entry.
+	symClassFile            = 103  // A value that Microsoft tools, as well as traditional COFF format, use for the source-file symbol record. The symbol is followed by auxiliary records that name the file.
+	symClassSection         = 104  // A definition of a section (Microsoft tools use STATIC storage class instead).
+	symClassWeakExternal    = 105  // A weak external. For more information, see Auxiliary Format 3: Weak Externals.
+	symClassClrToken        = 107  // A CLR token symbol. The name is an ASCII string that consists of the hexadecimal value of the token. For more information, see CLR Token Definition (Object Only).
+)
+
+var symClassNames = scalar.UintMapSymStr{
+	symClassEndOfFunction:   "end_of_function",
+	symClassNull:            "null",
+	symClassAutomatic:       "automatic",
+	symClassExternal:        "external",
+	symClassStatic:          "static",
+	symClassRegister:        "register",
+	symClassExternalDef:     "external_def",
+	symClassLabel:           "label",
+	symClassUndefinedLabel:  "undefined_label",
+	symClassMemberOfStruct:  "member_of_struct",
+	symClassArgument:        "argument",
+	symClassStructTag:       "struct_tag",
+	symClassMemberOfUnion:   "member_of_union",
+	symClassUnionTag:        "union_tag",
+	symClassTypeDefinition:  "type_definition",
+	symClassUndefinedStatic: "undefined_static",
+	symClassEnumTag:         "enum_tag",
+	symClassMemberOfEnum:    "member_of_enum",
+	symClassRegisterParam:   "register_param",
+	symClassBitField:        "bit_field",
+	symClassBlock:           "block",
+	symClassFunction:        "function",
+	symClassEndOfStruct:     "end_of_struct",
+	symClassFile:            "file",
+	symClassSection:         "section",
+	symClassWeakExternal:    "weak_external",
+	symClassClrToken:        "clr_token",
+}
+
+const (
+	symTypeNull   = 0
+	symTypeVoid   = 1
+	symTypeChar   = 2
+	symTypeShort  = 3
+	symTypeInt    = 4
+	symTypeLong   = 5
+	symTypeFloat  = 6
+	symTypeDouble = 7
+	symTypeStruct = 8
+	symTypeUnion  = 9
+	symTypeEnum   = 10
+	symTypeMoe    = 11
+	symTypeByte   = 12
+	symTypeWord   = 13
+	symTypeUint   = 14
+	symTypeDword  = 15
+)
+
+var symBaseTypeNames = scalar.UintMapSymStr{
+	symTypeNull:   "null",
+	symTypeVoid:   "void",
+	symTypeChar:   "char",
+	symTypeShort:  "short",
+	symTypeInt:    "int",
+	symTypeLong:   "long",
+	symTypeFloat:  "float",
+	symTypeDouble: "double",
+	symTypeStruct: "struct",
+	symTypeUnion:  "union",
+	symTypeEnum:   "enum",
+	symTypeMoe:    "moe",
+	symTypeByte:   "byte",
+	symTypeWord:   "word",
+	symTypeUint:   "uint",
+	symTypeDword:  "dword",
+}
+
+const (
+	symDtypeNull     = 0
+	symDtypePointer  = 1
+	symDtypeFunction = 2
+	symDtypeArray    = 3
+)
+
+var symBaseDTypeNames = scalar.UintMapSymStr{
+	symDtypeNull:     "null",
+	symDtypePointer:  "pointer",
+	symDtypeFunction: "function",
+	symDtypeArray:    "array",
+}
+
+// type stringTable []string
+
+// func (m stringTable) MapStr(s scalar.Str) (scalar.Str, error) {
+// 	if s.Actual == "" || s.Actual[0] != '/' {
+// 		return s, nil
+// 	}
+// 	un, err := strconv.ParseUint(s.Actual[1:], 10, 64)
+// 	if err != nil {
+// 		// ignore error
+// 		//nolint: nilerr
+// 		return s, nil
+// 	}
+// 	n := int(un)
+// 	if n >= len(m) {
+// 		return s, nil
+// 	}
+
+// 	s.Sym = m[n]
+
+// 	return s, nil
+// }
+
+func strIndexNull(idx int, s string) string {
+	if idx > len(s) {
+		return ""
+	}
+	i := strings.IndexByte(s[idx:], 0)
+	if i == -1 {
+		return s
+	}
+	return s[idx : idx+i]
+}
+
+type stringTable string
+
+func (m stringTable) MapStr(s scalar.Str) (scalar.Str, error) {
+	if s.Actual[0] == '/' {
+		// /### section name
+
+		s.Actual = strings.TrimRight(s.Actual, "\x00")
+
+		un, err := strconv.ParseUint(s.Actual[1:], 10, 64)
+		if err != nil {
+			// ignore error
+			//nolint: nilerr
+			return s, nil
+		}
+		n := int(un) - 4
+
+		s.Sym = strIndexNull(n, string(m))
+
+		return s, nil
+	} else if s.Actual[0:4] == "\x00\x00\x00\x00" {
+		// \0\0\0\0LE32 symbol name
+		n := binary.LittleEndian.Uint32([]byte(s.Actual)[4:8]) - 4
+		s.Sym = strIndexNull(int(n), string(m))
+	} else {
+		// right null padded
+		s.Actual = strings.TrimRight(s.Actual, "\x00")
+	}
+
+	return s, nil
+}
+
+func peCoffStubDecode(d *decode.D) any {
+	var pci format.COFF_In
+	d.ArgAs(&pci)
+
+	addrSize := 64
+
+	d.Endian = decode.LittleEndian
+
+	d.FieldRawLen("signature", 4*8, d.AssertBitBuf([]byte("PE\x00\x00")))
+	d.FieldU16("machine", MachineTypeNames, scalar.UintHex)
+	numberOfSections := d.FieldU16("number_of_sections")
+	d.FieldU32("time_date_stamp", scalar.UintActualUnixTimeDescription(time.Second, time.RFC3339))
+	pointerToSymbolTable := d.FieldU32("pointer_to_symbol_table", scalar.UintHex)
+	numberOfSymbols := d.FieldU32("number_of_symbols")
+	sizeOfOptionalHeader := d.FieldU16("size_of_optional_header")
+	d.FieldStruct("characteristics", func(d *decode.D) {
+		// bytes swapped as it's a 16bit LE
+		d.FieldBool("bytes_reversed_lo")   //  0x0080 // Little endian: the least significant bit (LSB) precedes the most significant bit (MSB) in memory. This flag is deprecated and should be zero.
+		d.FieldBool("reserved")            //  0x0040 // This flag is reserved for future use.
+		d.FieldBool("large_address_aware") //  0x0020 // Application can handle > 2-GB addresses.
+		d.FieldBool("aggressive_ws_trim")  //  0x0010 // Obsolete. Aggressively trim working set. This flag is deprecated for Windows 2000 and later and must be zero.
+		d.FieldBool("local_syms_stripped") //  0x0008 // COFF symbol table entries for local symbols have been removed. This flag is deprecated and should be zero.
+		d.FieldBool("line_nums_stripped")  //  0x0004 // COFF line numbers have been removed. This flag is deprecated and should be zero.
+		d.FieldBool("executable_image")    //  0x0002 // Image only. This indicates that the image file is valid and can be run. If this flag is not set, it indicates a linker error.
+		d.FieldBool("relocs_stripped")     //  0x0001 // Image only, Windows CE, and Microsoft Windows NT and later. This indicates that the file does not contain base relocations and must therefore be loaded at its preferred base address. If the base address is not available, the loader reports an error. The default behavior of the linker is to strip base relocations from executable (EXE) files.
+
+		d.FieldBool("bytes_reversed_hi")       //  0x8000 // Big endian: the MSB precedes the LSB in memory. This flag is deprecated and should be zero.
+		d.FieldBool("up_system_only")          //  0x4000 // The file should be run only on a uniprocessor machine.
+		d.FieldBool("dll")                     //  0x2000 // The image file is a dynamic-link library (DLL). Such files are considered executable files for almost all purposes, although they cannot be directly run.
+		d.FieldBool("system")                  //  0x1000 // The image file is a system file, not a user program.
+		d.FieldBool("net_run_from_swap")       //  0x0800 // If the image is on network media, fully load it and copy it to the swap file.
+		d.FieldBool("removable_run_from_swap") //  0x0400 // If the image is on removable media, fully load it and copy it to the swap file.
+		d.FieldBool("debug_stripped")          //  0x0200 // Debugging information is removed from the image file.
+		d.FieldBool("32bit_machine")           //  0x0100 // Machine is based on a 32-bit-word architecture.
+	})
+
+	if pointerToSymbolTable != 0 {
+		pointerToSymbolTable -= uint64(pci.FilePointerOffset)
+	}
+	stringTablePos := (int64(pointerToSymbolTable) + int64(numberOfSymbols)*18) * 8
+
+	var stringTableMapper stringTable
+	if stringTablePos < d.Len()+4*8 {
+		d.SeekAbs(stringTablePos, func(d *decode.D) {
+			stringTableSize := d.U32() - 4
+			if stringTableSize*8 > uint64(d.BitsLeft()) {
+				return
+			}
+			stringTableMapper = stringTable(d.UTF8(int(stringTableSize)))
+			// d.FramedFn(int64(stringTableSize)*8, func(d *decode.D) {
+			// 	for !d.End() {
+			// 		stringTable = append(stringTable, d.UTF8Null())
+			// 	}
+			// })
+		})
+	}
+
+	// how to know if image only? windows specific?
+	if sizeOfOptionalHeader > 0 {
+		d.FieldStruct("optional_header", func(d *decode.D) {
+			d.FramedFn(int64(sizeOfOptionalHeader)*8, func(d *decode.D) {
+				peFormat := d.FieldU16("format", peFormatNames, scalar.UintHex)
+				d.FieldU8("major_linker_version")
+				d.FieldU8("minor_linker_version")
+				d.FieldU32("size_of_code")
+				d.FieldU32("size_of_initialized_data")
+				d.FieldU32("size_of_uninitialized_data")
+				d.FieldU32("address_of_entry_point", scalar.UintHex)
+				d.FieldU32("base_of_code", scalar.UintHex)
+				if peFormat == peFormat32 {
+					d.FieldU32("base_of_data", scalar.UintHex)
+					addrSize = 32
+				}
+
+				d.FieldU("image_base", addrSize, scalar.UintHex)
+				d.FieldU32("section_alignment")
+				d.FieldU32("file_alignment")
+				d.FieldU16("major_os_version")
+				d.FieldU16("minor_os_version")
+				d.FieldU16("major_image_version")
+				d.FieldU16("minor_image_version")
+				d.FieldU16("major_subsystem_version")
+				d.FieldU16("minor_subsystem_version")
+				d.FieldU32("win32_version")
+				d.FieldU32("size_of_image")
+				d.FieldU32("size_of_headers")
+				d.FieldU32("chunk_sum", scalar.UintHex)
+				d.FieldU16("subsystem", subSystemNames)
+				d.FieldStruct("dll_characteristics", func(d *decode.D) {
+					d.FieldBool("force_integrity") // Code Integrity checks are enforced.
+					d.FieldBool("dynamic_base")    // DLL can be relocated at load time.
+					d.FieldBool("high_entropy_va") // Image can handle a high entropy 64-bit virtual address space.
+					d.FieldBool("reserved0")       // ??
+					d.FieldBool("reserved1")
+					d.FieldBool("reserved2")
+					d.FieldBool("reserved3")
+					d.FieldBool("reserved4")
+
+					d.FieldBool("terminal_server_aware") // Terminal Server aware.
+					d.FieldBool("guard_cf")              // Image supports Control Flow Guard.
+					d.FieldBool("wdm_driver")            // A WDM driver.
+					d.FieldBool("appcontainer")          // Image must execute in an AppContainer.
+					d.FieldBool("no_bind")               // Do not bind the image.
+					d.FieldBool("no_seh")                // Does not use structured exception (SE) handling. No SE handler may be called in this image.
+					d.FieldBool("no_isolation")          // Isolation aware, but do not isolate the image.
+					d.FieldBool("nx_compat")             // Image is NX compatible.
+				})
+				d.FieldU("size_of_track_reserve", addrSize)
+				d.FieldU("size_of_stack_commit", addrSize)
+				d.FieldU("size_of_heap_reserve", addrSize)
+				d.FieldU("size_of_heap_commit", addrSize)
+				d.FieldU32("loader_flags")
+				d.FieldU32("number_of_rva_and_sizes")
+
+				d.FieldU32("export_table_address", scalar.UintHex) //The export table address and size. For more information see .edata Section (Image Only).
+				d.FieldU32("export_table_size")
+				d.FieldU32("import_table_address", scalar.UintHex) //The import table address and size. For more information, see The .idata Section.
+				d.FieldU32("import_table_size")
+				d.FieldU32("resource_table_address", scalar.UintHex) //The resource table address and size. For more information, see The .rsrc Section.
+				d.FieldU32("resource_table_size")
+				d.FieldU32("exception_table_address", scalar.UintHex) //The exception table address and size. For more information, see The .pdata Section.
+				d.FieldU32("exception_table_size")
+				d.FieldU32("certificate_table_address", scalar.UintHex) //The attribute certificate table address and size. For more information, see The Attribute Certificate Table (Image Only).
+				d.FieldU32("certificate_table_size")
+				d.FieldU32("base_relocation_table_address", scalar.UintHex) //The base relocation table address and size. For more information, see The .reloc Section (Image Only).
+				d.FieldU32("base_relocation_table_size")
+				d.FieldU32("debug_address", scalar.UintHex) //The debug data starting address and size. For more information, see The .debug Section.
+				d.FieldU32("debug_size")
+				d.FieldU64("architecture")                      //Reserved, must be 0
+				d.FieldU64("global_ptr", scalar.UintHex)        //The RVA of the value to be stored in the global pointer register. The size member of this structure must be set to zero.
+				d.FieldU32("tls_table_address", scalar.UintHex) //The thread local storage (TLS) table address and size. For more information, see The .tls Section.
+				d.FieldU32("tls_table_size")
+				d.FieldU32("load_config_table_address", scalar.UintHex) //The load configuration table address and size. For more information, see The Load Configuration Structure (Image Only).
+				d.FieldU32("load_config_table_size")
+				d.FieldU32("bound_import_address", scalar.UintHex) //The bound import table address and size.
+				d.FieldU32("bound_import_size")
+				d.FieldU32("iat_address", scalar.UintHex) //The import address table address and size. For more information, see Import Address Table.
+				d.FieldU32("iat_size")
+				d.FieldU32("delay_import_descriptor_address", scalar.UintHex) //The delay import descriptor address and size. For more information, see Delay-Load Import Tables (Image Only).
+				d.FieldU32("delay_import_descriptor_size")
+				d.FieldU32("clr_runtime_header_address", scalar.UintHex) //The CLR runtime header address and size. For more information, see The .cormeta Section (Object Only).
+				d.FieldU32("clr_runtime_header_size")
+				d.FieldU64("reserved") //must be zero
+
+				// TODO: where?
+				/*numberOfRvaAndSizes :=*/
+				/*
+					d.FieldArray("data_directories", func(d *decode.D) {
+						for i := 0; i < int(numberOfRvaAndSizes); i++ {
+							d.FieldStruct("data_directory", func(d *decode.D) {
+								d.FieldU32("virtual_address", scalar.UintHex)
+								d.FieldU32("size")
+							})
+						}
+					})
+				*/
+
+				d.FieldRawLen("unknown", d.BitsLeft())
+			})
+		})
+	}
+
+	// TODO: section_alignment?
+
+	d.FieldArray("sections", func(d *decode.D) {
+		for i := uint64(0); i < numberOfSections; i++ {
+			d.FieldStruct("section", func(d *decode.D) {
+				name := d.FieldUTF8("name", 8, stringTableMapper)                     // An 8-byte, null-padded UTF-8 encoded string. If the string is exactly 8 characters long, there is no terminating null. For longer names, this field contains a slash (/) that is followed by an ASCII representation of a decimal number that is an offset into the string table. Executable images do not use a string table and do not support section names longer than 8 characters. Long names in object files are truncated if they are emitted to an executable file.
+				d.FieldU32("virtual_size")                                            // The total size of the section when loaded into memory. If this value is greater than SizeOfRawData, the section is zero-padded. This field is valid only for executable images and should be set to zero for object files.
+				virtualAddress := d.FieldU32("virtual_address", scalar.UintHex)       // For executable images, the address of the first byte of the section relative to the image base when the section is loaded into memory. For object files, this field is the address of the first byte before relocation is applied; for simplicity, compilers should set this to zero. Otherwise, it is an arbitrary value that is subtracted from offsets during relocation.
+				sizeOfRawData := d.FieldU32("size_of_raw_data")                       // The size of the section (for object files) or the size of the initialized data on disk (for image files). For executable images, this must be a multiple of FileAlignment from the optional header. If this is less than VirtualSize, the remainder of the section is zero-filled. Because the SizeOfRawData field is rounded but the VirtualSize field is not, it is possible for SizeOfRawData to be greater than VirtualSize as well. When a section contains only uninitialized data, this field should be zero.
+				pointerToRawData := d.FieldU32("pointer_to_raw_data", scalar.UintHex) // The file pointer to the first page of the section within the COFF file. For executable images, this must be a multiple of FileAlignment from the optional header. For object files, the value should be aligned on a 4-byte boundary for best performance. When a section contains only uninitialized data, this field should be zero.
+				d.FieldU32("pointer_to_relocations", scalar.UintHex)                  // The file pointer to the beginning of relocation entries for the section. This is set to zero for executable images or if there are no relocations.
+				d.FieldU32("pointer_to_line_numbers", scalar.UintHex)                 // The file pointer to the beginning of line-number entries for the section. This is set to zero if there are no COFF line numbers. This value should be zero for an image because COFF debugging information is deprecated.
+				d.FieldU16("number_of_relocations")                                   // The number of relocation entries for the section. This is set to zero for executable images.
+				d.FieldU16("number_of_line_numbers")                                  // The number of line-number entries for the section. This value should be zero for an image because COFF debugging information is deprecated.
+
+				d.FieldStruct("characteristics", func(d *decode.D) {
+
+					// 32 bit LE flags
+
+					d.FieldBool("cnt_uninitialized_data") // The section contains uninitialized data.
+					d.FieldBool("cnt_initialized_data")   // The section contains initialized data.
+					d.FieldBool("cnt_code")               // The section contains executable code.
+					d.FieldBool("reserved")               // Reserved for future use.
+					d.FieldBool("type_no_pad")            // The section should not be padded to the next boundary. This flag is obsolete and is replaced by IMAGE_SCN_ALIGN_1BYTES. This is valid only for object files.
+					d.FieldBool("reserved0")              // Reserved for future use.
+					d.FieldBool("reserved1")              // Reserved for future use.
+					d.FieldBool("reserved2")              // Reserved for future use.
+
+					d.FieldBool("gprel")      // The section contains data referenced through the global pointer (GP).
+					d.FieldBool("unknown0")   // ??
+					d.FieldBool("unknown1")   // ??
+					d.FieldBool("lnk_comdat") // The section contains COMDAT data. For more information, see COMDAT Sections (Object Only). This is valid only for object files.
+					d.FieldBool("lnk_remove") // The section will not become part of the image. This is valid only for object files.
+					d.FieldBool("reserved3")  // Reserved for future use.
+					d.FieldBool("lnk_info")   // The section contains comments or other information. The .drectve section has this type. This is valid for object files only.
+					d.FieldBool("lnk_other")  // Reserved for future use.
+
+					d.FieldBool("align_128bytes") // Align data on a 128-byte boundary. Valid only for object files.
+					d.FieldBool("align_8bytes")   // Align data on an 8-byte boundary. Valid only for object files.
+					d.FieldBool("align_2bytes")   // Align data on a 2-byte boundary. Valid only for object files.
+					d.FieldBool("align_1bytes")   // Align data on a 1-byte boundary. Valid only for object files.
+					d.FieldBool("mem_preload")    // Reserved for future use.
+					d.FieldBool("mem_locked")     // Reserved for future use.
+					d.FieldBool("mem_16bit")      // Reserved for future use.
+					d.FieldBool("mem_purgeable")  // Reserved for future use. TODO was 0x00020000 in docnumberOfSymbols
+
+					d.FieldBool("mem_write")       // The section can be written to.
+					d.FieldBool("mem_read")        // The section can be read.
+					d.FieldBool("mem_execute")     // The section can be executed as code.
+					d.FieldBool("mem_shared")      // The section can be shared in memory.
+					d.FieldBool("mem_not_paged")   // The section is not pageable.
+					d.FieldBool("mem_not_cached")  // The section cannot be cached.
+					d.FieldBool("mem_discardable") // The section can be discarded as needed.
+					d.FieldBool("lnk_nreloc_ovfl") // The section contains extended relocations.
+
+					// IMAGE_SCN_ALIGN_4BYTES 0x00300000 Align data on a 4-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_16BYTES 0x00500000 Align data on a 16-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_32BYTES 0x00600000 Align data on a 32-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_64BYTES 0x00700000 Align data on a 64-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_256BYTES 0x00900000 Align data on a 256-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_512BYTES 0x00A00000 Align data on a 512-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_1024BYTES 0x00B00000 Align data on a 1024-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_2048BYTES 0x00C00000 Align data on a 2048-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_4096BYTES 0x00D00000 Align data on a 4096-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_8192BYTES 0x00E00000 Align data on an 8192-byte boundary. Valid only for object files.
+
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("type_no_pad")            // The section should not be padded to the next boundary. This flag is obsolete and is replaced by IMAGE_SCN_ALIGN_1BYTES. This is valid only for object files.
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("cnt_code")               // The section contains executable code.
+					// d.FieldBool("cnt_initialized_data")   // The section contains initialized data.
+					// d.FieldBool("cnt_uninitialized_data") // The section contains uninitialized data.
+
+					// d.FieldBool("lnk_other")              // Reserved for future use.
+					// d.FieldBool("lnk_info")               // The section contains comments or other information. The .drectve section has this type. This is valid for object files only.
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("lnk_remove")             // The section will not become part of the image. This is valid only for object files.
+					// d.FieldBool("lnk_comdat")             // The section contains COMDAT data. For more information, see COMDAT Sections (Object Only). This is valid only for object files.
+					// d.FieldBool("unknown")                // The section contains data referenced through the global pointer (GP).
+					// d.FieldBool("unknown")                // The section contains data referenced through the global pointer (GP).
+					// d.FieldBool("gprel")                  // The section contains data referenced through the global pointer (GP).
+
+					// d.FieldBool("mem_purgeable")          // Reserved for future use. TODO was 0x00020000 in docnumberOfSymbols
+					// d.FieldBool("mem_16bit")              // Reserved for future use.
+					// d.FieldBool("mem_locked")             // Reserved for future use.
+					// d.FieldBool("mem_preload")            // Reserved for future use.
+					// d.FieldBool("align_1bytes")           // Align data on a 1-byte boundary. Valid only for object files.
+					// d.FieldBool("align_2bytes")           // Align data on a 2-byte boundary. Valid only for object files.
+					// d.FieldBool("align_8bytes")           // Align data on an 8-byte boundary. Valid only for object files.
+					// d.FieldBool("align_128bytes")         // Align data on a 128-byte boundary. Valid only for object files.
+
+					// d.FieldBool("lnk_nreloc_ovfl")        // The section contains extended relocations.
+					// d.FieldBool("mem_discardable")        // The section can be discarded as needed.
+					// d.FieldBool("mem_not_cached")         // The section cannot be cached.
+					// d.FieldBool("mem_not_paged")          // The section is not pageable.
+					// d.FieldBool("mem_shared")             // The section can be shared in memory.
+					// d.FieldBool("mem_execute")            // The section can be executed as code.
+					// d.FieldBool("mem_read")               // The section can be read.
+					// d.FieldBool("mem_write")              // The section can be written to.
+
+				})
+
+				_ = name
+				_ = virtualAddress
+				_ = sizeOfRawData
+				_ = pointerToRawData
+
+				/*
+					if pointerToRawData != 0 {
+						pointerToRawData -= uint64(pci.FilePointerOffset)
+						d.SeekAbs(int64(pointerToRawData)*8, func(d *decode.D) {
+							switch name {
+							case ".idata":
+								d.FieldStruct("data", func(d *decode.D) {
+
+									count := 0
+									d.FieldArray("directory_table", func(d *decode.D) {
+										for {
+											var n uint64
+											d.FieldStruct("directory_entry", func(d *decode.D) {
+												n = d.FieldU32("lookup_table_rva", scalar.UintHex)
+												d.FieldU32("timestamp")
+												d.FieldU32("forward_chain")
+												d.FieldU32("name_rva", scalar.UintHex)
+												d.FieldU32("address_table_rva", scalar.UintHex)
+											})
+
+											if n == 0 {
+												break
+											}
+
+											count++
+										}
+									})
+
+									_ = virtualAddress
+
+									d.FieldArray("dlls", func(d *decode.D) {
+
+										for i := 0; i < count; i++ {
+
+											d.FieldStruct("dll", func(d *decode.D) {
+
+												d.FieldArray("lookup_table1", func(d *decode.D) {
+													for {
+														if d.PeekUintBits(addrSize) == 0 {
+															break
+														}
+														d.FieldU("bla", addrSize)
+													}
+												})
+												d.FieldU("lookup_table1_end", addrSize)
+											})
+										}
+
+									})
+
+									d.FieldArray("hint_names", func(d *decode.D) {
+
+										for i := 0; true; i++ {
+
+											log.Printf("i: %#+v\n", i)
+
+											d.FieldStruct("hint_name", func(d *decode.D) {
+
+												d.FieldU16("hint")
+												d.FieldUTF8Null("name")
+
+												// if d.AlignBits(16) != 0 {
+												// 	d.FieldU8("align_pad")
+												// }
+
+											})
+
+											if i > 800 {
+												break
+											}
+										}
+
+									})
+
+								})
+
+							default:
+								d.FieldRawLen("data", int64(sizeOfRawData)*8)
+							}
+						})
+					}
+				*/
+			})
+		}
+	})
+
+	// var stringTableMapperPos int64
+
+	// TODO: if pointerToSymbolTable != 0?
+
+	if pointerToSymbolTable != 0 {
+		d.FieldArray("symbol_table", func(d *decode.D) {
+			d.SeekAbs(int64(pointerToSymbolTable*8), func(d *decode.D) {
+				for i := uint64(0); i < numberOfSymbols; i++ {
+					d.FieldStruct("symbol", func(d *decode.D) {
+						// TODO: name
+						d.FieldUTF8("name", 8, stringTableMapper) // The name of the symbol, represented by a union of three structures. An array of 8 bytes is used if the name is not more than 8 bytes long. For more information, see Symbol Name Representation.
+						d.FieldU32("value")                       // The value that is associated with the symbol. The interpretation of this field depends on SectionNumber and StorageClass. A typical meaning is the relocatable address.
+						d.FieldU16("section_number")              // The signed integer that identifies the section, using a one-based index into the section table. Some values have special meaning, as defined in section 5.4.2, "Section Number Values."
+						d.FieldU8("base_type", symBaseTypeNames)
+						d.FieldU8("complex_type", symBaseDTypeNames)
+						d.FieldU8("storage_class", symClassNames) // An enumerated value that represents storage class. For more information, see Storage Class.
+						d.FieldU8("number_of_aux_symbols")        // The number of auxiliary symbol table entries that follow this record.
+					})
+				}
+				// stringTablePos = d.Pos()
+			})
+		})
+
+		d.SeekAbs(stringTablePos, func(d *decode.D) {
+			// TODO: if pos != 0?
+			d.FieldStruct("string_table", func(d *decode.D) {
+				stringTableSize := d.FieldU32("size") - 4
+				d.FramedFn(int64(stringTableSize*8), func(d *decode.D) {
+					d.FieldArray("entries", func(d *decode.D) {
+						for !d.End() {
+							d.FieldUTF8Null("entry")
+						}
+					})
+				})
+			})
+		})
+	}
+
+	return nil
+}

format/pe/msdos_stub.go

@@ -0,0 +1,61 @@
+package pe
+
+// https://osandamalith.com/2020/07/19/exploring-the-ms-dos-stub/
+
+import (
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/internal/mathx"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+	"github.com/wader/fq/pkg/scalar"
+)
+
+func init() {
+	interp.RegisterFormat(
+		format.MSDOS_Stub,
+		&decode.Format{
+			Description: "MS-DOS Stub",
+			DecodeFn:    msDosStubDecode,
+		})
+}
+
+func msDosStubDecode(d *decode.D) any {
+	d.Endian = decode.LittleEndian
+
+	d.FieldU16("e_magic", scalar.UintDescription("Magic number"), d.UintAssert(0x5a4d), scalar.UintHex)
+	d.FieldU16("e_cblp", scalar.UintDescription("Bytes on last page of file"))
+	d.FieldU16("e_cp", scalar.UintDescription("Pages in file"))
+	d.FieldU16("e_crlc", scalar.UintDescription("Relocations"))
+	d.FieldU16("e_cparhdr", scalar.UintDescription("Size of header in paragraphs"))
+	d.FieldU16("e_minalloc", scalar.UintDescription("Minimum extra paragraphs needed"))
+	d.FieldU16("e_maxalloc", scalar.UintDescription("Maximum extra paragraphs needed"))
+	d.FieldU16("e_ss", scalar.UintDescription("Initial (relative) SS value"))
+	d.FieldU16("e_sp", scalar.UintDescription("Initial SP value"))
+	d.FieldU16("e_csum", scalar.UintDescription("Checksum"))
+	d.FieldU16("e_ip", scalar.UintDescription("Initial IP value"))
+	d.FieldU16("e_cs", scalar.UintDescription("Initial (relative) CS value"))
+	d.FieldU16("e_lfarlc", scalar.UintDescription("File address of relocation table"))
+	d.FieldU16("e_ovno", scalar.UintDescription("Overlay number"))
+	d.FieldRawLen("e_res", 4*16, scalar.BitBufDescription("Reserved words"))
+	d.FieldU16("e_oemid", scalar.UintDescription("OEM identifier (for e_oeminfo)"))
+	d.FieldU16("e_oeminfo", scalar.UintDescription("OEM information; e_oemid specific"))
+	d.FieldRawLen("e_res2", 10*16, scalar.BitBufDescription("Reserved words"))
+	lfanew := d.FieldU32("e_lfanew", scalar.UintDescription("File address of new exe header"))
+
+	// TODO: how to detect UEFI?
+
+	subEndPos := mathx.Min(d.Pos()+64*8, int64(lfanew)*8)
+
+	// TODO: x86 format in the future
+	d.FieldRawLen("stub", subEndPos-d.Pos(), scalar.BitBufDescription("Sub program"))
+
+	// TODO: is not padding i guess?
+	padding := lfanew*8 - uint64(subEndPos)
+	if padding > 0 {
+		d.FieldRawLen("padding", int64(padding))
+	}
+
+	return format.MS_DOS_Out{
+		LFANew: int(lfanew),
+	}
+}

format/pe/pe.go

@@ -0,0 +1,37 @@
+package pe
+
+import (
+	"fmt"
+
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+)
+
+var msDosStubGroup decode.Group
+var coffGroup decode.Group
+
+func init() {
+	interp.RegisterFormat(
+		format.PE,
+		&decode.Format{
+			Description: "Portable Executable",
+			Groups:      []*decode.Group{format.Probe},
+			Dependencies: []decode.Dependency{
+				{Groups: []*decode.Group{format.MSDOS_Stub}, Out: &msDosStubGroup},
+				{Groups: []*decode.Group{format.COFF}, Out: &coffGroup},
+			},
+			DecodeFn: peDecode,
+		})
+}
+
+func peDecode(d *decode.D) any {
+	_, v := d.FieldFormat("ms_dos_stub", &msDosStubGroup, nil)
+	msDOSOut, ok := v.(format.MS_DOS_Out)
+	if !ok {
+		panic(fmt.Sprintf("expected MS_DOS_Out got %#+v", v))
+	}
+	d.FieldFormat("coff", &coffGroup, format.COFF_In{FilePointerOffset: msDOSOut.LFANew})
+
+	return nil
+}

format/pe/testdata/README.md

@@ -0,0 +1,7 @@
+PE sample from https://github.com/JonathanSalwan/binary-samples under MIT license
+
+```sh
+rm -f *.fqtest; for i in pe-* *.efi; do echo "\$ fq dv $i" > $i.fqtest ; done
+```
+
+EFI sample from https://github.com/badcf00d/UEFI-helloworld under BSD license

format/pe/testdata/helloworld.efi.fqtest

@@ -0,0 +1,260 @@
+$ fq dv helloworld.efi
+     |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: helloworld.efi (pe) 0x0-0x800 (2048)
+     |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0x78 (120)
+0x000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x000|      78 00                                    |  x.            |    e_cblp: 120 (Bytes on last page of file) 0x2-0x4 (2)
+0x000|            01 00                              |    ..          |    e_cp: 1 (Pages in file) 0x4-0x6 (2)
+0x000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x000|                                    00 00      |            ..  |    e_maxalloc: 0 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x010|00 00                                          |..              |    e_sp: 0 (Initial SP value) 0x10-0x12 (2)
+0x010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x020|00 00 00 00                                    |....            |
+0x020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x030|                                    78 00 00 00|            x...|    e_lfanew: 120 (File address of new exe header) 0x3c-0x40 (4)
+0x040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x78 (56)
+*    |until 0x77.7 (56)                              |                |
+     |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0x78-0x1f8 (384)
+0x070|                        50 45 00 00            |        PE..    |    signature: raw bits (valid) 0x78-0x7c (4)
+0x070|                                    64 86      |            d.  |    machine: "amd64" (0x8664) 0x7c-0x7e (2)
+0x070|                                          03 00|              ..|    number_of_sections: 3 0x7e-0x80 (2)
+0x080|96 bf 5b 5e                                    |..[^            |    time_date_stamp: 1583071126 (2020-03-01T13:58:46Z) 0x80-0x84 (4)
+0x080|            00 00 00 00                        |    ....        |    pointer_to_symbol_table: 0x0 0x84-0x88 (4)
+0x080|                        00 00 00 00            |        ....    |    number_of_symbols: 0 0x88-0x8c (4)
+0x080|                                    f0 00      |            ..  |    size_of_optional_header: 240 0x8c-0x8e (2)
+     |                                               |                |    characteristics{}: 0x8e-0x90 (2)
+0x080|                                          22   |              " |      bytes_reversed_lo: false 0x8e-0x8e.1 (0.1)
+0x080|                                          22   |              " |      reserved: false 0x8e.1-0x8e.2 (0.1)
+0x080|                                          22   |              " |      large_address_aware: true 0x8e.2-0x8e.3 (0.1)
+0x080|                                          22   |              " |      aggressive_ws_trim: false 0x8e.3-0x8e.4 (0.1)
+0x080|                                          22   |              " |      local_syms_stripped: false 0x8e.4-0x8e.5 (0.1)
+0x080|                                          22   |              " |      line_nums_stripped: false 0x8e.5-0x8e.6 (0.1)
+0x080|                                          22   |              " |      executable_image: true 0x8e.6-0x8e.7 (0.1)
+0x080|                                          22   |              " |      relocs_stripped: false 0x8e.7-0x8f (0.1)
+0x080|                                             00|               .|      bytes_reversed_hi: false 0x8f-0x8f.1 (0.1)
+0x080|                                             00|               .|      up_system_only: false 0x8f.1-0x8f.2 (0.1)
+0x080|                                             00|               .|      dll: false 0x8f.2-0x8f.3 (0.1)
+0x080|                                             00|               .|      system: false 0x8f.3-0x8f.4 (0.1)
+0x080|                                             00|               .|      net_run_from_swap: false 0x8f.4-0x8f.5 (0.1)
+0x080|                                             00|               .|      removable_run_from_swap: false 0x8f.5-0x8f.6 (0.1)
+0x080|                                             00|               .|      debug_stripped: false 0x8f.6-0x8f.7 (0.1)
+0x080|                                             00|               .|      32bit_machine: false 0x8f.7-0x90 (0.1)
+     |                                               |                |    optional_header{}: 0x90-0x180 (240)
+0x090|0b 02                                          |..              |      format: "pe32+" (0x20b) 0x90-0x92 (2)
+0x090|      0e                                       |  .             |      major_linker_version: 14 0x92-0x93 (1)
+0x090|         00                                    |   .            |      minor_linker_version: 0 0x93-0x94 (1)
+0x090|            00 02 00 00                        |    ....        |      size_of_code: 512 0x94-0x98 (4)
+0x090|                        00 04 00 00            |        ....    |      size_of_initialized_data: 1024 0x98-0x9c (4)
+0x090|                                    00 00 00 00|            ....|      size_of_uninitialized_data: 0 0x9c-0xa0 (4)
+0x0a0|10 10 00 00                                    |....            |      address_of_entry_point: 0x1010 0xa0-0xa4 (4)
+0x0a0|            00 10 00 00                        |    ....        |      base_of_code: 0x1000 0xa4-0xa8 (4)
+0x0a0|                        00 00 00 40 01 00 00 00|        ...@....|      image_base: 0x140000000 0xa8-0xb0 (8)
+0x0b0|00 10 00 00                                    |....            |      section_alignment: 4096 0xb0-0xb4 (4)
+0x0b0|            00 02 00 00                        |    ....        |      file_alignment: 512 0xb4-0xb8 (4)
+0x0b0|                        06 00                  |        ..      |      major_os_version: 6 0xb8-0xba (2)
+0x0b0|                              00 00            |          ..    |      minor_os_version: 0 0xba-0xbc (2)
+0x0b0|                                    00 00      |            ..  |      major_image_version: 0 0xbc-0xbe (2)
+0x0b0|                                          00 00|              ..|      minor_image_version: 0 0xbe-0xc0 (2)
+0x0c0|06 00                                          |..              |      major_subsystem_version: 6 0xc0-0xc2 (2)
+0x0c0|      00 00                                    |  ..            |      minor_subsystem_version: 0 0xc2-0xc4 (2)
+0x0c0|            00 00 00 00                        |    ....        |      win32_version: 0 0xc4-0xc8 (4)
+0x0c0|                        00 40 00 00            |        .@..    |      size_of_image: 16384 0xc8-0xcc (4)
+0x0c0|                                    00 02 00 00|            ....|      size_of_headers: 512 0xcc-0xd0 (4)
+0x0d0|00 00 00 00                                    |....            |      chunk_sum: 0x0 0xd0-0xd4 (4)
+0x0d0|            0a 00                              |    ..          |      subsystem: "efi_application" (10) 0xd4-0xd6 (2)
+     |                                               |                |      dll_characteristics{}: 0xd6-0xd8 (2)
+0x0d0|                  60                           |      `         |        force_integrity: false 0xd6-0xd6.1 (0.1)
+0x0d0|                  60                           |      `         |        dynamic_base: true 0xd6.1-0xd6.2 (0.1)
+0x0d0|                  60                           |      `         |        high_entropy_va: true 0xd6.2-0xd6.3 (0.1)
+0x0d0|                  60                           |      `         |        reserved0: false 0xd6.3-0xd6.4 (0.1)
+0x0d0|                  60                           |      `         |        reserved1: false 0xd6.4-0xd6.5 (0.1)
+0x0d0|                  60                           |      `         |        reserved2: false 0xd6.5-0xd6.6 (0.1)
+0x0d0|                  60                           |      `         |        reserved3: false 0xd6.6-0xd6.7 (0.1)
+0x0d0|                  60                           |      `         |        reserved4: false 0xd6.7-0xd7 (0.1)
+0x0d0|                     81                        |       .        |        terminal_server_aware: true 0xd7-0xd7.1 (0.1)
+0x0d0|                     81                        |       .        |        guard_cf: false 0xd7.1-0xd7.2 (0.1)
+0x0d0|                     81                        |       .        |        wdm_driver: false 0xd7.2-0xd7.3 (0.1)
+0x0d0|                     81                        |       .        |        appcontainer: false 0xd7.3-0xd7.4 (0.1)
+0x0d0|                     81                        |       .        |        no_bind: false 0xd7.4-0xd7.5 (0.1)
+0x0d0|                     81                        |       .        |        no_seh: false 0xd7.5-0xd7.6 (0.1)
+0x0d0|                     81                        |       .        |        no_isolation: false 0xd7.6-0xd7.7 (0.1)
+0x0d0|                     81                        |       .        |        nx_compat: true 0xd7.7-0xd8 (0.1)
+0x0d0|                        00 00 10 00 00 00 00 00|        ........|      size_of_track_reserve: 1048576 0xd8-0xe0 (8)
+0x0e0|00 10 00 00 00 00 00 00                        |........        |      size_of_stack_commit: 4096 0xe0-0xe8 (8)
+0x0e0|                        00 00 10 00 00 00 00 00|        ........|      size_of_heap_reserve: 1048576 0xe8-0xf0 (8)
+0x0f0|00 10 00 00 00 00 00 00                        |........        |      size_of_heap_commit: 4096 0xf0-0xf8 (8)
+0x0f0|                        00 00 00 00            |        ....    |      loader_flags: 0 0xf8-0xfc (4)
+0x0f0|                                    10 00 00 00|            ....|      number_of_rva_and_sizes: 16 0xfc-0x100 (4)
+0x100|00 00 00 00                                    |....            |      export_table_address: 0x0 0x100-0x104 (4)
+0x100|            00 00 00 00                        |    ....        |      export_table_size: 0 0x104-0x108 (4)
+0x100|                        00 00 00 00            |        ....    |      import_table_address: 0x0 0x108-0x10c (4)
+0x100|                                    00 00 00 00|            ....|      import_table_size: 0 0x10c-0x110 (4)
+0x110|00 00 00 00                                    |....            |      resource_table_address: 0x0 0x110-0x114 (4)
+0x110|            00 00 00 00                        |    ....        |      resource_table_size: 0 0x114-0x118 (4)
+0x110|                        00 00 00 00            |        ....    |      exception_table_address: 0x0 0x118-0x11c (4)
+0x110|                                    00 00 00 00|            ....|      exception_table_size: 0 0x11c-0x120 (4)
+0x120|00 00 00 00                                    |....            |      certificate_table_address: 0x0 0x120-0x124 (4)
+0x120|            00 00 00 00                        |    ....        |      certificate_table_size: 0 0x124-0x128 (4)
+0x120|                        00 30 00 00            |        .0..    |      base_relocation_table_address: 0x3000 0x128-0x12c (4)
+0x120|                                    0c 00 00 00|            ....|      base_relocation_table_size: 12 0x12c-0x130 (4)
+0x130|00 00 00 00                                    |....            |      debug_address: 0x0 0x130-0x134 (4)
+0x130|            00 00 00 00                        |    ....        |      debug_size: 0 0x134-0x138 (4)
+0x130|                        00 00 00 00 00 00 00 00|        ........|      architecture: 0 0x138-0x140 (8)
+0x140|00 00 00 00 00 00 00 00                        |........        |      global_ptr: 0x0 0x140-0x148 (8)
+0x140|                        00 00 00 00            |        ....    |      tls_table_address: 0x0 0x148-0x14c (4)
+0x140|                                    00 00 00 00|            ....|      tls_table_size: 0 0x14c-0x150 (4)
+0x150|00 00 00 00                                    |....            |      load_config_table_address: 0x0 0x150-0x154 (4)
+0x150|            00 00 00 00                        |    ....        |      load_config_table_size: 0 0x154-0x158 (4)
+0x150|                        00 00 00 00            |        ....    |      bound_import_address: 0x0 0x158-0x15c (4)
+0x150|                                    00 00 00 00|            ....|      bound_import_size: 0 0x15c-0x160 (4)
+0x160|00 00 00 00                                    |....            |      iat_address: 0x0 0x160-0x164 (4)
+0x160|            00 00 00 00                        |    ....        |      iat_size: 0 0x164-0x168 (4)
+0x160|                        00 00 00 00            |        ....    |      delay_import_descriptor_address: 0x0 0x168-0x16c (4)
+0x160|                                    00 00 00 00|            ....|      delay_import_descriptor_size: 0 0x16c-0x170 (4)
+0x170|00 00 00 00                                    |....            |      clr_runtime_header_address: 0x0 0x170-0x174 (4)
+0x170|            00 00 00 00                        |    ....        |      clr_runtime_header_size: 0 0x174-0x178 (4)
+0x170|                        00 00 00 00 00 00 00 00|        ........|      reserved: 0 0x178-0x180 (8)
+     |                                               |                |      unknown: raw bits 0x180-0x180 (0)
+     |                                               |                |    sections[0:3]: 0x180-0x1f8 (120)
+     |                                               |                |      [0]{}: section 0x180-0x1a8 (40)
+0x180|2e 74 65 78 74 00 00 00                        |.text...        |        name: ".text" 0x180-0x188 (8)
+0x180|                        23 00 00 00            |        #...    |        virtual_size: 35 0x188-0x18c (4)
+0x180|                                    00 10 00 00|            ....|        virtual_address: 0x1000 0x18c-0x190 (4)
+0x190|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x190-0x194 (4)
+0x190|            00 02 00 00                        |    ....        |        pointer_to_raw_data: 0x200 0x194-0x198 (4)
+0x190|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x198-0x19c (4)
+0x190|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x19c-0x1a0 (4)
+0x1a0|00 00                                          |..              |        number_of_relocations: 0 0x1a0-0x1a2 (2)
+0x1a0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1a2-0x1a4 (2)
+     |                                               |                |        characteristics{}: 0x1a4-0x1a8 (4)
+0x1a0|            20                                 |                |          cnt_uninitialized_data: false 0x1a4-0x1a4.1 (0.1)
+0x1a0|            20                                 |                |          cnt_initialized_data: false 0x1a4.1-0x1a4.2 (0.1)
+0x1a0|            20                                 |                |          cnt_code: true 0x1a4.2-0x1a4.3 (0.1)
+0x1a0|            20                                 |                |          reserved: false 0x1a4.3-0x1a4.4 (0.1)
+0x1a0|            20                                 |                |          type_no_pad: false 0x1a4.4-0x1a4.5 (0.1)
+0x1a0|            20                                 |                |          reserved0: false 0x1a4.5-0x1a4.6 (0.1)
+0x1a0|            20                                 |                |          reserved1: false 0x1a4.6-0x1a4.7 (0.1)
+0x1a0|            20                                 |                |          reserved2: false 0x1a4.7-0x1a5 (0.1)
+0x1a0|               00                              |     .          |          gprel: false 0x1a5-0x1a5.1 (0.1)
+0x1a0|               00                              |     .          |          unknown0: false 0x1a5.1-0x1a5.2 (0.1)
+0x1a0|               00                              |     .          |          unknown1: false 0x1a5.2-0x1a5.3 (0.1)
+0x1a0|               00                              |     .          |          lnk_comdat: false 0x1a5.3-0x1a5.4 (0.1)
+0x1a0|               00                              |     .          |          lnk_remove: false 0x1a5.4-0x1a5.5 (0.1)
+0x1a0|               00                              |     .          |          reserved3: false 0x1a5.5-0x1a5.6 (0.1)
+0x1a0|               00                              |     .          |          lnk_info: false 0x1a5.6-0x1a5.7 (0.1)
+0x1a0|               00                              |     .          |          lnk_other: false 0x1a5.7-0x1a6 (0.1)
+0x1a0|                  00                           |      .         |          align_128bytes: false 0x1a6-0x1a6.1 (0.1)
+0x1a0|                  00                           |      .         |          align_8bytes: false 0x1a6.1-0x1a6.2 (0.1)
+0x1a0|                  00                           |      .         |          align_2bytes: false 0x1a6.2-0x1a6.3 (0.1)
+0x1a0|                  00                           |      .         |          align_1bytes: false 0x1a6.3-0x1a6.4 (0.1)
+0x1a0|                  00                           |      .         |          mem_preload: false 0x1a6.4-0x1a6.5 (0.1)
+0x1a0|                  00                           |      .         |          mem_locked: false 0x1a6.5-0x1a6.6 (0.1)
+0x1a0|                  00                           |      .         |          mem_16bit: false 0x1a6.6-0x1a6.7 (0.1)
+0x1a0|                  00                           |      .         |          mem_purgeable: false 0x1a6.7-0x1a7 (0.1)
+0x1a0|                     60                        |       `        |          mem_write: false 0x1a7-0x1a7.1 (0.1)
+0x1a0|                     60                        |       `        |          mem_read: true 0x1a7.1-0x1a7.2 (0.1)
+0x1a0|                     60                        |       `        |          mem_execute: true 0x1a7.2-0x1a7.3 (0.1)
+0x1a0|                     60                        |       `        |          mem_shared: false 0x1a7.3-0x1a7.4 (0.1)
+0x1a0|                     60                        |       `        |          mem_not_paged: false 0x1a7.4-0x1a7.5 (0.1)
+0x1a0|                     60                        |       `        |          mem_not_cached: false 0x1a7.5-0x1a7.6 (0.1)
+0x1a0|                     60                        |       `        |          mem_discardable: false 0x1a7.6-0x1a7.7 (0.1)
+0x1a0|                     60                        |       `        |          lnk_nreloc_ovfl: false 0x1a7.7-0x1a8 (0.1)
+     |                                               |                |      [1]{}: section 0x1a8-0x1d0 (40)
+0x1a0|                        2e 64 61 74 61 00 00 00|        .data...|        name: ".data" 0x1a8-0x1b0 (8)
+0x1b0|18 00 00 00                                    |....            |        virtual_size: 24 0x1b0-0x1b4 (4)
+0x1b0|            00 20 00 00                        |    . ..        |        virtual_address: 0x2000 0x1b4-0x1b8 (4)
+0x1b0|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x1b8-0x1bc (4)
+0x1b0|                                    00 04 00 00|            ....|        pointer_to_raw_data: 0x400 0x1bc-0x1c0 (4)
+0x1c0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x1c0-0x1c4 (4)
+0x1c0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x1c4-0x1c8 (4)
+0x1c0|                        00 00                  |        ..      |        number_of_relocations: 0 0x1c8-0x1ca (2)
+0x1c0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x1ca-0x1cc (2)
+     |                                               |                |        characteristics{}: 0x1cc-0x1d0 (4)
+0x1c0|                                    40         |            @   |          cnt_uninitialized_data: false 0x1cc-0x1cc.1 (0.1)
+0x1c0|                                    40         |            @   |          cnt_initialized_data: true 0x1cc.1-0x1cc.2 (0.1)
+0x1c0|                                    40         |            @   |          cnt_code: false 0x1cc.2-0x1cc.3 (0.1)
+0x1c0|                                    40         |            @   |          reserved: false 0x1cc.3-0x1cc.4 (0.1)
+0x1c0|                                    40         |            @   |          type_no_pad: false 0x1cc.4-0x1cc.5 (0.1)
+0x1c0|                                    40         |            @   |          reserved0: false 0x1cc.5-0x1cc.6 (0.1)
+0x1c0|                                    40         |            @   |          reserved1: false 0x1cc.6-0x1cc.7 (0.1)
+0x1c0|                                    40         |            @   |          reserved2: false 0x1cc.7-0x1cd (0.1)
+0x1c0|                                       00      |             .  |          gprel: false 0x1cd-0x1cd.1 (0.1)
+0x1c0|                                       00      |             .  |          unknown0: false 0x1cd.1-0x1cd.2 (0.1)
+0x1c0|                                       00      |             .  |          unknown1: false 0x1cd.2-0x1cd.3 (0.1)
+0x1c0|                                       00      |             .  |          lnk_comdat: false 0x1cd.3-0x1cd.4 (0.1)
+0x1c0|                                       00      |             .  |          lnk_remove: false 0x1cd.4-0x1cd.5 (0.1)
+0x1c0|                                       00      |             .  |          reserved3: false 0x1cd.5-0x1cd.6 (0.1)
+0x1c0|                                       00      |             .  |          lnk_info: false 0x1cd.6-0x1cd.7 (0.1)
+0x1c0|                                       00      |             .  |          lnk_other: false 0x1cd.7-0x1ce (0.1)
+0x1c0|                                          00   |              . |          align_128bytes: false 0x1ce-0x1ce.1 (0.1)
+0x1c0|                                          00   |              . |          align_8bytes: false 0x1ce.1-0x1ce.2 (0.1)
+0x1c0|                                          00   |              . |          align_2bytes: false 0x1ce.2-0x1ce.3 (0.1)
+0x1c0|                                          00   |              . |          align_1bytes: false 0x1ce.3-0x1ce.4 (0.1)
+0x1c0|                                          00   |              . |          mem_preload: false 0x1ce.4-0x1ce.5 (0.1)
+0x1c0|                                          00   |              . |          mem_locked: false 0x1ce.5-0x1ce.6 (0.1)
+0x1c0|                                          00   |              . |          mem_16bit: false 0x1ce.6-0x1ce.7 (0.1)
+0x1c0|                                          00   |              . |          mem_purgeable: false 0x1ce.7-0x1cf (0.1)
+0x1c0|                                             c0|               .|          mem_write: true 0x1cf-0x1cf.1 (0.1)
+0x1c0|                                             c0|               .|          mem_read: true 0x1cf.1-0x1cf.2 (0.1)
+0x1c0|                                             c0|               .|          mem_execute: false 0x1cf.2-0x1cf.3 (0.1)
+0x1c0|                                             c0|               .|          mem_shared: false 0x1cf.3-0x1cf.4 (0.1)
+0x1c0|                                             c0|               .|          mem_not_paged: false 0x1cf.4-0x1cf.5 (0.1)
+0x1c0|                                             c0|               .|          mem_not_cached: false 0x1cf.5-0x1cf.6 (0.1)
+0x1c0|                                             c0|               .|          mem_discardable: false 0x1cf.6-0x1cf.7 (0.1)
+0x1c0|                                             c0|               .|          lnk_nreloc_ovfl: false 0x1cf.7-0x1d0 (0.1)
+     |                                               |                |      [2]{}: section 0x1d0-0x1f8 (40)
+0x1d0|2e 72 65 6c 6f 63 00 00                        |.reloc..        |        name: ".reloc" 0x1d0-0x1d8 (8)
+0x1d0|                        0c 00 00 00            |        ....    |        virtual_size: 12 0x1d8-0x1dc (4)
+0x1d0|                                    00 30 00 00|            .0..|        virtual_address: 0x3000 0x1dc-0x1e0 (4)
+0x1e0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x1e0-0x1e4 (4)
+0x1e0|            00 06 00 00                        |    ....        |        pointer_to_raw_data: 0x600 0x1e4-0x1e8 (4)
+0x1e0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x1e8-0x1ec (4)
+0x1e0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x1ec-0x1f0 (4)
+0x1f0|00 00                                          |..              |        number_of_relocations: 0 0x1f0-0x1f2 (2)
+0x1f0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1f2-0x1f4 (2)
+     |                                               |                |        characteristics{}: 0x1f4-0x1f8 (4)
+0x1f0|            40                                 |    @           |          cnt_uninitialized_data: false 0x1f4-0x1f4.1 (0.1)
+0x1f0|            40                                 |    @           |          cnt_initialized_data: true 0x1f4.1-0x1f4.2 (0.1)
+0x1f0|            40                                 |    @           |          cnt_code: false 0x1f4.2-0x1f4.3 (0.1)
+0x1f0|            40                                 |    @           |          reserved: false 0x1f4.3-0x1f4.4 (0.1)
+0x1f0|            40                                 |    @           |          type_no_pad: false 0x1f4.4-0x1f4.5 (0.1)
+0x1f0|            40                                 |    @           |          reserved0: false 0x1f4.5-0x1f4.6 (0.1)
+0x1f0|            40                                 |    @           |          reserved1: false 0x1f4.6-0x1f4.7 (0.1)
+0x1f0|            40                                 |    @           |          reserved2: false 0x1f4.7-0x1f5 (0.1)
+0x1f0|               00                              |     .          |          gprel: false 0x1f5-0x1f5.1 (0.1)
+0x1f0|               00                              |     .          |          unknown0: false 0x1f5.1-0x1f5.2 (0.1)
+0x1f0|               00                              |     .          |          unknown1: false 0x1f5.2-0x1f5.3 (0.1)
+0x1f0|               00                              |     .          |          lnk_comdat: false 0x1f5.3-0x1f5.4 (0.1)
+0x1f0|               00                              |     .          |          lnk_remove: false 0x1f5.4-0x1f5.5 (0.1)
+0x1f0|               00                              |     .          |          reserved3: false 0x1f5.5-0x1f5.6 (0.1)
+0x1f0|               00                              |     .          |          lnk_info: false 0x1f5.6-0x1f5.7 (0.1)
+0x1f0|               00                              |     .          |          lnk_other: false 0x1f5.7-0x1f6 (0.1)
+0x1f0|                  00                           |      .         |          align_128bytes: false 0x1f6-0x1f6.1 (0.1)
+0x1f0|                  00                           |      .         |          align_8bytes: false 0x1f6.1-0x1f6.2 (0.1)
+0x1f0|                  00                           |      .         |          align_2bytes: false 0x1f6.2-0x1f6.3 (0.1)
+0x1f0|                  00                           |      .         |          align_1bytes: false 0x1f6.3-0x1f6.4 (0.1)
+0x1f0|                  00                           |      .         |          mem_preload: false 0x1f6.4-0x1f6.5 (0.1)
+0x1f0|                  00                           |      .         |          mem_locked: false 0x1f6.5-0x1f6.6 (0.1)
+0x1f0|                  00                           |      .         |          mem_16bit: false 0x1f6.6-0x1f6.7 (0.1)
+0x1f0|                  00                           |      .         |          mem_purgeable: false 0x1f6.7-0x1f7 (0.1)
+0x1f0|                     42                        |       B        |          mem_write: false 0x1f7-0x1f7.1 (0.1)
+0x1f0|                     42                        |       B        |          mem_read: true 0x1f7.1-0x1f7.2 (0.1)
+0x1f0|                     42                        |       B        |          mem_execute: false 0x1f7.2-0x1f7.3 (0.1)
+0x1f0|                     42                        |       B        |          mem_shared: false 0x1f7.3-0x1f7.4 (0.1)
+0x1f0|                     42                        |       B        |          mem_not_paged: false 0x1f7.4-0x1f7.5 (0.1)
+0x1f0|                     42                        |       B        |          mem_not_cached: false 0x1f7.5-0x1f7.6 (0.1)
+0x1f0|                     42                        |       B        |          mem_discardable: true 0x1f7.6-0x1f7.7 (0.1)
+0x1f0|                     42                        |       B        |          lnk_nreloc_ovfl: false 0x1f7.7-0x1f8 (0.1)
+0x1f0|                        00 00 00 00 00 00 00 00|        ........|  gap0: raw bits 0x1f8-0x800 (1544)
+0x200|de a9 42 90 dc 23 38 4a 96 fb 7a de d0 80 51 6a|..B..#8J..z...Qj|
+*    |until 0x7ff.7 (end) (1544)                     |                |

format/pe/testdata/pe-Windows-ARMv7-Thumb2LE-HelloWorld.fqtest

@@ -0,0 +1,391 @@
+$ fq dv pe-Windows-ARMv7-Thumb2LE-HelloWorld
+      |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-Windows-ARMv7-Thumb2LE-HelloWorld (pe) 0x0-0x1a00 (6656)
+      |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0xf8 (248)
+0x0000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x0000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x0000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x0000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x0000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x0000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x0000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x0000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x0010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x0010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x0010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x0010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x0010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x0010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x0010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x0020|00 00 00 00                                    |....            |
+0x0020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x0020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x0020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x0030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x0030|                                    f8 00 00 00|            ....|    e_lfanew: 248 (File address of new exe header) 0x3c-0x40 (4)
+0x0040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*     |until 0x7f.7 (64)                              |                |
+0x0080|56 18 6d ac 12 79 03 ff 12 79 03 ff 12 79 03 ff|V.m..y...y...y..|    padding: raw bits 0x80-0xf8 (120)
+*     |until 0xf7.7 (120)                             |                |
+      |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0xf8-0x2e0 (488)
+0x00f0|                        50 45 00 00            |        PE..    |    signature: raw bits (valid) 0xf8-0xfc (4)
+0x00f0|                                    c4 01      |            ..  |    machine: "armnt" (0x1c4) 0xfc-0xfe (2)
+0x00f0|                                          06 00|              ..|    number_of_sections: 6 0xfe-0x100 (2)
+0x0100|0d aa 6f 53                                    |..oS            |    time_date_stamp: 1399826957 (2014-05-11T16:49:17Z) 0x100-0x104 (4)
+0x0100|            00 00 00 00                        |    ....        |    pointer_to_symbol_table: 0x0 0x104-0x108 (4)
+0x0100|                        00 00 00 00            |        ....    |    number_of_symbols: 0 0x108-0x10c (4)
+0x0100|                                    e0 00      |            ..  |    size_of_optional_header: 224 0x10c-0x10e (2)
+      |                                               |                |    characteristics{}: 0x10e-0x110 (2)
+0x0100|                                          22   |              " |      bytes_reversed_lo: false 0x10e-0x10e.1 (0.1)
+0x0100|                                          22   |              " |      reserved: false 0x10e.1-0x10e.2 (0.1)
+0x0100|                                          22   |              " |      large_address_aware: true 0x10e.2-0x10e.3 (0.1)
+0x0100|                                          22   |              " |      aggressive_ws_trim: false 0x10e.3-0x10e.4 (0.1)
+0x0100|                                          22   |              " |      local_syms_stripped: false 0x10e.4-0x10e.5 (0.1)
+0x0100|                                          22   |              " |      line_nums_stripped: false 0x10e.5-0x10e.6 (0.1)
+0x0100|                                          22   |              " |      executable_image: true 0x10e.6-0x10e.7 (0.1)
+0x0100|                                          22   |              " |      relocs_stripped: false 0x10e.7-0x10f (0.1)
+0x0100|                                             01|               .|      bytes_reversed_hi: false 0x10f-0x10f.1 (0.1)
+0x0100|                                             01|               .|      up_system_only: false 0x10f.1-0x10f.2 (0.1)
+0x0100|                                             01|               .|      dll: false 0x10f.2-0x10f.3 (0.1)
+0x0100|                                             01|               .|      system: false 0x10f.3-0x10f.4 (0.1)
+0x0100|                                             01|               .|      net_run_from_swap: false 0x10f.4-0x10f.5 (0.1)
+0x0100|                                             01|               .|      removable_run_from_swap: false 0x10f.5-0x10f.6 (0.1)
+0x0100|                                             01|               .|      debug_stripped: false 0x10f.6-0x10f.7 (0.1)
+0x0100|                                             01|               .|      32bit_machine: true 0x10f.7-0x110 (0.1)
+      |                                               |                |    optional_header{}: 0x110-0x1f0 (224)
+0x0110|0b 01                                          |..              |      format: "pe32" (0x10b) 0x110-0x112 (2)
+0x0110|      0b                                       |  .             |      major_linker_version: 11 0x112-0x113 (1)
+0x0110|         00                                    |   .            |      minor_linker_version: 0 0x113-0x114 (1)
+0x0110|            00 08 00 00                        |    ....        |      size_of_code: 2048 0x114-0x118 (4)
+0x0110|                        00 10 00 00            |        ....    |      size_of_initialized_data: 4096 0x118-0x11c (4)
+0x0110|                                    00 00 00 00|            ....|      size_of_uninitialized_data: 0 0x11c-0x120 (4)
+0x0120|e5 12 00 00                                    |....            |      address_of_entry_point: 0x12e5 0x120-0x124 (4)
+0x0120|            00 10 00 00                        |    ....        |      base_of_code: 0x1000 0x124-0x128 (4)
+0x0120|                        00 20 00 00            |        . ..    |      base_of_data: 0x2000 0x128-0x12c (4)
+0x0120|                                    00 00 40 00|            ..@.|      image_base: 0x400000 0x12c-0x130 (4)
+0x0130|00 10 00 00                                    |....            |      section_alignment: 4096 0x130-0x134 (4)
+0x0130|            00 02 00 00                        |    ....        |      file_alignment: 512 0x134-0x138 (4)
+0x0130|                        06 00                  |        ..      |      major_os_version: 6 0x138-0x13a (2)
+0x0130|                              02 00            |          ..    |      minor_os_version: 2 0x13a-0x13c (2)
+0x0130|                                    00 00      |            ..  |      major_image_version: 0 0x13c-0x13e (2)
+0x0130|                                          00 00|              ..|      minor_image_version: 0 0x13e-0x140 (2)
+0x0140|06 00                                          |..              |      major_subsystem_version: 6 0x140-0x142 (2)
+0x0140|      02 00                                    |  ..            |      minor_subsystem_version: 2 0x142-0x144 (2)
+0x0140|            00 00 00 00                        |    ....        |      win32_version: 0 0x144-0x148 (4)
+0x0140|                        00 70 00 00            |        .p..    |      size_of_image: 28672 0x148-0x14c (4)
+0x0140|                                    00 04 00 00|            ....|      size_of_headers: 1024 0x14c-0x150 (4)
+0x0150|00 00 00 00                                    |....            |      chunk_sum: 0x0 0x150-0x154 (4)
+0x0150|            03 00                              |    ..          |      subsystem: "windows_cui" (3) 0x154-0x156 (2)
+      |                                               |                |      dll_characteristics{}: 0x156-0x158 (2)
+0x0150|                  40                           |      @         |        force_integrity: false 0x156-0x156.1 (0.1)
+0x0150|                  40                           |      @         |        dynamic_base: true 0x156.1-0x156.2 (0.1)
+0x0150|                  40                           |      @         |        high_entropy_va: false 0x156.2-0x156.3 (0.1)
+0x0150|                  40                           |      @         |        reserved0: false 0x156.3-0x156.4 (0.1)
+0x0150|                  40                           |      @         |        reserved1: false 0x156.4-0x156.5 (0.1)
+0x0150|                  40                           |      @         |        reserved2: false 0x156.5-0x156.6 (0.1)
+0x0150|                  40                           |      @         |        reserved3: false 0x156.6-0x156.7 (0.1)
+0x0150|                  40                           |      @         |        reserved4: false 0x156.7-0x157 (0.1)
+0x0150|                     81                        |       .        |        terminal_server_aware: true 0x157-0x157.1 (0.1)
+0x0150|                     81                        |       .        |        guard_cf: false 0x157.1-0x157.2 (0.1)
+0x0150|                     81                        |       .        |        wdm_driver: false 0x157.2-0x157.3 (0.1)
+0x0150|                     81                        |       .        |        appcontainer: false 0x157.3-0x157.4 (0.1)
+0x0150|                     81                        |       .        |        no_bind: false 0x157.4-0x157.5 (0.1)
+0x0150|                     81                        |       .        |        no_seh: false 0x157.5-0x157.6 (0.1)
+0x0150|                     81                        |       .        |        no_isolation: false 0x157.6-0x157.7 (0.1)
+0x0150|                     81                        |       .        |        nx_compat: true 0x157.7-0x158 (0.1)
+0x0150|                        00 00 10 00            |        ....    |      size_of_track_reserve: 1048576 0x158-0x15c (4)
+0x0150|                                    00 10 00 00|            ....|      size_of_stack_commit: 4096 0x15c-0x160 (4)
+0x0160|00 00 10 00                                    |....            |      size_of_heap_reserve: 1048576 0x160-0x164 (4)
+0x0160|            00 10 00 00                        |    ....        |      size_of_heap_commit: 4096 0x164-0x168 (4)
+0x0160|                        00 00 00 00            |        ....    |      loader_flags: 0 0x168-0x16c (4)
+0x0160|                                    10 00 00 00|            ....|      number_of_rva_and_sizes: 16 0x16c-0x170 (4)
+0x0170|00 00 00 00                                    |....            |      export_table_address: 0x0 0x170-0x174 (4)
+0x0170|            00 00 00 00                        |    ....        |      export_table_size: 0 0x174-0x178 (4)
+0x0170|                        f4 21 00 00            |        .!..    |      import_table_address: 0x21f4 0x178-0x17c (4)
+0x0170|                                    3c 00 00 00|            <...|      import_table_size: 60 0x17c-0x180 (4)
+0x0180|00 50 00 00                                    |.P..            |      resource_table_address: 0x5000 0x180-0x184 (4)
+0x0180|            e0 01 00 00                        |    ....        |      resource_table_size: 480 0x184-0x188 (4)
+0x0180|                        00 40 00 00            |        .@..    |      exception_table_address: 0x4000 0x188-0x18c (4)
+0x0180|                                    90 00 00 00|            ....|      exception_table_size: 144 0x18c-0x190 (4)
+0x0190|00 00 00 00                                    |....            |      certificate_table_address: 0x0 0x190-0x194 (4)
+0x0190|            00 00 00 00                        |    ....        |      certificate_table_size: 0 0x194-0x198 (4)
+0x0190|                        00 60 00 00            |        .`..    |      base_relocation_table_address: 0x6000 0x198-0x19c (4)
+0x0190|                                    a8 00 00 00|            ....|      base_relocation_table_size: 168 0x19c-0x1a0 (4)
+0x01a0|a0 20 00 00                                    |. ..            |      debug_address: 0x20a0 0x1a0-0x1a4 (4)
+0x01a0|            38 00 00 00                        |    8...        |      debug_size: 56 0x1a4-0x1a8 (4)
+0x01a0|                        00 00 00 00 00 00 00 00|        ........|      architecture: 0 0x1a8-0x1b0 (8)
+0x01b0|00 00 00 00 00 00 00 00                        |........        |      global_ptr: 0x0 0x1b0-0x1b8 (8)
+0x01b0|                        00 00 00 00            |        ....    |      tls_table_address: 0x0 0x1b8-0x1bc (4)
+0x01b0|                                    00 00 00 00|            ....|      tls_table_size: 0 0x1bc-0x1c0 (4)
+0x01c0|00 00 00 00                                    |....            |      load_config_table_address: 0x0 0x1c0-0x1c4 (4)
+0x01c0|            00 00 00 00                        |    ....        |      load_config_table_size: 0 0x1c4-0x1c8 (4)
+0x01c0|                        00 00 00 00            |        ....    |      bound_import_address: 0x0 0x1c8-0x1cc (4)
+0x01c0|                                    00 00 00 00|            ....|      bound_import_size: 0 0x1cc-0x1d0 (4)
+0x01d0|00 20 00 00                                    |. ..            |      iat_address: 0x2000 0x1d0-0x1d4 (4)
+0x01d0|            80 00 00 00                        |    ....        |      iat_size: 128 0x1d4-0x1d8 (4)
+0x01d0|                        00 00 00 00            |        ....    |      delay_import_descriptor_address: 0x0 0x1d8-0x1dc (4)
+0x01d0|                                    00 00 00 00|            ....|      delay_import_descriptor_size: 0 0x1dc-0x1e0 (4)
+0x01e0|00 00 00 00                                    |....            |      clr_runtime_header_address: 0x0 0x1e0-0x1e4 (4)
+0x01e0|            00 00 00 00                        |    ....        |      clr_runtime_header_size: 0 0x1e4-0x1e8 (4)
+0x01e0|                        00 00 00 00 00 00 00 00|        ........|      reserved: 0 0x1e8-0x1f0 (8)
+      |                                               |                |      unknown: raw bits 0x1f0-0x1f0 (0)
+      |                                               |                |    sections[0:6]: 0x1f0-0x2e0 (240)
+      |                                               |                |      [0]{}: section 0x1f0-0x218 (40)
+0x01f0|2e 74 65 78 74 00 00 00                        |.text...        |        name: ".text" 0x1f0-0x1f8 (8)
+0x01f0|                        94 06 00 00            |        ....    |        virtual_size: 1684 0x1f8-0x1fc (4)
+0x01f0|                                    00 10 00 00|            ....|        virtual_address: 0x1000 0x1fc-0x200 (4)
+0x0200|00 08 00 00                                    |....            |        size_of_raw_data: 2048 0x200-0x204 (4)
+0x0200|            00 04 00 00                        |    ....        |        pointer_to_raw_data: 0x400 0x204-0x208 (4)
+0x0200|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x208-0x20c (4)
+0x0200|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x20c-0x210 (4)
+0x0210|00 00                                          |..              |        number_of_relocations: 0 0x210-0x212 (2)
+0x0210|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x212-0x214 (2)
+      |                                               |                |        characteristics{}: 0x214-0x218 (4)
+0x0210|            20                                 |                |          cnt_uninitialized_data: false 0x214-0x214.1 (0.1)
+0x0210|            20                                 |                |          cnt_initialized_data: false 0x214.1-0x214.2 (0.1)
+0x0210|            20                                 |                |          cnt_code: true 0x214.2-0x214.3 (0.1)
+0x0210|            20                                 |                |          reserved: false 0x214.3-0x214.4 (0.1)
+0x0210|            20                                 |                |          type_no_pad: false 0x214.4-0x214.5 (0.1)
+0x0210|            20                                 |                |          reserved0: false 0x214.5-0x214.6 (0.1)
+0x0210|            20                                 |                |          reserved1: false 0x214.6-0x214.7 (0.1)
+0x0210|            20                                 |                |          reserved2: false 0x214.7-0x215 (0.1)
+0x0210|               00                              |     .          |          gprel: false 0x215-0x215.1 (0.1)
+0x0210|               00                              |     .          |          unknown0: false 0x215.1-0x215.2 (0.1)
+0x0210|               00                              |     .          |          unknown1: false 0x215.2-0x215.3 (0.1)
+0x0210|               00                              |     .          |          lnk_comdat: false 0x215.3-0x215.4 (0.1)
+0x0210|               00                              |     .          |          lnk_remove: false 0x215.4-0x215.5 (0.1)
+0x0210|               00                              |     .          |          reserved3: false 0x215.5-0x215.6 (0.1)
+0x0210|               00                              |     .          |          lnk_info: false 0x215.6-0x215.7 (0.1)
+0x0210|               00                              |     .          |          lnk_other: false 0x215.7-0x216 (0.1)
+0x0210|                  00                           |      .         |          align_128bytes: false 0x216-0x216.1 (0.1)
+0x0210|                  00                           |      .         |          align_8bytes: false 0x216.1-0x216.2 (0.1)
+0x0210|                  00                           |      .         |          align_2bytes: false 0x216.2-0x216.3 (0.1)
+0x0210|                  00                           |      .         |          align_1bytes: false 0x216.3-0x216.4 (0.1)
+0x0210|                  00                           |      .         |          mem_preload: false 0x216.4-0x216.5 (0.1)
+0x0210|                  00                           |      .         |          mem_locked: false 0x216.5-0x216.6 (0.1)
+0x0210|                  00                           |      .         |          mem_16bit: false 0x216.6-0x216.7 (0.1)
+0x0210|                  00                           |      .         |          mem_purgeable: false 0x216.7-0x217 (0.1)
+0x0210|                     60                        |       `        |          mem_write: false 0x217-0x217.1 (0.1)
+0x0210|                     60                        |       `        |          mem_read: true 0x217.1-0x217.2 (0.1)
+0x0210|                     60                        |       `        |          mem_execute: true 0x217.2-0x217.3 (0.1)
+0x0210|                     60                        |       `        |          mem_shared: false 0x217.3-0x217.4 (0.1)
+0x0210|                     60                        |       `        |          mem_not_paged: false 0x217.4-0x217.5 (0.1)
+0x0210|                     60                        |       `        |          mem_not_cached: false 0x217.5-0x217.6 (0.1)
+0x0210|                     60                        |       `        |          mem_discardable: false 0x217.6-0x217.7 (0.1)
+0x0210|                     60                        |       `        |          lnk_nreloc_ovfl: false 0x217.7-0x218 (0.1)
+      |                                               |                |      [1]{}: section 0x218-0x240 (40)
+0x0210|                        2e 72 64 61 74 61 00 00|        .rdata..|        name: ".rdata" 0x218-0x220 (8)
+0x0220|ae 04 00 00                                    |....            |        virtual_size: 1198 0x220-0x224 (4)
+0x0220|            00 20 00 00                        |    . ..        |        virtual_address: 0x2000 0x224-0x228 (4)
+0x0220|                        00 06 00 00            |        ....    |        size_of_raw_data: 1536 0x228-0x22c (4)
+0x0220|                                    00 0c 00 00|            ....|        pointer_to_raw_data: 0xc00 0x22c-0x230 (4)
+0x0230|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x230-0x234 (4)
+0x0230|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x234-0x238 (4)
+0x0230|                        00 00                  |        ..      |        number_of_relocations: 0 0x238-0x23a (2)
+0x0230|                              00 00            |          ..    |        number_of_line_numbers: 0 0x23a-0x23c (2)
+      |                                               |                |        characteristics{}: 0x23c-0x240 (4)
+0x0230|                                    40         |            @   |          cnt_uninitialized_data: false 0x23c-0x23c.1 (0.1)
+0x0230|                                    40         |            @   |          cnt_initialized_data: true 0x23c.1-0x23c.2 (0.1)
+0x0230|                                    40         |            @   |          cnt_code: false 0x23c.2-0x23c.3 (0.1)
+0x0230|                                    40         |            @   |          reserved: false 0x23c.3-0x23c.4 (0.1)
+0x0230|                                    40         |            @   |          type_no_pad: false 0x23c.4-0x23c.5 (0.1)
+0x0230|                                    40         |            @   |          reserved0: false 0x23c.5-0x23c.6 (0.1)
+0x0230|                                    40         |            @   |          reserved1: false 0x23c.6-0x23c.7 (0.1)
+0x0230|                                    40         |            @   |          reserved2: false 0x23c.7-0x23d (0.1)
+0x0230|                                       00      |             .  |          gprel: false 0x23d-0x23d.1 (0.1)
+0x0230|                                       00      |             .  |          unknown0: false 0x23d.1-0x23d.2 (0.1)
+0x0230|                                       00      |             .  |          unknown1: false 0x23d.2-0x23d.3 (0.1)
+0x0230|                                       00      |             .  |          lnk_comdat: false 0x23d.3-0x23d.4 (0.1)
+0x0230|                                       00      |             .  |          lnk_remove: false 0x23d.4-0x23d.5 (0.1)
+0x0230|                                       00      |             .  |          reserved3: false 0x23d.5-0x23d.6 (0.1)
+0x0230|                                       00      |             .  |          lnk_info: false 0x23d.6-0x23d.7 (0.1)
+0x0230|                                       00      |             .  |          lnk_other: false 0x23d.7-0x23e (0.1)
+0x0230|                                          00   |              . |          align_128bytes: false 0x23e-0x23e.1 (0.1)
+0x0230|                                          00   |              . |          align_8bytes: false 0x23e.1-0x23e.2 (0.1)
+0x0230|                                          00   |              . |          align_2bytes: false 0x23e.2-0x23e.3 (0.1)
+0x0230|                                          00   |              . |          align_1bytes: false 0x23e.3-0x23e.4 (0.1)
+0x0230|                                          00   |              . |          mem_preload: false 0x23e.4-0x23e.5 (0.1)
+0x0230|                                          00   |              . |          mem_locked: false 0x23e.5-0x23e.6 (0.1)
+0x0230|                                          00   |              . |          mem_16bit: false 0x23e.6-0x23e.7 (0.1)
+0x0230|                                          00   |              . |          mem_purgeable: false 0x23e.7-0x23f (0.1)
+0x0230|                                             40|               @|          mem_write: false 0x23f-0x23f.1 (0.1)
+0x0230|                                             40|               @|          mem_read: true 0x23f.1-0x23f.2 (0.1)
+0x0230|                                             40|               @|          mem_execute: false 0x23f.2-0x23f.3 (0.1)
+0x0230|                                             40|               @|          mem_shared: false 0x23f.3-0x23f.4 (0.1)
+0x0230|                                             40|               @|          mem_not_paged: false 0x23f.4-0x23f.5 (0.1)
+0x0230|                                             40|               @|          mem_not_cached: false 0x23f.5-0x23f.6 (0.1)
+0x0230|                                             40|               @|          mem_discardable: false 0x23f.6-0x23f.7 (0.1)
+0x0230|                                             40|               @|          lnk_nreloc_ovfl: false 0x23f.7-0x240 (0.1)
+      |                                               |                |      [2]{}: section 0x240-0x268 (40)
+0x0240|2e 64 61 74 61 00 00 00                        |.data...        |        name: ".data" 0x240-0x248 (8)
+0x0240|                        4c 02 00 00            |        L...    |        virtual_size: 588 0x248-0x24c (4)
+0x0240|                                    00 30 00 00|            .0..|        virtual_address: 0x3000 0x24c-0x250 (4)
+0x0250|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x250-0x254 (4)
+0x0250|            00 12 00 00                        |    ....        |        pointer_to_raw_data: 0x1200 0x254-0x258 (4)
+0x0250|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x258-0x25c (4)
+0x0250|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x25c-0x260 (4)
+0x0260|00 00                                          |..              |        number_of_relocations: 0 0x260-0x262 (2)
+0x0260|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x262-0x264 (2)
+      |                                               |                |        characteristics{}: 0x264-0x268 (4)
+0x0260|            40                                 |    @           |          cnt_uninitialized_data: false 0x264-0x264.1 (0.1)
+0x0260|            40                                 |    @           |          cnt_initialized_data: true 0x264.1-0x264.2 (0.1)
+0x0260|            40                                 |    @           |          cnt_code: false 0x264.2-0x264.3 (0.1)
+0x0260|            40                                 |    @           |          reserved: false 0x264.3-0x264.4 (0.1)
+0x0260|            40                                 |    @           |          type_no_pad: false 0x264.4-0x264.5 (0.1)
+0x0260|            40                                 |    @           |          reserved0: false 0x264.5-0x264.6 (0.1)
+0x0260|            40                                 |    @           |          reserved1: false 0x264.6-0x264.7 (0.1)
+0x0260|            40                                 |    @           |          reserved2: false 0x264.7-0x265 (0.1)
+0x0260|               00                              |     .          |          gprel: false 0x265-0x265.1 (0.1)
+0x0260|               00                              |     .          |          unknown0: false 0x265.1-0x265.2 (0.1)
+0x0260|               00                              |     .          |          unknown1: false 0x265.2-0x265.3 (0.1)
+0x0260|               00                              |     .          |          lnk_comdat: false 0x265.3-0x265.4 (0.1)
+0x0260|               00                              |     .          |          lnk_remove: false 0x265.4-0x265.5 (0.1)
+0x0260|               00                              |     .          |          reserved3: false 0x265.5-0x265.6 (0.1)
+0x0260|               00                              |     .          |          lnk_info: false 0x265.6-0x265.7 (0.1)
+0x0260|               00                              |     .          |          lnk_other: false 0x265.7-0x266 (0.1)
+0x0260|                  00                           |      .         |          align_128bytes: false 0x266-0x266.1 (0.1)
+0x0260|                  00                           |      .         |          align_8bytes: false 0x266.1-0x266.2 (0.1)
+0x0260|                  00                           |      .         |          align_2bytes: false 0x266.2-0x266.3 (0.1)
+0x0260|                  00                           |      .         |          align_1bytes: false 0x266.3-0x266.4 (0.1)
+0x0260|                  00                           |      .         |          mem_preload: false 0x266.4-0x266.5 (0.1)
+0x0260|                  00                           |      .         |          mem_locked: false 0x266.5-0x266.6 (0.1)
+0x0260|                  00                           |      .         |          mem_16bit: false 0x266.6-0x266.7 (0.1)
+0x0260|                  00                           |      .         |          mem_purgeable: false 0x266.7-0x267 (0.1)
+0x0260|                     c0                        |       .        |          mem_write: true 0x267-0x267.1 (0.1)
+0x0260|                     c0                        |       .        |          mem_read: true 0x267.1-0x267.2 (0.1)
+0x0260|                     c0                        |       .        |          mem_execute: false 0x267.2-0x267.3 (0.1)
+0x0260|                     c0                        |       .        |          mem_shared: false 0x267.3-0x267.4 (0.1)
+0x0260|                     c0                        |       .        |          mem_not_paged: false 0x267.4-0x267.5 (0.1)
+0x0260|                     c0                        |       .        |          mem_not_cached: false 0x267.5-0x267.6 (0.1)
+0x0260|                     c0                        |       .        |          mem_discardable: false 0x267.6-0x267.7 (0.1)
+0x0260|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x267.7-0x268 (0.1)
+      |                                               |                |      [3]{}: section 0x268-0x290 (40)
+0x0260|                        2e 70 64 61 74 61 00 00|        .pdata..|        name: ".pdata" 0x268-0x270 (8)
+0x0270|90 00 00 00                                    |....            |        virtual_size: 144 0x270-0x274 (4)
+0x0270|            00 40 00 00                        |    .@..        |        virtual_address: 0x4000 0x274-0x278 (4)
+0x0270|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x278-0x27c (4)
+0x0270|                                    00 14 00 00|            ....|        pointer_to_raw_data: 0x1400 0x27c-0x280 (4)
+0x0280|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x280-0x284 (4)
+0x0280|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x284-0x288 (4)
+0x0280|                        00 00                  |        ..      |        number_of_relocations: 0 0x288-0x28a (2)
+0x0280|                              00 00            |          ..    |        number_of_line_numbers: 0 0x28a-0x28c (2)
+      |                                               |                |        characteristics{}: 0x28c-0x290 (4)
+0x0280|                                    40         |            @   |          cnt_uninitialized_data: false 0x28c-0x28c.1 (0.1)
+0x0280|                                    40         |            @   |          cnt_initialized_data: true 0x28c.1-0x28c.2 (0.1)
+0x0280|                                    40         |            @   |          cnt_code: false 0x28c.2-0x28c.3 (0.1)
+0x0280|                                    40         |            @   |          reserved: false 0x28c.3-0x28c.4 (0.1)
+0x0280|                                    40         |            @   |          type_no_pad: false 0x28c.4-0x28c.5 (0.1)
+0x0280|                                    40         |            @   |          reserved0: false 0x28c.5-0x28c.6 (0.1)
+0x0280|                                    40         |            @   |          reserved1: false 0x28c.6-0x28c.7 (0.1)
+0x0280|                                    40         |            @   |          reserved2: false 0x28c.7-0x28d (0.1)
+0x0280|                                       00      |             .  |          gprel: false 0x28d-0x28d.1 (0.1)
+0x0280|                                       00      |             .  |          unknown0: false 0x28d.1-0x28d.2 (0.1)
+0x0280|                                       00      |             .  |          unknown1: false 0x28d.2-0x28d.3 (0.1)
+0x0280|                                       00      |             .  |          lnk_comdat: false 0x28d.3-0x28d.4 (0.1)
+0x0280|                                       00      |             .  |          lnk_remove: false 0x28d.4-0x28d.5 (0.1)
+0x0280|                                       00      |             .  |          reserved3: false 0x28d.5-0x28d.6 (0.1)
+0x0280|                                       00      |             .  |          lnk_info: false 0x28d.6-0x28d.7 (0.1)
+0x0280|                                       00      |             .  |          lnk_other: false 0x28d.7-0x28e (0.1)
+0x0280|                                          00   |              . |          align_128bytes: false 0x28e-0x28e.1 (0.1)
+0x0280|                                          00   |              . |          align_8bytes: false 0x28e.1-0x28e.2 (0.1)
+0x0280|                                          00   |              . |          align_2bytes: false 0x28e.2-0x28e.3 (0.1)
+0x0280|                                          00   |              . |          align_1bytes: false 0x28e.3-0x28e.4 (0.1)
+0x0280|                                          00   |              . |          mem_preload: false 0x28e.4-0x28e.5 (0.1)
+0x0280|                                          00   |              . |          mem_locked: false 0x28e.5-0x28e.6 (0.1)
+0x0280|                                          00   |              . |          mem_16bit: false 0x28e.6-0x28e.7 (0.1)
+0x0280|                                          00   |              . |          mem_purgeable: false 0x28e.7-0x28f (0.1)
+0x0280|                                             40|               @|          mem_write: false 0x28f-0x28f.1 (0.1)
+0x0280|                                             40|               @|          mem_read: true 0x28f.1-0x28f.2 (0.1)
+0x0280|                                             40|               @|          mem_execute: false 0x28f.2-0x28f.3 (0.1)
+0x0280|                                             40|               @|          mem_shared: false 0x28f.3-0x28f.4 (0.1)
+0x0280|                                             40|               @|          mem_not_paged: false 0x28f.4-0x28f.5 (0.1)
+0x0280|                                             40|               @|          mem_not_cached: false 0x28f.5-0x28f.6 (0.1)
+0x0280|                                             40|               @|          mem_discardable: false 0x28f.6-0x28f.7 (0.1)
+0x0280|                                             40|               @|          lnk_nreloc_ovfl: false 0x28f.7-0x290 (0.1)
+      |                                               |                |      [4]{}: section 0x290-0x2b8 (40)
+0x0290|2e 72 73 72 63 00 00 00                        |.rsrc...        |        name: ".rsrc" 0x290-0x298 (8)
+0x0290|                        e0 01 00 00            |        ....    |        virtual_size: 480 0x298-0x29c (4)
+0x0290|                                    00 50 00 00|            .P..|        virtual_address: 0x5000 0x29c-0x2a0 (4)
+0x02a0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x2a0-0x2a4 (4)
+0x02a0|            00 16 00 00                        |    ....        |        pointer_to_raw_data: 0x1600 0x2a4-0x2a8 (4)
+0x02a0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x2a8-0x2ac (4)
+0x02a0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x2ac-0x2b0 (4)
+0x02b0|00 00                                          |..              |        number_of_relocations: 0 0x2b0-0x2b2 (2)
+0x02b0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x2b2-0x2b4 (2)
+      |                                               |                |        characteristics{}: 0x2b4-0x2b8 (4)
+0x02b0|            40                                 |    @           |          cnt_uninitialized_data: false 0x2b4-0x2b4.1 (0.1)
+0x02b0|            40                                 |    @           |          cnt_initialized_data: true 0x2b4.1-0x2b4.2 (0.1)
+0x02b0|            40                                 |    @           |          cnt_code: false 0x2b4.2-0x2b4.3 (0.1)
+0x02b0|            40                                 |    @           |          reserved: false 0x2b4.3-0x2b4.4 (0.1)
+0x02b0|            40                                 |    @           |          type_no_pad: false 0x2b4.4-0x2b4.5 (0.1)
+0x02b0|            40                                 |    @           |          reserved0: false 0x2b4.5-0x2b4.6 (0.1)
+0x02b0|            40                                 |    @           |          reserved1: false 0x2b4.6-0x2b4.7 (0.1)
+0x02b0|            40                                 |    @           |          reserved2: false 0x2b4.7-0x2b5 (0.1)
+0x02b0|               00                              |     .          |          gprel: false 0x2b5-0x2b5.1 (0.1)
+0x02b0|               00                              |     .          |          unknown0: false 0x2b5.1-0x2b5.2 (0.1)
+0x02b0|               00                              |     .          |          unknown1: false 0x2b5.2-0x2b5.3 (0.1)
+0x02b0|               00                              |     .          |          lnk_comdat: false 0x2b5.3-0x2b5.4 (0.1)
+0x02b0|               00                              |     .          |          lnk_remove: false 0x2b5.4-0x2b5.5 (0.1)
+0x02b0|               00                              |     .          |          reserved3: false 0x2b5.5-0x2b5.6 (0.1)
+0x02b0|               00                              |     .          |          lnk_info: false 0x2b5.6-0x2b5.7 (0.1)
+0x02b0|               00                              |     .          |          lnk_other: false 0x2b5.7-0x2b6 (0.1)
+0x02b0|                  00                           |      .         |          align_128bytes: false 0x2b6-0x2b6.1 (0.1)
+0x02b0|                  00                           |      .         |          align_8bytes: false 0x2b6.1-0x2b6.2 (0.1)
+0x02b0|                  00                           |      .         |          align_2bytes: false 0x2b6.2-0x2b6.3 (0.1)
+0x02b0|                  00                           |      .         |          align_1bytes: false 0x2b6.3-0x2b6.4 (0.1)
+0x02b0|                  00                           |      .         |          mem_preload: false 0x2b6.4-0x2b6.5 (0.1)
+0x02b0|                  00                           |      .         |          mem_locked: false 0x2b6.5-0x2b6.6 (0.1)
+0x02b0|                  00                           |      .         |          mem_16bit: false 0x2b6.6-0x2b6.7 (0.1)
+0x02b0|                  00                           |      .         |          mem_purgeable: false 0x2b6.7-0x2b7 (0.1)
+0x02b0|                     40                        |       @        |          mem_write: false 0x2b7-0x2b7.1 (0.1)
+0x02b0|                     40                        |       @        |          mem_read: true 0x2b7.1-0x2b7.2 (0.1)
+0x02b0|                     40                        |       @        |          mem_execute: false 0x2b7.2-0x2b7.3 (0.1)
+0x02b0|                     40                        |       @        |          mem_shared: false 0x2b7.3-0x2b7.4 (0.1)
+0x02b0|                     40                        |       @        |          mem_not_paged: false 0x2b7.4-0x2b7.5 (0.1)
+0x02b0|                     40                        |       @        |          mem_not_cached: false 0x2b7.5-0x2b7.6 (0.1)
+0x02b0|                     40                        |       @        |          mem_discardable: false 0x2b7.6-0x2b7.7 (0.1)
+0x02b0|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x2b7.7-0x2b8 (0.1)
+      |                                               |                |      [5]{}: section 0x2b8-0x2e0 (40)
+0x02b0|                        2e 72 65 6c 6f 63 00 00|        .reloc..|        name: ".reloc" 0x2b8-0x2c0 (8)
+0x02c0|9e 01 00 00                                    |....            |        virtual_size: 414 0x2c0-0x2c4 (4)
+0x02c0|            00 60 00 00                        |    .`..        |        virtual_address: 0x6000 0x2c4-0x2c8 (4)
+0x02c0|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x2c8-0x2cc (4)
+0x02c0|                                    00 18 00 00|            ....|        pointer_to_raw_data: 0x1800 0x2cc-0x2d0 (4)
+0x02d0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x2d0-0x2d4 (4)
+0x02d0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x2d4-0x2d8 (4)
+0x02d0|                        00 00                  |        ..      |        number_of_relocations: 0 0x2d8-0x2da (2)
+0x02d0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x2da-0x2dc (2)
+      |                                               |                |        characteristics{}: 0x2dc-0x2e0 (4)
+0x02d0|                                    40         |            @   |          cnt_uninitialized_data: false 0x2dc-0x2dc.1 (0.1)
+0x02d0|                                    40         |            @   |          cnt_initialized_data: true 0x2dc.1-0x2dc.2 (0.1)
+0x02d0|                                    40         |            @   |          cnt_code: false 0x2dc.2-0x2dc.3 (0.1)
+0x02d0|                                    40         |            @   |          reserved: false 0x2dc.3-0x2dc.4 (0.1)
+0x02d0|                                    40         |            @   |          type_no_pad: false 0x2dc.4-0x2dc.5 (0.1)
+0x02d0|                                    40         |            @   |          reserved0: false 0x2dc.5-0x2dc.6 (0.1)
+0x02d0|                                    40         |            @   |          reserved1: false 0x2dc.6-0x2dc.7 (0.1)
+0x02d0|                                    40         |            @   |          reserved2: false 0x2dc.7-0x2dd (0.1)
+0x02d0|                                       00      |             .  |          gprel: false 0x2dd-0x2dd.1 (0.1)
+0x02d0|                                       00      |             .  |          unknown0: false 0x2dd.1-0x2dd.2 (0.1)
+0x02d0|                                       00      |             .  |          unknown1: false 0x2dd.2-0x2dd.3 (0.1)
+0x02d0|                                       00      |             .  |          lnk_comdat: false 0x2dd.3-0x2dd.4 (0.1)
+0x02d0|                                       00      |             .  |          lnk_remove: false 0x2dd.4-0x2dd.5 (0.1)
+0x02d0|                                       00      |             .  |          reserved3: false 0x2dd.5-0x2dd.6 (0.1)
+0x02d0|                                       00      |             .  |          lnk_info: false 0x2dd.6-0x2dd.7 (0.1)
+0x02d0|                                       00      |             .  |          lnk_other: false 0x2dd.7-0x2de (0.1)
+0x02d0|                                          00   |              . |          align_128bytes: false 0x2de-0x2de.1 (0.1)
+0x02d0|                                          00   |              . |          align_8bytes: false 0x2de.1-0x2de.2 (0.1)
+0x02d0|                                          00   |              . |          align_2bytes: false 0x2de.2-0x2de.3 (0.1)
+0x02d0|                                          00   |              . |          align_1bytes: false 0x2de.3-0x2de.4 (0.1)
+0x02d0|                                          00   |              . |          mem_preload: false 0x2de.4-0x2de.5 (0.1)
+0x02d0|                                          00   |              . |          mem_locked: false 0x2de.5-0x2de.6 (0.1)
+0x02d0|                                          00   |              . |          mem_16bit: false 0x2de.6-0x2de.7 (0.1)
+0x02d0|                                          00   |              . |          mem_purgeable: false 0x2de.7-0x2df (0.1)
+0x02d0|                                             42|               B|          mem_write: false 0x2df-0x2df.1 (0.1)
+0x02d0|                                             42|               B|          mem_read: true 0x2df.1-0x2df.2 (0.1)
+0x02d0|                                             42|               B|          mem_execute: false 0x2df.2-0x2df.3 (0.1)
+0x02d0|                                             42|               B|          mem_shared: false 0x2df.3-0x2df.4 (0.1)
+0x02d0|                                             42|               B|          mem_not_paged: false 0x2df.4-0x2df.5 (0.1)
+0x02d0|                                             42|               B|          mem_not_cached: false 0x2df.5-0x2df.6 (0.1)
+0x02d0|                                             42|               B|          mem_discardable: true 0x2df.6-0x2df.7 (0.1)
+0x02d0|                                             42|               B|          lnk_nreloc_ovfl: false 0x2df.7-0x2e0 (0.1)
+0x02e0|00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................|  gap0: raw bits 0x2e0-0x1a00 (5920)
+*     |until 0x19ff.7 (end) (5920)                    |                |

format/pe/testdata/pe-Windows-x64-cmd.fqtest

@@ -0,0 +1,391 @@
+$ fq dv pe-Windows-x64-cmd
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-Windows-x64-cmd (pe) 0x0-0x54400 (345088)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0xf0 (240)
+0x00000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x00000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x00000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x00000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x00000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x00000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x00000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x00000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x00010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x00010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x00010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x00010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x00010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x00010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x00010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x00020|00 00 00 00                                    |....            |
+0x00020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x00020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x00020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x00030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x00030|                                    f0 00 00 00|            ....|    e_lfanew: 240 (File address of new exe header) 0x3c-0x40 (4)
+0x00040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*      |until 0x7f.7 (64)                              |                |
+0x00080|4d 7c a4 8a 09 1d ca d9 09 1d ca d9 09 1d ca d9|M|..............|    padding: raw bits 0x80-0xf0 (112)
+*      |until 0xef.7 (112)                             |                |
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0xf0-0x2e8 (504)
+0x000f0|50 45 00 00                                    |PE..            |    signature: raw bits (valid) 0xf0-0xf4 (4)
+0x000f0|            64 86                              |    d.          |    machine: "amd64" (0x8664) 0xf4-0xf6 (2)
+0x000f0|                  06 00                        |      ..        |    number_of_sections: 6 0xf6-0xf8 (2)
+0x000f0|                        e5 98 e7 4c            |        ...L    |    time_date_stamp: 1290246373 (2010-11-20T09:46:13Z) 0xf8-0xfc (4)
+0x000f0|                                    00 00 00 00|            ....|    pointer_to_symbol_table: 0x0 0xfc-0x100 (4)
+0x00100|00 00 00 00                                    |....            |    number_of_symbols: 0 0x100-0x104 (4)
+0x00100|            f0 00                              |    ..          |    size_of_optional_header: 240 0x104-0x106 (2)
+       |                                               |                |    characteristics{}: 0x106-0x108 (2)
+0x00100|                  22                           |      "         |      bytes_reversed_lo: false 0x106-0x106.1 (0.1)
+0x00100|                  22                           |      "         |      reserved: false 0x106.1-0x106.2 (0.1)
+0x00100|                  22                           |      "         |      large_address_aware: true 0x106.2-0x106.3 (0.1)
+0x00100|                  22                           |      "         |      aggressive_ws_trim: false 0x106.3-0x106.4 (0.1)
+0x00100|                  22                           |      "         |      local_syms_stripped: false 0x106.4-0x106.5 (0.1)
+0x00100|                  22                           |      "         |      line_nums_stripped: false 0x106.5-0x106.6 (0.1)
+0x00100|                  22                           |      "         |      executable_image: true 0x106.6-0x106.7 (0.1)
+0x00100|                  22                           |      "         |      relocs_stripped: false 0x106.7-0x107 (0.1)
+0x00100|                     00                        |       .        |      bytes_reversed_hi: false 0x107-0x107.1 (0.1)
+0x00100|                     00                        |       .        |      up_system_only: false 0x107.1-0x107.2 (0.1)
+0x00100|                     00                        |       .        |      dll: false 0x107.2-0x107.3 (0.1)
+0x00100|                     00                        |       .        |      system: false 0x107.3-0x107.4 (0.1)
+0x00100|                     00                        |       .        |      net_run_from_swap: false 0x107.4-0x107.5 (0.1)
+0x00100|                     00                        |       .        |      removable_run_from_swap: false 0x107.5-0x107.6 (0.1)
+0x00100|                     00                        |       .        |      debug_stripped: false 0x107.6-0x107.7 (0.1)
+0x00100|                     00                        |       .        |      32bit_machine: false 0x107.7-0x108 (0.1)
+       |                                               |                |    optional_header{}: 0x108-0x1f8 (240)
+0x00100|                        0b 02                  |        ..      |      format: "pe32+" (0x20b) 0x108-0x10a (2)
+0x00100|                              09               |          .     |      major_linker_version: 9 0x10a-0x10b (1)
+0x00100|                                 00            |           .    |      minor_linker_version: 0 0x10b-0x10c (1)
+0x00100|                                    00 72 02 00|            .r..|      size_of_code: 160256 0x10c-0x110 (4)
+0x00110|00 ce 02 00                                    |....            |      size_of_initialized_data: 183808 0x110-0x114 (4)
+0x00110|            00 00 00 00                        |    ....        |      size_of_uninitialized_data: 0 0x114-0x118 (4)
+0x00110|                        b4 90 00 00            |        ....    |      address_of_entry_point: 0x90b4 0x118-0x11c (4)
+0x00110|                                    00 10 00 00|            ....|      base_of_code: 0x1000 0x11c-0x120 (4)
+0x00120|00 00 d0 4a 00 00 00 00                        |...J....        |      image_base: 0x4ad00000 0x120-0x128 (8)
+0x00120|                        00 10 00 00            |        ....    |      section_alignment: 4096 0x128-0x12c (4)
+0x00120|                                    00 02 00 00|            ....|      file_alignment: 512 0x12c-0x130 (4)
+0x00130|06 00                                          |..              |      major_os_version: 6 0x130-0x132 (2)
+0x00130|      01 00                                    |  ..            |      minor_os_version: 1 0x132-0x134 (2)
+0x00130|            06 00                              |    ..          |      major_image_version: 6 0x134-0x136 (2)
+0x00130|                  01 00                        |      ..        |      minor_image_version: 1 0x136-0x138 (2)
+0x00130|                        06 00                  |        ..      |      major_subsystem_version: 6 0x138-0x13a (2)
+0x00130|                              01 00            |          ..    |      minor_subsystem_version: 1 0x13a-0x13c (2)
+0x00130|                                    00 00 00 00|            ....|      win32_version: 0 0x13c-0x140 (4)
+0x00140|00 90 05 00                                    |....            |      size_of_image: 364544 0x140-0x144 (4)
+0x00140|            00 04 00 00                        |    ....        |      size_of_headers: 1024 0x144-0x148 (4)
+0x00140|                        ec bd 05 00            |        ....    |      chunk_sum: 0x5bdec 0x148-0x14c (4)
+0x00140|                                    03 00      |            ..  |      subsystem: "windows_cui" (3) 0x14c-0x14e (2)
+       |                                               |                |      dll_characteristics{}: 0x14e-0x150 (2)
+0x00140|                                          40   |              @ |        force_integrity: false 0x14e-0x14e.1 (0.1)
+0x00140|                                          40   |              @ |        dynamic_base: true 0x14e.1-0x14e.2 (0.1)
+0x00140|                                          40   |              @ |        high_entropy_va: false 0x14e.2-0x14e.3 (0.1)
+0x00140|                                          40   |              @ |        reserved0: false 0x14e.3-0x14e.4 (0.1)
+0x00140|                                          40   |              @ |        reserved1: false 0x14e.4-0x14e.5 (0.1)
+0x00140|                                          40   |              @ |        reserved2: false 0x14e.5-0x14e.6 (0.1)
+0x00140|                                          40   |              @ |        reserved3: false 0x14e.6-0x14e.7 (0.1)
+0x00140|                                          40   |              @ |        reserved4: false 0x14e.7-0x14f (0.1)
+0x00140|                                             81|               .|        terminal_server_aware: true 0x14f-0x14f.1 (0.1)
+0x00140|                                             81|               .|        guard_cf: false 0x14f.1-0x14f.2 (0.1)
+0x00140|                                             81|               .|        wdm_driver: false 0x14f.2-0x14f.3 (0.1)
+0x00140|                                             81|               .|        appcontainer: false 0x14f.3-0x14f.4 (0.1)
+0x00140|                                             81|               .|        no_bind: false 0x14f.4-0x14f.5 (0.1)
+0x00140|                                             81|               .|        no_seh: false 0x14f.5-0x14f.6 (0.1)
+0x00140|                                             81|               .|        no_isolation: false 0x14f.6-0x14f.7 (0.1)
+0x00140|                                             81|               .|        nx_compat: true 0x14f.7-0x150 (0.1)
+0x00150|00 00 10 00 00 00 00 00                        |........        |      size_of_track_reserve: 1048576 0x150-0x158 (8)
+0x00150|                        00 c0 0f 00 00 00 00 00|        ........|      size_of_stack_commit: 1032192 0x158-0x160 (8)
+0x00160|00 00 10 00 00 00 00 00                        |........        |      size_of_heap_reserve: 1048576 0x160-0x168 (8)
+0x00160|                        00 10 00 00 00 00 00 00|        ........|      size_of_heap_commit: 4096 0x168-0x170 (8)
+0x00170|00 00 00 00                                    |....            |      loader_flags: 0 0x170-0x174 (4)
+0x00170|            10 00 00 00                        |    ....        |      number_of_rva_and_sizes: 16 0x174-0x178 (4)
+0x00170|                        00 00 00 00            |        ....    |      export_table_address: 0x0 0x178-0x17c (4)
+0x00170|                                    00 00 00 00|            ....|      export_table_size: 0 0x17c-0x180 (4)
+0x00180|58 a7 02 00                                    |X...            |      import_table_address: 0x2a758 0x180-0x184 (4)
+0x00180|            64 00 00 00                        |    d...        |      import_table_size: 100 0x184-0x188 (4)
+0x00180|                        00 f0 04 00            |        ....    |      resource_table_address: 0x4f000 0x188-0x18c (4)
+0x00180|                                    58 84 00 00|            X...|      resource_table_size: 33880 0x18c-0x190 (4)
+0x00190|00 c0 04 00                                    |....            |      exception_table_address: 0x4c000 0x190-0x194 (4)
+0x00190|            dc 26 00 00                        |    .&..        |      exception_table_size: 9948 0x194-0x198 (4)
+0x00190|                        00 00 00 00            |        ....    |      certificate_table_address: 0x0 0x198-0x19c (4)
+0x00190|                                    00 00 00 00|            ....|      certificate_table_size: 0 0x19c-0x1a0 (4)
+0x001a0|00 80 05 00                                    |....            |      base_relocation_table_address: 0x58000 0x1a0-0x1a4 (4)
+0x001a0|            24 01 00 00                        |    $...        |      base_relocation_table_size: 292 0x1a4-0x1a8 (4)
+0x001a0|                        70 80 02 00            |        p...    |      debug_address: 0x28070 0x1a8-0x1ac (4)
+0x001a0|                                    38 00 00 00|            8...|      debug_size: 56 0x1ac-0x1b0 (4)
+0x001b0|00 00 00 00 00 00 00 00                        |........        |      architecture: 0 0x1b0-0x1b8 (8)
+0x001b0|                        00 00 00 00 00 00 00 00|        ........|      global_ptr: 0x0 0x1b8-0x1c0 (8)
+0x001c0|00 00 00 00                                    |....            |      tls_table_address: 0x0 0x1c0-0x1c4 (4)
+0x001c0|            00 00 00 00                        |    ....        |      tls_table_size: 0 0x1c4-0x1c8 (4)
+0x001c0|                        00 00 00 00            |        ....    |      load_config_table_address: 0x0 0x1c8-0x1cc (4)
+0x001c0|                                    00 00 00 00|            ....|      load_config_table_size: 0 0x1cc-0x1d0 (4)
+0x001d0|e8 02 00 00                                    |....            |      bound_import_address: 0x2e8 0x1d0-0x1d4 (4)
+0x001d0|            9c 00 00 00                        |    ....        |      bound_import_size: 156 0x1d4-0x1d8 (4)
+0x001d0|                        00 90 02 00            |        ....    |      iat_address: 0x29000 0x1d8-0x1dc (4)
+0x001d0|                                    48 07 00 00|            H...|      iat_size: 1864 0x1dc-0x1e0 (4)
+0x001e0|2c a4 02 00                                    |,...            |      delay_import_descriptor_address: 0x2a42c 0x1e0-0x1e4 (4)
+0x001e0|            a0 00 00 00                        |    ....        |      delay_import_descriptor_size: 160 0x1e4-0x1e8 (4)
+0x001e0|                        00 00 00 00            |        ....    |      clr_runtime_header_address: 0x0 0x1e8-0x1ec (4)
+0x001e0|                                    00 00 00 00|            ....|      clr_runtime_header_size: 0 0x1ec-0x1f0 (4)
+0x001f0|00 00 00 00 00 00 00 00                        |........        |      reserved: 0 0x1f0-0x1f8 (8)
+       |                                               |                |      unknown: raw bits 0x1f8-0x1f8 (0)
+       |                                               |                |    sections[0:6]: 0x1f8-0x2e8 (240)
+       |                                               |                |      [0]{}: section 0x1f8-0x220 (40)
+0x001f0|                        2e 74 65 78 74 00 00 00|        .text...|        name: ".text" 0x1f8-0x200 (8)
+0x00200|cc 70 02 00                                    |.p..            |        virtual_size: 159948 0x200-0x204 (4)
+0x00200|            00 10 00 00                        |    ....        |        virtual_address: 0x1000 0x204-0x208 (4)
+0x00200|                        00 72 02 00            |        .r..    |        size_of_raw_data: 160256 0x208-0x20c (4)
+0x00200|                                    00 04 00 00|            ....|        pointer_to_raw_data: 0x400 0x20c-0x210 (4)
+0x00210|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x210-0x214 (4)
+0x00210|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x214-0x218 (4)
+0x00210|                        00 00                  |        ..      |        number_of_relocations: 0 0x218-0x21a (2)
+0x00210|                              00 00            |          ..    |        number_of_line_numbers: 0 0x21a-0x21c (2)
+       |                                               |                |        characteristics{}: 0x21c-0x220 (4)
+0x00210|                                    20         |                |          cnt_uninitialized_data: false 0x21c-0x21c.1 (0.1)
+0x00210|                                    20         |                |          cnt_initialized_data: false 0x21c.1-0x21c.2 (0.1)
+0x00210|                                    20         |                |          cnt_code: true 0x21c.2-0x21c.3 (0.1)
+0x00210|                                    20         |                |          reserved: false 0x21c.3-0x21c.4 (0.1)
+0x00210|                                    20         |                |          type_no_pad: false 0x21c.4-0x21c.5 (0.1)
+0x00210|                                    20         |                |          reserved0: false 0x21c.5-0x21c.6 (0.1)
+0x00210|                                    20         |                |          reserved1: false 0x21c.6-0x21c.7 (0.1)
+0x00210|                                    20         |                |          reserved2: false 0x21c.7-0x21d (0.1)
+0x00210|                                       00      |             .  |          gprel: false 0x21d-0x21d.1 (0.1)
+0x00210|                                       00      |             .  |          unknown0: false 0x21d.1-0x21d.2 (0.1)
+0x00210|                                       00      |             .  |          unknown1: false 0x21d.2-0x21d.3 (0.1)
+0x00210|                                       00      |             .  |          lnk_comdat: false 0x21d.3-0x21d.4 (0.1)
+0x00210|                                       00      |             .  |          lnk_remove: false 0x21d.4-0x21d.5 (0.1)
+0x00210|                                       00      |             .  |          reserved3: false 0x21d.5-0x21d.6 (0.1)
+0x00210|                                       00      |             .  |          lnk_info: false 0x21d.6-0x21d.7 (0.1)
+0x00210|                                       00      |             .  |          lnk_other: false 0x21d.7-0x21e (0.1)
+0x00210|                                          00   |              . |          align_128bytes: false 0x21e-0x21e.1 (0.1)
+0x00210|                                          00   |              . |          align_8bytes: false 0x21e.1-0x21e.2 (0.1)
+0x00210|                                          00   |              . |          align_2bytes: false 0x21e.2-0x21e.3 (0.1)
+0x00210|                                          00   |              . |          align_1bytes: false 0x21e.3-0x21e.4 (0.1)
+0x00210|                                          00   |              . |          mem_preload: false 0x21e.4-0x21e.5 (0.1)
+0x00210|                                          00   |              . |          mem_locked: false 0x21e.5-0x21e.6 (0.1)
+0x00210|                                          00   |              . |          mem_16bit: false 0x21e.6-0x21e.7 (0.1)
+0x00210|                                          00   |              . |          mem_purgeable: false 0x21e.7-0x21f (0.1)
+0x00210|                                             60|               `|          mem_write: false 0x21f-0x21f.1 (0.1)
+0x00210|                                             60|               `|          mem_read: true 0x21f.1-0x21f.2 (0.1)
+0x00210|                                             60|               `|          mem_execute: true 0x21f.2-0x21f.3 (0.1)
+0x00210|                                             60|               `|          mem_shared: false 0x21f.3-0x21f.4 (0.1)
+0x00210|                                             60|               `|          mem_not_paged: false 0x21f.4-0x21f.5 (0.1)
+0x00210|                                             60|               `|          mem_not_cached: false 0x21f.5-0x21f.6 (0.1)
+0x00210|                                             60|               `|          mem_discardable: false 0x21f.6-0x21f.7 (0.1)
+0x00210|                                             60|               `|          lnk_nreloc_ovfl: false 0x21f.7-0x220 (0.1)
+       |                                               |                |      [1]{}: section 0x220-0x248 (40)
+0x00220|2e 72 64 61 74 61 00 00                        |.rdata..        |        name: ".rdata" 0x220-0x228 (8)
+0x00220|                        10 49 00 00            |        .I..    |        virtual_size: 18704 0x228-0x22c (4)
+0x00220|                                    00 90 02 00|            ....|        virtual_address: 0x29000 0x22c-0x230 (4)
+0x00230|00 4a 00 00                                    |.J..            |        size_of_raw_data: 18944 0x230-0x234 (4)
+0x00230|            00 76 02 00                        |    .v..        |        pointer_to_raw_data: 0x27600 0x234-0x238 (4)
+0x00230|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x238-0x23c (4)
+0x00230|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x23c-0x240 (4)
+0x00240|00 00                                          |..              |        number_of_relocations: 0 0x240-0x242 (2)
+0x00240|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x242-0x244 (2)
+       |                                               |                |        characteristics{}: 0x244-0x248 (4)
+0x00240|            40                                 |    @           |          cnt_uninitialized_data: false 0x244-0x244.1 (0.1)
+0x00240|            40                                 |    @           |          cnt_initialized_data: true 0x244.1-0x244.2 (0.1)
+0x00240|            40                                 |    @           |          cnt_code: false 0x244.2-0x244.3 (0.1)
+0x00240|            40                                 |    @           |          reserved: false 0x244.3-0x244.4 (0.1)
+0x00240|            40                                 |    @           |          type_no_pad: false 0x244.4-0x244.5 (0.1)
+0x00240|            40                                 |    @           |          reserved0: false 0x244.5-0x244.6 (0.1)
+0x00240|            40                                 |    @           |          reserved1: false 0x244.6-0x244.7 (0.1)
+0x00240|            40                                 |    @           |          reserved2: false 0x244.7-0x245 (0.1)
+0x00240|               00                              |     .          |          gprel: false 0x245-0x245.1 (0.1)
+0x00240|               00                              |     .          |          unknown0: false 0x245.1-0x245.2 (0.1)
+0x00240|               00                              |     .          |          unknown1: false 0x245.2-0x245.3 (0.1)
+0x00240|               00                              |     .          |          lnk_comdat: false 0x245.3-0x245.4 (0.1)
+0x00240|               00                              |     .          |          lnk_remove: false 0x245.4-0x245.5 (0.1)
+0x00240|               00                              |     .          |          reserved3: false 0x245.5-0x245.6 (0.1)
+0x00240|               00                              |     .          |          lnk_info: false 0x245.6-0x245.7 (0.1)
+0x00240|               00                              |     .          |          lnk_other: false 0x245.7-0x246 (0.1)
+0x00240|                  00                           |      .         |          align_128bytes: false 0x246-0x246.1 (0.1)
+0x00240|                  00                           |      .         |          align_8bytes: false 0x246.1-0x246.2 (0.1)
+0x00240|                  00                           |      .         |          align_2bytes: false 0x246.2-0x246.3 (0.1)
+0x00240|                  00                           |      .         |          align_1bytes: false 0x246.3-0x246.4 (0.1)
+0x00240|                  00                           |      .         |          mem_preload: false 0x246.4-0x246.5 (0.1)
+0x00240|                  00                           |      .         |          mem_locked: false 0x246.5-0x246.6 (0.1)
+0x00240|                  00                           |      .         |          mem_16bit: false 0x246.6-0x246.7 (0.1)
+0x00240|                  00                           |      .         |          mem_purgeable: false 0x246.7-0x247 (0.1)
+0x00240|                     40                        |       @        |          mem_write: false 0x247-0x247.1 (0.1)
+0x00240|                     40                        |       @        |          mem_read: true 0x247.1-0x247.2 (0.1)
+0x00240|                     40                        |       @        |          mem_execute: false 0x247.2-0x247.3 (0.1)
+0x00240|                     40                        |       @        |          mem_shared: false 0x247.3-0x247.4 (0.1)
+0x00240|                     40                        |       @        |          mem_not_paged: false 0x247.4-0x247.5 (0.1)
+0x00240|                     40                        |       @        |          mem_not_cached: false 0x247.5-0x247.6 (0.1)
+0x00240|                     40                        |       @        |          mem_discardable: false 0x247.6-0x247.7 (0.1)
+0x00240|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x247.7-0x248 (0.1)
+       |                                               |                |      [2]{}: section 0x248-0x270 (40)
+0x00240|                        2e 64 61 74 61 00 00 00|        .data...|        name: ".data" 0x248-0x250 (8)
+0x00250|98 d3 01 00                                    |....            |        virtual_size: 119704 0x250-0x254 (4)
+0x00250|            00 e0 02 00                        |    ....        |        virtual_address: 0x2e000 0x254-0x258 (4)
+0x00250|                        00 d4 01 00            |        ....    |        size_of_raw_data: 119808 0x258-0x25c (4)
+0x00250|                                    00 c0 02 00|            ....|        pointer_to_raw_data: 0x2c000 0x25c-0x260 (4)
+0x00260|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x260-0x264 (4)
+0x00260|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x264-0x268 (4)
+0x00260|                        00 00                  |        ..      |        number_of_relocations: 0 0x268-0x26a (2)
+0x00260|                              00 00            |          ..    |        number_of_line_numbers: 0 0x26a-0x26c (2)
+       |                                               |                |        characteristics{}: 0x26c-0x270 (4)
+0x00260|                                    40         |            @   |          cnt_uninitialized_data: false 0x26c-0x26c.1 (0.1)
+0x00260|                                    40         |            @   |          cnt_initialized_data: true 0x26c.1-0x26c.2 (0.1)
+0x00260|                                    40         |            @   |          cnt_code: false 0x26c.2-0x26c.3 (0.1)
+0x00260|                                    40         |            @   |          reserved: false 0x26c.3-0x26c.4 (0.1)
+0x00260|                                    40         |            @   |          type_no_pad: false 0x26c.4-0x26c.5 (0.1)
+0x00260|                                    40         |            @   |          reserved0: false 0x26c.5-0x26c.6 (0.1)
+0x00260|                                    40         |            @   |          reserved1: false 0x26c.6-0x26c.7 (0.1)
+0x00260|                                    40         |            @   |          reserved2: false 0x26c.7-0x26d (0.1)
+0x00260|                                       00      |             .  |          gprel: false 0x26d-0x26d.1 (0.1)
+0x00260|                                       00      |             .  |          unknown0: false 0x26d.1-0x26d.2 (0.1)
+0x00260|                                       00      |             .  |          unknown1: false 0x26d.2-0x26d.3 (0.1)
+0x00260|                                       00      |             .  |          lnk_comdat: false 0x26d.3-0x26d.4 (0.1)
+0x00260|                                       00      |             .  |          lnk_remove: false 0x26d.4-0x26d.5 (0.1)
+0x00260|                                       00      |             .  |          reserved3: false 0x26d.5-0x26d.6 (0.1)
+0x00260|                                       00      |             .  |          lnk_info: false 0x26d.6-0x26d.7 (0.1)
+0x00260|                                       00      |             .  |          lnk_other: false 0x26d.7-0x26e (0.1)
+0x00260|                                          00   |              . |          align_128bytes: false 0x26e-0x26e.1 (0.1)
+0x00260|                                          00   |              . |          align_8bytes: false 0x26e.1-0x26e.2 (0.1)
+0x00260|                                          00   |              . |          align_2bytes: false 0x26e.2-0x26e.3 (0.1)
+0x00260|                                          00   |              . |          align_1bytes: false 0x26e.3-0x26e.4 (0.1)
+0x00260|                                          00   |              . |          mem_preload: false 0x26e.4-0x26e.5 (0.1)
+0x00260|                                          00   |              . |          mem_locked: false 0x26e.5-0x26e.6 (0.1)
+0x00260|                                          00   |              . |          mem_16bit: false 0x26e.6-0x26e.7 (0.1)
+0x00260|                                          00   |              . |          mem_purgeable: false 0x26e.7-0x26f (0.1)
+0x00260|                                             c0|               .|          mem_write: true 0x26f-0x26f.1 (0.1)
+0x00260|                                             c0|               .|          mem_read: true 0x26f.1-0x26f.2 (0.1)
+0x00260|                                             c0|               .|          mem_execute: false 0x26f.2-0x26f.3 (0.1)
+0x00260|                                             c0|               .|          mem_shared: false 0x26f.3-0x26f.4 (0.1)
+0x00260|                                             c0|               .|          mem_not_paged: false 0x26f.4-0x26f.5 (0.1)
+0x00260|                                             c0|               .|          mem_not_cached: false 0x26f.5-0x26f.6 (0.1)
+0x00260|                                             c0|               .|          mem_discardable: false 0x26f.6-0x26f.7 (0.1)
+0x00260|                                             c0|               .|          lnk_nreloc_ovfl: false 0x26f.7-0x270 (0.1)
+       |                                               |                |      [3]{}: section 0x270-0x298 (40)
+0x00270|2e 70 64 61 74 61 00 00                        |.pdata..        |        name: ".pdata" 0x270-0x278 (8)
+0x00270|                        dc 26 00 00            |        .&..    |        virtual_size: 9948 0x278-0x27c (4)
+0x00270|                                    00 c0 04 00|            ....|        virtual_address: 0x4c000 0x27c-0x280 (4)
+0x00280|00 28 00 00                                    |.(..            |        size_of_raw_data: 10240 0x280-0x284 (4)
+0x00280|            00 94 04 00                        |    ....        |        pointer_to_raw_data: 0x49400 0x284-0x288 (4)
+0x00280|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x288-0x28c (4)
+0x00280|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x28c-0x290 (4)
+0x00290|00 00                                          |..              |        number_of_relocations: 0 0x290-0x292 (2)
+0x00290|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x292-0x294 (2)
+       |                                               |                |        characteristics{}: 0x294-0x298 (4)
+0x00290|            40                                 |    @           |          cnt_uninitialized_data: false 0x294-0x294.1 (0.1)
+0x00290|            40                                 |    @           |          cnt_initialized_data: true 0x294.1-0x294.2 (0.1)
+0x00290|            40                                 |    @           |          cnt_code: false 0x294.2-0x294.3 (0.1)
+0x00290|            40                                 |    @           |          reserved: false 0x294.3-0x294.4 (0.1)
+0x00290|            40                                 |    @           |          type_no_pad: false 0x294.4-0x294.5 (0.1)
+0x00290|            40                                 |    @           |          reserved0: false 0x294.5-0x294.6 (0.1)
+0x00290|            40                                 |    @           |          reserved1: false 0x294.6-0x294.7 (0.1)
+0x00290|            40                                 |    @           |          reserved2: false 0x294.7-0x295 (0.1)
+0x00290|               00                              |     .          |          gprel: false 0x295-0x295.1 (0.1)
+0x00290|               00                              |     .          |          unknown0: false 0x295.1-0x295.2 (0.1)
+0x00290|               00                              |     .          |          unknown1: false 0x295.2-0x295.3 (0.1)
+0x00290|               00                              |     .          |          lnk_comdat: false 0x295.3-0x295.4 (0.1)
+0x00290|               00                              |     .          |          lnk_remove: false 0x295.4-0x295.5 (0.1)
+0x00290|               00                              |     .          |          reserved3: false 0x295.5-0x295.6 (0.1)
+0x00290|               00                              |     .          |          lnk_info: false 0x295.6-0x295.7 (0.1)
+0x00290|               00                              |     .          |          lnk_other: false 0x295.7-0x296 (0.1)
+0x00290|                  00                           |      .         |          align_128bytes: false 0x296-0x296.1 (0.1)
+0x00290|                  00                           |      .         |          align_8bytes: false 0x296.1-0x296.2 (0.1)
+0x00290|                  00                           |      .         |          align_2bytes: false 0x296.2-0x296.3 (0.1)
+0x00290|                  00                           |      .         |          align_1bytes: false 0x296.3-0x296.4 (0.1)
+0x00290|                  00                           |      .         |          mem_preload: false 0x296.4-0x296.5 (0.1)
+0x00290|                  00                           |      .         |          mem_locked: false 0x296.5-0x296.6 (0.1)
+0x00290|                  00                           |      .         |          mem_16bit: false 0x296.6-0x296.7 (0.1)
+0x00290|                  00                           |      .         |          mem_purgeable: false 0x296.7-0x297 (0.1)
+0x00290|                     40                        |       @        |          mem_write: false 0x297-0x297.1 (0.1)
+0x00290|                     40                        |       @        |          mem_read: true 0x297.1-0x297.2 (0.1)
+0x00290|                     40                        |       @        |          mem_execute: false 0x297.2-0x297.3 (0.1)
+0x00290|                     40                        |       @        |          mem_shared: false 0x297.3-0x297.4 (0.1)
+0x00290|                     40                        |       @        |          mem_not_paged: false 0x297.4-0x297.5 (0.1)
+0x00290|                     40                        |       @        |          mem_not_cached: false 0x297.5-0x297.6 (0.1)
+0x00290|                     40                        |       @        |          mem_discardable: false 0x297.6-0x297.7 (0.1)
+0x00290|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x297.7-0x298 (0.1)
+       |                                               |                |      [4]{}: section 0x298-0x2c0 (40)
+0x00290|                        2e 72 73 72 63 00 00 00|        .rsrc...|        name: ".rsrc" 0x298-0x2a0 (8)
+0x002a0|58 84 00 00                                    |X...            |        virtual_size: 33880 0x2a0-0x2a4 (4)
+0x002a0|            00 f0 04 00                        |    ....        |        virtual_address: 0x4f000 0x2a4-0x2a8 (4)
+0x002a0|                        00 86 00 00            |        ....    |        size_of_raw_data: 34304 0x2a8-0x2ac (4)
+0x002a0|                                    00 bc 04 00|            ....|        pointer_to_raw_data: 0x4bc00 0x2ac-0x2b0 (4)
+0x002b0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x2b0-0x2b4 (4)
+0x002b0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x2b4-0x2b8 (4)
+0x002b0|                        00 00                  |        ..      |        number_of_relocations: 0 0x2b8-0x2ba (2)
+0x002b0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x2ba-0x2bc (2)
+       |                                               |                |        characteristics{}: 0x2bc-0x2c0 (4)
+0x002b0|                                    40         |            @   |          cnt_uninitialized_data: false 0x2bc-0x2bc.1 (0.1)
+0x002b0|                                    40         |            @   |          cnt_initialized_data: true 0x2bc.1-0x2bc.2 (0.1)
+0x002b0|                                    40         |            @   |          cnt_code: false 0x2bc.2-0x2bc.3 (0.1)
+0x002b0|                                    40         |            @   |          reserved: false 0x2bc.3-0x2bc.4 (0.1)
+0x002b0|                                    40         |            @   |          type_no_pad: false 0x2bc.4-0x2bc.5 (0.1)
+0x002b0|                                    40         |            @   |          reserved0: false 0x2bc.5-0x2bc.6 (0.1)
+0x002b0|                                    40         |            @   |          reserved1: false 0x2bc.6-0x2bc.7 (0.1)
+0x002b0|                                    40         |            @   |          reserved2: false 0x2bc.7-0x2bd (0.1)
+0x002b0|                                       00      |             .  |          gprel: false 0x2bd-0x2bd.1 (0.1)
+0x002b0|                                       00      |             .  |          unknown0: false 0x2bd.1-0x2bd.2 (0.1)
+0x002b0|                                       00      |             .  |          unknown1: false 0x2bd.2-0x2bd.3 (0.1)
+0x002b0|                                       00      |             .  |          lnk_comdat: false 0x2bd.3-0x2bd.4 (0.1)
+0x002b0|                                       00      |             .  |          lnk_remove: false 0x2bd.4-0x2bd.5 (0.1)
+0x002b0|                                       00      |             .  |          reserved3: false 0x2bd.5-0x2bd.6 (0.1)
+0x002b0|                                       00      |             .  |          lnk_info: false 0x2bd.6-0x2bd.7 (0.1)
+0x002b0|                                       00      |             .  |          lnk_other: false 0x2bd.7-0x2be (0.1)
+0x002b0|                                          00   |              . |          align_128bytes: false 0x2be-0x2be.1 (0.1)
+0x002b0|                                          00   |              . |          align_8bytes: false 0x2be.1-0x2be.2 (0.1)
+0x002b0|                                          00   |              . |          align_2bytes: false 0x2be.2-0x2be.3 (0.1)
+0x002b0|                                          00   |              . |          align_1bytes: false 0x2be.3-0x2be.4 (0.1)
+0x002b0|                                          00   |              . |          mem_preload: false 0x2be.4-0x2be.5 (0.1)
+0x002b0|                                          00   |              . |          mem_locked: false 0x2be.5-0x2be.6 (0.1)
+0x002b0|                                          00   |              . |          mem_16bit: false 0x2be.6-0x2be.7 (0.1)
+0x002b0|                                          00   |              . |          mem_purgeable: false 0x2be.7-0x2bf (0.1)
+0x002b0|                                             40|               @|          mem_write: false 0x2bf-0x2bf.1 (0.1)
+0x002b0|                                             40|               @|          mem_read: true 0x2bf.1-0x2bf.2 (0.1)
+0x002b0|                                             40|               @|          mem_execute: false 0x2bf.2-0x2bf.3 (0.1)
+0x002b0|                                             40|               @|          mem_shared: false 0x2bf.3-0x2bf.4 (0.1)
+0x002b0|                                             40|               @|          mem_not_paged: false 0x2bf.4-0x2bf.5 (0.1)
+0x002b0|                                             40|               @|          mem_not_cached: false 0x2bf.5-0x2bf.6 (0.1)
+0x002b0|                                             40|               @|          mem_discardable: false 0x2bf.6-0x2bf.7 (0.1)
+0x002b0|                                             40|               @|          lnk_nreloc_ovfl: false 0x2bf.7-0x2c0 (0.1)
+       |                                               |                |      [5]{}: section 0x2c0-0x2e8 (40)
+0x002c0|2e 72 65 6c 6f 63 00 00                        |.reloc..        |        name: ".reloc" 0x2c0-0x2c8 (8)
+0x002c0|                        24 01 00 00            |        $...    |        virtual_size: 292 0x2c8-0x2cc (4)
+0x002c0|                                    00 80 05 00|            ....|        virtual_address: 0x58000 0x2cc-0x2d0 (4)
+0x002d0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x2d0-0x2d4 (4)
+0x002d0|            00 42 05 00                        |    .B..        |        pointer_to_raw_data: 0x54200 0x2d4-0x2d8 (4)
+0x002d0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x2d8-0x2dc (4)
+0x002d0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x2dc-0x2e0 (4)
+0x002e0|00 00                                          |..              |        number_of_relocations: 0 0x2e0-0x2e2 (2)
+0x002e0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x2e2-0x2e4 (2)
+       |                                               |                |        characteristics{}: 0x2e4-0x2e8 (4)
+0x002e0|            40                                 |    @           |          cnt_uninitialized_data: false 0x2e4-0x2e4.1 (0.1)
+0x002e0|            40                                 |    @           |          cnt_initialized_data: true 0x2e4.1-0x2e4.2 (0.1)
+0x002e0|            40                                 |    @           |          cnt_code: false 0x2e4.2-0x2e4.3 (0.1)
+0x002e0|            40                                 |    @           |          reserved: false 0x2e4.3-0x2e4.4 (0.1)
+0x002e0|            40                                 |    @           |          type_no_pad: false 0x2e4.4-0x2e4.5 (0.1)
+0x002e0|            40                                 |    @           |          reserved0: false 0x2e4.5-0x2e4.6 (0.1)
+0x002e0|            40                                 |    @           |          reserved1: false 0x2e4.6-0x2e4.7 (0.1)
+0x002e0|            40                                 |    @           |          reserved2: false 0x2e4.7-0x2e5 (0.1)
+0x002e0|               00                              |     .          |          gprel: false 0x2e5-0x2e5.1 (0.1)
+0x002e0|               00                              |     .          |          unknown0: false 0x2e5.1-0x2e5.2 (0.1)
+0x002e0|               00                              |     .          |          unknown1: false 0x2e5.2-0x2e5.3 (0.1)
+0x002e0|               00                              |     .          |          lnk_comdat: false 0x2e5.3-0x2e5.4 (0.1)
+0x002e0|               00                              |     .          |          lnk_remove: false 0x2e5.4-0x2e5.5 (0.1)
+0x002e0|               00                              |     .          |          reserved3: false 0x2e5.5-0x2e5.6 (0.1)
+0x002e0|               00                              |     .          |          lnk_info: false 0x2e5.6-0x2e5.7 (0.1)
+0x002e0|               00                              |     .          |          lnk_other: false 0x2e5.7-0x2e6 (0.1)
+0x002e0|                  00                           |      .         |          align_128bytes: false 0x2e6-0x2e6.1 (0.1)
+0x002e0|                  00                           |      .         |          align_8bytes: false 0x2e6.1-0x2e6.2 (0.1)
+0x002e0|                  00                           |      .         |          align_2bytes: false 0x2e6.2-0x2e6.3 (0.1)
+0x002e0|                  00                           |      .         |          align_1bytes: false 0x2e6.3-0x2e6.4 (0.1)
+0x002e0|                  00                           |      .         |          mem_preload: false 0x2e6.4-0x2e6.5 (0.1)
+0x002e0|                  00                           |      .         |          mem_locked: false 0x2e6.5-0x2e6.6 (0.1)
+0x002e0|                  00                           |      .         |          mem_16bit: false 0x2e6.6-0x2e6.7 (0.1)
+0x002e0|                  00                           |      .         |          mem_purgeable: false 0x2e6.7-0x2e7 (0.1)
+0x002e0|                     42                        |       B        |          mem_write: false 0x2e7-0x2e7.1 (0.1)
+0x002e0|                     42                        |       B        |          mem_read: true 0x2e7.1-0x2e7.2 (0.1)
+0x002e0|                     42                        |       B        |          mem_execute: false 0x2e7.2-0x2e7.3 (0.1)
+0x002e0|                     42                        |       B        |          mem_shared: false 0x2e7.3-0x2e7.4 (0.1)
+0x002e0|                     42                        |       B        |          mem_not_paged: false 0x2e7.4-0x2e7.5 (0.1)
+0x002e0|                     42                        |       B        |          mem_not_cached: false 0x2e7.5-0x2e7.6 (0.1)
+0x002e0|                     42                        |       B        |          mem_discardable: true 0x2e7.6-0x2e7.7 (0.1)
+0x002e0|                     42                        |       B        |          lnk_nreloc_ovfl: false 0x2e7.7-0x2e8 (0.1)
+0x002e0|                        37 c8 e7 4c 40 00 01 00|        7..L@...|  gap0: raw bits 0x2e8-0x54400 (344344)
+0x002f0|f9 c8 e7 4c 4b 00 00 00 f9 c8 e7 4c 4b 00 00 00|...LK......LK...|
+*      |until 0x543ff.7 (end) (344344)                 |                |

format/pe/testdata/pe-Windows-x86-cmd.fqtest

@@ -0,0 +1,305 @@
+$ fq dv pe-Windows-x86-cmd
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-Windows-x86-cmd (pe) 0x0-0x49a00 (301568)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0xd8 (216)
+0x00000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x00000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x00000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x00000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x00000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x00000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x00000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x00000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x00010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x00010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x00010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x00010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x00010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x00010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x00010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x00020|00 00 00 00                                    |....            |
+0x00020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x00020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x00020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x00030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x00030|                                    d8 00 00 00|            ....|    e_lfanew: 216 (File address of new exe header) 0x3c-0x40 (4)
+0x00040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*      |until 0x7f.7 (64)                              |                |
+0x00080|de 72 92 b9 9a 13 fc ea 9a 13 fc ea 9a 13 fc ea|.r..............|    padding: raw bits 0x80-0xd8 (88)
+*      |until 0xd7.7 (88)                              |                |
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0xd8-0x270 (408)
+0x000d0|                        50 45 00 00            |        PE..    |    signature: raw bits (valid) 0xd8-0xdc (4)
+0x000d0|                                    4c 01      |            L.  |    machine: "i386" (0x14c) 0xdc-0xde (2)
+0x000d0|                                          04 00|              ..|    number_of_sections: 4 0xde-0xe0 (2)
+0x000e0|9e c1 5b 4a                                    |..[J            |    time_date_stamp: 1247527326 (2009-07-13T23:22:06Z) 0xe0-0xe4 (4)
+0x000e0|            00 00 00 00                        |    ....        |    pointer_to_symbol_table: 0x0 0xe4-0xe8 (4)
+0x000e0|                        00 00 00 00            |        ....    |    number_of_symbols: 0 0xe8-0xec (4)
+0x000e0|                                    e0 00      |            ..  |    size_of_optional_header: 224 0xec-0xee (2)
+       |                                               |                |    characteristics{}: 0xee-0xf0 (2)
+0x000e0|                                          02   |              . |      bytes_reversed_lo: false 0xee-0xee.1 (0.1)
+0x000e0|                                          02   |              . |      reserved: false 0xee.1-0xee.2 (0.1)
+0x000e0|                                          02   |              . |      large_address_aware: false 0xee.2-0xee.3 (0.1)
+0x000e0|                                          02   |              . |      aggressive_ws_trim: false 0xee.3-0xee.4 (0.1)
+0x000e0|                                          02   |              . |      local_syms_stripped: false 0xee.4-0xee.5 (0.1)
+0x000e0|                                          02   |              . |      line_nums_stripped: false 0xee.5-0xee.6 (0.1)
+0x000e0|                                          02   |              . |      executable_image: true 0xee.6-0xee.7 (0.1)
+0x000e0|                                          02   |              . |      relocs_stripped: false 0xee.7-0xef (0.1)
+0x000e0|                                             00|               .|      bytes_reversed_hi: false 0xef-0xef.1 (0.1)
+0x000e0|                                             00|               .|      up_system_only: false 0xef.1-0xef.2 (0.1)
+0x000e0|                                             00|               .|      dll: false 0xef.2-0xef.3 (0.1)
+0x000e0|                                             00|               .|      system: false 0xef.3-0xef.4 (0.1)
+0x000e0|                                             00|               .|      net_run_from_swap: false 0xef.4-0xef.5 (0.1)
+0x000e0|                                             00|               .|      removable_run_from_swap: false 0xef.5-0xef.6 (0.1)
+0x000e0|                                             00|               .|      debug_stripped: false 0xef.6-0xef.7 (0.1)
+0x000e0|                                             00|               .|      32bit_machine: false 0xef.7-0xf0 (0.1)
+       |                                               |                |    optional_header{}: 0xf0-0x1d0 (224)
+0x000f0|0b 01                                          |..              |      format: "pe32" (0x10b) 0xf0-0xf2 (2)
+0x000f0|      09                                       |  .             |      major_linker_version: 9 0xf2-0xf3 (1)
+0x000f0|         00                                    |   .            |      minor_linker_version: 0 0xf3-0xf4 (1)
+0x000f0|            00 2a 02 00                        |    .*..        |      size_of_code: 141824 0xf4-0xf8 (4)
+0x000f0|                        00 6c 02 00            |        .l..    |      size_of_initialized_data: 158720 0xf8-0xfc (4)
+0x000f0|                                    00 00 00 00|            ....|      size_of_uninitialized_data: 0 0xfc-0x100 (4)
+0x00100|dc 60 00 00                                    |.`..            |      address_of_entry_point: 0x60dc 0x100-0x104 (4)
+0x00100|            00 10 00 00                        |    ....        |      base_of_code: 0x1000 0x104-0x108 (4)
+0x00100|                        00 20 02 00            |        . ..    |      base_of_data: 0x22000 0x108-0x10c (4)
+0x00100|                                    00 00 d0 4a|            ...J|      image_base: 0x4ad00000 0x10c-0x110 (4)
+0x00110|00 10 00 00                                    |....            |      section_alignment: 4096 0x110-0x114 (4)
+0x00110|            00 02 00 00                        |    ....        |      file_alignment: 512 0x114-0x118 (4)
+0x00110|                        06 00                  |        ..      |      major_os_version: 6 0x118-0x11a (2)
+0x00110|                              01 00            |          ..    |      minor_os_version: 1 0x11a-0x11c (2)
+0x00110|                                    06 00      |            ..  |      major_image_version: 6 0x11c-0x11e (2)
+0x00110|                                          01 00|              ..|      minor_image_version: 1 0x11e-0x120 (2)
+0x00120|06 00                                          |..              |      major_subsystem_version: 6 0x120-0x122 (2)
+0x00120|      01 00                                    |  ..            |      minor_subsystem_version: 1 0x122-0x124 (2)
+0x00120|            00 00 00 00                        |    ....        |      win32_version: 0 0x124-0x128 (4)
+0x00120|                        00 c0 04 00            |        ....    |      size_of_image: 311296 0x128-0x12c (4)
+0x00120|                                    00 04 00 00|            ....|      size_of_headers: 1024 0x12c-0x130 (4)
+0x00130|8f b1 04 00                                    |....            |      chunk_sum: 0x4b18f 0x130-0x134 (4)
+0x00130|            03 00                              |    ..          |      subsystem: "windows_cui" (3) 0x134-0x136 (2)
+       |                                               |                |      dll_characteristics{}: 0x136-0x138 (2)
+0x00130|                  00                           |      .         |        force_integrity: false 0x136-0x136.1 (0.1)
+0x00130|                  00                           |      .         |        dynamic_base: false 0x136.1-0x136.2 (0.1)
+0x00130|                  00                           |      .         |        high_entropy_va: false 0x136.2-0x136.3 (0.1)
+0x00130|                  00                           |      .         |        reserved0: false 0x136.3-0x136.4 (0.1)
+0x00130|                  00                           |      .         |        reserved1: false 0x136.4-0x136.5 (0.1)
+0x00130|                  00                           |      .         |        reserved2: false 0x136.5-0x136.6 (0.1)
+0x00130|                  00                           |      .         |        reserved3: false 0x136.6-0x136.7 (0.1)
+0x00130|                  00                           |      .         |        reserved4: false 0x136.7-0x137 (0.1)
+0x00130|                     81                        |       .        |        terminal_server_aware: true 0x137-0x137.1 (0.1)
+0x00130|                     81                        |       .        |        guard_cf: false 0x137.1-0x137.2 (0.1)
+0x00130|                     81                        |       .        |        wdm_driver: false 0x137.2-0x137.3 (0.1)
+0x00130|                     81                        |       .        |        appcontainer: false 0x137.3-0x137.4 (0.1)
+0x00130|                     81                        |       .        |        no_bind: false 0x137.4-0x137.5 (0.1)
+0x00130|                     81                        |       .        |        no_seh: false 0x137.5-0x137.6 (0.1)
+0x00130|                     81                        |       .        |        no_isolation: false 0x137.6-0x137.7 (0.1)
+0x00130|                     81                        |       .        |        nx_compat: true 0x137.7-0x138 (0.1)
+0x00130|                        00 00 10 00            |        ....    |      size_of_track_reserve: 1048576 0x138-0x13c (4)
+0x00130|                                    00 d0 0f 00|            ....|      size_of_stack_commit: 1036288 0x13c-0x140 (4)
+0x00140|00 00 10 00                                    |....            |      size_of_heap_reserve: 1048576 0x140-0x144 (4)
+0x00140|            00 10 00 00                        |    ....        |      size_of_heap_commit: 4096 0x144-0x148 (4)
+0x00140|                        00 00 00 00            |        ....    |      loader_flags: 0 0x148-0x14c (4)
+0x00140|                                    10 00 00 00|            ....|      number_of_rva_and_sizes: 16 0x14c-0x150 (4)
+0x00150|00 00 00 00                                    |....            |      export_table_address: 0x0 0x150-0x154 (4)
+0x00150|            00 00 00 00                        |    ....        |      export_table_size: 0 0x154-0x158 (4)
+0x00150|                        e0 25 02 00            |        .%..    |      import_table_address: 0x225e0 0x158-0x15c (4)
+0x00150|                                    64 00 00 00|            d...|      import_table_size: 100 0x15c-0x160 (4)
+0x00160|00 10 04 00                                    |....            |      resource_table_address: 0x41000 0x160-0x164 (4)
+0x00160|            48 84 00 00                        |    H...        |      resource_table_size: 33864 0x164-0x168 (4)
+0x00160|                        00 00 00 00            |        ....    |      exception_table_address: 0x0 0x168-0x16c (4)
+0x00160|                                    00 00 00 00|            ....|      exception_table_size: 0 0x16c-0x170 (4)
+0x00170|00 00 00 00                                    |....            |      certificate_table_address: 0x0 0x170-0x174 (4)
+0x00170|            00 00 00 00                        |    ....        |      certificate_table_size: 0 0x174-0x178 (4)
+0x00170|                        00 a0 04 00            |        ....    |      base_relocation_table_address: 0x4a000 0x178-0x17c (4)
+0x00170|                                    1c 1b 00 00|            ....|      base_relocation_table_size: 6940 0x17c-0x180 (4)
+0x00180|68 39 02 00                                    |h9..            |      debug_address: 0x23968 0x180-0x184 (4)
+0x00180|            38 00 00 00                        |    8...        |      debug_size: 56 0x184-0x188 (4)
+0x00180|                        00 00 00 00 00 00 00 00|        ........|      architecture: 0 0x188-0x190 (8)
+0x00190|00 00 00 00 00 00 00 00                        |........        |      global_ptr: 0x0 0x190-0x198 (8)
+0x00190|                        00 00 00 00            |        ....    |      tls_table_address: 0x0 0x198-0x19c (4)
+0x00190|                                    00 00 00 00|            ....|      tls_table_size: 0 0x19c-0x1a0 (4)
+0x001a0|90 bb 01 00                                    |....            |      load_config_table_address: 0x1bb90 0x1a0-0x1a4 (4)
+0x001a0|            40 00 00 00                        |    @...        |      load_config_table_size: 64 0x1a4-0x1a8 (4)
+0x001a0|                        70 02 00 00            |        p...    |      bound_import_address: 0x270 0x1a8-0x1ac (4)
+0x001a0|                                    94 00 00 00|            ....|      bound_import_size: 148 0x1ac-0x1b0 (4)
+0x001b0|00 10 00 00                                    |....            |      iat_address: 0x1000 0x1b0-0x1b4 (4)
+0x001b0|            98 03 00 00                        |    ....        |      iat_size: 920 0x1b4-0x1b8 (4)
+0x001b0|                        fc 22 02 00            |        ."..    |      delay_import_descriptor_address: 0x222fc 0x1b8-0x1bc (4)
+0x001b0|                                    a0 00 00 00|            ....|      delay_import_descriptor_size: 160 0x1bc-0x1c0 (4)
+0x001c0|00 00 00 00                                    |....            |      clr_runtime_header_address: 0x0 0x1c0-0x1c4 (4)
+0x001c0|            00 00 00 00                        |    ....        |      clr_runtime_header_size: 0 0x1c4-0x1c8 (4)
+0x001c0|                        00 00 00 00 00 00 00 00|        ........|      reserved: 0 0x1c8-0x1d0 (8)
+       |                                               |                |      unknown: raw bits 0x1d0-0x1d0 (0)
+       |                                               |                |    sections[0:4]: 0x1d0-0x270 (160)
+       |                                               |                |      [0]{}: section 0x1d0-0x1f8 (40)
+0x001d0|2e 74 65 78 74 00 00 00                        |.text...        |        name: ".text" 0x1d0-0x1d8 (8)
+0x001d0|                        c4 29 02 00            |        .)..    |        virtual_size: 141764 0x1d8-0x1dc (4)
+0x001d0|                                    00 10 00 00|            ....|        virtual_address: 0x1000 0x1dc-0x1e0 (4)
+0x001e0|00 2a 02 00                                    |.*..            |        size_of_raw_data: 141824 0x1e0-0x1e4 (4)
+0x001e0|            00 04 00 00                        |    ....        |        pointer_to_raw_data: 0x400 0x1e4-0x1e8 (4)
+0x001e0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x1e8-0x1ec (4)
+0x001e0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x1ec-0x1f0 (4)
+0x001f0|00 00                                          |..              |        number_of_relocations: 0 0x1f0-0x1f2 (2)
+0x001f0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1f2-0x1f4 (2)
+       |                                               |                |        characteristics{}: 0x1f4-0x1f8 (4)
+0x001f0|            20                                 |                |          cnt_uninitialized_data: false 0x1f4-0x1f4.1 (0.1)
+0x001f0|            20                                 |                |          cnt_initialized_data: false 0x1f4.1-0x1f4.2 (0.1)
+0x001f0|            20                                 |                |          cnt_code: true 0x1f4.2-0x1f4.3 (0.1)
+0x001f0|            20                                 |                |          reserved: false 0x1f4.3-0x1f4.4 (0.1)
+0x001f0|            20                                 |                |          type_no_pad: false 0x1f4.4-0x1f4.5 (0.1)
+0x001f0|            20                                 |                |          reserved0: false 0x1f4.5-0x1f4.6 (0.1)
+0x001f0|            20                                 |                |          reserved1: false 0x1f4.6-0x1f4.7 (0.1)
+0x001f0|            20                                 |                |          reserved2: false 0x1f4.7-0x1f5 (0.1)
+0x001f0|               00                              |     .          |          gprel: false 0x1f5-0x1f5.1 (0.1)
+0x001f0|               00                              |     .          |          unknown0: false 0x1f5.1-0x1f5.2 (0.1)
+0x001f0|               00                              |     .          |          unknown1: false 0x1f5.2-0x1f5.3 (0.1)
+0x001f0|               00                              |     .          |          lnk_comdat: false 0x1f5.3-0x1f5.4 (0.1)
+0x001f0|               00                              |     .          |          lnk_remove: false 0x1f5.4-0x1f5.5 (0.1)
+0x001f0|               00                              |     .          |          reserved3: false 0x1f5.5-0x1f5.6 (0.1)
+0x001f0|               00                              |     .          |          lnk_info: false 0x1f5.6-0x1f5.7 (0.1)
+0x001f0|               00                              |     .          |          lnk_other: false 0x1f5.7-0x1f6 (0.1)
+0x001f0|                  00                           |      .         |          align_128bytes: false 0x1f6-0x1f6.1 (0.1)
+0x001f0|                  00                           |      .         |          align_8bytes: false 0x1f6.1-0x1f6.2 (0.1)
+0x001f0|                  00                           |      .         |          align_2bytes: false 0x1f6.2-0x1f6.3 (0.1)
+0x001f0|                  00                           |      .         |          align_1bytes: false 0x1f6.3-0x1f6.4 (0.1)
+0x001f0|                  00                           |      .         |          mem_preload: false 0x1f6.4-0x1f6.5 (0.1)
+0x001f0|                  00                           |      .         |          mem_locked: false 0x1f6.5-0x1f6.6 (0.1)
+0x001f0|                  00                           |      .         |          mem_16bit: false 0x1f6.6-0x1f6.7 (0.1)
+0x001f0|                  00                           |      .         |          mem_purgeable: false 0x1f6.7-0x1f7 (0.1)
+0x001f0|                     60                        |       `        |          mem_write: false 0x1f7-0x1f7.1 (0.1)
+0x001f0|                     60                        |       `        |          mem_read: true 0x1f7.1-0x1f7.2 (0.1)
+0x001f0|                     60                        |       `        |          mem_execute: true 0x1f7.2-0x1f7.3 (0.1)
+0x001f0|                     60                        |       `        |          mem_shared: false 0x1f7.3-0x1f7.4 (0.1)
+0x001f0|                     60                        |       `        |          mem_not_paged: false 0x1f7.4-0x1f7.5 (0.1)
+0x001f0|                     60                        |       `        |          mem_not_cached: false 0x1f7.5-0x1f7.6 (0.1)
+0x001f0|                     60                        |       `        |          mem_discardable: false 0x1f7.6-0x1f7.7 (0.1)
+0x001f0|                     60                        |       `        |          lnk_nreloc_ovfl: false 0x1f7.7-0x1f8 (0.1)
+       |                                               |                |      [1]{}: section 0x1f8-0x220 (40)
+0x001f0|                        2e 64 61 74 61 00 00 00|        .data...|        name: ".data" 0x1f8-0x200 (8)
+0x00200|28 c9 01 00                                    |(...            |        virtual_size: 117032 0x200-0x204 (4)
+0x00200|            00 40 02 00                        |    .@..        |        virtual_address: 0x24000 0x204-0x208 (4)
+0x00200|                        00 ca 01 00            |        ....    |        size_of_raw_data: 117248 0x208-0x20c (4)
+0x00200|                                    00 2e 02 00|            ....|        pointer_to_raw_data: 0x22e00 0x20c-0x210 (4)
+0x00210|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x210-0x214 (4)
+0x00210|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x214-0x218 (4)
+0x00210|                        00 00                  |        ..      |        number_of_relocations: 0 0x218-0x21a (2)
+0x00210|                              00 00            |          ..    |        number_of_line_numbers: 0 0x21a-0x21c (2)
+       |                                               |                |        characteristics{}: 0x21c-0x220 (4)
+0x00210|                                    40         |            @   |          cnt_uninitialized_data: false 0x21c-0x21c.1 (0.1)
+0x00210|                                    40         |            @   |          cnt_initialized_data: true 0x21c.1-0x21c.2 (0.1)
+0x00210|                                    40         |            @   |          cnt_code: false 0x21c.2-0x21c.3 (0.1)
+0x00210|                                    40         |            @   |          reserved: false 0x21c.3-0x21c.4 (0.1)
+0x00210|                                    40         |            @   |          type_no_pad: false 0x21c.4-0x21c.5 (0.1)
+0x00210|                                    40         |            @   |          reserved0: false 0x21c.5-0x21c.6 (0.1)
+0x00210|                                    40         |            @   |          reserved1: false 0x21c.6-0x21c.7 (0.1)
+0x00210|                                    40         |            @   |          reserved2: false 0x21c.7-0x21d (0.1)
+0x00210|                                       00      |             .  |          gprel: false 0x21d-0x21d.1 (0.1)
+0x00210|                                       00      |             .  |          unknown0: false 0x21d.1-0x21d.2 (0.1)
+0x00210|                                       00      |             .  |          unknown1: false 0x21d.2-0x21d.3 (0.1)
+0x00210|                                       00      |             .  |          lnk_comdat: false 0x21d.3-0x21d.4 (0.1)
+0x00210|                                       00      |             .  |          lnk_remove: false 0x21d.4-0x21d.5 (0.1)
+0x00210|                                       00      |             .  |          reserved3: false 0x21d.5-0x21d.6 (0.1)
+0x00210|                                       00      |             .  |          lnk_info: false 0x21d.6-0x21d.7 (0.1)
+0x00210|                                       00      |             .  |          lnk_other: false 0x21d.7-0x21e (0.1)
+0x00210|                                          00   |              . |          align_128bytes: false 0x21e-0x21e.1 (0.1)
+0x00210|                                          00   |              . |          align_8bytes: false 0x21e.1-0x21e.2 (0.1)
+0x00210|                                          00   |              . |          align_2bytes: false 0x21e.2-0x21e.3 (0.1)
+0x00210|                                          00   |              . |          align_1bytes: false 0x21e.3-0x21e.4 (0.1)
+0x00210|                                          00   |              . |          mem_preload: false 0x21e.4-0x21e.5 (0.1)
+0x00210|                                          00   |              . |          mem_locked: false 0x21e.5-0x21e.6 (0.1)
+0x00210|                                          00   |              . |          mem_16bit: false 0x21e.6-0x21e.7 (0.1)
+0x00210|                                          00   |              . |          mem_purgeable: false 0x21e.7-0x21f (0.1)
+0x00210|                                             c0|               .|          mem_write: true 0x21f-0x21f.1 (0.1)
+0x00210|                                             c0|               .|          mem_read: true 0x21f.1-0x21f.2 (0.1)
+0x00210|                                             c0|               .|          mem_execute: false 0x21f.2-0x21f.3 (0.1)
+0x00210|                                             c0|               .|          mem_shared: false 0x21f.3-0x21f.4 (0.1)
+0x00210|                                             c0|               .|          mem_not_paged: false 0x21f.4-0x21f.5 (0.1)
+0x00210|                                             c0|               .|          mem_not_cached: false 0x21f.5-0x21f.6 (0.1)
+0x00210|                                             c0|               .|          mem_discardable: false 0x21f.6-0x21f.7 (0.1)
+0x00210|                                             c0|               .|          lnk_nreloc_ovfl: false 0x21f.7-0x220 (0.1)
+       |                                               |                |      [2]{}: section 0x220-0x248 (40)
+0x00220|2e 72 73 72 63 00 00 00                        |.rsrc...        |        name: ".rsrc" 0x220-0x228 (8)
+0x00220|                        48 84 00 00            |        H...    |        virtual_size: 33864 0x228-0x22c (4)
+0x00220|                                    00 10 04 00|            ....|        virtual_address: 0x41000 0x22c-0x230 (4)
+0x00230|00 86 00 00                                    |....            |        size_of_raw_data: 34304 0x230-0x234 (4)
+0x00230|            00 f8 03 00                        |    ....        |        pointer_to_raw_data: 0x3f800 0x234-0x238 (4)
+0x00230|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x238-0x23c (4)
+0x00230|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x23c-0x240 (4)
+0x00240|00 00                                          |..              |        number_of_relocations: 0 0x240-0x242 (2)
+0x00240|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x242-0x244 (2)
+       |                                               |                |        characteristics{}: 0x244-0x248 (4)
+0x00240|            40                                 |    @           |          cnt_uninitialized_data: false 0x244-0x244.1 (0.1)
+0x00240|            40                                 |    @           |          cnt_initialized_data: true 0x244.1-0x244.2 (0.1)
+0x00240|            40                                 |    @           |          cnt_code: false 0x244.2-0x244.3 (0.1)
+0x00240|            40                                 |    @           |          reserved: false 0x244.3-0x244.4 (0.1)
+0x00240|            40                                 |    @           |          type_no_pad: false 0x244.4-0x244.5 (0.1)
+0x00240|            40                                 |    @           |          reserved0: false 0x244.5-0x244.6 (0.1)
+0x00240|            40                                 |    @           |          reserved1: false 0x244.6-0x244.7 (0.1)
+0x00240|            40                                 |    @           |          reserved2: false 0x244.7-0x245 (0.1)
+0x00240|               00                              |     .          |          gprel: false 0x245-0x245.1 (0.1)
+0x00240|               00                              |     .          |          unknown0: false 0x245.1-0x245.2 (0.1)
+0x00240|               00                              |     .          |          unknown1: false 0x245.2-0x245.3 (0.1)
+0x00240|               00                              |     .          |          lnk_comdat: false 0x245.3-0x245.4 (0.1)
+0x00240|               00                              |     .          |          lnk_remove: false 0x245.4-0x245.5 (0.1)
+0x00240|               00                              |     .          |          reserved3: false 0x245.5-0x245.6 (0.1)
+0x00240|               00                              |     .          |          lnk_info: false 0x245.6-0x245.7 (0.1)
+0x00240|               00                              |     .          |          lnk_other: false 0x245.7-0x246 (0.1)
+0x00240|                  00                           |      .         |          align_128bytes: false 0x246-0x246.1 (0.1)
+0x00240|                  00                           |      .         |          align_8bytes: false 0x246.1-0x246.2 (0.1)
+0x00240|                  00                           |      .         |          align_2bytes: false 0x246.2-0x246.3 (0.1)
+0x00240|                  00                           |      .         |          align_1bytes: false 0x246.3-0x246.4 (0.1)
+0x00240|                  00                           |      .         |          mem_preload: false 0x246.4-0x246.5 (0.1)
+0x00240|                  00                           |      .         |          mem_locked: false 0x246.5-0x246.6 (0.1)
+0x00240|                  00                           |      .         |          mem_16bit: false 0x246.6-0x246.7 (0.1)
+0x00240|                  00                           |      .         |          mem_purgeable: false 0x246.7-0x247 (0.1)
+0x00240|                     40                        |       @        |          mem_write: false 0x247-0x247.1 (0.1)
+0x00240|                     40                        |       @        |          mem_read: true 0x247.1-0x247.2 (0.1)
+0x00240|                     40                        |       @        |          mem_execute: false 0x247.2-0x247.3 (0.1)
+0x00240|                     40                        |       @        |          mem_shared: false 0x247.3-0x247.4 (0.1)
+0x00240|                     40                        |       @        |          mem_not_paged: false 0x247.4-0x247.5 (0.1)
+0x00240|                     40                        |       @        |          mem_not_cached: false 0x247.5-0x247.6 (0.1)
+0x00240|                     40                        |       @        |          mem_discardable: false 0x247.6-0x247.7 (0.1)
+0x00240|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x247.7-0x248 (0.1)
+       |                                               |                |      [3]{}: section 0x248-0x270 (40)
+0x00240|                        2e 72 65 6c 6f 63 00 00|        .reloc..|        name: ".reloc" 0x248-0x250 (8)
+0x00250|1c 1b 00 00                                    |....            |        virtual_size: 6940 0x250-0x254 (4)
+0x00250|            00 a0 04 00                        |    ....        |        virtual_address: 0x4a000 0x254-0x258 (4)
+0x00250|                        00 1c 00 00            |        ....    |        size_of_raw_data: 7168 0x258-0x25c (4)
+0x00250|                                    00 7e 04 00|            .~..|        pointer_to_raw_data: 0x47e00 0x25c-0x260 (4)
+0x00260|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x260-0x264 (4)
+0x00260|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x264-0x268 (4)
+0x00260|                        00 00                  |        ..      |        number_of_relocations: 0 0x268-0x26a (2)
+0x00260|                              00 00            |          ..    |        number_of_line_numbers: 0 0x26a-0x26c (2)
+       |                                               |                |        characteristics{}: 0x26c-0x270 (4)
+0x00260|                                    40         |            @   |          cnt_uninitialized_data: false 0x26c-0x26c.1 (0.1)
+0x00260|                                    40         |            @   |          cnt_initialized_data: true 0x26c.1-0x26c.2 (0.1)
+0x00260|                                    40         |            @   |          cnt_code: false 0x26c.2-0x26c.3 (0.1)
+0x00260|                                    40         |            @   |          reserved: false 0x26c.3-0x26c.4 (0.1)
+0x00260|                                    40         |            @   |          type_no_pad: false 0x26c.4-0x26c.5 (0.1)
+0x00260|                                    40         |            @   |          reserved0: false 0x26c.5-0x26c.6 (0.1)
+0x00260|                                    40         |            @   |          reserved1: false 0x26c.6-0x26c.7 (0.1)
+0x00260|                                    40         |            @   |          reserved2: false 0x26c.7-0x26d (0.1)
+0x00260|                                       00      |             .  |          gprel: false 0x26d-0x26d.1 (0.1)
+0x00260|                                       00      |             .  |          unknown0: false 0x26d.1-0x26d.2 (0.1)
+0x00260|                                       00      |             .  |          unknown1: false 0x26d.2-0x26d.3 (0.1)
+0x00260|                                       00      |             .  |          lnk_comdat: false 0x26d.3-0x26d.4 (0.1)
+0x00260|                                       00      |             .  |          lnk_remove: false 0x26d.4-0x26d.5 (0.1)
+0x00260|                                       00      |             .  |          reserved3: false 0x26d.5-0x26d.6 (0.1)
+0x00260|                                       00      |             .  |          lnk_info: false 0x26d.6-0x26d.7 (0.1)
+0x00260|                                       00      |             .  |          lnk_other: false 0x26d.7-0x26e (0.1)
+0x00260|                                          00   |              . |          align_128bytes: false 0x26e-0x26e.1 (0.1)
+0x00260|                                          00   |              . |          align_8bytes: false 0x26e.1-0x26e.2 (0.1)
+0x00260|                                          00   |              . |          align_2bytes: false 0x26e.2-0x26e.3 (0.1)
+0x00260|                                          00   |              . |          align_1bytes: false 0x26e.3-0x26e.4 (0.1)
+0x00260|                                          00   |              . |          mem_preload: false 0x26e.4-0x26e.5 (0.1)
+0x00260|                                          00   |              . |          mem_locked: false 0x26e.5-0x26e.6 (0.1)
+0x00260|                                          00   |              . |          mem_16bit: false 0x26e.6-0x26e.7 (0.1)
+0x00260|                                          00   |              . |          mem_purgeable: false 0x26e.7-0x26f (0.1)
+0x00260|                                             42|               B|          mem_write: false 0x26f-0x26f.1 (0.1)
+0x00260|                                             42|               B|          mem_read: true 0x26f.1-0x26f.2 (0.1)
+0x00260|                                             42|               B|          mem_execute: false 0x26f.2-0x26f.3 (0.1)
+0x00260|                                             42|               B|          mem_shared: false 0x26f.3-0x26f.4 (0.1)
+0x00260|                                             42|               B|          mem_not_paged: false 0x26f.4-0x26f.5 (0.1)
+0x00260|                                             42|               B|          mem_not_cached: false 0x26f.5-0x26f.6 (0.1)
+0x00260|                                             42|               B|          mem_discardable: true 0x26f.6-0x26f.7 (0.1)
+0x00260|                                             42|               B|          lnk_nreloc_ovfl: false 0x26f.7-0x270 (0.1)
+0x00270|6f da 5b 4a 38 00 00 00 db da 5b 4a 43 00 00 00|o.[J8.....[JC...|  gap0: raw bits 0x270-0x49a00 (300944)
+*      |until 0x499ff.7 (end) (300944)                 |                |

format/pe/testdata/pe-cygwin-ls.exe.fqtest

@@ -0,0 +1,525 @@
+$ fq dv pe-cygwin-ls.exe
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-cygwin-ls.exe (pe) 0x0-0x2101d (135197)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0x80 (128)
+0x00000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x00000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x00000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x00000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x00000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x00000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x00000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x00000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x00010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x00010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x00010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x00010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x00010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x00010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x00010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x00020|00 00 00 00                                    |....            |
+0x00020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x00020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x00020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x00030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x00030|                                    80 00 00 00|            ....|    e_lfanew: 128 (File address of new exe header) 0x3c-0x40 (4)
+0x00040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*      |until 0x7f.7 (64)                              |                |
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0x80-0x2101d (135069)
+0x00080|50 45 00 00                                    |PE..            |    signature: raw bits (valid) 0x80-0x84 (4)
+0x00080|            4c 01                              |    L.          |    machine: "i386" (0x14c) 0x84-0x86 (2)
+0x00080|                  09 00                        |      ..        |    number_of_sections: 9 0x86-0x88 (2)
+0x00080|                        00 00 11 00            |        ....    |    time_date_stamp: 1114112 (1970-01-13T21:28:32Z) 0x88-0x8c (4)
+0x00080|                                    00 10 02 00|            ....|    pointer_to_symbol_table: 0x21000 0x8c-0x90 (4)
+0x00090|00 00 00 00                                    |....            |    number_of_symbols: 0 0x90-0x94 (4)
+0x00090|            e0 00                              |    ..          |    size_of_optional_header: 224 0x94-0x96 (2)
+       |                                               |                |    characteristics{}: 0x96-0x98 (2)
+0x00090|                  2f                           |      /         |      bytes_reversed_lo: false 0x96-0x96.1 (0.1)
+0x00090|                  2f                           |      /         |      reserved: false 0x96.1-0x96.2 (0.1)
+0x00090|                  2f                           |      /         |      large_address_aware: true 0x96.2-0x96.3 (0.1)
+0x00090|                  2f                           |      /         |      aggressive_ws_trim: false 0x96.3-0x96.4 (0.1)
+0x00090|                  2f                           |      /         |      local_syms_stripped: true 0x96.4-0x96.5 (0.1)
+0x00090|                  2f                           |      /         |      line_nums_stripped: true 0x96.5-0x96.6 (0.1)
+0x00090|                  2f                           |      /         |      executable_image: true 0x96.6-0x96.7 (0.1)
+0x00090|                  2f                           |      /         |      relocs_stripped: true 0x96.7-0x97 (0.1)
+0x00090|                     01                        |       .        |      bytes_reversed_hi: false 0x97-0x97.1 (0.1)
+0x00090|                     01                        |       .        |      up_system_only: false 0x97.1-0x97.2 (0.1)
+0x00090|                     01                        |       .        |      dll: false 0x97.2-0x97.3 (0.1)
+0x00090|                     01                        |       .        |      system: false 0x97.3-0x97.4 (0.1)
+0x00090|                     01                        |       .        |      net_run_from_swap: false 0x97.4-0x97.5 (0.1)
+0x00090|                     01                        |       .        |      removable_run_from_swap: false 0x97.5-0x97.6 (0.1)
+0x00090|                     01                        |       .        |      debug_stripped: false 0x97.6-0x97.7 (0.1)
+0x00090|                     01                        |       .        |      32bit_machine: true 0x97.7-0x98 (0.1)
+       |                                               |                |    optional_header{}: 0x98-0x178 (224)
+0x00090|                        0b 01                  |        ..      |      format: "pe32" (0x10b) 0x98-0x9a (2)
+0x00090|                              02               |          .     |      major_linker_version: 2 0x9a-0x9b (1)
+0x00090|                                 19            |           .    |      minor_linker_version: 25 0x9b-0x9c (1)
+0x00090|                                    00 4e 01 00|            .N..|      size_of_code: 85504 0x9c-0xa0 (4)
+0x000a0|00 0a 02 00                                    |....            |      size_of_initialized_data: 133632 0xa0-0xa4 (4)
+0x000a0|            00 16 00 00                        |    ....        |      size_of_uninitialized_data: 5632 0xa4-0xa8 (4)
+0x000a0|                        00 10 00 00            |        ....    |      address_of_entry_point: 0x1000 0xa8-0xac (4)
+0x000a0|                                    00 10 00 00|            ....|      base_of_code: 0x1000 0xac-0xb0 (4)
+0x000b0|00 60 01 00                                    |.`..            |      base_of_data: 0x16000 0xb0-0xb4 (4)
+0x000b0|            00 00 40 00                        |    ..@.        |      image_base: 0x400000 0xb4-0xb8 (4)
+0x000b0|                        00 10 00 00            |        ....    |      section_alignment: 4096 0xb8-0xbc (4)
+0x000b0|                                    00 02 00 00|            ....|      file_alignment: 512 0xbc-0xc0 (4)
+0x000c0|04 00                                          |..              |      major_os_version: 4 0xc0-0xc2 (2)
+0x000c0|      00 00                                    |  ..            |      minor_os_version: 0 0xc2-0xc4 (2)
+0x000c0|            01 00                              |    ..          |      major_image_version: 1 0xc4-0xc6 (2)
+0x000c0|                  00 00                        |      ..        |      minor_image_version: 0 0xc6-0xc8 (2)
+0x000c0|                        04 00                  |        ..      |      major_subsystem_version: 4 0xc8-0xca (2)
+0x000c0|                              00 00            |          ..    |      minor_subsystem_version: 0 0xca-0xcc (2)
+0x000c0|                                    00 00 00 00|            ....|      win32_version: 0 0xcc-0xd0 (4)
+0x000d0|00 80 02 00                                    |....            |      size_of_image: 163840 0xd0-0xd4 (4)
+0x000d0|            00 04 00 00                        |    ....        |      size_of_headers: 1024 0xd4-0xd8 (4)
+0x000d0|                        4c 89 02 00            |        L...    |      chunk_sum: 0x2894c 0xd8-0xdc (4)
+0x000d0|                                    03 00      |            ..  |      subsystem: "windows_cui" (3) 0xdc-0xde (2)
+       |                                               |                |      dll_characteristics{}: 0xde-0xe0 (2)
+0x000d0|                                          00   |              . |        force_integrity: false 0xde-0xde.1 (0.1)
+0x000d0|                                          00   |              . |        dynamic_base: false 0xde.1-0xde.2 (0.1)
+0x000d0|                                          00   |              . |        high_entropy_va: false 0xde.2-0xde.3 (0.1)
+0x000d0|                                          00   |              . |        reserved0: false 0xde.3-0xde.4 (0.1)
+0x000d0|                                          00   |              . |        reserved1: false 0xde.4-0xde.5 (0.1)
+0x000d0|                                          00   |              . |        reserved2: false 0xde.5-0xde.6 (0.1)
+0x000d0|                                          00   |              . |        reserved3: false 0xde.6-0xde.7 (0.1)
+0x000d0|                                          00   |              . |        reserved4: false 0xde.7-0xdf (0.1)
+0x000d0|                                             80|               .|        terminal_server_aware: true 0xdf-0xdf.1 (0.1)
+0x000d0|                                             80|               .|        guard_cf: false 0xdf.1-0xdf.2 (0.1)
+0x000d0|                                             80|               .|        wdm_driver: false 0xdf.2-0xdf.3 (0.1)
+0x000d0|                                             80|               .|        appcontainer: false 0xdf.3-0xdf.4 (0.1)
+0x000d0|                                             80|               .|        no_bind: false 0xdf.4-0xdf.5 (0.1)
+0x000d0|                                             80|               .|        no_seh: false 0xdf.5-0xdf.6 (0.1)
+0x000d0|                                             80|               .|        no_isolation: false 0xdf.6-0xdf.7 (0.1)
+0x000d0|                                             80|               .|        nx_compat: false 0xdf.7-0xe0 (0.1)
+0x000e0|00 00 20 00                                    |.. .            |      size_of_track_reserve: 2097152 0xe0-0xe4 (4)
+0x000e0|            00 10 00 00                        |    ....        |      size_of_stack_commit: 4096 0xe4-0xe8 (4)
+0x000e0|                        00 00 10 00            |        ....    |      size_of_heap_reserve: 1048576 0xe8-0xec (4)
+0x000e0|                                    00 10 00 00|            ....|      size_of_heap_commit: 4096 0xec-0xf0 (4)
+0x000f0|00 00 00 00                                    |....            |      loader_flags: 0 0xf0-0xf4 (4)
+0x000f0|            10 00 00 00                        |    ....        |      number_of_rva_and_sizes: 16 0xf4-0xf8 (4)
+0x000f0|                        00 00 00 00            |        ....    |      export_table_address: 0x0 0xf8-0xfc (4)
+0x000f0|                                    00 00 00 00|            ....|      export_table_size: 0 0xfc-0x100 (4)
+0x00100|00 50 02 00                                    |.P..            |      import_table_address: 0x25000 0x100-0x104 (4)
+0x00100|            30 0e 00 00                        |    0...        |      import_table_size: 3632 0x104-0x108 (4)
+0x00100|                        00 60 02 00            |        .`..    |      resource_table_address: 0x26000 0x108-0x10c (4)
+0x00100|                                    e8 04 00 00|            ....|      resource_table_size: 1256 0x10c-0x110 (4)
+0x00110|00 00 00 00                                    |....            |      exception_table_address: 0x0 0x110-0x114 (4)
+0x00110|            00 00 00 00                        |    ....        |      exception_table_size: 0 0x114-0x118 (4)
+0x00110|                        00 00 00 00            |        ....    |      certificate_table_address: 0x0 0x118-0x11c (4)
+0x00110|                                    00 00 00 00|            ....|      certificate_table_size: 0 0x11c-0x120 (4)
+0x00120|00 00 00 00                                    |....            |      base_relocation_table_address: 0x0 0x120-0x124 (4)
+0x00120|            00 00 00 00                        |    ....        |      base_relocation_table_size: 0 0x124-0x128 (4)
+0x00120|                        00 e0 01 00            |        ....    |      debug_address: 0x1e000 0x128-0x12c (4)
+0x00120|                                    1c 00 00 00|            ....|      debug_size: 28 0x12c-0x130 (4)
+0x00130|00 00 00 00 00 00 00 00                        |........        |      architecture: 0 0x130-0x138 (8)
+0x00130|                        00 00 00 00 00 00 00 00|        ........|      global_ptr: 0x0 0x138-0x140 (8)
+0x00140|00 00 00 00                                    |....            |      tls_table_address: 0x0 0x140-0x144 (4)
+0x00140|            00 00 00 00                        |    ....        |      tls_table_size: 0 0x144-0x148 (4)
+0x00140|                        00 00 00 00            |        ....    |      load_config_table_address: 0x0 0x148-0x14c (4)
+0x00140|                                    00 00 00 00|            ....|      load_config_table_size: 0 0x14c-0x150 (4)
+0x00150|00 00 00 00                                    |....            |      bound_import_address: 0x0 0x150-0x154 (4)
+0x00150|            00 00 00 00                        |    ....        |      bound_import_size: 0 0x154-0x158 (4)
+0x00150|                        8c 52 02 00            |        .R..    |      iat_address: 0x2528c 0x158-0x15c (4)
+0x00150|                                    28 02 00 00|            (...|      iat_size: 552 0x15c-0x160 (4)
+0x00160|00 00 00 00                                    |....            |      delay_import_descriptor_address: 0x0 0x160-0x164 (4)
+0x00160|            00 00 00 00                        |    ....        |      delay_import_descriptor_size: 0 0x164-0x168 (4)
+0x00160|                        00 00 00 00            |        ....    |      clr_runtime_header_address: 0x0 0x168-0x16c (4)
+0x00160|                                    00 00 00 00|            ....|      clr_runtime_header_size: 0 0x16c-0x170 (4)
+0x00170|00 00 00 00 00 00 00 00                        |........        |      reserved: 0 0x170-0x178 (8)
+       |                                               |                |      unknown: raw bits 0x178-0x178 (0)
+       |                                               |                |    sections[0:9]: 0x178-0x2e0 (360)
+       |                                               |                |      [0]{}: section 0x178-0x1a0 (40)
+0x00170|                        2e 74 65 78 74 00 00 00|        .text...|        name: ".text" 0x178-0x180 (8)
+0x00180|04 4c 01 00                                    |.L..            |        virtual_size: 84996 0x180-0x184 (4)
+0x00180|            00 10 00 00                        |    ....        |        virtual_address: 0x1000 0x184-0x188 (4)
+0x00180|                        00 4e 01 00            |        .N..    |        size_of_raw_data: 85504 0x188-0x18c (4)
+0x00180|                                    00 04 00 00|            ....|        pointer_to_raw_data: 0x400 0x18c-0x190 (4)
+0x00190|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x190-0x194 (4)
+0x00190|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x194-0x198 (4)
+0x00190|                        00 00                  |        ..      |        number_of_relocations: 0 0x198-0x19a (2)
+0x00190|                              00 00            |          ..    |        number_of_line_numbers: 0 0x19a-0x19c (2)
+       |                                               |                |        characteristics{}: 0x19c-0x1a0 (4)
+0x00190|                                    60         |            `   |          cnt_uninitialized_data: false 0x19c-0x19c.1 (0.1)
+0x00190|                                    60         |            `   |          cnt_initialized_data: true 0x19c.1-0x19c.2 (0.1)
+0x00190|                                    60         |            `   |          cnt_code: true 0x19c.2-0x19c.3 (0.1)
+0x00190|                                    60         |            `   |          reserved: false 0x19c.3-0x19c.4 (0.1)
+0x00190|                                    60         |            `   |          type_no_pad: false 0x19c.4-0x19c.5 (0.1)
+0x00190|                                    60         |            `   |          reserved0: false 0x19c.5-0x19c.6 (0.1)
+0x00190|                                    60         |            `   |          reserved1: false 0x19c.6-0x19c.7 (0.1)
+0x00190|                                    60         |            `   |          reserved2: false 0x19c.7-0x19d (0.1)
+0x00190|                                       00      |             .  |          gprel: false 0x19d-0x19d.1 (0.1)
+0x00190|                                       00      |             .  |          unknown0: false 0x19d.1-0x19d.2 (0.1)
+0x00190|                                       00      |             .  |          unknown1: false 0x19d.2-0x19d.3 (0.1)
+0x00190|                                       00      |             .  |          lnk_comdat: false 0x19d.3-0x19d.4 (0.1)
+0x00190|                                       00      |             .  |          lnk_remove: false 0x19d.4-0x19d.5 (0.1)
+0x00190|                                       00      |             .  |          reserved3: false 0x19d.5-0x19d.6 (0.1)
+0x00190|                                       00      |             .  |          lnk_info: false 0x19d.6-0x19d.7 (0.1)
+0x00190|                                       00      |             .  |          lnk_other: false 0x19d.7-0x19e (0.1)
+0x00190|                                          50   |              P |          align_128bytes: false 0x19e-0x19e.1 (0.1)
+0x00190|                                          50   |              P |          align_8bytes: true 0x19e.1-0x19e.2 (0.1)
+0x00190|                                          50   |              P |          align_2bytes: false 0x19e.2-0x19e.3 (0.1)
+0x00190|                                          50   |              P |          align_1bytes: true 0x19e.3-0x19e.4 (0.1)
+0x00190|                                          50   |              P |          mem_preload: false 0x19e.4-0x19e.5 (0.1)
+0x00190|                                          50   |              P |          mem_locked: false 0x19e.5-0x19e.6 (0.1)
+0x00190|                                          50   |              P |          mem_16bit: false 0x19e.6-0x19e.7 (0.1)
+0x00190|                                          50   |              P |          mem_purgeable: false 0x19e.7-0x19f (0.1)
+0x00190|                                             60|               `|          mem_write: false 0x19f-0x19f.1 (0.1)
+0x00190|                                             60|               `|          mem_read: true 0x19f.1-0x19f.2 (0.1)
+0x00190|                                             60|               `|          mem_execute: true 0x19f.2-0x19f.3 (0.1)
+0x00190|                                             60|               `|          mem_shared: false 0x19f.3-0x19f.4 (0.1)
+0x00190|                                             60|               `|          mem_not_paged: false 0x19f.4-0x19f.5 (0.1)
+0x00190|                                             60|               `|          mem_not_cached: false 0x19f.5-0x19f.6 (0.1)
+0x00190|                                             60|               `|          mem_discardable: false 0x19f.6-0x19f.7 (0.1)
+0x00190|                                             60|               `|          lnk_nreloc_ovfl: false 0x19f.7-0x1a0 (0.1)
+       |                                               |                |      [1]{}: section 0x1a0-0x1c8 (40)
+0x001a0|2e 64 61 74 61 00 00 00                        |.data...        |        name: ".data" 0x1a0-0x1a8 (8)
+0x001a0|                        c4 01 00 00            |        ....    |        virtual_size: 452 0x1a8-0x1ac (4)
+0x001a0|                                    00 60 01 00|            .`..|        virtual_address: 0x16000 0x1ac-0x1b0 (4)
+0x001b0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x1b0-0x1b4 (4)
+0x001b0|            00 52 01 00                        |    .R..        |        pointer_to_raw_data: 0x15200 0x1b4-0x1b8 (4)
+0x001b0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x1b8-0x1bc (4)
+0x001b0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x1bc-0x1c0 (4)
+0x001c0|00 00                                          |..              |        number_of_relocations: 0 0x1c0-0x1c2 (2)
+0x001c0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1c2-0x1c4 (2)
+       |                                               |                |        characteristics{}: 0x1c4-0x1c8 (4)
+0x001c0|            40                                 |    @           |          cnt_uninitialized_data: false 0x1c4-0x1c4.1 (0.1)
+0x001c0|            40                                 |    @           |          cnt_initialized_data: true 0x1c4.1-0x1c4.2 (0.1)
+0x001c0|            40                                 |    @           |          cnt_code: false 0x1c4.2-0x1c4.3 (0.1)
+0x001c0|            40                                 |    @           |          reserved: false 0x1c4.3-0x1c4.4 (0.1)
+0x001c0|            40                                 |    @           |          type_no_pad: false 0x1c4.4-0x1c4.5 (0.1)
+0x001c0|            40                                 |    @           |          reserved0: false 0x1c4.5-0x1c4.6 (0.1)
+0x001c0|            40                                 |    @           |          reserved1: false 0x1c4.6-0x1c4.7 (0.1)
+0x001c0|            40                                 |    @           |          reserved2: false 0x1c4.7-0x1c5 (0.1)
+0x001c0|               00                              |     .          |          gprel: false 0x1c5-0x1c5.1 (0.1)
+0x001c0|               00                              |     .          |          unknown0: false 0x1c5.1-0x1c5.2 (0.1)
+0x001c0|               00                              |     .          |          unknown1: false 0x1c5.2-0x1c5.3 (0.1)
+0x001c0|               00                              |     .          |          lnk_comdat: false 0x1c5.3-0x1c5.4 (0.1)
+0x001c0|               00                              |     .          |          lnk_remove: false 0x1c5.4-0x1c5.5 (0.1)
+0x001c0|               00                              |     .          |          reserved3: false 0x1c5.5-0x1c5.6 (0.1)
+0x001c0|               00                              |     .          |          lnk_info: false 0x1c5.6-0x1c5.7 (0.1)
+0x001c0|               00                              |     .          |          lnk_other: false 0x1c5.7-0x1c6 (0.1)
+0x001c0|                  60                           |      `         |          align_128bytes: false 0x1c6-0x1c6.1 (0.1)
+0x001c0|                  60                           |      `         |          align_8bytes: true 0x1c6.1-0x1c6.2 (0.1)
+0x001c0|                  60                           |      `         |          align_2bytes: true 0x1c6.2-0x1c6.3 (0.1)
+0x001c0|                  60                           |      `         |          align_1bytes: false 0x1c6.3-0x1c6.4 (0.1)
+0x001c0|                  60                           |      `         |          mem_preload: false 0x1c6.4-0x1c6.5 (0.1)
+0x001c0|                  60                           |      `         |          mem_locked: false 0x1c6.5-0x1c6.6 (0.1)
+0x001c0|                  60                           |      `         |          mem_16bit: false 0x1c6.6-0x1c6.7 (0.1)
+0x001c0|                  60                           |      `         |          mem_purgeable: false 0x1c6.7-0x1c7 (0.1)
+0x001c0|                     c0                        |       .        |          mem_write: true 0x1c7-0x1c7.1 (0.1)
+0x001c0|                     c0                        |       .        |          mem_read: true 0x1c7.1-0x1c7.2 (0.1)
+0x001c0|                     c0                        |       .        |          mem_execute: false 0x1c7.2-0x1c7.3 (0.1)
+0x001c0|                     c0                        |       .        |          mem_shared: false 0x1c7.3-0x1c7.4 (0.1)
+0x001c0|                     c0                        |       .        |          mem_not_paged: false 0x1c7.4-0x1c7.5 (0.1)
+0x001c0|                     c0                        |       .        |          mem_not_cached: false 0x1c7.5-0x1c7.6 (0.1)
+0x001c0|                     c0                        |       .        |          mem_discardable: false 0x1c7.6-0x1c7.7 (0.1)
+0x001c0|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x1c7.7-0x1c8 (0.1)
+       |                                               |                |      [2]{}: section 0x1c8-0x1f0 (40)
+0x001c0|                        2e 72 64 61 74 61 00 00|        .rdata..|        name: ".rdata" 0x1c8-0x1d0 (8)
+0x001d0|70 65 00 00                                    |pe..            |        virtual_size: 25968 0x1d0-0x1d4 (4)
+0x001d0|            00 70 01 00                        |    .p..        |        virtual_address: 0x17000 0x1d4-0x1d8 (4)
+0x001d0|                        00 66 00 00            |        .f..    |        size_of_raw_data: 26112 0x1d8-0x1dc (4)
+0x001d0|                                    00 54 01 00|            .T..|        pointer_to_raw_data: 0x15400 0x1dc-0x1e0 (4)
+0x001e0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x1e0-0x1e4 (4)
+0x001e0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x1e4-0x1e8 (4)
+0x001e0|                        00 00                  |        ..      |        number_of_relocations: 0 0x1e8-0x1ea (2)
+0x001e0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x1ea-0x1ec (2)
+       |                                               |                |        characteristics{}: 0x1ec-0x1f0 (4)
+0x001e0|                                    40         |            @   |          cnt_uninitialized_data: false 0x1ec-0x1ec.1 (0.1)
+0x001e0|                                    40         |            @   |          cnt_initialized_data: true 0x1ec.1-0x1ec.2 (0.1)
+0x001e0|                                    40         |            @   |          cnt_code: false 0x1ec.2-0x1ec.3 (0.1)
+0x001e0|                                    40         |            @   |          reserved: false 0x1ec.3-0x1ec.4 (0.1)
+0x001e0|                                    40         |            @   |          type_no_pad: false 0x1ec.4-0x1ec.5 (0.1)
+0x001e0|                                    40         |            @   |          reserved0: false 0x1ec.5-0x1ec.6 (0.1)
+0x001e0|                                    40         |            @   |          reserved1: false 0x1ec.6-0x1ec.7 (0.1)
+0x001e0|                                    40         |            @   |          reserved2: false 0x1ec.7-0x1ed (0.1)
+0x001e0|                                       00      |             .  |          gprel: false 0x1ed-0x1ed.1 (0.1)
+0x001e0|                                       00      |             .  |          unknown0: false 0x1ed.1-0x1ed.2 (0.1)
+0x001e0|                                       00      |             .  |          unknown1: false 0x1ed.2-0x1ed.3 (0.1)
+0x001e0|                                       00      |             .  |          lnk_comdat: false 0x1ed.3-0x1ed.4 (0.1)
+0x001e0|                                       00      |             .  |          lnk_remove: false 0x1ed.4-0x1ed.5 (0.1)
+0x001e0|                                       00      |             .  |          reserved3: false 0x1ed.5-0x1ed.6 (0.1)
+0x001e0|                                       00      |             .  |          lnk_info: false 0x1ed.6-0x1ed.7 (0.1)
+0x001e0|                                       00      |             .  |          lnk_other: false 0x1ed.7-0x1ee (0.1)
+0x001e0|                                          60   |              ` |          align_128bytes: false 0x1ee-0x1ee.1 (0.1)
+0x001e0|                                          60   |              ` |          align_8bytes: true 0x1ee.1-0x1ee.2 (0.1)
+0x001e0|                                          60   |              ` |          align_2bytes: true 0x1ee.2-0x1ee.3 (0.1)
+0x001e0|                                          60   |              ` |          align_1bytes: false 0x1ee.3-0x1ee.4 (0.1)
+0x001e0|                                          60   |              ` |          mem_preload: false 0x1ee.4-0x1ee.5 (0.1)
+0x001e0|                                          60   |              ` |          mem_locked: false 0x1ee.5-0x1ee.6 (0.1)
+0x001e0|                                          60   |              ` |          mem_16bit: false 0x1ee.6-0x1ee.7 (0.1)
+0x001e0|                                          60   |              ` |          mem_purgeable: false 0x1ee.7-0x1ef (0.1)
+0x001e0|                                             40|               @|          mem_write: false 0x1ef-0x1ef.1 (0.1)
+0x001e0|                                             40|               @|          mem_read: true 0x1ef.1-0x1ef.2 (0.1)
+0x001e0|                                             40|               @|          mem_execute: false 0x1ef.2-0x1ef.3 (0.1)
+0x001e0|                                             40|               @|          mem_shared: false 0x1ef.3-0x1ef.4 (0.1)
+0x001e0|                                             40|               @|          mem_not_paged: false 0x1ef.4-0x1ef.5 (0.1)
+0x001e0|                                             40|               @|          mem_not_cached: false 0x1ef.5-0x1ef.6 (0.1)
+0x001e0|                                             40|               @|          mem_discardable: false 0x1ef.6-0x1ef.7 (0.1)
+0x001e0|                                             40|               @|          lnk_nreloc_ovfl: false 0x1ef.7-0x1f0 (0.1)
+       |                                               |                |      [3]{}: section 0x1f0-0x218 (40)
+0x001f0|2e 62 75 69 6c 64 69 64                        |.buildid        |        name: ".buildid" 0x1f0-0x1f8 (8)
+0x001f0|                        35 00 00 00            |        5...    |        virtual_size: 53 0x1f8-0x1fc (4)
+0x001f0|                                    00 e0 01 00|            ....|        virtual_address: 0x1e000 0x1fc-0x200 (4)
+0x00200|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x200-0x204 (4)
+0x00200|            00 ba 01 00                        |    ....        |        pointer_to_raw_data: 0x1ba00 0x204-0x208 (4)
+0x00200|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x208-0x20c (4)
+0x00200|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x20c-0x210 (4)
+0x00210|00 00                                          |..              |        number_of_relocations: 0 0x210-0x212 (2)
+0x00210|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x212-0x214 (2)
+       |                                               |                |        characteristics{}: 0x214-0x218 (4)
+0x00210|            40                                 |    @           |          cnt_uninitialized_data: false 0x214-0x214.1 (0.1)
+0x00210|            40                                 |    @           |          cnt_initialized_data: true 0x214.1-0x214.2 (0.1)
+0x00210|            40                                 |    @           |          cnt_code: false 0x214.2-0x214.3 (0.1)
+0x00210|            40                                 |    @           |          reserved: false 0x214.3-0x214.4 (0.1)
+0x00210|            40                                 |    @           |          type_no_pad: false 0x214.4-0x214.5 (0.1)
+0x00210|            40                                 |    @           |          reserved0: false 0x214.5-0x214.6 (0.1)
+0x00210|            40                                 |    @           |          reserved1: false 0x214.6-0x214.7 (0.1)
+0x00210|            40                                 |    @           |          reserved2: false 0x214.7-0x215 (0.1)
+0x00210|               00                              |     .          |          gprel: false 0x215-0x215.1 (0.1)
+0x00210|               00                              |     .          |          unknown0: false 0x215.1-0x215.2 (0.1)
+0x00210|               00                              |     .          |          unknown1: false 0x215.2-0x215.3 (0.1)
+0x00210|               00                              |     .          |          lnk_comdat: false 0x215.3-0x215.4 (0.1)
+0x00210|               00                              |     .          |          lnk_remove: false 0x215.4-0x215.5 (0.1)
+0x00210|               00                              |     .          |          reserved3: false 0x215.5-0x215.6 (0.1)
+0x00210|               00                              |     .          |          lnk_info: false 0x215.6-0x215.7 (0.1)
+0x00210|               00                              |     .          |          lnk_other: false 0x215.7-0x216 (0.1)
+0x00210|                  30                           |      0         |          align_128bytes: false 0x216-0x216.1 (0.1)
+0x00210|                  30                           |      0         |          align_8bytes: false 0x216.1-0x216.2 (0.1)
+0x00210|                  30                           |      0         |          align_2bytes: true 0x216.2-0x216.3 (0.1)
+0x00210|                  30                           |      0         |          align_1bytes: true 0x216.3-0x216.4 (0.1)
+0x00210|                  30                           |      0         |          mem_preload: false 0x216.4-0x216.5 (0.1)
+0x00210|                  30                           |      0         |          mem_locked: false 0x216.5-0x216.6 (0.1)
+0x00210|                  30                           |      0         |          mem_16bit: false 0x216.6-0x216.7 (0.1)
+0x00210|                  30                           |      0         |          mem_purgeable: false 0x216.7-0x217 (0.1)
+0x00210|                     40                        |       @        |          mem_write: false 0x217-0x217.1 (0.1)
+0x00210|                     40                        |       @        |          mem_read: true 0x217.1-0x217.2 (0.1)
+0x00210|                     40                        |       @        |          mem_execute: false 0x217.2-0x217.3 (0.1)
+0x00210|                     40                        |       @        |          mem_shared: false 0x217.3-0x217.4 (0.1)
+0x00210|                     40                        |       @        |          mem_not_paged: false 0x217.4-0x217.5 (0.1)
+0x00210|                     40                        |       @        |          mem_not_cached: false 0x217.5-0x217.6 (0.1)
+0x00210|                     40                        |       @        |          mem_discardable: false 0x217.6-0x217.7 (0.1)
+0x00210|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x217.7-0x218 (0.1)
+       |                                               |                |      [4]{}: section 0x218-0x240 (40)
+0x00210|                        2f 34 00 00 00 00 00 00|        /4......|        name: ".eh_frame" ("/4") 0x218-0x220 (8)
+0x00220|0c 3a 00 00                                    |.:..            |        virtual_size: 14860 0x220-0x224 (4)
+0x00220|            00 f0 01 00                        |    ....        |        virtual_address: 0x1f000 0x224-0x228 (4)
+0x00220|                        00 3c 00 00            |        .<..    |        size_of_raw_data: 15360 0x228-0x22c (4)
+0x00220|                                    00 bc 01 00|            ....|        pointer_to_raw_data: 0x1bc00 0x22c-0x230 (4)
+0x00230|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x230-0x234 (4)
+0x00230|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x234-0x238 (4)
+0x00230|                        00 00                  |        ..      |        number_of_relocations: 0 0x238-0x23a (2)
+0x00230|                              00 00            |          ..    |        number_of_line_numbers: 0 0x23a-0x23c (2)
+       |                                               |                |        characteristics{}: 0x23c-0x240 (4)
+0x00230|                                    40         |            @   |          cnt_uninitialized_data: false 0x23c-0x23c.1 (0.1)
+0x00230|                                    40         |            @   |          cnt_initialized_data: true 0x23c.1-0x23c.2 (0.1)
+0x00230|                                    40         |            @   |          cnt_code: false 0x23c.2-0x23c.3 (0.1)
+0x00230|                                    40         |            @   |          reserved: false 0x23c.3-0x23c.4 (0.1)
+0x00230|                                    40         |            @   |          type_no_pad: false 0x23c.4-0x23c.5 (0.1)
+0x00230|                                    40         |            @   |          reserved0: false 0x23c.5-0x23c.6 (0.1)
+0x00230|                                    40         |            @   |          reserved1: false 0x23c.6-0x23c.7 (0.1)
+0x00230|                                    40         |            @   |          reserved2: false 0x23c.7-0x23d (0.1)
+0x00230|                                       00      |             .  |          gprel: false 0x23d-0x23d.1 (0.1)
+0x00230|                                       00      |             .  |          unknown0: false 0x23d.1-0x23d.2 (0.1)
+0x00230|                                       00      |             .  |          unknown1: false 0x23d.2-0x23d.3 (0.1)
+0x00230|                                       00      |             .  |          lnk_comdat: false 0x23d.3-0x23d.4 (0.1)
+0x00230|                                       00      |             .  |          lnk_remove: false 0x23d.4-0x23d.5 (0.1)
+0x00230|                                       00      |             .  |          reserved3: false 0x23d.5-0x23d.6 (0.1)
+0x00230|                                       00      |             .  |          lnk_info: false 0x23d.6-0x23d.7 (0.1)
+0x00230|                                       00      |             .  |          lnk_other: false 0x23d.7-0x23e (0.1)
+0x00230|                                          30   |              0 |          align_128bytes: false 0x23e-0x23e.1 (0.1)
+0x00230|                                          30   |              0 |          align_8bytes: false 0x23e.1-0x23e.2 (0.1)
+0x00230|                                          30   |              0 |          align_2bytes: true 0x23e.2-0x23e.3 (0.1)
+0x00230|                                          30   |              0 |          align_1bytes: true 0x23e.3-0x23e.4 (0.1)
+0x00230|                                          30   |              0 |          mem_preload: false 0x23e.4-0x23e.5 (0.1)
+0x00230|                                          30   |              0 |          mem_locked: false 0x23e.5-0x23e.6 (0.1)
+0x00230|                                          30   |              0 |          mem_16bit: false 0x23e.6-0x23e.7 (0.1)
+0x00230|                                          30   |              0 |          mem_purgeable: false 0x23e.7-0x23f (0.1)
+0x00230|                                             40|               @|          mem_write: false 0x23f-0x23f.1 (0.1)
+0x00230|                                             40|               @|          mem_read: true 0x23f.1-0x23f.2 (0.1)
+0x00230|                                             40|               @|          mem_execute: false 0x23f.2-0x23f.3 (0.1)
+0x00230|                                             40|               @|          mem_shared: false 0x23f.3-0x23f.4 (0.1)
+0x00230|                                             40|               @|          mem_not_paged: false 0x23f.4-0x23f.5 (0.1)
+0x00230|                                             40|               @|          mem_not_cached: false 0x23f.5-0x23f.6 (0.1)
+0x00230|                                             40|               @|          mem_discardable: false 0x23f.6-0x23f.7 (0.1)
+0x00230|                                             40|               @|          lnk_nreloc_ovfl: false 0x23f.7-0x240 (0.1)
+       |                                               |                |      [5]{}: section 0x240-0x268 (40)
+0x00240|2e 62 73 73 00 00 00 00                        |.bss....        |        name: ".bss" 0x240-0x248 (8)
+0x00240|                        74 15 00 00            |        t...    |        virtual_size: 5492 0x248-0x24c (4)
+0x00240|                                    00 30 02 00|            .0..|        virtual_address: 0x23000 0x24c-0x250 (4)
+0x00250|00 00 00 00                                    |....            |        size_of_raw_data: 0 0x250-0x254 (4)
+0x00250|            00 00 00 00                        |    ....        |        pointer_to_raw_data: 0x0 0x254-0x258 (4)
+0x00250|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x258-0x25c (4)
+0x00250|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x25c-0x260 (4)
+0x00260|00 00                                          |..              |        number_of_relocations: 0 0x260-0x262 (2)
+0x00260|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x262-0x264 (2)
+       |                                               |                |        characteristics{}: 0x264-0x268 (4)
+0x00260|            80                                 |    .           |          cnt_uninitialized_data: true 0x264-0x264.1 (0.1)
+0x00260|            80                                 |    .           |          cnt_initialized_data: false 0x264.1-0x264.2 (0.1)
+0x00260|            80                                 |    .           |          cnt_code: false 0x264.2-0x264.3 (0.1)
+0x00260|            80                                 |    .           |          reserved: false 0x264.3-0x264.4 (0.1)
+0x00260|            80                                 |    .           |          type_no_pad: false 0x264.4-0x264.5 (0.1)
+0x00260|            80                                 |    .           |          reserved0: false 0x264.5-0x264.6 (0.1)
+0x00260|            80                                 |    .           |          reserved1: false 0x264.6-0x264.7 (0.1)
+0x00260|            80                                 |    .           |          reserved2: false 0x264.7-0x265 (0.1)
+0x00260|               00                              |     .          |          gprel: false 0x265-0x265.1 (0.1)
+0x00260|               00                              |     .          |          unknown0: false 0x265.1-0x265.2 (0.1)
+0x00260|               00                              |     .          |          unknown1: false 0x265.2-0x265.3 (0.1)
+0x00260|               00                              |     .          |          lnk_comdat: false 0x265.3-0x265.4 (0.1)
+0x00260|               00                              |     .          |          lnk_remove: false 0x265.4-0x265.5 (0.1)
+0x00260|               00                              |     .          |          reserved3: false 0x265.5-0x265.6 (0.1)
+0x00260|               00                              |     .          |          lnk_info: false 0x265.6-0x265.7 (0.1)
+0x00260|               00                              |     .          |          lnk_other: false 0x265.7-0x266 (0.1)
+0x00260|                  60                           |      `         |          align_128bytes: false 0x266-0x266.1 (0.1)
+0x00260|                  60                           |      `         |          align_8bytes: true 0x266.1-0x266.2 (0.1)
+0x00260|                  60                           |      `         |          align_2bytes: true 0x266.2-0x266.3 (0.1)
+0x00260|                  60                           |      `         |          align_1bytes: false 0x266.3-0x266.4 (0.1)
+0x00260|                  60                           |      `         |          mem_preload: false 0x266.4-0x266.5 (0.1)
+0x00260|                  60                           |      `         |          mem_locked: false 0x266.5-0x266.6 (0.1)
+0x00260|                  60                           |      `         |          mem_16bit: false 0x266.6-0x266.7 (0.1)
+0x00260|                  60                           |      `         |          mem_purgeable: false 0x266.7-0x267 (0.1)
+0x00260|                     c0                        |       .        |          mem_write: true 0x267-0x267.1 (0.1)
+0x00260|                     c0                        |       .        |          mem_read: true 0x267.1-0x267.2 (0.1)
+0x00260|                     c0                        |       .        |          mem_execute: false 0x267.2-0x267.3 (0.1)
+0x00260|                     c0                        |       .        |          mem_shared: false 0x267.3-0x267.4 (0.1)
+0x00260|                     c0                        |       .        |          mem_not_paged: false 0x267.4-0x267.5 (0.1)
+0x00260|                     c0                        |       .        |          mem_not_cached: false 0x267.5-0x267.6 (0.1)
+0x00260|                     c0                        |       .        |          mem_discardable: false 0x267.6-0x267.7 (0.1)
+0x00260|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x267.7-0x268 (0.1)
+       |                                               |                |      [6]{}: section 0x268-0x290 (40)
+0x00260|                        2e 69 64 61 74 61 00 00|        .idata..|        name: ".idata" 0x268-0x270 (8)
+0x00270|30 0e 00 00                                    |0...            |        virtual_size: 3632 0x270-0x274 (4)
+0x00270|            00 50 02 00                        |    .P..        |        virtual_address: 0x25000 0x274-0x278 (4)
+0x00270|                        00 10 00 00            |        ....    |        size_of_raw_data: 4096 0x278-0x27c (4)
+0x00270|                                    00 f8 01 00|            ....|        pointer_to_raw_data: 0x1f800 0x27c-0x280 (4)
+0x00280|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x280-0x284 (4)
+0x00280|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x284-0x288 (4)
+0x00280|                        00 00                  |        ..      |        number_of_relocations: 0 0x288-0x28a (2)
+0x00280|                              00 00            |          ..    |        number_of_line_numbers: 0 0x28a-0x28c (2)
+       |                                               |                |        characteristics{}: 0x28c-0x290 (4)
+0x00280|                                    40         |            @   |          cnt_uninitialized_data: false 0x28c-0x28c.1 (0.1)
+0x00280|                                    40         |            @   |          cnt_initialized_data: true 0x28c.1-0x28c.2 (0.1)
+0x00280|                                    40         |            @   |          cnt_code: false 0x28c.2-0x28c.3 (0.1)
+0x00280|                                    40         |            @   |          reserved: false 0x28c.3-0x28c.4 (0.1)
+0x00280|                                    40         |            @   |          type_no_pad: false 0x28c.4-0x28c.5 (0.1)
+0x00280|                                    40         |            @   |          reserved0: false 0x28c.5-0x28c.6 (0.1)
+0x00280|                                    40         |            @   |          reserved1: false 0x28c.6-0x28c.7 (0.1)
+0x00280|                                    40         |            @   |          reserved2: false 0x28c.7-0x28d (0.1)
+0x00280|                                       00      |             .  |          gprel: false 0x28d-0x28d.1 (0.1)
+0x00280|                                       00      |             .  |          unknown0: false 0x28d.1-0x28d.2 (0.1)
+0x00280|                                       00      |             .  |          unknown1: false 0x28d.2-0x28d.3 (0.1)
+0x00280|                                       00      |             .  |          lnk_comdat: false 0x28d.3-0x28d.4 (0.1)
+0x00280|                                       00      |             .  |          lnk_remove: false 0x28d.4-0x28d.5 (0.1)
+0x00280|                                       00      |             .  |          reserved3: false 0x28d.5-0x28d.6 (0.1)
+0x00280|                                       00      |             .  |          lnk_info: false 0x28d.6-0x28d.7 (0.1)
+0x00280|                                       00      |             .  |          lnk_other: false 0x28d.7-0x28e (0.1)
+0x00280|                                          30   |              0 |          align_128bytes: false 0x28e-0x28e.1 (0.1)
+0x00280|                                          30   |              0 |          align_8bytes: false 0x28e.1-0x28e.2 (0.1)
+0x00280|                                          30   |              0 |          align_2bytes: true 0x28e.2-0x28e.3 (0.1)
+0x00280|                                          30   |              0 |          align_1bytes: true 0x28e.3-0x28e.4 (0.1)
+0x00280|                                          30   |              0 |          mem_preload: false 0x28e.4-0x28e.5 (0.1)
+0x00280|                                          30   |              0 |          mem_locked: false 0x28e.5-0x28e.6 (0.1)
+0x00280|                                          30   |              0 |          mem_16bit: false 0x28e.6-0x28e.7 (0.1)
+0x00280|                                          30   |              0 |          mem_purgeable: false 0x28e.7-0x28f (0.1)
+0x00280|                                             c0|               .|          mem_write: true 0x28f-0x28f.1 (0.1)
+0x00280|                                             c0|               .|          mem_read: true 0x28f.1-0x28f.2 (0.1)
+0x00280|                                             c0|               .|          mem_execute: false 0x28f.2-0x28f.3 (0.1)
+0x00280|                                             c0|               .|          mem_shared: false 0x28f.3-0x28f.4 (0.1)
+0x00280|                                             c0|               .|          mem_not_paged: false 0x28f.4-0x28f.5 (0.1)
+0x00280|                                             c0|               .|          mem_not_cached: false 0x28f.5-0x28f.6 (0.1)
+0x00280|                                             c0|               .|          mem_discardable: false 0x28f.6-0x28f.7 (0.1)
+0x00280|                                             c0|               .|          lnk_nreloc_ovfl: false 0x28f.7-0x290 (0.1)
+       |                                               |                |      [7]{}: section 0x290-0x2b8 (40)
+0x00290|2e 72 73 72 63 00 00 00                        |.rsrc...        |        name: ".rsrc" 0x290-0x298 (8)
+0x00290|                        e8 04 00 00            |        ....    |        virtual_size: 1256 0x298-0x29c (4)
+0x00290|                                    00 60 02 00|            .`..|        virtual_address: 0x26000 0x29c-0x2a0 (4)
+0x002a0|00 06 00 00                                    |....            |        size_of_raw_data: 1536 0x2a0-0x2a4 (4)
+0x002a0|            00 08 02 00                        |    ....        |        pointer_to_raw_data: 0x20800 0x2a4-0x2a8 (4)
+0x002a0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x2a8-0x2ac (4)
+0x002a0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x2ac-0x2b0 (4)
+0x002b0|00 00                                          |..              |        number_of_relocations: 0 0x2b0-0x2b2 (2)
+0x002b0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x2b2-0x2b4 (2)
+       |                                               |                |        characteristics{}: 0x2b4-0x2b8 (4)
+0x002b0|            40                                 |    @           |          cnt_uninitialized_data: false 0x2b4-0x2b4.1 (0.1)
+0x002b0|            40                                 |    @           |          cnt_initialized_data: true 0x2b4.1-0x2b4.2 (0.1)
+0x002b0|            40                                 |    @           |          cnt_code: false 0x2b4.2-0x2b4.3 (0.1)
+0x002b0|            40                                 |    @           |          reserved: false 0x2b4.3-0x2b4.4 (0.1)
+0x002b0|            40                                 |    @           |          type_no_pad: false 0x2b4.4-0x2b4.5 (0.1)
+0x002b0|            40                                 |    @           |          reserved0: false 0x2b4.5-0x2b4.6 (0.1)
+0x002b0|            40                                 |    @           |          reserved1: false 0x2b4.6-0x2b4.7 (0.1)
+0x002b0|            40                                 |    @           |          reserved2: false 0x2b4.7-0x2b5 (0.1)
+0x002b0|               00                              |     .          |          gprel: false 0x2b5-0x2b5.1 (0.1)
+0x002b0|               00                              |     .          |          unknown0: false 0x2b5.1-0x2b5.2 (0.1)
+0x002b0|               00                              |     .          |          unknown1: false 0x2b5.2-0x2b5.3 (0.1)
+0x002b0|               00                              |     .          |          lnk_comdat: false 0x2b5.3-0x2b5.4 (0.1)
+0x002b0|               00                              |     .          |          lnk_remove: false 0x2b5.4-0x2b5.5 (0.1)
+0x002b0|               00                              |     .          |          reserved3: false 0x2b5.5-0x2b5.6 (0.1)
+0x002b0|               00                              |     .          |          lnk_info: false 0x2b5.6-0x2b5.7 (0.1)
+0x002b0|               00                              |     .          |          lnk_other: false 0x2b5.7-0x2b6 (0.1)
+0x002b0|                  30                           |      0         |          align_128bytes: false 0x2b6-0x2b6.1 (0.1)
+0x002b0|                  30                           |      0         |          align_8bytes: false 0x2b6.1-0x2b6.2 (0.1)
+0x002b0|                  30                           |      0         |          align_2bytes: true 0x2b6.2-0x2b6.3 (0.1)
+0x002b0|                  30                           |      0         |          align_1bytes: true 0x2b6.3-0x2b6.4 (0.1)
+0x002b0|                  30                           |      0         |          mem_preload: false 0x2b6.4-0x2b6.5 (0.1)
+0x002b0|                  30                           |      0         |          mem_locked: false 0x2b6.5-0x2b6.6 (0.1)
+0x002b0|                  30                           |      0         |          mem_16bit: false 0x2b6.6-0x2b6.7 (0.1)
+0x002b0|                  30                           |      0         |          mem_purgeable: false 0x2b6.7-0x2b7 (0.1)
+0x002b0|                     c0                        |       .        |          mem_write: true 0x2b7-0x2b7.1 (0.1)
+0x002b0|                     c0                        |       .        |          mem_read: true 0x2b7.1-0x2b7.2 (0.1)
+0x002b0|                     c0                        |       .        |          mem_execute: false 0x2b7.2-0x2b7.3 (0.1)
+0x002b0|                     c0                        |       .        |          mem_shared: false 0x2b7.3-0x2b7.4 (0.1)
+0x002b0|                     c0                        |       .        |          mem_not_paged: false 0x2b7.4-0x2b7.5 (0.1)
+0x002b0|                     c0                        |       .        |          mem_not_cached: false 0x2b7.5-0x2b7.6 (0.1)
+0x002b0|                     c0                        |       .        |          mem_discardable: false 0x2b7.6-0x2b7.7 (0.1)
+0x002b0|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x2b7.7-0x2b8 (0.1)
+       |                                               |                |      [8]{}: section 0x2b8-0x2e0 (40)
+0x002b0|                        2f 31 34 00 00 00 00 00|        /14.....|        name: ".gnu_debuglink" ("/14") 0x2b8-0x2c0 (8)
+0x002c0|10 00 00 00                                    |....            |        virtual_size: 16 0x2c0-0x2c4 (4)
+0x002c0|            00 70 02 00                        |    .p..        |        virtual_address: 0x27000 0x2c4-0x2c8 (4)
+0x002c0|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x2c8-0x2cc (4)
+0x002c0|                                    00 0e 02 00|            ....|        pointer_to_raw_data: 0x20e00 0x2cc-0x2d0 (4)
+0x002d0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x2d0-0x2d4 (4)
+0x002d0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x2d4-0x2d8 (4)
+0x002d0|                        00 00                  |        ..      |        number_of_relocations: 0 0x2d8-0x2da (2)
+0x002d0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x2da-0x2dc (2)
+       |                                               |                |        characteristics{}: 0x2dc-0x2e0 (4)
+0x002d0|                                    40         |            @   |          cnt_uninitialized_data: false 0x2dc-0x2dc.1 (0.1)
+0x002d0|                                    40         |            @   |          cnt_initialized_data: true 0x2dc.1-0x2dc.2 (0.1)
+0x002d0|                                    40         |            @   |          cnt_code: false 0x2dc.2-0x2dc.3 (0.1)
+0x002d0|                                    40         |            @   |          reserved: false 0x2dc.3-0x2dc.4 (0.1)
+0x002d0|                                    40         |            @   |          type_no_pad: false 0x2dc.4-0x2dc.5 (0.1)
+0x002d0|                                    40         |            @   |          reserved0: false 0x2dc.5-0x2dc.6 (0.1)
+0x002d0|                                    40         |            @   |          reserved1: false 0x2dc.6-0x2dc.7 (0.1)
+0x002d0|                                    40         |            @   |          reserved2: false 0x2dc.7-0x2dd (0.1)
+0x002d0|                                       00      |             .  |          gprel: false 0x2dd-0x2dd.1 (0.1)
+0x002d0|                                       00      |             .  |          unknown0: false 0x2dd.1-0x2dd.2 (0.1)
+0x002d0|                                       00      |             .  |          unknown1: false 0x2dd.2-0x2dd.3 (0.1)
+0x002d0|                                       00      |             .  |          lnk_comdat: false 0x2dd.3-0x2dd.4 (0.1)
+0x002d0|                                       00      |             .  |          lnk_remove: false 0x2dd.4-0x2dd.5 (0.1)
+0x002d0|                                       00      |             .  |          reserved3: false 0x2dd.5-0x2dd.6 (0.1)
+0x002d0|                                       00      |             .  |          lnk_info: false 0x2dd.6-0x2dd.7 (0.1)
+0x002d0|                                       00      |             .  |          lnk_other: false 0x2dd.7-0x2de (0.1)
+0x002d0|                                          30   |              0 |          align_128bytes: false 0x2de-0x2de.1 (0.1)
+0x002d0|                                          30   |              0 |          align_8bytes: false 0x2de.1-0x2de.2 (0.1)
+0x002d0|                                          30   |              0 |          align_2bytes: true 0x2de.2-0x2de.3 (0.1)
+0x002d0|                                          30   |              0 |          align_1bytes: true 0x2de.3-0x2de.4 (0.1)
+0x002d0|                                          30   |              0 |          mem_preload: false 0x2de.4-0x2de.5 (0.1)
+0x002d0|                                          30   |              0 |          mem_locked: false 0x2de.5-0x2de.6 (0.1)
+0x002d0|                                          30   |              0 |          mem_16bit: false 0x2de.6-0x2de.7 (0.1)
+0x002d0|                                          30   |              0 |          mem_purgeable: false 0x2de.7-0x2df (0.1)
+0x002d0|                                             42|               B|          mem_write: false 0x2df-0x2df.1 (0.1)
+0x002d0|                                             42|               B|          mem_read: true 0x2df.1-0x2df.2 (0.1)
+0x002d0|                                             42|               B|          mem_execute: false 0x2df.2-0x2df.3 (0.1)
+0x002d0|                                             42|               B|          mem_shared: false 0x2df.3-0x2df.4 (0.1)
+0x002d0|                                             42|               B|          mem_not_paged: false 0x2df.4-0x2df.5 (0.1)
+0x002d0|                                             42|               B|          mem_not_cached: false 0x2df.5-0x2df.6 (0.1)
+0x002d0|                                             42|               B|          mem_discardable: true 0x2df.6-0x2df.7 (0.1)
+0x002d0|                                             42|               B|          lnk_nreloc_ovfl: false 0x2df.7-0x2e0 (0.1)
+       |                                               |                |    symbol_table[0:0]: 0x2e0-0x2e0 (0)
+       |                                               |                |    string_table{}: 0x21000-0x2101d (29)
+0x21000|1d 00 00 00                                    |....            |      size: 29 0x21000-0x21004 (4)
+       |                                               |                |      entries[0:2]: 0x21004-0x2101d (25)
+0x21000|            2e 65 68 5f 66 72 61 6d 65 00      |    .eh_frame.  |        [0]: ".eh_frame" entry 0x21004-0x2100e (10)
+0x21000|                                          2e 67|              .g|        [1]: ".gnu_debuglink" entry 0x2100e-0x2101d (15)
+0x21010|6e 75 5f 64 65 62 75 67 6c 69 6e 6b 00|        |nu_debuglink.|  |
+0x002e0|00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................|  gap0: raw bits 0x2e0-0x21000 (134432)
+*      |until 0x20fff.7 (134432)                       |                |

format/pe/testdata/pe-mingw32-strip.exe.fqtest

@@ -0,0 +1,481 @@
+$ fq dv pe-mingw32-strip.exe
+        |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-mingw32-strip.exe (pe) 0x0-0x11b60e (1160718)
+        |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0x80 (128)
+0x000000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x000000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x000000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x000000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x000000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x000000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x000000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x000000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x000010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x000010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x000010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x000010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x000010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x000010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x000010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x000020|00 00 00 00                                    |....            |
+0x000020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x000020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x000020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x000030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x000030|                                    80 00 00 00|            ....|    e_lfanew: 128 (File address of new exe header) 0x3c-0x40 (4)
+0x000040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*       |until 0x7f.7 (64)                              |                |
+        |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0x80-0x11b60e (1160590)
+0x000080|50 45 00 00                                    |PE..            |    signature: raw bits (valid) 0x80-0x84 (4)
+0x000080|            4c 01                              |    L.          |    machine: "i386" (0x14c) 0x84-0x86 (2)
+0x000080|                  08 00                        |      ..        |    number_of_sections: 8 0x86-0x88 (2)
+0x000080|                        00 00 00 00            |        ....    |    time_date_stamp: 0 (1970-01-01T00:00:00Z) 0x88-0x8c (4)
+0x000080|                                    00 b6 11 00|            ....|    pointer_to_symbol_table: 0x11b600 0x8c-0x90 (4)
+0x000090|00 00 00 00                                    |....            |    number_of_symbols: 0 0x90-0x94 (4)
+0x000090|            e0 00                              |    ..          |    size_of_optional_header: 224 0x94-0x96 (2)
+        |                                               |                |    characteristics{}: 0x96-0x98 (2)
+0x000090|                  0f                           |      .         |      bytes_reversed_lo: false 0x96-0x96.1 (0.1)
+0x000090|                  0f                           |      .         |      reserved: false 0x96.1-0x96.2 (0.1)
+0x000090|                  0f                           |      .         |      large_address_aware: false 0x96.2-0x96.3 (0.1)
+0x000090|                  0f                           |      .         |      aggressive_ws_trim: false 0x96.3-0x96.4 (0.1)
+0x000090|                  0f                           |      .         |      local_syms_stripped: true 0x96.4-0x96.5 (0.1)
+0x000090|                  0f                           |      .         |      line_nums_stripped: true 0x96.5-0x96.6 (0.1)
+0x000090|                  0f                           |      .         |      executable_image: true 0x96.6-0x96.7 (0.1)
+0x000090|                  0f                           |      .         |      relocs_stripped: true 0x96.7-0x97 (0.1)
+0x000090|                     03                        |       .        |      bytes_reversed_hi: false 0x97-0x97.1 (0.1)
+0x000090|                     03                        |       .        |      up_system_only: false 0x97.1-0x97.2 (0.1)
+0x000090|                     03                        |       .        |      dll: false 0x97.2-0x97.3 (0.1)
+0x000090|                     03                        |       .        |      system: false 0x97.3-0x97.4 (0.1)
+0x000090|                     03                        |       .        |      net_run_from_swap: false 0x97.4-0x97.5 (0.1)
+0x000090|                     03                        |       .        |      removable_run_from_swap: false 0x97.5-0x97.6 (0.1)
+0x000090|                     03                        |       .        |      debug_stripped: true 0x97.6-0x97.7 (0.1)
+0x000090|                     03                        |       .        |      32bit_machine: true 0x97.7-0x98 (0.1)
+        |                                               |                |    optional_header{}: 0x98-0x178 (224)
+0x000090|                        0b 01                  |        ..      |      format: "pe32" (0x10b) 0x98-0x9a (2)
+0x000090|                              02               |          .     |      major_linker_version: 2 0x9a-0x9b (1)
+0x000090|                                 1c            |           .    |      minor_linker_version: 28 0x9b-0x9c (1)
+0x000090|                                    00 b6 0c 00|            ....|      size_of_code: 833024 0x9c-0xa0 (4)
+0x0000a0|00 b2 11 00                                    |....            |      size_of_initialized_data: 1159680 0xa0-0xa4 (4)
+0x0000a0|            00 58 00 00                        |    .X..        |      size_of_uninitialized_data: 22528 0xa4-0xa8 (4)
+0x0000a0|                        e0 12 00 00            |        ....    |      address_of_entry_point: 0x12e0 0xa8-0xac (4)
+0x0000a0|                                    00 10 00 00|            ....|      base_of_code: 0x1000 0xac-0xb0 (4)
+0x0000b0|00 d0 0c 00                                    |....            |      base_of_data: 0xcd000 0xb0-0xb4 (4)
+0x0000b0|            00 00 40 00                        |    ..@.        |      image_base: 0x400000 0xb4-0xb8 (4)
+0x0000b0|                        00 10 00 00            |        ....    |      section_alignment: 4096 0xb8-0xbc (4)
+0x0000b0|                                    00 02 00 00|            ....|      file_alignment: 512 0xbc-0xc0 (4)
+0x0000c0|04 00                                          |..              |      major_os_version: 4 0xc0-0xc2 (2)
+0x0000c0|      00 00                                    |  ..            |      minor_os_version: 0 0xc2-0xc4 (2)
+0x0000c0|            01 00                              |    ..          |      major_image_version: 1 0xc4-0xc6 (2)
+0x0000c0|                  00 00                        |      ..        |      minor_image_version: 0 0xc6-0xc8 (2)
+0x0000c0|                        04 00                  |        ..      |      major_subsystem_version: 4 0xc8-0xca (2)
+0x0000c0|                              00 00            |          ..    |      minor_subsystem_version: 0 0xca-0xcc (2)
+0x0000c0|                                    00 00 00 00|            ....|      win32_version: 0 0xcc-0xd0 (4)
+0x0000d0|00 70 12 00                                    |.p..            |      size_of_image: 1208320 0xd0-0xd4 (4)
+0x0000d0|            00 04 00 00                        |    ....        |      size_of_headers: 1024 0xd4-0xd8 (4)
+0x0000d0|                        95 80 12 00            |        ....    |      chunk_sum: 0x128095 0xd8-0xdc (4)
+0x0000d0|                                    03 00      |            ..  |      subsystem: "windows_cui" (3) 0xdc-0xde (2)
+        |                                               |                |      dll_characteristics{}: 0xde-0xe0 (2)
+0x0000d0|                                          00   |              . |        force_integrity: false 0xde-0xde.1 (0.1)
+0x0000d0|                                          00   |              . |        dynamic_base: false 0xde.1-0xde.2 (0.1)
+0x0000d0|                                          00   |              . |        high_entropy_va: false 0xde.2-0xde.3 (0.1)
+0x0000d0|                                          00   |              . |        reserved0: false 0xde.3-0xde.4 (0.1)
+0x0000d0|                                          00   |              . |        reserved1: false 0xde.4-0xde.5 (0.1)
+0x0000d0|                                          00   |              . |        reserved2: false 0xde.5-0xde.6 (0.1)
+0x0000d0|                                          00   |              . |        reserved3: false 0xde.6-0xde.7 (0.1)
+0x0000d0|                                          00   |              . |        reserved4: false 0xde.7-0xdf (0.1)
+0x0000d0|                                             00|               .|        terminal_server_aware: false 0xdf-0xdf.1 (0.1)
+0x0000d0|                                             00|               .|        guard_cf: false 0xdf.1-0xdf.2 (0.1)
+0x0000d0|                                             00|               .|        wdm_driver: false 0xdf.2-0xdf.3 (0.1)
+0x0000d0|                                             00|               .|        appcontainer: false 0xdf.3-0xdf.4 (0.1)
+0x0000d0|                                             00|               .|        no_bind: false 0xdf.4-0xdf.5 (0.1)
+0x0000d0|                                             00|               .|        no_seh: false 0xdf.5-0xdf.6 (0.1)
+0x0000d0|                                             00|               .|        no_isolation: false 0xdf.6-0xdf.7 (0.1)
+0x0000d0|                                             00|               .|        nx_compat: false 0xdf.7-0xe0 (0.1)
+0x0000e0|00 00 c0 00                                    |....            |      size_of_track_reserve: 12582912 0xe0-0xe4 (4)
+0x0000e0|            00 10 00 00                        |    ....        |      size_of_stack_commit: 4096 0xe4-0xe8 (4)
+0x0000e0|                        00 00 10 00            |        ....    |      size_of_heap_reserve: 1048576 0xe8-0xec (4)
+0x0000e0|                                    00 10 00 00|            ....|      size_of_heap_commit: 4096 0xec-0xf0 (4)
+0x0000f0|00 00 00 00                                    |....            |      loader_flags: 0 0xf0-0xf4 (4)
+0x0000f0|            10 00 00 00                        |    ....        |      number_of_rva_and_sizes: 16 0xf4-0xf8 (4)
+0x0000f0|                        00 00 00 00            |        ....    |      export_table_address: 0x0 0xf8-0xfc (4)
+0x0000f0|                                    00 00 00 00|            ....|      export_table_size: 0 0xfc-0x100 (4)
+0x000100|00 30 12 00                                    |.0..            |      import_table_address: 0x123000 0x100-0x104 (4)
+0x000100|            d4 10 00 00                        |    ....        |      import_table_size: 4308 0x104-0x108 (4)
+0x000100|                        00 00 00 00            |        ....    |      resource_table_address: 0x0 0x108-0x10c (4)
+0x000100|                                    00 00 00 00|            ....|      resource_table_size: 0 0x10c-0x110 (4)
+0x000110|00 00 00 00                                    |....            |      exception_table_address: 0x0 0x110-0x114 (4)
+0x000110|            00 00 00 00                        |    ....        |      exception_table_size: 0 0x114-0x118 (4)
+0x000110|                        00 00 00 00            |        ....    |      certificate_table_address: 0x0 0x118-0x11c (4)
+0x000110|                                    00 00 00 00|            ....|      certificate_table_size: 0 0x11c-0x120 (4)
+0x000120|00 00 00 00                                    |....            |      base_relocation_table_address: 0x0 0x120-0x124 (4)
+0x000120|            00 00 00 00                        |    ....        |      base_relocation_table_size: 0 0x124-0x128 (4)
+0x000120|                        00 00 00 00            |        ....    |      debug_address: 0x0 0x128-0x12c (4)
+0x000120|                                    00 00 00 00|            ....|      debug_size: 0 0x12c-0x130 (4)
+0x000130|00 00 00 00 00 00 00 00                        |........        |      architecture: 0 0x130-0x138 (8)
+0x000130|                        00 00 00 00 00 00 00 00|        ........|      global_ptr: 0x0 0x138-0x140 (8)
+0x000140|04 60 12 00                                    |.`..            |      tls_table_address: 0x126004 0x140-0x144 (4)
+0x000140|            18 00 00 00                        |    ....        |      tls_table_size: 24 0x144-0x148 (4)
+0x000140|                        00 00 00 00            |        ....    |      load_config_table_address: 0x0 0x148-0x14c (4)
+0x000140|                                    00 00 00 00|            ....|      load_config_table_size: 0 0x14c-0x150 (4)
+0x000150|00 00 00 00                                    |....            |      bound_import_address: 0x0 0x150-0x154 (4)
+0x000150|            00 00 00 00                        |    ....        |      bound_import_size: 0 0x154-0x158 (4)
+0x000150|                        24 33 12 00            |        $3..    |      iat_address: 0x123324 0x158-0x15c (4)
+0x000150|                                    98 02 00 00|            ....|      iat_size: 664 0x15c-0x160 (4)
+0x000160|00 00 00 00                                    |....            |      delay_import_descriptor_address: 0x0 0x160-0x164 (4)
+0x000160|            00 00 00 00                        |    ....        |      delay_import_descriptor_size: 0 0x164-0x168 (4)
+0x000160|                        00 00 00 00            |        ....    |      clr_runtime_header_address: 0x0 0x168-0x16c (4)
+0x000160|                                    00 00 00 00|            ....|      clr_runtime_header_size: 0 0x16c-0x170 (4)
+0x000170|00 00 00 00 00 00 00 00                        |........        |      reserved: 0 0x170-0x178 (8)
+        |                                               |                |      unknown: raw bits 0x178-0x178 (0)
+        |                                               |                |    sections[0:8]: 0x178-0x2b8 (320)
+        |                                               |                |      [0]{}: section 0x178-0x1a0 (40)
+0x000170|                        2e 74 65 78 74 00 00 00|        .text...|        name: ".text" 0x178-0x180 (8)
+0x000180|d4 b5 0c 00                                    |....            |        virtual_size: 832980 0x180-0x184 (4)
+0x000180|            00 10 00 00                        |    ....        |        virtual_address: 0x1000 0x184-0x188 (4)
+0x000180|                        00 b6 0c 00            |        ....    |        size_of_raw_data: 833024 0x188-0x18c (4)
+0x000180|                                    00 04 00 00|            ....|        pointer_to_raw_data: 0x400 0x18c-0x190 (4)
+0x000190|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x190-0x194 (4)
+0x000190|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x194-0x198 (4)
+0x000190|                        00 00                  |        ..      |        number_of_relocations: 0 0x198-0x19a (2)
+0x000190|                              00 00            |          ..    |        number_of_line_numbers: 0 0x19a-0x19c (2)
+        |                                               |                |        characteristics{}: 0x19c-0x1a0 (4)
+0x000190|                                    60         |            `   |          cnt_uninitialized_data: false 0x19c-0x19c.1 (0.1)
+0x000190|                                    60         |            `   |          cnt_initialized_data: true 0x19c.1-0x19c.2 (0.1)
+0x000190|                                    60         |            `   |          cnt_code: true 0x19c.2-0x19c.3 (0.1)
+0x000190|                                    60         |            `   |          reserved: false 0x19c.3-0x19c.4 (0.1)
+0x000190|                                    60         |            `   |          type_no_pad: false 0x19c.4-0x19c.5 (0.1)
+0x000190|                                    60         |            `   |          reserved0: false 0x19c.5-0x19c.6 (0.1)
+0x000190|                                    60         |            `   |          reserved1: false 0x19c.6-0x19c.7 (0.1)
+0x000190|                                    60         |            `   |          reserved2: false 0x19c.7-0x19d (0.1)
+0x000190|                                       00      |             .  |          gprel: false 0x19d-0x19d.1 (0.1)
+0x000190|                                       00      |             .  |          unknown0: false 0x19d.1-0x19d.2 (0.1)
+0x000190|                                       00      |             .  |          unknown1: false 0x19d.2-0x19d.3 (0.1)
+0x000190|                                       00      |             .  |          lnk_comdat: false 0x19d.3-0x19d.4 (0.1)
+0x000190|                                       00      |             .  |          lnk_remove: false 0x19d.4-0x19d.5 (0.1)
+0x000190|                                       00      |             .  |          reserved3: false 0x19d.5-0x19d.6 (0.1)
+0x000190|                                       00      |             .  |          lnk_info: false 0x19d.6-0x19d.7 (0.1)
+0x000190|                                       00      |             .  |          lnk_other: false 0x19d.7-0x19e (0.1)
+0x000190|                                          50   |              P |          align_128bytes: false 0x19e-0x19e.1 (0.1)
+0x000190|                                          50   |              P |          align_8bytes: true 0x19e.1-0x19e.2 (0.1)
+0x000190|                                          50   |              P |          align_2bytes: false 0x19e.2-0x19e.3 (0.1)
+0x000190|                                          50   |              P |          align_1bytes: true 0x19e.3-0x19e.4 (0.1)
+0x000190|                                          50   |              P |          mem_preload: false 0x19e.4-0x19e.5 (0.1)
+0x000190|                                          50   |              P |          mem_locked: false 0x19e.5-0x19e.6 (0.1)
+0x000190|                                          50   |              P |          mem_16bit: false 0x19e.6-0x19e.7 (0.1)
+0x000190|                                          50   |              P |          mem_purgeable: false 0x19e.7-0x19f (0.1)
+0x000190|                                             60|               `|          mem_write: false 0x19f-0x19f.1 (0.1)
+0x000190|                                             60|               `|          mem_read: true 0x19f.1-0x19f.2 (0.1)
+0x000190|                                             60|               `|          mem_execute: true 0x19f.2-0x19f.3 (0.1)
+0x000190|                                             60|               `|          mem_shared: false 0x19f.3-0x19f.4 (0.1)
+0x000190|                                             60|               `|          mem_not_paged: false 0x19f.4-0x19f.5 (0.1)
+0x000190|                                             60|               `|          mem_not_cached: false 0x19f.5-0x19f.6 (0.1)
+0x000190|                                             60|               `|          mem_discardable: false 0x19f.6-0x19f.7 (0.1)
+0x000190|                                             60|               `|          lnk_nreloc_ovfl: false 0x19f.7-0x1a0 (0.1)
+        |                                               |                |      [1]{}: section 0x1a0-0x1c8 (40)
+0x0001a0|2e 64 61 74 61 00 00 00                        |.data...        |        name: ".data" 0x1a0-0x1a8 (8)
+0x0001a0|                        e8 1e 00 00            |        ....    |        virtual_size: 7912 0x1a8-0x1ac (4)
+0x0001a0|                                    00 d0 0c 00|            ....|        virtual_address: 0xcd000 0x1ac-0x1b0 (4)
+0x0001b0|00 20 00 00                                    |. ..            |        size_of_raw_data: 8192 0x1b0-0x1b4 (4)
+0x0001b0|            00 ba 0c 00                        |    ....        |        pointer_to_raw_data: 0xcba00 0x1b4-0x1b8 (4)
+0x0001b0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x1b8-0x1bc (4)
+0x0001b0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x1bc-0x1c0 (4)
+0x0001c0|00 00                                          |..              |        number_of_relocations: 0 0x1c0-0x1c2 (2)
+0x0001c0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1c2-0x1c4 (2)
+        |                                               |                |        characteristics{}: 0x1c4-0x1c8 (4)
+0x0001c0|            40                                 |    @           |          cnt_uninitialized_data: false 0x1c4-0x1c4.1 (0.1)
+0x0001c0|            40                                 |    @           |          cnt_initialized_data: true 0x1c4.1-0x1c4.2 (0.1)
+0x0001c0|            40                                 |    @           |          cnt_code: false 0x1c4.2-0x1c4.3 (0.1)
+0x0001c0|            40                                 |    @           |          reserved: false 0x1c4.3-0x1c4.4 (0.1)
+0x0001c0|            40                                 |    @           |          type_no_pad: false 0x1c4.4-0x1c4.5 (0.1)
+0x0001c0|            40                                 |    @           |          reserved0: false 0x1c4.5-0x1c4.6 (0.1)
+0x0001c0|            40                                 |    @           |          reserved1: false 0x1c4.6-0x1c4.7 (0.1)
+0x0001c0|            40                                 |    @           |          reserved2: false 0x1c4.7-0x1c5 (0.1)
+0x0001c0|               00                              |     .          |          gprel: false 0x1c5-0x1c5.1 (0.1)
+0x0001c0|               00                              |     .          |          unknown0: false 0x1c5.1-0x1c5.2 (0.1)
+0x0001c0|               00                              |     .          |          unknown1: false 0x1c5.2-0x1c5.3 (0.1)
+0x0001c0|               00                              |     .          |          lnk_comdat: false 0x1c5.3-0x1c5.4 (0.1)
+0x0001c0|               00                              |     .          |          lnk_remove: false 0x1c5.4-0x1c5.5 (0.1)
+0x0001c0|               00                              |     .          |          reserved3: false 0x1c5.5-0x1c5.6 (0.1)
+0x0001c0|               00                              |     .          |          lnk_info: false 0x1c5.6-0x1c5.7 (0.1)
+0x0001c0|               00                              |     .          |          lnk_other: false 0x1c5.7-0x1c6 (0.1)
+0x0001c0|                  60                           |      `         |          align_128bytes: false 0x1c6-0x1c6.1 (0.1)
+0x0001c0|                  60                           |      `         |          align_8bytes: true 0x1c6.1-0x1c6.2 (0.1)
+0x0001c0|                  60                           |      `         |          align_2bytes: true 0x1c6.2-0x1c6.3 (0.1)
+0x0001c0|                  60                           |      `         |          align_1bytes: false 0x1c6.3-0x1c6.4 (0.1)
+0x0001c0|                  60                           |      `         |          mem_preload: false 0x1c6.4-0x1c6.5 (0.1)
+0x0001c0|                  60                           |      `         |          mem_locked: false 0x1c6.5-0x1c6.6 (0.1)
+0x0001c0|                  60                           |      `         |          mem_16bit: false 0x1c6.6-0x1c6.7 (0.1)
+0x0001c0|                  60                           |      `         |          mem_purgeable: false 0x1c6.7-0x1c7 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_write: true 0x1c7-0x1c7.1 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_read: true 0x1c7.1-0x1c7.2 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_execute: false 0x1c7.2-0x1c7.3 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_shared: false 0x1c7.3-0x1c7.4 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_not_paged: false 0x1c7.4-0x1c7.5 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_not_cached: false 0x1c7.5-0x1c7.6 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_discardable: false 0x1c7.6-0x1c7.7 (0.1)
+0x0001c0|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x1c7.7-0x1c8 (0.1)
+        |                                               |                |      [2]{}: section 0x1c8-0x1f0 (40)
+0x0001c0|                        2e 72 64 61 74 61 00 00|        .rdata..|        name: ".rdata" 0x1c8-0x1d0 (8)
+0x0001d0|a8 21 03 00                                    |.!..            |        virtual_size: 205224 0x1d0-0x1d4 (4)
+0x0001d0|            00 f0 0c 00                        |    ....        |        virtual_address: 0xcf000 0x1d4-0x1d8 (4)
+0x0001d0|                        00 22 03 00            |        ."..    |        size_of_raw_data: 205312 0x1d8-0x1dc (4)
+0x0001d0|                                    00 da 0c 00|            ....|        pointer_to_raw_data: 0xcda00 0x1dc-0x1e0 (4)
+0x0001e0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x1e0-0x1e4 (4)
+0x0001e0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x1e4-0x1e8 (4)
+0x0001e0|                        00 00                  |        ..      |        number_of_relocations: 0 0x1e8-0x1ea (2)
+0x0001e0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x1ea-0x1ec (2)
+        |                                               |                |        characteristics{}: 0x1ec-0x1f0 (4)
+0x0001e0|                                    40         |            @   |          cnt_uninitialized_data: false 0x1ec-0x1ec.1 (0.1)
+0x0001e0|                                    40         |            @   |          cnt_initialized_data: true 0x1ec.1-0x1ec.2 (0.1)
+0x0001e0|                                    40         |            @   |          cnt_code: false 0x1ec.2-0x1ec.3 (0.1)
+0x0001e0|                                    40         |            @   |          reserved: false 0x1ec.3-0x1ec.4 (0.1)
+0x0001e0|                                    40         |            @   |          type_no_pad: false 0x1ec.4-0x1ec.5 (0.1)
+0x0001e0|                                    40         |            @   |          reserved0: false 0x1ec.5-0x1ec.6 (0.1)
+0x0001e0|                                    40         |            @   |          reserved1: false 0x1ec.6-0x1ec.7 (0.1)
+0x0001e0|                                    40         |            @   |          reserved2: false 0x1ec.7-0x1ed (0.1)
+0x0001e0|                                       00      |             .  |          gprel: false 0x1ed-0x1ed.1 (0.1)
+0x0001e0|                                       00      |             .  |          unknown0: false 0x1ed.1-0x1ed.2 (0.1)
+0x0001e0|                                       00      |             .  |          unknown1: false 0x1ed.2-0x1ed.3 (0.1)
+0x0001e0|                                       00      |             .  |          lnk_comdat: false 0x1ed.3-0x1ed.4 (0.1)
+0x0001e0|                                       00      |             .  |          lnk_remove: false 0x1ed.4-0x1ed.5 (0.1)
+0x0001e0|                                       00      |             .  |          reserved3: false 0x1ed.5-0x1ed.6 (0.1)
+0x0001e0|                                       00      |             .  |          lnk_info: false 0x1ed.6-0x1ed.7 (0.1)
+0x0001e0|                                       00      |             .  |          lnk_other: false 0x1ed.7-0x1ee (0.1)
+0x0001e0|                                          60   |              ` |          align_128bytes: false 0x1ee-0x1ee.1 (0.1)
+0x0001e0|                                          60   |              ` |          align_8bytes: true 0x1ee.1-0x1ee.2 (0.1)
+0x0001e0|                                          60   |              ` |          align_2bytes: true 0x1ee.2-0x1ee.3 (0.1)
+0x0001e0|                                          60   |              ` |          align_1bytes: false 0x1ee.3-0x1ee.4 (0.1)
+0x0001e0|                                          60   |              ` |          mem_preload: false 0x1ee.4-0x1ee.5 (0.1)
+0x0001e0|                                          60   |              ` |          mem_locked: false 0x1ee.5-0x1ee.6 (0.1)
+0x0001e0|                                          60   |              ` |          mem_16bit: false 0x1ee.6-0x1ee.7 (0.1)
+0x0001e0|                                          60   |              ` |          mem_purgeable: false 0x1ee.7-0x1ef (0.1)
+0x0001e0|                                             40|               @|          mem_write: false 0x1ef-0x1ef.1 (0.1)
+0x0001e0|                                             40|               @|          mem_read: true 0x1ef.1-0x1ef.2 (0.1)
+0x0001e0|                                             40|               @|          mem_execute: false 0x1ef.2-0x1ef.3 (0.1)
+0x0001e0|                                             40|               @|          mem_shared: false 0x1ef.3-0x1ef.4 (0.1)
+0x0001e0|                                             40|               @|          mem_not_paged: false 0x1ef.4-0x1ef.5 (0.1)
+0x0001e0|                                             40|               @|          mem_not_cached: false 0x1ef.5-0x1ef.6 (0.1)
+0x0001e0|                                             40|               @|          mem_discardable: false 0x1ef.6-0x1ef.7 (0.1)
+0x0001e0|                                             40|               @|          lnk_nreloc_ovfl: false 0x1ef.7-0x1f0 (0.1)
+        |                                               |                |      [3]{}: section 0x1f0-0x218 (40)
+0x0001f0|2f 34 00 00 00 00 00 00                        |/4......        |        name: ".eh_frame" ("/4") 0x1f0-0x1f8 (8)
+0x0001f0|                        64 a2 01 00            |        d...    |        virtual_size: 107108 0x1f8-0x1fc (4)
+0x0001f0|                                    00 20 10 00|            . ..|        virtual_address: 0x102000 0x1fc-0x200 (4)
+0x000200|00 a4 01 00                                    |....            |        size_of_raw_data: 107520 0x200-0x204 (4)
+0x000200|            00 fc 0f 00                        |    ....        |        pointer_to_raw_data: 0xffc00 0x204-0x208 (4)
+0x000200|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x208-0x20c (4)
+0x000200|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x20c-0x210 (4)
+0x000210|00 00                                          |..              |        number_of_relocations: 0 0x210-0x212 (2)
+0x000210|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x212-0x214 (2)
+        |                                               |                |        characteristics{}: 0x214-0x218 (4)
+0x000210|            40                                 |    @           |          cnt_uninitialized_data: false 0x214-0x214.1 (0.1)
+0x000210|            40                                 |    @           |          cnt_initialized_data: true 0x214.1-0x214.2 (0.1)
+0x000210|            40                                 |    @           |          cnt_code: false 0x214.2-0x214.3 (0.1)
+0x000210|            40                                 |    @           |          reserved: false 0x214.3-0x214.4 (0.1)
+0x000210|            40                                 |    @           |          type_no_pad: false 0x214.4-0x214.5 (0.1)
+0x000210|            40                                 |    @           |          reserved0: false 0x214.5-0x214.6 (0.1)
+0x000210|            40                                 |    @           |          reserved1: false 0x214.6-0x214.7 (0.1)
+0x000210|            40                                 |    @           |          reserved2: false 0x214.7-0x215 (0.1)
+0x000210|               00                              |     .          |          gprel: false 0x215-0x215.1 (0.1)
+0x000210|               00                              |     .          |          unknown0: false 0x215.1-0x215.2 (0.1)
+0x000210|               00                              |     .          |          unknown1: false 0x215.2-0x215.3 (0.1)
+0x000210|               00                              |     .          |          lnk_comdat: false 0x215.3-0x215.4 (0.1)
+0x000210|               00                              |     .          |          lnk_remove: false 0x215.4-0x215.5 (0.1)
+0x000210|               00                              |     .          |          reserved3: false 0x215.5-0x215.6 (0.1)
+0x000210|               00                              |     .          |          lnk_info: false 0x215.6-0x215.7 (0.1)
+0x000210|               00                              |     .          |          lnk_other: false 0x215.7-0x216 (0.1)
+0x000210|                  30                           |      0         |          align_128bytes: false 0x216-0x216.1 (0.1)
+0x000210|                  30                           |      0         |          align_8bytes: false 0x216.1-0x216.2 (0.1)
+0x000210|                  30                           |      0         |          align_2bytes: true 0x216.2-0x216.3 (0.1)
+0x000210|                  30                           |      0         |          align_1bytes: true 0x216.3-0x216.4 (0.1)
+0x000210|                  30                           |      0         |          mem_preload: false 0x216.4-0x216.5 (0.1)
+0x000210|                  30                           |      0         |          mem_locked: false 0x216.5-0x216.6 (0.1)
+0x000210|                  30                           |      0         |          mem_16bit: false 0x216.6-0x216.7 (0.1)
+0x000210|                  30                           |      0         |          mem_purgeable: false 0x216.7-0x217 (0.1)
+0x000210|                     40                        |       @        |          mem_write: false 0x217-0x217.1 (0.1)
+0x000210|                     40                        |       @        |          mem_read: true 0x217.1-0x217.2 (0.1)
+0x000210|                     40                        |       @        |          mem_execute: false 0x217.2-0x217.3 (0.1)
+0x000210|                     40                        |       @        |          mem_shared: false 0x217.3-0x217.4 (0.1)
+0x000210|                     40                        |       @        |          mem_not_paged: false 0x217.4-0x217.5 (0.1)
+0x000210|                     40                        |       @        |          mem_not_cached: false 0x217.5-0x217.6 (0.1)
+0x000210|                     40                        |       @        |          mem_discardable: false 0x217.6-0x217.7 (0.1)
+0x000210|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x217.7-0x218 (0.1)
+        |                                               |                |      [4]{}: section 0x218-0x240 (40)
+0x000210|                        2e 62 73 73 00 00 00 00|        .bss....|        name: ".bss" 0x218-0x220 (8)
+0x000220|60 56 00 00                                    |`V..            |        virtual_size: 22112 0x220-0x224 (4)
+0x000220|            00 d0 11 00                        |    ....        |        virtual_address: 0x11d000 0x224-0x228 (4)
+0x000220|                        00 00 00 00            |        ....    |        size_of_raw_data: 0 0x228-0x22c (4)
+0x000220|                                    00 00 00 00|            ....|        pointer_to_raw_data: 0x0 0x22c-0x230 (4)
+0x000230|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x230-0x234 (4)
+0x000230|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x234-0x238 (4)
+0x000230|                        00 00                  |        ..      |        number_of_relocations: 0 0x238-0x23a (2)
+0x000230|                              00 00            |          ..    |        number_of_line_numbers: 0 0x23a-0x23c (2)
+        |                                               |                |        characteristics{}: 0x23c-0x240 (4)
+0x000230|                                    80         |            .   |          cnt_uninitialized_data: true 0x23c-0x23c.1 (0.1)
+0x000230|                                    80         |            .   |          cnt_initialized_data: false 0x23c.1-0x23c.2 (0.1)
+0x000230|                                    80         |            .   |          cnt_code: false 0x23c.2-0x23c.3 (0.1)
+0x000230|                                    80         |            .   |          reserved: false 0x23c.3-0x23c.4 (0.1)
+0x000230|                                    80         |            .   |          type_no_pad: false 0x23c.4-0x23c.5 (0.1)
+0x000230|                                    80         |            .   |          reserved0: false 0x23c.5-0x23c.6 (0.1)
+0x000230|                                    80         |            .   |          reserved1: false 0x23c.6-0x23c.7 (0.1)
+0x000230|                                    80         |            .   |          reserved2: false 0x23c.7-0x23d (0.1)
+0x000230|                                       00      |             .  |          gprel: false 0x23d-0x23d.1 (0.1)
+0x000230|                                       00      |             .  |          unknown0: false 0x23d.1-0x23d.2 (0.1)
+0x000230|                                       00      |             .  |          unknown1: false 0x23d.2-0x23d.3 (0.1)
+0x000230|                                       00      |             .  |          lnk_comdat: false 0x23d.3-0x23d.4 (0.1)
+0x000230|                                       00      |             .  |          lnk_remove: false 0x23d.4-0x23d.5 (0.1)
+0x000230|                                       00      |             .  |          reserved3: false 0x23d.5-0x23d.6 (0.1)
+0x000230|                                       00      |             .  |          lnk_info: false 0x23d.6-0x23d.7 (0.1)
+0x000230|                                       00      |             .  |          lnk_other: false 0x23d.7-0x23e (0.1)
+0x000230|                                          60   |              ` |          align_128bytes: false 0x23e-0x23e.1 (0.1)
+0x000230|                                          60   |              ` |          align_8bytes: true 0x23e.1-0x23e.2 (0.1)
+0x000230|                                          60   |              ` |          align_2bytes: true 0x23e.2-0x23e.3 (0.1)
+0x000230|                                          60   |              ` |          align_1bytes: false 0x23e.3-0x23e.4 (0.1)
+0x000230|                                          60   |              ` |          mem_preload: false 0x23e.4-0x23e.5 (0.1)
+0x000230|                                          60   |              ` |          mem_locked: false 0x23e.5-0x23e.6 (0.1)
+0x000230|                                          60   |              ` |          mem_16bit: false 0x23e.6-0x23e.7 (0.1)
+0x000230|                                          60   |              ` |          mem_purgeable: false 0x23e.7-0x23f (0.1)
+0x000230|                                             c0|               .|          mem_write: true 0x23f-0x23f.1 (0.1)
+0x000230|                                             c0|               .|          mem_read: true 0x23f.1-0x23f.2 (0.1)
+0x000230|                                             c0|               .|          mem_execute: false 0x23f.2-0x23f.3 (0.1)
+0x000230|                                             c0|               .|          mem_shared: false 0x23f.3-0x23f.4 (0.1)
+0x000230|                                             c0|               .|          mem_not_paged: false 0x23f.4-0x23f.5 (0.1)
+0x000230|                                             c0|               .|          mem_not_cached: false 0x23f.5-0x23f.6 (0.1)
+0x000230|                                             c0|               .|          mem_discardable: false 0x23f.6-0x23f.7 (0.1)
+0x000230|                                             c0|               .|          lnk_nreloc_ovfl: false 0x23f.7-0x240 (0.1)
+        |                                               |                |      [5]{}: section 0x240-0x268 (40)
+0x000240|2e 69 64 61 74 61 00 00                        |.idata..        |        name: ".idata" 0x240-0x248 (8)
+0x000240|                        d4 10 00 00            |        ....    |        virtual_size: 4308 0x248-0x24c (4)
+0x000240|                                    00 30 12 00|            .0..|        virtual_address: 0x123000 0x24c-0x250 (4)
+0x000250|00 12 00 00                                    |....            |        size_of_raw_data: 4608 0x250-0x254 (4)
+0x000250|            00 a0 11 00                        |    ....        |        pointer_to_raw_data: 0x11a000 0x254-0x258 (4)
+0x000250|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x258-0x25c (4)
+0x000250|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x25c-0x260 (4)
+0x000260|00 00                                          |..              |        number_of_relocations: 0 0x260-0x262 (2)
+0x000260|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x262-0x264 (2)
+        |                                               |                |        characteristics{}: 0x264-0x268 (4)
+0x000260|            40                                 |    @           |          cnt_uninitialized_data: false 0x264-0x264.1 (0.1)
+0x000260|            40                                 |    @           |          cnt_initialized_data: true 0x264.1-0x264.2 (0.1)
+0x000260|            40                                 |    @           |          cnt_code: false 0x264.2-0x264.3 (0.1)
+0x000260|            40                                 |    @           |          reserved: false 0x264.3-0x264.4 (0.1)
+0x000260|            40                                 |    @           |          type_no_pad: false 0x264.4-0x264.5 (0.1)
+0x000260|            40                                 |    @           |          reserved0: false 0x264.5-0x264.6 (0.1)
+0x000260|            40                                 |    @           |          reserved1: false 0x264.6-0x264.7 (0.1)
+0x000260|            40                                 |    @           |          reserved2: false 0x264.7-0x265 (0.1)
+0x000260|               00                              |     .          |          gprel: false 0x265-0x265.1 (0.1)
+0x000260|               00                              |     .          |          unknown0: false 0x265.1-0x265.2 (0.1)
+0x000260|               00                              |     .          |          unknown1: false 0x265.2-0x265.3 (0.1)
+0x000260|               00                              |     .          |          lnk_comdat: false 0x265.3-0x265.4 (0.1)
+0x000260|               00                              |     .          |          lnk_remove: false 0x265.4-0x265.5 (0.1)
+0x000260|               00                              |     .          |          reserved3: false 0x265.5-0x265.6 (0.1)
+0x000260|               00                              |     .          |          lnk_info: false 0x265.6-0x265.7 (0.1)
+0x000260|               00                              |     .          |          lnk_other: false 0x265.7-0x266 (0.1)
+0x000260|                  30                           |      0         |          align_128bytes: false 0x266-0x266.1 (0.1)
+0x000260|                  30                           |      0         |          align_8bytes: false 0x266.1-0x266.2 (0.1)
+0x000260|                  30                           |      0         |          align_2bytes: true 0x266.2-0x266.3 (0.1)
+0x000260|                  30                           |      0         |          align_1bytes: true 0x266.3-0x266.4 (0.1)
+0x000260|                  30                           |      0         |          mem_preload: false 0x266.4-0x266.5 (0.1)
+0x000260|                  30                           |      0         |          mem_locked: false 0x266.5-0x266.6 (0.1)
+0x000260|                  30                           |      0         |          mem_16bit: false 0x266.6-0x266.7 (0.1)
+0x000260|                  30                           |      0         |          mem_purgeable: false 0x266.7-0x267 (0.1)
+0x000260|                     c0                        |       .        |          mem_write: true 0x267-0x267.1 (0.1)
+0x000260|                     c0                        |       .        |          mem_read: true 0x267.1-0x267.2 (0.1)
+0x000260|                     c0                        |       .        |          mem_execute: false 0x267.2-0x267.3 (0.1)
+0x000260|                     c0                        |       .        |          mem_shared: false 0x267.3-0x267.4 (0.1)
+0x000260|                     c0                        |       .        |          mem_not_paged: false 0x267.4-0x267.5 (0.1)
+0x000260|                     c0                        |       .        |          mem_not_cached: false 0x267.5-0x267.6 (0.1)
+0x000260|                     c0                        |       .        |          mem_discardable: false 0x267.6-0x267.7 (0.1)
+0x000260|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x267.7-0x268 (0.1)
+        |                                               |                |      [6]{}: section 0x268-0x290 (40)
+0x000260|                        2e 43 52 54 00 00 00 00|        .CRT....|        name: ".CRT" 0x268-0x270 (8)
+0x000270|18 00 00 00                                    |....            |        virtual_size: 24 0x270-0x274 (4)
+0x000270|            00 50 12 00                        |    .P..        |        virtual_address: 0x125000 0x274-0x278 (4)
+0x000270|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x278-0x27c (4)
+0x000270|                                    00 b2 11 00|            ....|        pointer_to_raw_data: 0x11b200 0x27c-0x280 (4)
+0x000280|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x280-0x284 (4)
+0x000280|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x284-0x288 (4)
+0x000280|                        00 00                  |        ..      |        number_of_relocations: 0 0x288-0x28a (2)
+0x000280|                              00 00            |          ..    |        number_of_line_numbers: 0 0x28a-0x28c (2)
+        |                                               |                |        characteristics{}: 0x28c-0x290 (4)
+0x000280|                                    40         |            @   |          cnt_uninitialized_data: false 0x28c-0x28c.1 (0.1)
+0x000280|                                    40         |            @   |          cnt_initialized_data: true 0x28c.1-0x28c.2 (0.1)
+0x000280|                                    40         |            @   |          cnt_code: false 0x28c.2-0x28c.3 (0.1)
+0x000280|                                    40         |            @   |          reserved: false 0x28c.3-0x28c.4 (0.1)
+0x000280|                                    40         |            @   |          type_no_pad: false 0x28c.4-0x28c.5 (0.1)
+0x000280|                                    40         |            @   |          reserved0: false 0x28c.5-0x28c.6 (0.1)
+0x000280|                                    40         |            @   |          reserved1: false 0x28c.6-0x28c.7 (0.1)
+0x000280|                                    40         |            @   |          reserved2: false 0x28c.7-0x28d (0.1)
+0x000280|                                       00      |             .  |          gprel: false 0x28d-0x28d.1 (0.1)
+0x000280|                                       00      |             .  |          unknown0: false 0x28d.1-0x28d.2 (0.1)
+0x000280|                                       00      |             .  |          unknown1: false 0x28d.2-0x28d.3 (0.1)
+0x000280|                                       00      |             .  |          lnk_comdat: false 0x28d.3-0x28d.4 (0.1)
+0x000280|                                       00      |             .  |          lnk_remove: false 0x28d.4-0x28d.5 (0.1)
+0x000280|                                       00      |             .  |          reserved3: false 0x28d.5-0x28d.6 (0.1)
+0x000280|                                       00      |             .  |          lnk_info: false 0x28d.6-0x28d.7 (0.1)
+0x000280|                                       00      |             .  |          lnk_other: false 0x28d.7-0x28e (0.1)
+0x000280|                                          30   |              0 |          align_128bytes: false 0x28e-0x28e.1 (0.1)
+0x000280|                                          30   |              0 |          align_8bytes: false 0x28e.1-0x28e.2 (0.1)
+0x000280|                                          30   |              0 |          align_2bytes: true 0x28e.2-0x28e.3 (0.1)
+0x000280|                                          30   |              0 |          align_1bytes: true 0x28e.3-0x28e.4 (0.1)
+0x000280|                                          30   |              0 |          mem_preload: false 0x28e.4-0x28e.5 (0.1)
+0x000280|                                          30   |              0 |          mem_locked: false 0x28e.5-0x28e.6 (0.1)
+0x000280|                                          30   |              0 |          mem_16bit: false 0x28e.6-0x28e.7 (0.1)
+0x000280|                                          30   |              0 |          mem_purgeable: false 0x28e.7-0x28f (0.1)
+0x000280|                                             c0|               .|          mem_write: true 0x28f-0x28f.1 (0.1)
+0x000280|                                             c0|               .|          mem_read: true 0x28f.1-0x28f.2 (0.1)
+0x000280|                                             c0|               .|          mem_execute: false 0x28f.2-0x28f.3 (0.1)
+0x000280|                                             c0|               .|          mem_shared: false 0x28f.3-0x28f.4 (0.1)
+0x000280|                                             c0|               .|          mem_not_paged: false 0x28f.4-0x28f.5 (0.1)
+0x000280|                                             c0|               .|          mem_not_cached: false 0x28f.5-0x28f.6 (0.1)
+0x000280|                                             c0|               .|          mem_discardable: false 0x28f.6-0x28f.7 (0.1)
+0x000280|                                             c0|               .|          lnk_nreloc_ovfl: false 0x28f.7-0x290 (0.1)
+        |                                               |                |      [7]{}: section 0x290-0x2b8 (40)
+0x000290|2e 74 6c 73 00 00 00 00                        |.tls....        |        name: ".tls" 0x290-0x298 (8)
+0x000290|                        20 00 00 00            |         ...    |        virtual_size: 32 0x298-0x29c (4)
+0x000290|                                    00 60 12 00|            .`..|        virtual_address: 0x126000 0x29c-0x2a0 (4)
+0x0002a0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x2a0-0x2a4 (4)
+0x0002a0|            00 b4 11 00                        |    ....        |        pointer_to_raw_data: 0x11b400 0x2a4-0x2a8 (4)
+0x0002a0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x2a8-0x2ac (4)
+0x0002a0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x2ac-0x2b0 (4)
+0x0002b0|00 00                                          |..              |        number_of_relocations: 0 0x2b0-0x2b2 (2)
+0x0002b0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x2b2-0x2b4 (2)
+        |                                               |                |        characteristics{}: 0x2b4-0x2b8 (4)
+0x0002b0|            40                                 |    @           |          cnt_uninitialized_data: false 0x2b4-0x2b4.1 (0.1)
+0x0002b0|            40                                 |    @           |          cnt_initialized_data: true 0x2b4.1-0x2b4.2 (0.1)
+0x0002b0|            40                                 |    @           |          cnt_code: false 0x2b4.2-0x2b4.3 (0.1)
+0x0002b0|            40                                 |    @           |          reserved: false 0x2b4.3-0x2b4.4 (0.1)
+0x0002b0|            40                                 |    @           |          type_no_pad: false 0x2b4.4-0x2b4.5 (0.1)
+0x0002b0|            40                                 |    @           |          reserved0: false 0x2b4.5-0x2b4.6 (0.1)
+0x0002b0|            40                                 |    @           |          reserved1: false 0x2b4.6-0x2b4.7 (0.1)
+0x0002b0|            40                                 |    @           |          reserved2: false 0x2b4.7-0x2b5 (0.1)
+0x0002b0|               00                              |     .          |          gprel: false 0x2b5-0x2b5.1 (0.1)
+0x0002b0|               00                              |     .          |          unknown0: false 0x2b5.1-0x2b5.2 (0.1)
+0x0002b0|               00                              |     .          |          unknown1: false 0x2b5.2-0x2b5.3 (0.1)
+0x0002b0|               00                              |     .          |          lnk_comdat: false 0x2b5.3-0x2b5.4 (0.1)
+0x0002b0|               00                              |     .          |          lnk_remove: false 0x2b5.4-0x2b5.5 (0.1)
+0x0002b0|               00                              |     .          |          reserved3: false 0x2b5.5-0x2b5.6 (0.1)
+0x0002b0|               00                              |     .          |          lnk_info: false 0x2b5.6-0x2b5.7 (0.1)
+0x0002b0|               00                              |     .          |          lnk_other: false 0x2b5.7-0x2b6 (0.1)
+0x0002b0|                  30                           |      0         |          align_128bytes: false 0x2b6-0x2b6.1 (0.1)
+0x0002b0|                  30                           |      0         |          align_8bytes: false 0x2b6.1-0x2b6.2 (0.1)
+0x0002b0|                  30                           |      0         |          align_2bytes: true 0x2b6.2-0x2b6.3 (0.1)
+0x0002b0|                  30                           |      0         |          align_1bytes: true 0x2b6.3-0x2b6.4 (0.1)
+0x0002b0|                  30                           |      0         |          mem_preload: false 0x2b6.4-0x2b6.5 (0.1)
+0x0002b0|                  30                           |      0         |          mem_locked: false 0x2b6.5-0x2b6.6 (0.1)
+0x0002b0|                  30                           |      0         |          mem_16bit: false 0x2b6.6-0x2b6.7 (0.1)
+0x0002b0|                  30                           |      0         |          mem_purgeable: false 0x2b6.7-0x2b7 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_write: true 0x2b7-0x2b7.1 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_read: true 0x2b7.1-0x2b7.2 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_execute: false 0x2b7.2-0x2b7.3 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_shared: false 0x2b7.3-0x2b7.4 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_not_paged: false 0x2b7.4-0x2b7.5 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_not_cached: false 0x2b7.5-0x2b7.6 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_discardable: false 0x2b7.6-0x2b7.7 (0.1)
+0x0002b0|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x2b7.7-0x2b8 (0.1)
+        |                                               |                |    symbol_table[0:0]: 0x2b8-0x2b8 (0)
+        |                                               |                |    string_table{}: 0x11b600-0x11b60e (14)
+0x11b600|0e 00 00 00                                    |....            |      size: 14 0x11b600-0x11b604 (4)
+        |                                               |                |      entries[0:1]: 0x11b604-0x11b60e (10)
+0x11b600|            2e 65 68 5f 66 72 61 6d 65 00|     |    .eh_frame.| |        [0]: ".eh_frame" entry 0x11b604-0x11b60e (10)
+0x0002b0|                        00 00 00 00 00 00 00 00|        ........|  gap0: raw bits 0x2b8-0x11b600 (1160008)
+0x0002c0|00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................|
+*       |until 0x11b5ff.7 (1160008)                     |                |

format/prores/testdata/prores_frame.fqtest

@@ -195,7 +195,7 @@ $ fq -d mp4 dv prores_frame.mov
       |                                               |                |                            [0]{}: box 0x6dee-0x6dfa (12)
 0x6de0|                                          00 00|              ..|                              size: 12 0x6dee-0x6df2 (4)
 0x6df0|00 0c                                          |..              |
-0x6df0|      75 72 6c 20                              |  url           |                              type: "url " 0x6df2-0x6df6 (4)
+0x6df0|      75 72 6c 20                              |  url           |                              type: "url" 0x6df2-0x6df6 (4)
 0x6df0|                  00                           |      .         |                              version: 0 0x6df6-0x6df7 (1)
 0x6df0|                     00 00 01                  |       ...      |                              flags: 1 0x6df7-0x6dfa (3)
       |                                               |                |                              data: "" 0x6dfa-0x6dfa (0)

format/riff/avi.go

@@ -59,7 +59,7 @@ var aviListTypeDescriptions = scalar.StrMapDescription{
 	"hdrl": "AVI main list",
 	"strl": "Stream list",
 	"movi": "Stream Data",
-	"rec ": "Chunk group",
+	"rec":  "Chunk group",
 }
 
 const (
@@ -245,7 +245,7 @@ func aviDecodeEx(d *decode.D, ai format.AVI_In, extendedChunk bool) {
 				return true, nil
 
 			case "LIST":
-				typ := d.FieldUTF8("type", 4, aviListTypeDescriptions)
+				typ := d.FieldUTF8("type", 4, scalar.ActualTrimSpace, aviListTypeDescriptions)
 				switch typ {
 				case "strl":
 					return true, &aviStream{}

fq.go

@@ -6,7 +6,7 @@ import (
 	"github.com/wader/fq/pkg/interp"
 )
 
-const version = "0.10.0"
+const version = "0.11.0"
 
 func main() {
 	cli.Main(interp.DefaultRegistry, version)

go.mod

@@ -19,7 +19,7 @@ require (
 	// bump: gomod-ergochat-readline /github\.com\/ergochat\/readline v(.*)/ https://github.com/ergochat/readline.git|*
 	// bump: gomod-ergochat-readline command go get -d github.com/ergochat/readline@v$LATEST && go mod tidy
 	// bump: gomod-ergochat-readline link "Release notes" https://github.com/ergochat/readline/releases/tag/v$LATEST
-	github.com/ergochat/readline v0.1.0
+	github.com/ergochat/readline v0.1.1
 
 	// bump: gomod-golang-snappy /github\.com\/golang\/snappy v(.*)/ https://github.com/golang/snappy.git|^0
 	// bump: gomod-golang-snappy command go get -d github.com/golang/snappy@v$LATEST && go mod tidy
@@ -48,7 +48,7 @@ require (
 	// bump: gomod-golang-x-crypto /golang\.org\/x\/crypto v(.*)/ https://github.com/golang/crypto.git|^0
 	// bump: gomod-golang-x-crypto command go get -d golang.org/x/crypto@v$LATEST && go mod tidy
 	// bump: gomod-golang-x-crypto link "Tags" https://github.com/golang/crypto/tags
-	golang.org/x/crypto v0.22.0
+	golang.org/x/crypto v0.23.0
 
 	// has no tags
 	// go get -d golang.org/x/exp@master && go mod tidy
@@ -57,17 +57,17 @@ require (
 	// bump: gomod-golang-x-net /golang\.org\/x\/net v(.*)/ https://github.com/golang/net.git|^0
 	// bump: gomod-golang-x-net command go get -d golang.org/x/net@v$LATEST && go mod tidy
 	// bump: gomod-golang-x-net link "Tags" https://github.com/golang/net/tags
-	golang.org/x/net v0.24.0
+	golang.org/x/net v0.25.0
 
 	// bump: gomod-golang-x-term /golang\.org\/x\/term v(.*)/ https://github.com/golang/term.git|^0
 	// bump: gomod-golang-x-term command go get -d golang.org/x/term@v$LATEST && go mod tidy
 	// bump: gomod-golang-x-term link "Tags" https://github.com/golang/term/tags
-	golang.org/x/term v0.19.0
+	golang.org/x/term v0.20.0
 
 	// bump: gomod-golang/text /golang\.org\/x\/text v(.*)/ https://github.com/golang/text.git|^0
 	// bump: gomod-golang/text command go get -d golang.org/x/text@v$LATEST && go mod tidy
 	// bump: gomod-golang/text link "Source diff $CURRENT..$LATEST" https://github.com/golang/text/compare/v$CURRENT..v$LATEST
-	golang.org/x/text v0.14.0
+	golang.org/x/text v0.15.0
 
 	// bump: gomod-gopkg.in/yaml.v3 /gopkg\.in\/yaml\.v3 v(.*)/ https://github.com/go-yaml/yaml.git|^3
 	// bump: gomod-gopkg.in/yaml.v3 command go get -d gopkg.in/yaml.v3@v$LATEST && go mod tidy
@@ -79,6 +79,6 @@ require (
 	github.com/itchyny/timefmt-go v0.1.5 // indirect
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
 	github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e // indirect
-	golang.org/x/sys v0.19.0 // indirect
+	golang.org/x/sys v0.20.0 // indirect
 	gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f // indirect
 )

go.sum

@@ -2,8 +2,8 @@ github.com/BurntSushi/toml v1.3.2 h1:o7IhLm0Msx3BaB+n3Ag7L8EVlByGnpq14C4YWiu/gL8
 github.com/BurntSushi/toml v1.3.2/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
 github.com/creasty/defaults v1.7.0 h1:eNdqZvc5B509z18lD8yc212CAqJNvfT1Jq6L8WowdBA=
 github.com/creasty/defaults v1.7.0/go.mod h1:iGzKe6pbEHnpMPtfDXZEr0NVxWnPTjb1bbDy08fPzYM=
-github.com/ergochat/readline v0.1.0 h1:KEIiAnyH9qGZB4K8oq5mgDcExlEKwmZDcyyocgJiABc=
-github.com/ergochat/readline v0.1.0/go.mod h1:o3ux9QLHLm77bq7hDB21UTm6HlV2++IPDMfIfKDuOgY=
+github.com/ergochat/readline v0.1.1 h1:C8Uuo3ybB23GWOt0uxmHbGzKM9owmtXary6Clrj84s0=
+github.com/ergochat/readline v0.1.1/go.mod h1:o3ux9QLHLm77bq7hDB21UTm6HlV2++IPDMfIfKDuOgY=
 github.com/golang/snappy v0.0.4 h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM=
 github.com/golang/snappy v0.0.4/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/gomarkdown/markdown v0.0.0-20240328165702-4d01890c35c0 h1:4gjrh/PN2MuWCCElk8/I4OCKRKWCCo2zEct3VKCbibU=
@@ -25,18 +25,18 @@ github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e h1:fD57ERR4JtEqsWb
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
 github.com/wader/gojq v0.12.1-0.20240401131232-6c6bc364201a h1:P881Oecjt9FEXrwkGJ6UObJksxejJaF/fKq1ZfXpiVE=
 github.com/wader/gojq v0.12.1-0.20240401131232-6c6bc364201a/go.mod h1:qVrzkUdnBtJvM4twyRQ6xdziPSnSp35dLm4s/DN2iP4=
-golang.org/x/crypto v0.22.0 h1:g1v0xeRhjcugydODzvb3mEM9SQ0HGp9s/nh3COQ/C30=
-golang.org/x/crypto v0.22.0/go.mod h1:vr6Su+7cTlO45qkww3VDJlzDn0ctJvRgYbC2NvXHt+M=
+golang.org/x/crypto v0.23.0 h1:dIJU/v2J8Mdglj/8rJ6UUOM3Zc9zLZxVZwwxMooUSAI=
+golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
 golang.org/x/exp v0.0.0-20240325151524-a685a6edb6d8 h1:aAcj0Da7eBAtrTp03QXWvm88pSyOt+UgdZw2BFZ+lEw=
 golang.org/x/exp v0.0.0-20240325151524-a685a6edb6d8/go.mod h1:CQ1k9gNrJ50XIzaKCRR2hssIjF07kZFEiieALBM/ARQ=
-golang.org/x/net v0.24.0 h1:1PcaxkF854Fu3+lvBIx5SYn9wRlBzzcnHZSiaFFAb0w=
-golang.org/x/net v0.24.0/go.mod h1:2Q7sJY5mzlzWjKtYUEXSlBWCdyaioyXzRB2RtU8KVE8=
-golang.org/x/sys v0.19.0 h1:q5f1RH2jigJ1MoAWp2KTp3gm5zAGFUTarQZ5U386+4o=
-golang.org/x/sys v0.19.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/term v0.19.0 h1:+ThwsDv+tYfnJFhF4L8jITxu1tdTWRTZpdsWgEgjL6Q=
-golang.org/x/term v0.19.0/go.mod h1:2CuTdWZ7KHSQwUzKva0cbMg6q2DMI3Mmxp+gKJbskEk=
-golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
-golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
+golang.org/x/net v0.25.0 h1:d/OCCoBEUq33pjydKrGQhw7IlUPI2Oylr+8qLx49kac=
+golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
+golang.org/x/sys v0.20.0 h1:Od9JTbYCk261bKm4M/mw7AklTlFYIa0bIp9BgSm1S8Y=
+golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/term v0.20.0 h1:VnkxpohqXaOBYJtBmEppKUG6mXpi+4O6purfc2+sMhw=
+golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
+golang.org/x/text v0.15.0 h1:h1V/4gjBv8v9cjcR6+AR5+/cIYK5N/WAgiv4xlsEtAk=
+golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f h1:BLraFXnmrev5lT+xlilqcH8XK9/i0At2xKjWk4p6zsU=
 gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=

internal/iox/runereader.go

@@ -47,7 +47,7 @@ func utf8Bytes(b byte) int {
 	}
 }
 
-// RuneReadSeeker reads rune from a io.ReadSeeker
+// ReadRune reads rune from a io.ReadSeeker
 func (brr RuneReadSeeker) ReadRune() (r rune, size int, err error) {
 	var b [utf8.UTFMax]byte
 

pkg/decode/decode.go

@@ -263,7 +263,7 @@ func (d *D) TryCopyBits(w io.Writer, r bitio.Reader) (int64, error) {
 func (d *D) CopyBits(w io.Writer, r bitio.Reader) int64 {
 	n, err := d.TryCopyBits(w, r)
 	if err != nil {
-		d.IOPanic(err, "CopyBits: Copy")
+		d.IOPanic(err, "", "CopyBits")
 	}
 	return n
 }
@@ -277,7 +277,7 @@ func (d *D) TryCopy(w io.Writer, r io.Reader) (int64, error) {
 func (d *D) Copy(w io.Writer, r io.Reader) int64 {
 	n, err := d.TryCopy(w, r)
 	if err != nil {
-		d.IOPanic(err, "Copy")
+		d.IOPanic(err, "", "Copy")
 	}
 	return n
 }
@@ -285,7 +285,7 @@ func (d *D) Copy(w io.Writer, r io.Reader) int64 {
 func (d *D) CloneReadSeeker(br bitio.ReadSeeker) bitio.ReadSeeker {
 	br, err := bitio.CloneReadSeeker(br)
 	if err != nil {
-		d.IOPanic(err, "CloneReadSeeker")
+		d.IOPanic(err, "", "CloneReadSeeker")
 	}
 	return br
 }
@@ -308,7 +308,7 @@ func (d *D) TryReadAllBits(r bitio.Reader) ([]byte, error) {
 func (d *D) ReadAllBits(r bitio.Reader) []byte {
 	buf, err := d.TryReadAllBits(r)
 	if err != nil {
-		d.IOPanic(err, "Bytes ReadAllBytes")
+		d.IOPanic(err, "", "ReadAllBytes")
 	}
 	return buf
 }
@@ -350,7 +350,7 @@ func (d *D) FillGaps(r ranges.Range, namePrefix string) {
 	for i, gap := range gaps {
 		br, err := bitiox.Range(d.bitBuf, gap.Start, gap.Len)
 		if err != nil {
-			d.IOPanic(err, "FillGaps: Range")
+			d.IOPanic(err, namePrefix, "bitiox.Range")
 		}
 
 		v := &Value{
@@ -380,8 +380,8 @@ func (d *D) Fatalf(format string, a ...any) {
 	panic(DecoderError{Reason: fmt.Sprintf(format, a...), Pos: d.Pos()})
 }
 
-func (d *D) IOPanic(err error, op string) {
-	panic(IOError{Err: err, Pos: d.Pos(), Op: op})
+func (d *D) IOPanic(err error, name string, op string) {
+	panic(IOError{Err: err, Name: name, Pos: d.Pos(), Op: op})
 }
 
 // TryBits reads nBits bits from buffer
@@ -543,7 +543,7 @@ func (d *D) TryPeekFind(nBits int, seekBits int64, maxLen int64, fn func(v uint6
 func (d *D) PeekFind(nBits int, seekBits int64, maxLen int64, fn func(v uint64) bool) (int64, uint64) {
 	peekBits, v, err := d.TryPeekFind(nBits, seekBits, maxLen, fn)
 	if err != nil {
-		d.IOPanic(err, "PeekFind: TryPeekFind")
+		d.IOPanic(err, "", "PeekFind")
 	}
 	if peekBits == -1 {
 		d.Errorf("peek not found")
@@ -771,7 +771,7 @@ func (d *D) TrySeekRel(delta int64, fns ...func(d *D)) (int64, error) {
 func (d *D) SeekRel(delta int64, fns ...func(d *D)) int64 {
 	n, err := d.trySeekAbs(d.Pos()+delta, fns...)
 	if err != nil {
-		d.IOPanic(err, "SeekRel")
+		d.IOPanic(err, "", "SeekRel")
 	}
 	return n
 }
@@ -785,7 +785,7 @@ func (d *D) TrySeekAbs(pos int64, fns ...func(d *D)) (int64, error) {
 func (d *D) SeekAbs(pos int64, fns ...func(d *D)) int64 {
 	n, err := d.trySeekAbs(pos, fns...)
 	if err != nil {
-		d.IOPanic(err, "SeekAbs")
+		d.IOPanic(err, "", "SeekAbs")
 	}
 	return n
 }
@@ -955,7 +955,7 @@ func (d *D) RangeFn(firstBit int64, nBits int64, fn func(d *D)) int64 {
 	// TODO: do some kind of DecodeLimitedLen/RangeFn?
 	br := d.BitBufRange(0, firstBit+nBits)
 	if _, err := br.SeekBits(firstBit, io.SeekStart); err != nil {
-		d.IOPanic(err, "RangeFn: SeekAbs")
+		d.IOPanic(err, "", "RangeFn: SeekAbs")
 	}
 
 	nd := *d
@@ -979,7 +979,7 @@ func (d *D) Format(group *Group, inArg any) any {
 		ReadBuf:     d.readBuf,
 	})
 	if dv == nil || dv.Errors() != nil {
-		d.IOPanic(err, "Format: decode")
+		d.IOPanic(err, "", "Format: decode")
 	}
 
 	switch vv := dv.V.(type) {
@@ -992,7 +992,7 @@ func (d *D) Format(group *Group, inArg any) any {
 	}
 
 	if _, err := d.bitBuf.SeekBits(dv.Range.Len, io.SeekCurrent); err != nil {
-		d.IOPanic(err, "Format: SeekRel")
+		d.IOPanic(err, "", "Format: SeekRel")
 	}
 
 	return v
@@ -1015,7 +1015,7 @@ func (d *D) TryFieldFormat(name string, group *Group, inArg any) (*Value, any, e
 
 	d.AddChild(dv)
 	if _, err := d.bitBuf.SeekBits(dv.Range.Len, io.SeekCurrent); err != nil {
-		d.IOPanic(err, "TryFieldFormat: SeekRel")
+		d.IOPanic(err, name, "TryFieldFormat: SeekRel")
 	}
 
 	return dv, v, err
@@ -1024,7 +1024,7 @@ func (d *D) TryFieldFormat(name string, group *Group, inArg any) (*Value, any, e
 func (d *D) FieldFormat(name string, group *Group, inArg any) (*Value, any) {
 	dv, v, err := d.TryFieldFormat(name, group, inArg)
 	if dv == nil || dv.Errors() != nil {
-		d.IOPanic(err, "FieldFormat: TryFieldFormat")
+		d.IOPanic(err, name, "FieldFormat: TryFieldFormat")
 	}
 	return dv, v
 }
@@ -1054,7 +1054,7 @@ func (d *D) TryFieldFormatLen(name string, nBits int64, group *Group, inArg any)
 
 	d.AddChild(dv)
 	if _, err := d.bitBuf.SeekBits(nBits, io.SeekCurrent); err != nil {
-		d.IOPanic(err, "TryFieldFormatLen: SeekRel")
+		d.IOPanic(err, name, "TryFieldFormatLen: SeekRel")
 	}
 
 	return dv, v, err
@@ -1063,7 +1063,7 @@ func (d *D) TryFieldFormatLen(name string, nBits int64, group *Group, inArg any)
 func (d *D) FieldFormatLen(name string, nBits int64, group *Group, inArg any) (*Value, any) {
 	dv, v, err := d.TryFieldFormatLen(name, nBits, group, inArg)
 	if dv == nil || dv.Errors() != nil {
-		d.IOPanic(err, "FieldFormatLen: TryFieldFormatLen")
+		d.IOPanic(err, name, "FieldFormatLen: TryFieldFormatLen")
 	}
 	return dv, v
 }
@@ -1100,7 +1100,7 @@ func (d *D) TryFieldFormatRange(name string, firstBit int64, nBits int64, group
 func (d *D) FieldFormatRange(name string, firstBit int64, nBits int64, group *Group, inArg any) (*Value, any) {
 	dv, v, err := d.TryFieldFormatRange(name, firstBit, nBits, group, inArg)
 	if dv == nil || dv.Errors() != nil {
-		d.IOPanic(err, "FieldFormatRange: TryFieldFormatRange")
+		d.IOPanic(err, name, "FieldFormatRange: TryFieldFormatRange")
 	}
 
 	return dv, v
@@ -1130,7 +1130,7 @@ func (d *D) TryFieldFormatBitBuf(name string, br bitio.ReaderAtSeeker, group *Gr
 func (d *D) FieldFormatBitBuf(name string, br bitio.ReaderAtSeeker, group *Group, inArg any) (*Value, any) {
 	dv, v, err := d.TryFieldFormatBitBuf(name, br, group, inArg)
 	if dv == nil || dv.Errors() != nil {
-		d.IOPanic(err, "FieldFormatBitBuf: TryFieldFormatBitBuf")
+		d.IOPanic(err, name, "FieldFormatBitBuf: TryFieldFormatBitBuf")
 	}
 
 	return dv, v
@@ -1141,7 +1141,7 @@ func (d *D) FieldFormatBitBuf(name string, br bitio.ReaderAtSeeker, group *Group
 func (d *D) FieldRootBitBuf(name string, br bitio.ReaderAtSeeker, sms ...scalar.BitBufMapper) *Value {
 	brLen, err := bitiox.Len(br)
 	if err != nil {
-		d.IOPanic(err, "br Len")
+		d.IOPanic(err, name, "br Len")
 	}
 
 	v := &Value{}
@@ -1188,17 +1188,17 @@ func (d *D) FieldStructRootBitBufFn(name string, br bitio.ReaderAtSeeker, fn fun
 func (d *D) FieldFormatReaderLen(name string, nBits int64, fn func(r io.Reader) (io.ReadCloser, error), group *Group) (*Value, any) {
 	br, err := d.TryBitBufLen(nBits)
 	if err != nil {
-		d.IOPanic(err, "FieldFormatReaderLen: BitBufLen")
+		d.IOPanic(err, name, "FieldFormatReaderLen: BitBufLen")
 	}
 
 	bbBR := bitio.NewIOReader(br)
 	r, err := fn(bbBR)
 	if err != nil {
-		d.IOPanic(err, "FieldFormatReaderLen: fn")
+		d.IOPanic(err, name, "FieldFormatReaderLen: fn")
 	}
 	rBuf, err := io.ReadAll(r)
 	if err != nil {
-		d.IOPanic(err, "FieldFormatReaderLen: ReadAll")
+		d.IOPanic(err, name, "FieldFormatReaderLen: ReadAll")
 	}
 	rBR := bitio.NewBitReader(rBuf, -1)
 
@@ -1245,7 +1245,7 @@ func (d *D) FieldReaderRange(name string, startBit int64, nBits int64, fn func(r
 func (d *D) FieldReaderRangeFormat(name string, startBit int64, nBits int64, fn func(r io.Reader) io.Reader, group *Group, inArg any) (int64, bitio.ReaderAtSeeker, *Value, any) {
 	cz, rBR, dv, v, err := d.TryFieldReaderRangeFormat(name, startBit, nBits, fn, group, inArg)
 	if err != nil {
-		d.IOPanic(err, "TryFieldReaderRangeFormat")
+		d.IOPanic(err, name, "TryFieldReaderRangeFormat")
 	}
 	return cz, rBR, dv, v
 }
@@ -1268,7 +1268,7 @@ func (d *D) TryFieldValue(name string, fn func() (*Value, error)) (*Value, error
 func (d *D) FieldValue(name string, fn func() *Value) *Value {
 	v, err := d.TryFieldValue(name, func() (*Value, error) { return fn(), nil })
 	if err != nil {
-		d.IOPanic(err, "FieldValue: TryFieldValue")
+		d.IOPanic(err, name, "FieldValue: TryFieldValue")
 	}
 	return v
 }

pkg/decode/decode_gen.go.tmpl

@@ -26,7 +26,7 @@ import (
 	func (d *D) Field{{$name}}ScalarFn(name string, fn func(d *D) scalar.{{$name}}, sms ...scalar.{{$name}}Mapper) {{$t.go_type}} {
 		v, err := d.TryFieldScalar{{$name}}Fn(name, func(d *D) (scalar.{{$name}}, error) { return fn(d), nil }, sms...)
 		if err != nil {
-			panic(IOError{Err: err, Name: name, Op: "{{$name}}", Pos: d.Pos()})
+			d.IOPanic(err, name, "{{$name}}")
 		}
 		return v.Actual
 	}
@@ -48,7 +48,7 @@ import (
 	func (d *D) FieldScalar{{$name}}Fn(name string, fn func(d *D) scalar.{{$name}}, sms ...scalar.{{$name}}Mapper) *scalar.{{$name}} {
 		v, err := d.TryFieldScalar{{$name}}Fn(name, func(d *D) (scalar.{{$name}}, error) { return fn(d), nil }, sms...)
 		if err != nil {
-			panic(IOError{Err: err, Name: name, Op: "{{$name}}", Pos: d.Pos()})
+			d.IOPanic(err, name, "{{$name}}")
 		}
 		return v
 	}
@@ -181,7 +181,7 @@ import (
 			func (d *D) {{$r.name}}{{replace $v.name "$n" $n}}({{$v.params}}) {{$t.go_type}} {
 				v, err := {{replace $v.call "$n" $n}}
 				if err != nil {
-					panic(IOError{Err: err, Op: "{{$r.name}}{{replace $v.name "$n" $n}}", Pos: d.Pos()})
+					d.IOPanic(err, "", "{{$r.name}}{{replace $v.name "$n" $n}}")
 				}
 				return v
 			}
@@ -202,7 +202,7 @@ import (
 			func (d *D) FieldScalar{{$r.name}}{{replace $v.name "$n" $n}}(name string{{if $v.params}}, {{$v.params}}{{end}}, sms ...scalar.{{$r.type}}Mapper) *scalar.{{$r.type}} {
 				s, err := d.TryFieldScalar{{$r.name}}{{replace $v.name "$n" $n}}(name{{if $v.args}}, {{$v.args}}{{end}}, sms...)
 				if err != nil {
-					panic(IOError{Err: err, Name: name, Op: "{{$r.name}}{{replace $v.name "$n" $n}}", Pos: d.Pos()})
+					d.IOPanic(err, name, "{{$r.name}}{{replace $v.name "$n" $n}}")
 				}
 				return s
 			}

pkg/interp/funcs.jq

@@ -5,8 +5,6 @@ include "decode";
 
 def intdiv(a; b): _intdiv(a; b);
 
-def trim: capture("^\\s*(?<str>.*?)\\s*$"; "m").str;
-
 # does +1 and [:1] as " "*0 is null
 def rpad($s; $w): . + ($s * ($w+1-length))[1:];
 

pkg/interp/help.jq

@@ -54,9 +54,6 @@ Same as recurse without argument.
       }
   };
 
-def help($_): error("help must be alone or last in pipeline. ex: help(length) or ... | help");
-def help: help(null);
-
 def _help_format_enrich($arg0; $f; $include_basic):
   ( if $include_basic then
       .examples +=
@@ -76,6 +73,9 @@ def _help_format_enrich($arg0; $f; $include_basic):
     end
   );
 
+# trailing help gets rewritten to _help_slurp, these are here to catch other variants
+def help($_): error("help must be alone or last in pipeline. ex: help(length) or ... | help");
+def help: help(null);
 def _help($arg0; $topic):
   ( $topic
   | if  . == "usage" then
@@ -236,7 +236,7 @@ def _help($arg0; $topic):
     | ($args | length) as $argc
     | if $args == null then
         # help
-        ( "Type expression to evaluate"
+        ( "Type jq expression to evaluate"
         , "help(...)   Help for topic. Ex: help(mp4), help(\"mp4\")"
         , "\\t          Completion"
         , "Up/Down     History"

pkg/interp/testdata/help.fqtest

@@ -1,6 +1,6 @@
 $ fq -ni
 null> help
-Type expression to evaluate
+Type jq expression to evaluate
 help(...)   Help for topic. Ex: help(mp4), help("mp4")
 \t          Completion
 Up/Down     History