Merge 892a42da36 into 6ace338d58

doc: Update formats.svg

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v3
         with:
-          go-version: "1.22.5"
+          go-version: "1.22.6"
       - uses: actions/checkout@v3
       - uses: golangci/golangci-lint-action@v3
         with:
@@ -47,7 +47,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v3
         with:
-          go-version: "1.22.5"
+          go-version: "1.22.6"
       - name: Test
         env:
           GOARCH: ${{ matrix.goarch }}

.github/workflows/release.yml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v3
         with:
-          go-version: "1.22.5"
+          go-version: "1.22.6"
       - uses: goreleaser/goreleaser-action@v5
         with:
           distribution: goreleaser

Dockerfile

@@ -1,5 +1,5 @@
 # bump: docker-golang /FROM golang:([\d.]+)/ docker:golang|^1
-FROM golang:1.22.5-bookworm AS base
+FROM golang:1.22.6-bookworm AS base
 
 # expect is used to test cli
 RUN \

README.md

@@ -141,12 +141,14 @@ pssh_playready,
 [rtmp](doc/formats.md#rtmp),
 sll2_packet,
 sll_packet,
+[tap](doc/formats.md#tap),
 tar,
 tcp_segment,
 tiff,
 [tls](doc/formats.md#tls),
 toml,
 [tzif](doc/formats.md#tzif),
+[tzx](doc/formats.md#tzx),
 udp_datagram,
 vorbis_comment,
 vorbis_packet,
@@ -167,8 +169,9 @@ It can also work with some common text formats like URLs, hex, base64, PEM etc a
 
 For details see [formats.md](doc/formats.md) and [usage.md](doc/usage.md).
 
-## Presentations
+## Presentations and media
 
+- [PBS Tidbit 8 of Y: Interview with jq Maintainer Mattias Wadman](https://pbs.bartificer.net/tidbit8) - English podcast episode about jq and some fq.
 - [Kodsnack 585 - Polymorfisk JSON](https://kodsnack.se/585/) - Swedish podcast episode about jq and fq
 - "fq - jq for binary formats" at [FOSDEM 2023](https://fosdem.org/2023/) - [video & slides](https://fosdem.org/2023/schedule/event/bintools_fq/)
 - "fq - jq for binary formats" at [No time to wait 6](https://mediaarea.net/NoTimeToWait6) - [video](https://www.youtube.com/watch?v=-Pwt5KL-xRs&t=1450s) - [slides](doc/presentations/nttw6/fq-nttw6-slides.pdf)

doc/formats.md

@@ -113,12 +113,14 @@
 |[`rtmp`](#rtmp)                                                 |Real-Time&nbsp;Messaging&nbsp;Protocol                                                                       |<sub>`amf0` `mpeg_asc`</sub>|
 |`sll2_packet`                                                   |Linux&nbsp;cooked&nbsp;capture&nbsp;encapsulation&nbsp;v2                                                    |<sub>`inet_packet`</sub>|
 |`sll_packet`                                                    |Linux&nbsp;cooked&nbsp;capture&nbsp;encapsulation                                                            |<sub>`inet_packet`</sub>|
+|[`tap`](#tap)                                                   |TAP&nbsp;tape&nbsp;format&nbsp;for&nbsp;ZX&nbsp;Spectrum&nbsp;computers                                      |<sub></sub>|
 |`tar`                                                           |Tar&nbsp;archive                                                                                             |<sub>`probe`</sub>|
 |`tcp_segment`                                                   |Transmission&nbsp;control&nbsp;protocol&nbsp;segment                                                         |<sub></sub>|
 |`tiff`                                                          |Tag&nbsp;Image&nbsp;File&nbsp;Format                                                                         |<sub>`icc_profile`</sub>|
 |[`tls`](#tls)                                                   |Transport&nbsp;layer&nbsp;security                                                                           |<sub>`asn1_ber`</sub>|
 |`toml`                                                          |Tom's&nbsp;Obvious,&nbsp;Minimal&nbsp;Language                                                               |<sub></sub>|
 |[`tzif`](#tzif)                                                 |Time&nbsp;Zone&nbsp;Information&nbsp;Format                                                                  |<sub></sub>|
+|[`tzx`](#tzx)                                                   |TZX&nbsp;tape&nbsp;format&nbsp;for&nbsp;ZX&nbsp;Spectrum&nbsp;computers                                      |<sub>`tap`</sub>|
 |`udp_datagram`                                                  |User&nbsp;datagram&nbsp;protocol                                                                             |<sub>`udp_payload`</sub>|
 |`vorbis_comment`                                                |Vorbis&nbsp;comment                                                                                          |<sub>`flac_picture`</sub>|
 |`vorbis_packet`                                                 |Vorbis&nbsp;packet                                                                                           |<sub>`vorbis_comment`</sub>|
@@ -137,7 +139,7 @@
 |`ip_packet`                                                     |Group                                                                                                        |<sub>`icmp` `icmpv6` `tcp_segment` `udp_datagram`</sub>|
 |`link_frame`                                                    |Group                                                                                                        |<sub>`bsd_loopback_frame` `ether8023_frame` `ipv4_packet` `ipv6_packet` `sll2_packet` `sll_packet`</sub>|
 |`mp3_frame_tags`                                                |Group                                                                                                        |<sub>`mp3_frame_vbri` `mp3_frame_xing`</sub>|
-|`probe`                                                         |Group                                                                                                        |<sub>`adts` `aiff` `apple_bookmark` `ar` `avi` `avro_ocf` `bitcoin_blkdat` `bplist` `bzip2` `caff` `elf` `fit` `flac` `gif` `gzip` `html` `jp2c` `jpeg` `json` `jsonl` `leveldb_table` `luajit` `macho` `macho_fat` `matroska` `moc3` `mp3` `mp4` `mpeg_ts` `nes` `ogg` `opentimestamps` `pcap` `pcapng` `png` `tar` `tiff` `toml` `tzif` `wasm` `wav` `webp` `xml` `yaml` `zip`</sub>|
+|`probe`                                                         |Group                                                                                                        |<sub>`adts` `aiff` `apple_bookmark` `ar` `avi` `avro_ocf` `bitcoin_blkdat` `bplist` `bzip2` `caff` `elf` `fit` `flac` `gif` `gzip` `html` `jp2c` `jpeg` `json` `jsonl` `leveldb_table` `luajit` `macho` `macho_fat` `matroska` `moc3` `mp3` `mp4` `mpeg_ts` `nes` `ogg` `opentimestamps` `pcap` `pcapng` `png` `tar` `tiff` `toml` `tzif` `tzx` `wasm` `wav` `webp` `xml` `yaml` `zip`</sub>|
 |`tcp_stream`                                                    |Group                                                                                                        |<sub>`dns_tcp` `rtmp` `tls`</sub>|
 |`udp_payload`                                                   |Group                                                                                                        |<sub>`dns`</sub>|
 
@@ -1209,6 +1211,26 @@ fq '.tcp_connections[] | select(.server.port=="rtmp") | d' file.cap
 - https://rtmp.veriskope.com/docs/spec/
 - https://rtmp.veriskope.com/pdf/video_file_format_spec_v10.pdf
 
+## tap
+TAP tape format for ZX Spectrum computers.
+
+The TAP- (and BLK-) format is nearly a direct copy of the data that is stored
+in real tapes, as it is written by the ROM save routine of the ZX-Spectrum.
+A TAP file is simply one data block or a group of 2 or more data blocks, one
+followed after the other. The TAP file may be empty.
+
+You will often find this format embedded inside the TZX tape format.
+
+The default file extension is `.tap`.
+
+### Authors
+
+- Michael R. Cook work.mrc@pm.me, original author
+
+### References
+
+- https://worldofspectrum.net/zx-modules/fileformats/tapformat.html
+
 ## tls
 Transport layer security.
 
@@ -1378,6 +1400,27 @@ fq '.v2plusdatablock.leap_second_records | length' tziffile
 ### References
 - https://datatracker.ietf.org/doc/html/rfc8536
 
+## tzx
+TZX tape format for ZX Spectrum computers.
+
+`TZX` is a file format designed to preserve cassette tapes compatible with the
+ZX Spectrum computers, although some specialized versions of the format have
+been defined for other machines such as the Amstrad CPC and C64.
+
+The format was originally created by Tomaz Kac, who was maintainer until
+`revision 1.13`, before passing it to Martijn v.d. Heide. For a brief period
+the company Ramsoft became the maintainers, and created revision `v1.20`.
+
+The default file extension is `.tzx`.
+
+### Authors
+
+- Michael R. Cook work.mrc@pm.me, original author
+
+### References
+
+- https://worldofspectrum.net/TZXformat.html
+
 ## wasm
 WebAssembly Binary Format.
 

format/all/all.fqtest

@@ -28,10 +28,12 @@ $ fq -n _registry.groups.probe
   "opentimestamps",
   "pcap",
   "pcapng",
+  "pe",
   "png",
   "tar",
   "tiff",
   "tzif",
+  "tzx",
   "wasm",
   "webp",
   "zip",
@@ -81,6 +83,7 @@ bytes                Raw bytes
 bzip2                bzip2 compression
 caff                 Live2D Cubism archive
 cbor                 Concise Binary Object Representation
+coff                 Common Object File Format
 csv                  Comma separated values
 dns                  DNS packet
 dns_tcp              DNS packet (TCP)
@@ -137,6 +140,7 @@ mpeg_pes             MPEG Packetized elementary stream
 mpeg_pes_packet      MPEG Packetized elementary stream packet
 mpeg_spu             Sub Picture Unit (DVD subtitle)
 mpeg_ts              MPEG Transport Stream
+msdos_stub           MS-DOS Stub
 msgpack              MessagePack
 nes                  iNES/NES 2.0 cartridge ROM format
 ogg                  OGG file
@@ -145,6 +149,7 @@ opentimestamps       OpenTimestamps file
 opus_packet          Opus packet
 pcap                 PCAP packet capture
 pcapng               PCAPNG packet capture
+pe                   Portable Executable
 pg_btree             PostgreSQL btree index file
 pg_control           PostgreSQL control file
 pg_heap              PostgreSQL heap file
@@ -156,12 +161,14 @@ pssh_playready       PlayReady PSSH
 rtmp                 Real-Time Messaging Protocol
 sll2_packet          Linux cooked capture encapsulation v2
 sll_packet           Linux cooked capture encapsulation
+tap                  TAP tape format for ZX Spectrum computers
 tar                  Tar archive
 tcp_segment          Transmission control protocol segment
 tiff                 Tag Image File Format
 tls                  Transport layer security
 toml                 Tom's Obvious, Minimal Language
 tzif                 Time Zone Information Format
+tzx                  TZX tape format for ZX Spectrum computers
 udp_datagram         User datagram protocol
 vorbis_comment       Vorbis comment
 vorbis_packet        Vorbis packet

format/all/all.go

@@ -46,18 +46,21 @@ import (
 	_ "github.com/wader/fq/format/opentimestamps"
 	_ "github.com/wader/fq/format/opus"
 	_ "github.com/wader/fq/format/pcap"
+	_ "github.com/wader/fq/format/pe"
 	_ "github.com/wader/fq/format/png"
 	_ "github.com/wader/fq/format/postgres"
 	_ "github.com/wader/fq/format/prores"
 	_ "github.com/wader/fq/format/protobuf"
 	_ "github.com/wader/fq/format/riff"
 	_ "github.com/wader/fq/format/rtmp"
+	_ "github.com/wader/fq/format/tap"
 	_ "github.com/wader/fq/format/tar"
 	_ "github.com/wader/fq/format/text"
 	_ "github.com/wader/fq/format/tiff"
 	_ "github.com/wader/fq/format/tls"
 	_ "github.com/wader/fq/format/toml"
 	_ "github.com/wader/fq/format/tzif"
+	_ "github.com/wader/fq/format/tzx"
 	_ "github.com/wader/fq/format/vorbis"
 	_ "github.com/wader/fq/format/vpx"
 	_ "github.com/wader/fq/format/wasm"

format/format.go

@@ -89,6 +89,7 @@ var (
 	Bzip2               = &decode.Group{Name: "bzip2"}
 	CAFF                = &decode.Group{Name: "caff"}
 	CBOR                = &decode.Group{Name: "cbor"}
+	COFF                = &decode.Group{Name: "coff"}
 	CSV                 = &decode.Group{Name: "csv"}
 	DNS                 = &decode.Group{Name: "dns"}
 	DNS_TCP             = &decode.Group{Name: "dns_tcp"}
@@ -145,7 +146,8 @@ var (
 	MPEG_PES_Packet     = &decode.Group{Name: "mpeg_pes_packet"}
 	MPEG_SPU            = &decode.Group{Name: "mpeg_spu"}
 	MPEG_TS             = &decode.Group{Name: "mpeg_ts"}
-	MPES_PES            = &decode.Group{Name: "mpeg_pes"}
+	MPEG_PES            = &decode.Group{Name: "mpeg_pes"}
+	MSDOS_Stub          = &decode.Group{Name: "msdos_stub"}
 	MsgPack             = &decode.Group{Name: "msgpack"}
 	NES                 = &decode.Group{Name: "nes"}
 	Ogg                 = &decode.Group{Name: "ogg"}
@@ -154,6 +156,7 @@ var (
 	Opus_Packet         = &decode.Group{Name: "opus_packet"}
 	PCAP                = &decode.Group{Name: "pcap"}
 	PCAPNG              = &decode.Group{Name: "pcapng"}
+	PE                  = &decode.Group{Name: "pe"}
 	Pg_BTree            = &decode.Group{Name: "pg_btree"}
 	Pg_Control          = &decode.Group{Name: "pg_control"}
 	Pg_Heap             = &decode.Group{Name: "pg_heap"}
@@ -165,12 +168,14 @@ var (
 	RTMP                = &decode.Group{Name: "rtmp"}
 	SLL_Packet          = &decode.Group{Name: "sll_packet"}
 	SLL2_Packet         = &decode.Group{Name: "sll2_packet"}
+	TAP                 = &decode.Group{Name: "tap"}
 	TAR                 = &decode.Group{Name: "tar"}
 	TCP_Segment         = &decode.Group{Name: "tcp_segment"}
 	TIFF                = &decode.Group{Name: "tiff"}
 	TLS                 = &decode.Group{Name: "tls"}
 	TOML                = &decode.Group{Name: "toml"}
 	Tzif                = &decode.Group{Name: "tzif"}
+	TZX                 = &decode.Group{Name: "tzx"}
 	UDP_Datagram        = &decode.Group{Name: "udp_datagram"}
 	Vorbis_Comment      = &decode.Group{Name: "vorbis_comment"}
 	Vorbis_Packet       = &decode.Group{Name: "vorbis_packet"}
@@ -404,3 +409,11 @@ type Pg_Heap_In struct {
 type Pg_BTree_In struct {
 	Page int `doc:"First page number in file, default is 0"`
 }
+
+type MS_DOS_Out struct {
+	LFANew int // logical file address for the New Executable header
+}
+
+type COFF_In struct {
+	FilePointerOffset int `doc:"File pointer offset"`
+}

format/mpeg/mpeg_pes.go

@@ -16,7 +16,7 @@ var mpegSpuGroup decode.Group
 
 func init() {
 	interp.RegisterFormat(
-		format.MPES_PES,
+		format.MPEG_PES,
 		&decode.Format{
 			Description: "MPEG Packetized elementary stream",
 			DecodeFn:    pesDecode,

format/pe/coff.go

@@ -0,0 +1,717 @@
+package pe
+
+// string table:
+// .coff.pointer_to_symbol_table as $off | .coff.number_of_symbols as $n | ($off+($n*18)) as $o | (tobytes[$o:$o+4] | explode | reverse |tobytes |  tonumber) as $s | tobytes[$o:$o+$s] | dd
+
+// https://osandamalith.com/2020/07/19/exploring-the-ms-dos-stub/
+// https://learn.microsoft.com/en-us/windows/win32/debug/pe-format
+// https://upload.wikimedia.org/wikipedia/commons/1/1b/Portable_Executable_32_bit_Structure_in_SVG_fixed.svg
+
+import (
+	"encoding/binary"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+	"github.com/wader/fq/pkg/scalar"
+)
+
+func init() {
+	interp.RegisterFormat(
+		format.COFF,
+		&decode.Format{
+			Description: "Common Object File Format",
+			DecodeFn:    peCoffStubDecode,
+			DefaultInArg: format.COFF_In{
+				FilePointerOffset: 0,
+			},
+		})
+}
+
+const (
+	peFormat32     = 0x10b
+	peFormat32Plus = 0x20b
+)
+
+var peFormatNames = scalar.UintMapSymStr{
+	peFormat32:     "pe32",
+	peFormat32Plus: "pe32+",
+}
+
+const (
+	MachineTypeUNKNOWN = 0x0
+	MachineTypeALPHA   = 0x184
+	MachineTypeALPHA64 = 0x284
+	MachineTypeAM33    = 0x1d3
+	MachineTypeAMD64   = 0x8664
+	MachineTypeARM     = 0x1c0
+	MachineTypeARM64   = 0xaa64
+	MachineTypeARMNT   = 0x1c4
+	// duplicate
+	// MachineTypeAXP64       = 0x284
+	MachineTypeEBC         = 0xebc
+	MachineTypeI386        = 0x14c
+	MachineTypeIA64        = 0x200
+	MachineTypeLOONGARCH32 = 0x6232
+	MachineTypeLOONGARCH64 = 0x6264
+	MachineTypeM32R        = 0x9041
+	MachineTypeMIPS16      = 0x266
+	MachineTypeMIPSFPU     = 0x366
+	MachineTypeMIPSFPU16   = 0x466
+	MachineTypePOWERPC     = 0x1f0
+	MachineTypePOWERPCFP   = 0x1f1
+	MachineTypeR4000       = 0x166
+	MachineTypeRISCV32     = 0x5032
+	MachineTypeRISCV64     = 0x5064
+	MachineTypeRISCV128    = 0x5128
+	MachineTypeSH3         = 0x1a2
+	MachineTypeSH3DSP      = 0x1a3
+	MachineTypeSH4         = 0x1a6
+	MachineTypeSH5         = 0x1a8
+	MachineTypeTHUMB       = 0x1c2
+	MachineTypeWCEMIPSV2   = 0x169
+)
+
+var MachineTypeNames = scalar.UintMapSymStr{
+	MachineTypeUNKNOWN: "unknown",
+	MachineTypeALPHA:   "alpha",
+	MachineTypeALPHA64: "alpha64",
+	MachineTypeAM33:    "am33",
+	MachineTypeAMD64:   "amd64",
+	MachineTypeARM:     "arm",
+	MachineTypeARM64:   "arm64",
+	MachineTypeARMNT:   "armnt",
+	//MachineTypeAXP64:        "axp64",
+	MachineTypeEBC:         "ebc",
+	MachineTypeI386:        "i386",
+	MachineTypeIA64:        "ia64",
+	MachineTypeLOONGARCH32: "loongarch32",
+	MachineTypeLOONGARCH64: "loongarch64",
+	MachineTypeM32R:        "m32r",
+	MachineTypeMIPS16:      "mips16",
+	MachineTypeMIPSFPU:     "mipsfpu",
+	MachineTypeMIPSFPU16:   "mipsfpu16",
+	MachineTypePOWERPC:     "powerpc",
+	MachineTypePOWERPCFP:   "powerpcfp",
+	MachineTypeR4000:       "r4000",
+	MachineTypeRISCV32:     "riscv32",
+	MachineTypeRISCV64:     "riscv64",
+	MachineTypeRISCV128:    "riscv128",
+	MachineTypeSH3:         "sh3",
+	MachineTypeSH3DSP:      "sh3dsp",
+	MachineTypeSH4:         "sh4",
+	MachineTypeSH5:         "sh5",
+	MachineTypeTHUMB:       "thumb",
+	MachineTypeWCEMIPSV2:   "wcemipsv2",
+}
+
+const (
+	SubSystemUNKNOWN                  = 0
+	SubSystemNATIVE                   = 1
+	SubSystemWINDOWS_GUI              = 2
+	SubSystemWINDOWS_CUI              = 3
+	SubSystemOS2_CUI                  = 5
+	SubSystemPOSIX_CUI                = 7
+	SubSystemNATIVE_WINDOWS           = 8
+	SubSystemWINDOWS_CE_GUI           = 9
+	SubSystemEFI_APPLICATION          = 10
+	SubSystemEFI_BOOT_SERVICE_DRIVER  = 11
+	SubSystemEFI_RUNTIME_DRIVER       = 12
+	SubSystemEFI_ROM                  = 13
+	SubSystemXBOX                     = 14
+	SubSystemWINDOWS_BOOT_APPLICATION = 16
+)
+
+var subSystemNames = scalar.UintMapSymStr{
+	SubSystemUNKNOWN:                  "unknown",
+	SubSystemNATIVE:                   "native",
+	SubSystemWINDOWS_GUI:              "windows_gui",
+	SubSystemWINDOWS_CUI:              "windows_cui",
+	SubSystemOS2_CUI:                  "os2_cui",
+	SubSystemPOSIX_CUI:                "posix_cui",
+	SubSystemNATIVE_WINDOWS:           "native_windows",
+	SubSystemWINDOWS_CE_GUI:           "windows_ce_gui",
+	SubSystemEFI_APPLICATION:          "efi_application",
+	SubSystemEFI_BOOT_SERVICE_DRIVER:  "efi_boot_service_driver",
+	SubSystemEFI_RUNTIME_DRIVER:       "efi_runtime_driver",
+	SubSystemEFI_ROM:                  "efi_rom",
+	SubSystemXBOX:                     "xbox",
+	SubSystemWINDOWS_BOOT_APPLICATION: "windows_boot_application",
+}
+
+const (
+	symClassEndOfFunction   = 0xff // A special symbol that represents the end of function, for debugging purposes.
+	symClassNull            = 0    // No assigned storage class.
+	symClassAutomatic       = 1    // The automatic (stack) variable. The Value field specifies the stack frame offset.
+	symClassExternal        = 2    // A value that Microsoft tools use for external symbols. The Value field indicates the size if the section number is IMAGE_SYM_UNDEFINED (0). If the section number is not zero, then the Value field specifies the offset within the section.
+	symClassStatic          = 3    // The offset of the symbol within the section. If the Value field is zero, then the symbol represents a section name.
+	symClassRegister        = 4    // A register variable. The Value field specifies the register number.
+	symClassExternalDef     = 5    // A symbol that is defined externally.
+	symClassLabel           = 6    // A code label that is defined within the module. The Value field specifies the offset of the symbol within the section.
+	symClassUndefinedLabel  = 7    // A reference to a code label that is not defined.
+	symClassMemberOfStruct  = 8    // The structure member. The Value field specifies the n th member.
+	symClassArgument        = 9    // A formal argument (parameter) of a function. The Value field specifies the n th argument.
+	symClassStructTag       = 10   // The structure tag-name entry.
+	symClassMemberOfUnion   = 11   // A union member. The Value field specifies the n th member.
+	symClassUnionTag        = 12   // The Union tag-name entry.
+	symClassTypeDefinition  = 13   // A Typedef entry.
+	symClassUndefinedStatic = 14   // A static data declaration.
+	symClassEnumTag         = 15   // An enumerated type tagname entry.
+	symClassMemberOfEnum    = 16   // A member of an enumeration. The Value field specifies the n th member.
+	symClassRegisterParam   = 17   // A register parameter.
+	symClassBitField        = 18   // A bit-field reference. The Value field specifies the n th bit in the bit field.
+	symClassBlock           = 100  // A .bb (beginning of block) or .eb (end of block) record. The Value field is the relocatable address of the code location.
+	symClassFunction        = 101  // A value that Microsoft tools use for symbol records that define the extent of a function: begin function (.bf ), end function ( .ef ), and lines in function ( .lf ). For .lf records, the Value field gives the number of source lines in the function. For .ef records, the Value field gives the size of the function code.
+	symClassEndOfStruct     = 102  // An end-of-structure entry.
+	symClassFile            = 103  // A value that Microsoft tools, as well as traditional COFF format, use for the source-file symbol record. The symbol is followed by auxiliary records that name the file.
+	symClassSection         = 104  // A definition of a section (Microsoft tools use STATIC storage class instead).
+	symClassWeakExternal    = 105  // A weak external. For more information, see Auxiliary Format 3: Weak Externals.
+	symClassClrToken        = 107  // A CLR token symbol. The name is an ASCII string that consists of the hexadecimal value of the token. For more information, see CLR Token Definition (Object Only).
+)
+
+var symClassNames = scalar.UintMapSymStr{
+	symClassEndOfFunction:   "end_of_function",
+	symClassNull:            "null",
+	symClassAutomatic:       "automatic",
+	symClassExternal:        "external",
+	symClassStatic:          "static",
+	symClassRegister:        "register",
+	symClassExternalDef:     "external_def",
+	symClassLabel:           "label",
+	symClassUndefinedLabel:  "undefined_label",
+	symClassMemberOfStruct:  "member_of_struct",
+	symClassArgument:        "argument",
+	symClassStructTag:       "struct_tag",
+	symClassMemberOfUnion:   "member_of_union",
+	symClassUnionTag:        "union_tag",
+	symClassTypeDefinition:  "type_definition",
+	symClassUndefinedStatic: "undefined_static",
+	symClassEnumTag:         "enum_tag",
+	symClassMemberOfEnum:    "member_of_enum",
+	symClassRegisterParam:   "register_param",
+	symClassBitField:        "bit_field",
+	symClassBlock:           "block",
+	symClassFunction:        "function",
+	symClassEndOfStruct:     "end_of_struct",
+	symClassFile:            "file",
+	symClassSection:         "section",
+	symClassWeakExternal:    "weak_external",
+	symClassClrToken:        "clr_token",
+}
+
+const (
+	symTypeNull   = 0
+	symTypeVoid   = 1
+	symTypeChar   = 2
+	symTypeShort  = 3
+	symTypeInt    = 4
+	symTypeLong   = 5
+	symTypeFloat  = 6
+	symTypeDouble = 7
+	symTypeStruct = 8
+	symTypeUnion  = 9
+	symTypeEnum   = 10
+	symTypeMoe    = 11
+	symTypeByte   = 12
+	symTypeWord   = 13
+	symTypeUint   = 14
+	symTypeDword  = 15
+)
+
+var symBaseTypeNames = scalar.UintMapSymStr{
+	symTypeNull:   "null",
+	symTypeVoid:   "void",
+	symTypeChar:   "char",
+	symTypeShort:  "short",
+	symTypeInt:    "int",
+	symTypeLong:   "long",
+	symTypeFloat:  "float",
+	symTypeDouble: "double",
+	symTypeStruct: "struct",
+	symTypeUnion:  "union",
+	symTypeEnum:   "enum",
+	symTypeMoe:    "moe",
+	symTypeByte:   "byte",
+	symTypeWord:   "word",
+	symTypeUint:   "uint",
+	symTypeDword:  "dword",
+}
+
+const (
+	symDtypeNull     = 0
+	symDtypePointer  = 1
+	symDtypeFunction = 2
+	symDtypeArray    = 3
+)
+
+var symBaseDTypeNames = scalar.UintMapSymStr{
+	symDtypeNull:     "null",
+	symDtypePointer:  "pointer",
+	symDtypeFunction: "function",
+	symDtypeArray:    "array",
+}
+
+// type stringTable []string
+
+// func (m stringTable) MapStr(s scalar.Str) (scalar.Str, error) {
+// 	if s.Actual == "" || s.Actual[0] != '/' {
+// 		return s, nil
+// 	}
+// 	un, err := strconv.ParseUint(s.Actual[1:], 10, 64)
+// 	if err != nil {
+// 		// ignore error
+// 		//nolint: nilerr
+// 		return s, nil
+// 	}
+// 	n := int(un)
+// 	if n >= len(m) {
+// 		return s, nil
+// 	}
+
+// 	s.Sym = m[n]
+
+// 	return s, nil
+// }
+
+func strIndexNull(idx int, s string) string {
+	if idx > len(s) {
+		return ""
+	}
+	i := strings.IndexByte(s[idx:], 0)
+	if i == -1 {
+		return s
+	}
+	return s[idx : idx+i]
+}
+
+type stringTable string
+
+func (m stringTable) MapStr(s scalar.Str) (scalar.Str, error) {
+	if s.Actual[0] == '/' {
+		// /### section name
+
+		s.Actual = strings.TrimRight(s.Actual, "\x00")
+
+		un, err := strconv.ParseUint(s.Actual[1:], 10, 64)
+		if err != nil {
+			// ignore error
+			//nolint: nilerr
+			return s, nil
+		}
+		n := int(un) - 4
+
+		s.Sym = strIndexNull(n, string(m))
+
+		return s, nil
+	} else if s.Actual[0:4] == "\x00\x00\x00\x00" {
+		// \0\0\0\0LE32 symbol name
+		n := binary.LittleEndian.Uint32([]byte(s.Actual)[4:8]) - 4
+		s.Sym = strIndexNull(int(n), string(m))
+	} else {
+		// right null padded
+		s.Actual = strings.TrimRight(s.Actual, "\x00")
+	}
+
+	return s, nil
+}
+
+func peCoffStubDecode(d *decode.D) any {
+	var pci format.COFF_In
+	d.ArgAs(&pci)
+
+	addrSize := 64
+
+	d.Endian = decode.LittleEndian
+
+	d.FieldRawLen("signature", 4*8, d.AssertBitBuf([]byte("PE\x00\x00")))
+	d.FieldU16("machine", MachineTypeNames, scalar.UintHex)
+	numberOfSections := d.FieldU16("number_of_sections")
+	d.FieldU32("time_date_stamp", scalar.UintActualUnixTimeDescription(time.Second, time.RFC3339))
+	pointerToSymbolTable := d.FieldU32("pointer_to_symbol_table", scalar.UintHex)
+	numberOfSymbols := d.FieldU32("number_of_symbols")
+	sizeOfOptionalHeader := d.FieldU16("size_of_optional_header")
+	d.FieldStruct("characteristics", func(d *decode.D) {
+		// bytes swapped as it's a 16bit LE
+		d.FieldBool("bytes_reversed_lo")   //  0x0080 // Little endian: the least significant bit (LSB) precedes the most significant bit (MSB) in memory. This flag is deprecated and should be zero.
+		d.FieldBool("reserved")            //  0x0040 // This flag is reserved for future use.
+		d.FieldBool("large_address_aware") //  0x0020 // Application can handle > 2-GB addresses.
+		d.FieldBool("aggressive_ws_trim")  //  0x0010 // Obsolete. Aggressively trim working set. This flag is deprecated for Windows 2000 and later and must be zero.
+		d.FieldBool("local_syms_stripped") //  0x0008 // COFF symbol table entries for local symbols have been removed. This flag is deprecated and should be zero.
+		d.FieldBool("line_nums_stripped")  //  0x0004 // COFF line numbers have been removed. This flag is deprecated and should be zero.
+		d.FieldBool("executable_image")    //  0x0002 // Image only. This indicates that the image file is valid and can be run. If this flag is not set, it indicates a linker error.
+		d.FieldBool("relocs_stripped")     //  0x0001 // Image only, Windows CE, and Microsoft Windows NT and later. This indicates that the file does not contain base relocations and must therefore be loaded at its preferred base address. If the base address is not available, the loader reports an error. The default behavior of the linker is to strip base relocations from executable (EXE) files.
+
+		d.FieldBool("bytes_reversed_hi")       //  0x8000 // Big endian: the MSB precedes the LSB in memory. This flag is deprecated and should be zero.
+		d.FieldBool("up_system_only")          //  0x4000 // The file should be run only on a uniprocessor machine.
+		d.FieldBool("dll")                     //  0x2000 // The image file is a dynamic-link library (DLL). Such files are considered executable files for almost all purposes, although they cannot be directly run.
+		d.FieldBool("system")                  //  0x1000 // The image file is a system file, not a user program.
+		d.FieldBool("net_run_from_swap")       //  0x0800 // If the image is on network media, fully load it and copy it to the swap file.
+		d.FieldBool("removable_run_from_swap") //  0x0400 // If the image is on removable media, fully load it and copy it to the swap file.
+		d.FieldBool("debug_stripped")          //  0x0200 // Debugging information is removed from the image file.
+		d.FieldBool("32bit_machine")           //  0x0100 // Machine is based on a 32-bit-word architecture.
+	})
+
+	if pointerToSymbolTable != 0 {
+		pointerToSymbolTable -= uint64(pci.FilePointerOffset)
+	}
+	stringTablePos := (int64(pointerToSymbolTable) + int64(numberOfSymbols)*18) * 8
+
+	var stringTableMapper stringTable
+	if stringTablePos < d.Len()+4*8 {
+		d.SeekAbs(stringTablePos, func(d *decode.D) {
+			stringTableSize := d.U32() - 4
+			if stringTableSize*8 > uint64(d.BitsLeft()) {
+				return
+			}
+			stringTableMapper = stringTable(d.UTF8(int(stringTableSize)))
+			// d.FramedFn(int64(stringTableSize)*8, func(d *decode.D) {
+			// 	for !d.End() {
+			// 		stringTable = append(stringTable, d.UTF8Null())
+			// 	}
+			// })
+		})
+	}
+
+	// how to know if image only? windows specific?
+	if sizeOfOptionalHeader > 0 {
+		d.FieldStruct("optional_header", func(d *decode.D) {
+			d.FramedFn(int64(sizeOfOptionalHeader)*8, func(d *decode.D) {
+				peFormat := d.FieldU16("format", peFormatNames, scalar.UintHex)
+				d.FieldU8("major_linker_version")
+				d.FieldU8("minor_linker_version")
+				d.FieldU32("size_of_code")
+				d.FieldU32("size_of_initialized_data")
+				d.FieldU32("size_of_uninitialized_data")
+				d.FieldU32("address_of_entry_point", scalar.UintHex)
+				d.FieldU32("base_of_code", scalar.UintHex)
+				if peFormat == peFormat32 {
+					d.FieldU32("base_of_data", scalar.UintHex)
+					addrSize = 32
+				}
+
+				d.FieldU("image_base", addrSize, scalar.UintHex)
+				d.FieldU32("section_alignment")
+				d.FieldU32("file_alignment")
+				d.FieldU16("major_os_version")
+				d.FieldU16("minor_os_version")
+				d.FieldU16("major_image_version")
+				d.FieldU16("minor_image_version")
+				d.FieldU16("major_subsystem_version")
+				d.FieldU16("minor_subsystem_version")
+				d.FieldU32("win32_version")
+				d.FieldU32("size_of_image")
+				d.FieldU32("size_of_headers")
+				d.FieldU32("chunk_sum", scalar.UintHex)
+				d.FieldU16("subsystem", subSystemNames)
+				d.FieldStruct("dll_characteristics", func(d *decode.D) {
+					d.FieldBool("force_integrity") // Code Integrity checks are enforced.
+					d.FieldBool("dynamic_base")    // DLL can be relocated at load time.
+					d.FieldBool("high_entropy_va") // Image can handle a high entropy 64-bit virtual address space.
+					d.FieldBool("reserved0")       // ??
+					d.FieldBool("reserved1")
+					d.FieldBool("reserved2")
+					d.FieldBool("reserved3")
+					d.FieldBool("reserved4")
+
+					d.FieldBool("terminal_server_aware") // Terminal Server aware.
+					d.FieldBool("guard_cf")              // Image supports Control Flow Guard.
+					d.FieldBool("wdm_driver")            // A WDM driver.
+					d.FieldBool("appcontainer")          // Image must execute in an AppContainer.
+					d.FieldBool("no_bind")               // Do not bind the image.
+					d.FieldBool("no_seh")                // Does not use structured exception (SE) handling. No SE handler may be called in this image.
+					d.FieldBool("no_isolation")          // Isolation aware, but do not isolate the image.
+					d.FieldBool("nx_compat")             // Image is NX compatible.
+				})
+				d.FieldU("size_of_track_reserve", addrSize)
+				d.FieldU("size_of_stack_commit", addrSize)
+				d.FieldU("size_of_heap_reserve", addrSize)
+				d.FieldU("size_of_heap_commit", addrSize)
+				d.FieldU32("loader_flags")
+				d.FieldU32("number_of_rva_and_sizes")
+
+				d.FieldU32("export_table_address", scalar.UintHex) //The export table address and size. For more information see .edata Section (Image Only).
+				d.FieldU32("export_table_size")
+				d.FieldU32("import_table_address", scalar.UintHex) //The import table address and size. For more information, see The .idata Section.
+				d.FieldU32("import_table_size")
+				d.FieldU32("resource_table_address", scalar.UintHex) //The resource table address and size. For more information, see The .rsrc Section.
+				d.FieldU32("resource_table_size")
+				d.FieldU32("exception_table_address", scalar.UintHex) //The exception table address and size. For more information, see The .pdata Section.
+				d.FieldU32("exception_table_size")
+				d.FieldU32("certificate_table_address", scalar.UintHex) //The attribute certificate table address and size. For more information, see The Attribute Certificate Table (Image Only).
+				d.FieldU32("certificate_table_size")
+				d.FieldU32("base_relocation_table_address", scalar.UintHex) //The base relocation table address and size. For more information, see The .reloc Section (Image Only).
+				d.FieldU32("base_relocation_table_size")
+				d.FieldU32("debug_address", scalar.UintHex) //The debug data starting address and size. For more information, see The .debug Section.
+				d.FieldU32("debug_size")
+				d.FieldU64("architecture")                      //Reserved, must be 0
+				d.FieldU64("global_ptr", scalar.UintHex)        //The RVA of the value to be stored in the global pointer register. The size member of this structure must be set to zero.
+				d.FieldU32("tls_table_address", scalar.UintHex) //The thread local storage (TLS) table address and size. For more information, see The .tls Section.
+				d.FieldU32("tls_table_size")
+				d.FieldU32("load_config_table_address", scalar.UintHex) //The load configuration table address and size. For more information, see The Load Configuration Structure (Image Only).
+				d.FieldU32("load_config_table_size")
+				d.FieldU32("bound_import_address", scalar.UintHex) //The bound import table address and size.
+				d.FieldU32("bound_import_size")
+				d.FieldU32("iat_address", scalar.UintHex) //The import address table address and size. For more information, see Import Address Table.
+				d.FieldU32("iat_size")
+				d.FieldU32("delay_import_descriptor_address", scalar.UintHex) //The delay import descriptor address and size. For more information, see Delay-Load Import Tables (Image Only).
+				d.FieldU32("delay_import_descriptor_size")
+				d.FieldU32("clr_runtime_header_address", scalar.UintHex) //The CLR runtime header address and size. For more information, see The .cormeta Section (Object Only).
+				d.FieldU32("clr_runtime_header_size")
+				d.FieldU64("reserved") //must be zero
+
+				// TODO: where?
+				/*numberOfRvaAndSizes :=*/
+				/*
+					d.FieldArray("data_directories", func(d *decode.D) {
+						for i := 0; i < int(numberOfRvaAndSizes); i++ {
+							d.FieldStruct("data_directory", func(d *decode.D) {
+								d.FieldU32("virtual_address", scalar.UintHex)
+								d.FieldU32("size")
+							})
+						}
+					})
+				*/
+
+				d.FieldRawLen("unknown", d.BitsLeft())
+			})
+		})
+	}
+
+	// TODO: section_alignment?
+
+	d.FieldArray("sections", func(d *decode.D) {
+		for i := uint64(0); i < numberOfSections; i++ {
+			d.FieldStruct("section", func(d *decode.D) {
+				name := d.FieldUTF8("name", 8, stringTableMapper)                     // An 8-byte, null-padded UTF-8 encoded string. If the string is exactly 8 characters long, there is no terminating null. For longer names, this field contains a slash (/) that is followed by an ASCII representation of a decimal number that is an offset into the string table. Executable images do not use a string table and do not support section names longer than 8 characters. Long names in object files are truncated if they are emitted to an executable file.
+				d.FieldU32("virtual_size")                                            // The total size of the section when loaded into memory. If this value is greater than SizeOfRawData, the section is zero-padded. This field is valid only for executable images and should be set to zero for object files.
+				virtualAddress := d.FieldU32("virtual_address", scalar.UintHex)       // For executable images, the address of the first byte of the section relative to the image base when the section is loaded into memory. For object files, this field is the address of the first byte before relocation is applied; for simplicity, compilers should set this to zero. Otherwise, it is an arbitrary value that is subtracted from offsets during relocation.
+				sizeOfRawData := d.FieldU32("size_of_raw_data")                       // The size of the section (for object files) or the size of the initialized data on disk (for image files). For executable images, this must be a multiple of FileAlignment from the optional header. If this is less than VirtualSize, the remainder of the section is zero-filled. Because the SizeOfRawData field is rounded but the VirtualSize field is not, it is possible for SizeOfRawData to be greater than VirtualSize as well. When a section contains only uninitialized data, this field should be zero.
+				pointerToRawData := d.FieldU32("pointer_to_raw_data", scalar.UintHex) // The file pointer to the first page of the section within the COFF file. For executable images, this must be a multiple of FileAlignment from the optional header. For object files, the value should be aligned on a 4-byte boundary for best performance. When a section contains only uninitialized data, this field should be zero.
+				d.FieldU32("pointer_to_relocations", scalar.UintHex)                  // The file pointer to the beginning of relocation entries for the section. This is set to zero for executable images or if there are no relocations.
+				d.FieldU32("pointer_to_line_numbers", scalar.UintHex)                 // The file pointer to the beginning of line-number entries for the section. This is set to zero if there are no COFF line numbers. This value should be zero for an image because COFF debugging information is deprecated.
+				d.FieldU16("number_of_relocations")                                   // The number of relocation entries for the section. This is set to zero for executable images.
+				d.FieldU16("number_of_line_numbers")                                  // The number of line-number entries for the section. This value should be zero for an image because COFF debugging information is deprecated.
+
+				d.FieldStruct("characteristics", func(d *decode.D) {
+
+					// 32 bit LE flags
+
+					d.FieldBool("cnt_uninitialized_data") // The section contains uninitialized data.
+					d.FieldBool("cnt_initialized_data")   // The section contains initialized data.
+					d.FieldBool("cnt_code")               // The section contains executable code.
+					d.FieldBool("reserved")               // Reserved for future use.
+					d.FieldBool("type_no_pad")            // The section should not be padded to the next boundary. This flag is obsolete and is replaced by IMAGE_SCN_ALIGN_1BYTES. This is valid only for object files.
+					d.FieldBool("reserved0")              // Reserved for future use.
+					d.FieldBool("reserved1")              // Reserved for future use.
+					d.FieldBool("reserved2")              // Reserved for future use.
+
+					d.FieldBool("gprel")      // The section contains data referenced through the global pointer (GP).
+					d.FieldBool("unknown0")   // ??
+					d.FieldBool("unknown1")   // ??
+					d.FieldBool("lnk_comdat") // The section contains COMDAT data. For more information, see COMDAT Sections (Object Only). This is valid only for object files.
+					d.FieldBool("lnk_remove") // The section will not become part of the image. This is valid only for object files.
+					d.FieldBool("reserved3")  // Reserved for future use.
+					d.FieldBool("lnk_info")   // The section contains comments or other information. The .drectve section has this type. This is valid for object files only.
+					d.FieldBool("lnk_other")  // Reserved for future use.
+
+					d.FieldBool("align_128bytes") // Align data on a 128-byte boundary. Valid only for object files.
+					d.FieldBool("align_8bytes")   // Align data on an 8-byte boundary. Valid only for object files.
+					d.FieldBool("align_2bytes")   // Align data on a 2-byte boundary. Valid only for object files.
+					d.FieldBool("align_1bytes")   // Align data on a 1-byte boundary. Valid only for object files.
+					d.FieldBool("mem_preload")    // Reserved for future use.
+					d.FieldBool("mem_locked")     // Reserved for future use.
+					d.FieldBool("mem_16bit")      // Reserved for future use.
+					d.FieldBool("mem_purgeable")  // Reserved for future use. TODO was 0x00020000 in docnumberOfSymbols
+
+					d.FieldBool("mem_write")       // The section can be written to.
+					d.FieldBool("mem_read")        // The section can be read.
+					d.FieldBool("mem_execute")     // The section can be executed as code.
+					d.FieldBool("mem_shared")      // The section can be shared in memory.
+					d.FieldBool("mem_not_paged")   // The section is not pageable.
+					d.FieldBool("mem_not_cached")  // The section cannot be cached.
+					d.FieldBool("mem_discardable") // The section can be discarded as needed.
+					d.FieldBool("lnk_nreloc_ovfl") // The section contains extended relocations.
+
+					// IMAGE_SCN_ALIGN_4BYTES 0x00300000 Align data on a 4-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_16BYTES 0x00500000 Align data on a 16-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_32BYTES 0x00600000 Align data on a 32-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_64BYTES 0x00700000 Align data on a 64-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_256BYTES 0x00900000 Align data on a 256-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_512BYTES 0x00A00000 Align data on a 512-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_1024BYTES 0x00B00000 Align data on a 1024-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_2048BYTES 0x00C00000 Align data on a 2048-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_4096BYTES 0x00D00000 Align data on a 4096-byte boundary. Valid only for object files.
+					// IMAGE_SCN_ALIGN_8192BYTES 0x00E00000 Align data on an 8192-byte boundary. Valid only for object files.
+
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("type_no_pad")            // The section should not be padded to the next boundary. This flag is obsolete and is replaced by IMAGE_SCN_ALIGN_1BYTES. This is valid only for object files.
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("cnt_code")               // The section contains executable code.
+					// d.FieldBool("cnt_initialized_data")   // The section contains initialized data.
+					// d.FieldBool("cnt_uninitialized_data") // The section contains uninitialized data.
+
+					// d.FieldBool("lnk_other")              // Reserved for future use.
+					// d.FieldBool("lnk_info")               // The section contains comments or other information. The .drectve section has this type. This is valid for object files only.
+					// d.FieldBool("reserved")               // Reserved for future use.
+					// d.FieldBool("lnk_remove")             // The section will not become part of the image. This is valid only for object files.
+					// d.FieldBool("lnk_comdat")             // The section contains COMDAT data. For more information, see COMDAT Sections (Object Only). This is valid only for object files.
+					// d.FieldBool("unknown")                // The section contains data referenced through the global pointer (GP).
+					// d.FieldBool("unknown")                // The section contains data referenced through the global pointer (GP).
+					// d.FieldBool("gprel")                  // The section contains data referenced through the global pointer (GP).
+
+					// d.FieldBool("mem_purgeable")          // Reserved for future use. TODO was 0x00020000 in docnumberOfSymbols
+					// d.FieldBool("mem_16bit")              // Reserved for future use.
+					// d.FieldBool("mem_locked")             // Reserved for future use.
+					// d.FieldBool("mem_preload")            // Reserved for future use.
+					// d.FieldBool("align_1bytes")           // Align data on a 1-byte boundary. Valid only for object files.
+					// d.FieldBool("align_2bytes")           // Align data on a 2-byte boundary. Valid only for object files.
+					// d.FieldBool("align_8bytes")           // Align data on an 8-byte boundary. Valid only for object files.
+					// d.FieldBool("align_128bytes")         // Align data on a 128-byte boundary. Valid only for object files.
+
+					// d.FieldBool("lnk_nreloc_ovfl")        // The section contains extended relocations.
+					// d.FieldBool("mem_discardable")        // The section can be discarded as needed.
+					// d.FieldBool("mem_not_cached")         // The section cannot be cached.
+					// d.FieldBool("mem_not_paged")          // The section is not pageable.
+					// d.FieldBool("mem_shared")             // The section can be shared in memory.
+					// d.FieldBool("mem_execute")            // The section can be executed as code.
+					// d.FieldBool("mem_read")               // The section can be read.
+					// d.FieldBool("mem_write")              // The section can be written to.
+
+				})
+
+				_ = name
+				_ = virtualAddress
+				_ = sizeOfRawData
+				_ = pointerToRawData
+
+				/*
+					if pointerToRawData != 0 {
+						pointerToRawData -= uint64(pci.FilePointerOffset)
+						d.SeekAbs(int64(pointerToRawData)*8, func(d *decode.D) {
+							switch name {
+							case ".idata":
+								d.FieldStruct("data", func(d *decode.D) {
+
+									count := 0
+									d.FieldArray("directory_table", func(d *decode.D) {
+										for {
+											var n uint64
+											d.FieldStruct("directory_entry", func(d *decode.D) {
+												n = d.FieldU32("lookup_table_rva", scalar.UintHex)
+												d.FieldU32("timestamp")
+												d.FieldU32("forward_chain")
+												d.FieldU32("name_rva", scalar.UintHex)
+												d.FieldU32("address_table_rva", scalar.UintHex)
+											})
+
+											if n == 0 {
+												break
+											}
+
+											count++
+										}
+									})
+
+									_ = virtualAddress
+
+									d.FieldArray("dlls", func(d *decode.D) {
+
+										for i := 0; i < count; i++ {
+
+											d.FieldStruct("dll", func(d *decode.D) {
+
+												d.FieldArray("lookup_table1", func(d *decode.D) {
+													for {
+														if d.PeekUintBits(addrSize) == 0 {
+															break
+														}
+														d.FieldU("bla", addrSize)
+													}
+												})
+												d.FieldU("lookup_table1_end", addrSize)
+											})
+										}
+
+									})
+
+									d.FieldArray("hint_names", func(d *decode.D) {
+
+										for i := 0; true; i++ {
+
+											log.Printf("i: %#+v\n", i)
+
+											d.FieldStruct("hint_name", func(d *decode.D) {
+
+												d.FieldU16("hint")
+												d.FieldUTF8Null("name")
+
+												// if d.AlignBits(16) != 0 {
+												// 	d.FieldU8("align_pad")
+												// }
+
+											})
+
+											if i > 800 {
+												break
+											}
+										}
+
+									})
+
+								})
+
+							default:
+								d.FieldRawLen("data", int64(sizeOfRawData)*8)
+							}
+						})
+					}
+				*/
+			})
+		}
+	})
+
+	// var stringTableMapperPos int64
+
+	// TODO: if pointerToSymbolTable != 0?
+
+	if pointerToSymbolTable != 0 {
+		d.FieldArray("symbol_table", func(d *decode.D) {
+			d.SeekAbs(int64(pointerToSymbolTable*8), func(d *decode.D) {
+				for i := uint64(0); i < numberOfSymbols; i++ {
+					d.FieldStruct("symbol", func(d *decode.D) {
+						// TODO: name
+						d.FieldUTF8("name", 8, stringTableMapper) // The name of the symbol, represented by a union of three structures. An array of 8 bytes is used if the name is not more than 8 bytes long. For more information, see Symbol Name Representation.
+						d.FieldU32("value")                       // The value that is associated with the symbol. The interpretation of this field depends on SectionNumber and StorageClass. A typical meaning is the relocatable address.
+						d.FieldU16("section_number")              // The signed integer that identifies the section, using a one-based index into the section table. Some values have special meaning, as defined in section 5.4.2, "Section Number Values."
+						d.FieldU8("base_type", symBaseTypeNames)
+						d.FieldU8("complex_type", symBaseDTypeNames)
+						d.FieldU8("storage_class", symClassNames) // An enumerated value that represents storage class. For more information, see Storage Class.
+						d.FieldU8("number_of_aux_symbols")        // The number of auxiliary symbol table entries that follow this record.
+					})
+				}
+				// stringTablePos = d.Pos()
+			})
+		})
+
+		d.SeekAbs(stringTablePos, func(d *decode.D) {
+			// TODO: if pos != 0?
+			d.FieldStruct("string_table", func(d *decode.D) {
+				stringTableSize := d.FieldU32("size") - 4
+				d.FramedFn(int64(stringTableSize*8), func(d *decode.D) {
+					d.FieldArray("entries", func(d *decode.D) {
+						for !d.End() {
+							d.FieldUTF8Null("entry")
+						}
+					})
+				})
+			})
+		})
+	}
+
+	return nil
+}

format/pe/msdos_stub.go

@@ -0,0 +1,61 @@
+package pe
+
+// https://osandamalith.com/2020/07/19/exploring-the-ms-dos-stub/
+
+import (
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/internal/mathx"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+	"github.com/wader/fq/pkg/scalar"
+)
+
+func init() {
+	interp.RegisterFormat(
+		format.MSDOS_Stub,
+		&decode.Format{
+			Description: "MS-DOS Stub",
+			DecodeFn:    msDosStubDecode,
+		})
+}
+
+func msDosStubDecode(d *decode.D) any {
+	d.Endian = decode.LittleEndian
+
+	d.FieldU16("e_magic", scalar.UintDescription("Magic number"), d.UintAssert(0x5a4d), scalar.UintHex)
+	d.FieldU16("e_cblp", scalar.UintDescription("Bytes on last page of file"))
+	d.FieldU16("e_cp", scalar.UintDescription("Pages in file"))
+	d.FieldU16("e_crlc", scalar.UintDescription("Relocations"))
+	d.FieldU16("e_cparhdr", scalar.UintDescription("Size of header in paragraphs"))
+	d.FieldU16("e_minalloc", scalar.UintDescription("Minimum extra paragraphs needed"))
+	d.FieldU16("e_maxalloc", scalar.UintDescription("Maximum extra paragraphs needed"))
+	d.FieldU16("e_ss", scalar.UintDescription("Initial (relative) SS value"))
+	d.FieldU16("e_sp", scalar.UintDescription("Initial SP value"))
+	d.FieldU16("e_csum", scalar.UintDescription("Checksum"))
+	d.FieldU16("e_ip", scalar.UintDescription("Initial IP value"))
+	d.FieldU16("e_cs", scalar.UintDescription("Initial (relative) CS value"))
+	d.FieldU16("e_lfarlc", scalar.UintDescription("File address of relocation table"))
+	d.FieldU16("e_ovno", scalar.UintDescription("Overlay number"))
+	d.FieldRawLen("e_res", 4*16, scalar.BitBufDescription("Reserved words"))
+	d.FieldU16("e_oemid", scalar.UintDescription("OEM identifier (for e_oeminfo)"))
+	d.FieldU16("e_oeminfo", scalar.UintDescription("OEM information; e_oemid specific"))
+	d.FieldRawLen("e_res2", 10*16, scalar.BitBufDescription("Reserved words"))
+	lfanew := d.FieldU32("e_lfanew", scalar.UintDescription("File address of new exe header"))
+
+	// TODO: how to detect UEFI?
+
+	subEndPos := mathx.Min(d.Pos()+64*8, int64(lfanew)*8)
+
+	// TODO: x86 format in the future
+	d.FieldRawLen("stub", subEndPos-d.Pos(), scalar.BitBufDescription("Sub program"))
+
+	// TODO: is not padding i guess?
+	padding := lfanew*8 - uint64(subEndPos)
+	if padding > 0 {
+		d.FieldRawLen("padding", int64(padding))
+	}
+
+	return format.MS_DOS_Out{
+		LFANew: int(lfanew),
+	}
+}

format/pe/pe.go

@@ -0,0 +1,37 @@
+package pe
+
+import (
+	"fmt"
+
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+)
+
+var msDosStubGroup decode.Group
+var coffGroup decode.Group
+
+func init() {
+	interp.RegisterFormat(
+		format.PE,
+		&decode.Format{
+			Description: "Portable Executable",
+			Groups:      []*decode.Group{format.Probe},
+			Dependencies: []decode.Dependency{
+				{Groups: []*decode.Group{format.MSDOS_Stub}, Out: &msDosStubGroup},
+				{Groups: []*decode.Group{format.COFF}, Out: &coffGroup},
+			},
+			DecodeFn: peDecode,
+		})
+}
+
+func peDecode(d *decode.D) any {
+	_, v := d.FieldFormat("ms_dos_stub", &msDosStubGroup, nil)
+	msDOSOut, ok := v.(format.MS_DOS_Out)
+	if !ok {
+		panic(fmt.Sprintf("expected MS_DOS_Out got %#+v", v))
+	}
+	d.FieldFormat("coff", &coffGroup, format.COFF_In{FilePointerOffset: msDOSOut.LFANew})
+
+	return nil
+}

format/pe/testdata/README.md

@@ -0,0 +1,7 @@
+PE sample from https://github.com/JonathanSalwan/binary-samples under MIT license
+
+```sh
+rm -f *.fqtest; for i in pe-* *.efi; do echo "\$ fq dv $i" > $i.fqtest ; done
+```
+
+EFI sample from https://github.com/badcf00d/UEFI-helloworld under BSD license

format/pe/testdata/helloworld.efi.fqtest

@@ -0,0 +1,260 @@
+$ fq dv helloworld.efi
+     |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: helloworld.efi (pe) 0x0-0x800 (2048)
+     |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0x78 (120)
+0x000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x000|      78 00                                    |  x.            |    e_cblp: 120 (Bytes on last page of file) 0x2-0x4 (2)
+0x000|            01 00                              |    ..          |    e_cp: 1 (Pages in file) 0x4-0x6 (2)
+0x000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x000|                                    00 00      |            ..  |    e_maxalloc: 0 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x010|00 00                                          |..              |    e_sp: 0 (Initial SP value) 0x10-0x12 (2)
+0x010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x020|00 00 00 00                                    |....            |
+0x020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x030|                                    78 00 00 00|            x...|    e_lfanew: 120 (File address of new exe header) 0x3c-0x40 (4)
+0x040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x78 (56)
+*    |until 0x77.7 (56)                              |                |
+     |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0x78-0x1f8 (384)
+0x070|                        50 45 00 00            |        PE..    |    signature: raw bits (valid) 0x78-0x7c (4)
+0x070|                                    64 86      |            d.  |    machine: "amd64" (0x8664) 0x7c-0x7e (2)
+0x070|                                          03 00|              ..|    number_of_sections: 3 0x7e-0x80 (2)
+0x080|96 bf 5b 5e                                    |..[^            |    time_date_stamp: 1583071126 (2020-03-01T13:58:46Z) 0x80-0x84 (4)
+0x080|            00 00 00 00                        |    ....        |    pointer_to_symbol_table: 0x0 0x84-0x88 (4)
+0x080|                        00 00 00 00            |        ....    |    number_of_symbols: 0 0x88-0x8c (4)
+0x080|                                    f0 00      |            ..  |    size_of_optional_header: 240 0x8c-0x8e (2)
+     |                                               |                |    characteristics{}: 0x8e-0x90 (2)
+0x080|                                          22   |              " |      bytes_reversed_lo: false 0x8e-0x8e.1 (0.1)
+0x080|                                          22   |              " |      reserved: false 0x8e.1-0x8e.2 (0.1)
+0x080|                                          22   |              " |      large_address_aware: true 0x8e.2-0x8e.3 (0.1)
+0x080|                                          22   |              " |      aggressive_ws_trim: false 0x8e.3-0x8e.4 (0.1)
+0x080|                                          22   |              " |      local_syms_stripped: false 0x8e.4-0x8e.5 (0.1)
+0x080|                                          22   |              " |      line_nums_stripped: false 0x8e.5-0x8e.6 (0.1)
+0x080|                                          22   |              " |      executable_image: true 0x8e.6-0x8e.7 (0.1)
+0x080|                                          22   |              " |      relocs_stripped: false 0x8e.7-0x8f (0.1)
+0x080|                                             00|               .|      bytes_reversed_hi: false 0x8f-0x8f.1 (0.1)
+0x080|                                             00|               .|      up_system_only: false 0x8f.1-0x8f.2 (0.1)
+0x080|                                             00|               .|      dll: false 0x8f.2-0x8f.3 (0.1)
+0x080|                                             00|               .|      system: false 0x8f.3-0x8f.4 (0.1)
+0x080|                                             00|               .|      net_run_from_swap: false 0x8f.4-0x8f.5 (0.1)
+0x080|                                             00|               .|      removable_run_from_swap: false 0x8f.5-0x8f.6 (0.1)
+0x080|                                             00|               .|      debug_stripped: false 0x8f.6-0x8f.7 (0.1)
+0x080|                                             00|               .|      32bit_machine: false 0x8f.7-0x90 (0.1)
+     |                                               |                |    optional_header{}: 0x90-0x180 (240)
+0x090|0b 02                                          |..              |      format: "pe32+" (0x20b) 0x90-0x92 (2)
+0x090|      0e                                       |  .             |      major_linker_version: 14 0x92-0x93 (1)
+0x090|         00                                    |   .            |      minor_linker_version: 0 0x93-0x94 (1)
+0x090|            00 02 00 00                        |    ....        |      size_of_code: 512 0x94-0x98 (4)
+0x090|                        00 04 00 00            |        ....    |      size_of_initialized_data: 1024 0x98-0x9c (4)
+0x090|                                    00 00 00 00|            ....|      size_of_uninitialized_data: 0 0x9c-0xa0 (4)
+0x0a0|10 10 00 00                                    |....            |      address_of_entry_point: 0x1010 0xa0-0xa4 (4)
+0x0a0|            00 10 00 00                        |    ....        |      base_of_code: 0x1000 0xa4-0xa8 (4)
+0x0a0|                        00 00 00 40 01 00 00 00|        ...@....|      image_base: 0x140000000 0xa8-0xb0 (8)
+0x0b0|00 10 00 00                                    |....            |      section_alignment: 4096 0xb0-0xb4 (4)
+0x0b0|            00 02 00 00                        |    ....        |      file_alignment: 512 0xb4-0xb8 (4)
+0x0b0|                        06 00                  |        ..      |      major_os_version: 6 0xb8-0xba (2)
+0x0b0|                              00 00            |          ..    |      minor_os_version: 0 0xba-0xbc (2)
+0x0b0|                                    00 00      |            ..  |      major_image_version: 0 0xbc-0xbe (2)
+0x0b0|                                          00 00|              ..|      minor_image_version: 0 0xbe-0xc0 (2)
+0x0c0|06 00                                          |..              |      major_subsystem_version: 6 0xc0-0xc2 (2)
+0x0c0|      00 00                                    |  ..            |      minor_subsystem_version: 0 0xc2-0xc4 (2)
+0x0c0|            00 00 00 00                        |    ....        |      win32_version: 0 0xc4-0xc8 (4)
+0x0c0|                        00 40 00 00            |        .@..    |      size_of_image: 16384 0xc8-0xcc (4)
+0x0c0|                                    00 02 00 00|            ....|      size_of_headers: 512 0xcc-0xd0 (4)
+0x0d0|00 00 00 00                                    |....            |      chunk_sum: 0x0 0xd0-0xd4 (4)
+0x0d0|            0a 00                              |    ..          |      subsystem: "efi_application" (10) 0xd4-0xd6 (2)
+     |                                               |                |      dll_characteristics{}: 0xd6-0xd8 (2)
+0x0d0|                  60                           |      `         |        force_integrity: false 0xd6-0xd6.1 (0.1)
+0x0d0|                  60                           |      `         |        dynamic_base: true 0xd6.1-0xd6.2 (0.1)
+0x0d0|                  60                           |      `         |        high_entropy_va: true 0xd6.2-0xd6.3 (0.1)
+0x0d0|                  60                           |      `         |        reserved0: false 0xd6.3-0xd6.4 (0.1)
+0x0d0|                  60                           |      `         |        reserved1: false 0xd6.4-0xd6.5 (0.1)
+0x0d0|                  60                           |      `         |        reserved2: false 0xd6.5-0xd6.6 (0.1)
+0x0d0|                  60                           |      `         |        reserved3: false 0xd6.6-0xd6.7 (0.1)
+0x0d0|                  60                           |      `         |        reserved4: false 0xd6.7-0xd7 (0.1)
+0x0d0|                     81                        |       .        |        terminal_server_aware: true 0xd7-0xd7.1 (0.1)
+0x0d0|                     81                        |       .        |        guard_cf: false 0xd7.1-0xd7.2 (0.1)
+0x0d0|                     81                        |       .        |        wdm_driver: false 0xd7.2-0xd7.3 (0.1)
+0x0d0|                     81                        |       .        |        appcontainer: false 0xd7.3-0xd7.4 (0.1)
+0x0d0|                     81                        |       .        |        no_bind: false 0xd7.4-0xd7.5 (0.1)
+0x0d0|                     81                        |       .        |        no_seh: false 0xd7.5-0xd7.6 (0.1)
+0x0d0|                     81                        |       .        |        no_isolation: false 0xd7.6-0xd7.7 (0.1)
+0x0d0|                     81                        |       .        |        nx_compat: true 0xd7.7-0xd8 (0.1)
+0x0d0|                        00 00 10 00 00 00 00 00|        ........|      size_of_track_reserve: 1048576 0xd8-0xe0 (8)
+0x0e0|00 10 00 00 00 00 00 00                        |........        |      size_of_stack_commit: 4096 0xe0-0xe8 (8)
+0x0e0|                        00 00 10 00 00 00 00 00|        ........|      size_of_heap_reserve: 1048576 0xe8-0xf0 (8)
+0x0f0|00 10 00 00 00 00 00 00                        |........        |      size_of_heap_commit: 4096 0xf0-0xf8 (8)
+0x0f0|                        00 00 00 00            |        ....    |      loader_flags: 0 0xf8-0xfc (4)
+0x0f0|                                    10 00 00 00|            ....|      number_of_rva_and_sizes: 16 0xfc-0x100 (4)
+0x100|00 00 00 00                                    |....            |      export_table_address: 0x0 0x100-0x104 (4)
+0x100|            00 00 00 00                        |    ....        |      export_table_size: 0 0x104-0x108 (4)
+0x100|                        00 00 00 00            |        ....    |      import_table_address: 0x0 0x108-0x10c (4)
+0x100|                                    00 00 00 00|            ....|      import_table_size: 0 0x10c-0x110 (4)
+0x110|00 00 00 00                                    |....            |      resource_table_address: 0x0 0x110-0x114 (4)
+0x110|            00 00 00 00                        |    ....        |      resource_table_size: 0 0x114-0x118 (4)
+0x110|                        00 00 00 00            |        ....    |      exception_table_address: 0x0 0x118-0x11c (4)
+0x110|                                    00 00 00 00|            ....|      exception_table_size: 0 0x11c-0x120 (4)
+0x120|00 00 00 00                                    |....            |      certificate_table_address: 0x0 0x120-0x124 (4)
+0x120|            00 00 00 00                        |    ....        |      certificate_table_size: 0 0x124-0x128 (4)
+0x120|                        00 30 00 00            |        .0..    |      base_relocation_table_address: 0x3000 0x128-0x12c (4)
+0x120|                                    0c 00 00 00|            ....|      base_relocation_table_size: 12 0x12c-0x130 (4)
+0x130|00 00 00 00                                    |....            |      debug_address: 0x0 0x130-0x134 (4)
+0x130|            00 00 00 00                        |    ....        |      debug_size: 0 0x134-0x138 (4)
+0x130|                        00 00 00 00 00 00 00 00|        ........|      architecture: 0 0x138-0x140 (8)
+0x140|00 00 00 00 00 00 00 00                        |........        |      global_ptr: 0x0 0x140-0x148 (8)
+0x140|                        00 00 00 00            |        ....    |      tls_table_address: 0x0 0x148-0x14c (4)
+0x140|                                    00 00 00 00|            ....|      tls_table_size: 0 0x14c-0x150 (4)
+0x150|00 00 00 00                                    |....            |      load_config_table_address: 0x0 0x150-0x154 (4)
+0x150|            00 00 00 00                        |    ....        |      load_config_table_size: 0 0x154-0x158 (4)
+0x150|                        00 00 00 00            |        ....    |      bound_import_address: 0x0 0x158-0x15c (4)
+0x150|                                    00 00 00 00|            ....|      bound_import_size: 0 0x15c-0x160 (4)
+0x160|00 00 00 00                                    |....            |      iat_address: 0x0 0x160-0x164 (4)
+0x160|            00 00 00 00                        |    ....        |      iat_size: 0 0x164-0x168 (4)
+0x160|                        00 00 00 00            |        ....    |      delay_import_descriptor_address: 0x0 0x168-0x16c (4)
+0x160|                                    00 00 00 00|            ....|      delay_import_descriptor_size: 0 0x16c-0x170 (4)
+0x170|00 00 00 00                                    |....            |      clr_runtime_header_address: 0x0 0x170-0x174 (4)
+0x170|            00 00 00 00                        |    ....        |      clr_runtime_header_size: 0 0x174-0x178 (4)
+0x170|                        00 00 00 00 00 00 00 00|        ........|      reserved: 0 0x178-0x180 (8)
+     |                                               |                |      unknown: raw bits 0x180-0x180 (0)
+     |                                               |                |    sections[0:3]: 0x180-0x1f8 (120)
+     |                                               |                |      [0]{}: section 0x180-0x1a8 (40)
+0x180|2e 74 65 78 74 00 00 00                        |.text...        |        name: ".text" 0x180-0x188 (8)
+0x180|                        23 00 00 00            |        #...    |        virtual_size: 35 0x188-0x18c (4)
+0x180|                                    00 10 00 00|            ....|        virtual_address: 0x1000 0x18c-0x190 (4)
+0x190|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x190-0x194 (4)
+0x190|            00 02 00 00                        |    ....        |        pointer_to_raw_data: 0x200 0x194-0x198 (4)
+0x190|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x198-0x19c (4)
+0x190|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x19c-0x1a0 (4)
+0x1a0|00 00                                          |..              |        number_of_relocations: 0 0x1a0-0x1a2 (2)
+0x1a0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1a2-0x1a4 (2)
+     |                                               |                |        characteristics{}: 0x1a4-0x1a8 (4)
+0x1a0|            20                                 |                |          cnt_uninitialized_data: false 0x1a4-0x1a4.1 (0.1)
+0x1a0|            20                                 |                |          cnt_initialized_data: false 0x1a4.1-0x1a4.2 (0.1)
+0x1a0|            20                                 |                |          cnt_code: true 0x1a4.2-0x1a4.3 (0.1)
+0x1a0|            20                                 |                |          reserved: false 0x1a4.3-0x1a4.4 (0.1)
+0x1a0|            20                                 |                |          type_no_pad: false 0x1a4.4-0x1a4.5 (0.1)
+0x1a0|            20                                 |                |          reserved0: false 0x1a4.5-0x1a4.6 (0.1)
+0x1a0|            20                                 |                |          reserved1: false 0x1a4.6-0x1a4.7 (0.1)
+0x1a0|            20                                 |                |          reserved2: false 0x1a4.7-0x1a5 (0.1)
+0x1a0|               00                              |     .          |          gprel: false 0x1a5-0x1a5.1 (0.1)
+0x1a0|               00                              |     .          |          unknown0: false 0x1a5.1-0x1a5.2 (0.1)
+0x1a0|               00                              |     .          |          unknown1: false 0x1a5.2-0x1a5.3 (0.1)
+0x1a0|               00                              |     .          |          lnk_comdat: false 0x1a5.3-0x1a5.4 (0.1)
+0x1a0|               00                              |     .          |          lnk_remove: false 0x1a5.4-0x1a5.5 (0.1)
+0x1a0|               00                              |     .          |          reserved3: false 0x1a5.5-0x1a5.6 (0.1)
+0x1a0|               00                              |     .          |          lnk_info: false 0x1a5.6-0x1a5.7 (0.1)
+0x1a0|               00                              |     .          |          lnk_other: false 0x1a5.7-0x1a6 (0.1)
+0x1a0|                  00                           |      .         |          align_128bytes: false 0x1a6-0x1a6.1 (0.1)
+0x1a0|                  00                           |      .         |          align_8bytes: false 0x1a6.1-0x1a6.2 (0.1)
+0x1a0|                  00                           |      .         |          align_2bytes: false 0x1a6.2-0x1a6.3 (0.1)
+0x1a0|                  00                           |      .         |          align_1bytes: false 0x1a6.3-0x1a6.4 (0.1)
+0x1a0|                  00                           |      .         |          mem_preload: false 0x1a6.4-0x1a6.5 (0.1)
+0x1a0|                  00                           |      .         |          mem_locked: false 0x1a6.5-0x1a6.6 (0.1)
+0x1a0|                  00                           |      .         |          mem_16bit: false 0x1a6.6-0x1a6.7 (0.1)
+0x1a0|                  00                           |      .         |          mem_purgeable: false 0x1a6.7-0x1a7 (0.1)
+0x1a0|                     60                        |       `        |          mem_write: false 0x1a7-0x1a7.1 (0.1)
+0x1a0|                     60                        |       `        |          mem_read: true 0x1a7.1-0x1a7.2 (0.1)
+0x1a0|                     60                        |       `        |          mem_execute: true 0x1a7.2-0x1a7.3 (0.1)
+0x1a0|                     60                        |       `        |          mem_shared: false 0x1a7.3-0x1a7.4 (0.1)
+0x1a0|                     60                        |       `        |          mem_not_paged: false 0x1a7.4-0x1a7.5 (0.1)
+0x1a0|                     60                        |       `        |          mem_not_cached: false 0x1a7.5-0x1a7.6 (0.1)
+0x1a0|                     60                        |       `        |          mem_discardable: false 0x1a7.6-0x1a7.7 (0.1)
+0x1a0|                     60                        |       `        |          lnk_nreloc_ovfl: false 0x1a7.7-0x1a8 (0.1)
+     |                                               |                |      [1]{}: section 0x1a8-0x1d0 (40)
+0x1a0|                        2e 64 61 74 61 00 00 00|        .data...|        name: ".data" 0x1a8-0x1b0 (8)
+0x1b0|18 00 00 00                                    |....            |        virtual_size: 24 0x1b0-0x1b4 (4)
+0x1b0|            00 20 00 00                        |    . ..        |        virtual_address: 0x2000 0x1b4-0x1b8 (4)
+0x1b0|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x1b8-0x1bc (4)
+0x1b0|                                    00 04 00 00|            ....|        pointer_to_raw_data: 0x400 0x1bc-0x1c0 (4)
+0x1c0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x1c0-0x1c4 (4)
+0x1c0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x1c4-0x1c8 (4)
+0x1c0|                        00 00                  |        ..      |        number_of_relocations: 0 0x1c8-0x1ca (2)
+0x1c0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x1ca-0x1cc (2)
+     |                                               |                |        characteristics{}: 0x1cc-0x1d0 (4)
+0x1c0|                                    40         |            @   |          cnt_uninitialized_data: false 0x1cc-0x1cc.1 (0.1)
+0x1c0|                                    40         |            @   |          cnt_initialized_data: true 0x1cc.1-0x1cc.2 (0.1)
+0x1c0|                                    40         |            @   |          cnt_code: false 0x1cc.2-0x1cc.3 (0.1)
+0x1c0|                                    40         |            @   |          reserved: false 0x1cc.3-0x1cc.4 (0.1)
+0x1c0|                                    40         |            @   |          type_no_pad: false 0x1cc.4-0x1cc.5 (0.1)
+0x1c0|                                    40         |            @   |          reserved0: false 0x1cc.5-0x1cc.6 (0.1)
+0x1c0|                                    40         |            @   |          reserved1: false 0x1cc.6-0x1cc.7 (0.1)
+0x1c0|                                    40         |            @   |          reserved2: false 0x1cc.7-0x1cd (0.1)
+0x1c0|                                       00      |             .  |          gprel: false 0x1cd-0x1cd.1 (0.1)
+0x1c0|                                       00      |             .  |          unknown0: false 0x1cd.1-0x1cd.2 (0.1)
+0x1c0|                                       00      |             .  |          unknown1: false 0x1cd.2-0x1cd.3 (0.1)
+0x1c0|                                       00      |             .  |          lnk_comdat: false 0x1cd.3-0x1cd.4 (0.1)
+0x1c0|                                       00      |             .  |          lnk_remove: false 0x1cd.4-0x1cd.5 (0.1)
+0x1c0|                                       00      |             .  |          reserved3: false 0x1cd.5-0x1cd.6 (0.1)
+0x1c0|                                       00      |             .  |          lnk_info: false 0x1cd.6-0x1cd.7 (0.1)
+0x1c0|                                       00      |             .  |          lnk_other: false 0x1cd.7-0x1ce (0.1)
+0x1c0|                                          00   |              . |          align_128bytes: false 0x1ce-0x1ce.1 (0.1)
+0x1c0|                                          00   |              . |          align_8bytes: false 0x1ce.1-0x1ce.2 (0.1)
+0x1c0|                                          00   |              . |          align_2bytes: false 0x1ce.2-0x1ce.3 (0.1)
+0x1c0|                                          00   |              . |          align_1bytes: false 0x1ce.3-0x1ce.4 (0.1)
+0x1c0|                                          00   |              . |          mem_preload: false 0x1ce.4-0x1ce.5 (0.1)
+0x1c0|                                          00   |              . |          mem_locked: false 0x1ce.5-0x1ce.6 (0.1)
+0x1c0|                                          00   |              . |          mem_16bit: false 0x1ce.6-0x1ce.7 (0.1)
+0x1c0|                                          00   |              . |          mem_purgeable: false 0x1ce.7-0x1cf (0.1)
+0x1c0|                                             c0|               .|          mem_write: true 0x1cf-0x1cf.1 (0.1)
+0x1c0|                                             c0|               .|          mem_read: true 0x1cf.1-0x1cf.2 (0.1)
+0x1c0|                                             c0|               .|          mem_execute: false 0x1cf.2-0x1cf.3 (0.1)
+0x1c0|                                             c0|               .|          mem_shared: false 0x1cf.3-0x1cf.4 (0.1)
+0x1c0|                                             c0|               .|          mem_not_paged: false 0x1cf.4-0x1cf.5 (0.1)
+0x1c0|                                             c0|               .|          mem_not_cached: false 0x1cf.5-0x1cf.6 (0.1)
+0x1c0|                                             c0|               .|          mem_discardable: false 0x1cf.6-0x1cf.7 (0.1)
+0x1c0|                                             c0|               .|          lnk_nreloc_ovfl: false 0x1cf.7-0x1d0 (0.1)
+     |                                               |                |      [2]{}: section 0x1d0-0x1f8 (40)
+0x1d0|2e 72 65 6c 6f 63 00 00                        |.reloc..        |        name: ".reloc" 0x1d0-0x1d8 (8)
+0x1d0|                        0c 00 00 00            |        ....    |        virtual_size: 12 0x1d8-0x1dc (4)
+0x1d0|                                    00 30 00 00|            .0..|        virtual_address: 0x3000 0x1dc-0x1e0 (4)
+0x1e0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x1e0-0x1e4 (4)
+0x1e0|            00 06 00 00                        |    ....        |        pointer_to_raw_data: 0x600 0x1e4-0x1e8 (4)
+0x1e0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x1e8-0x1ec (4)
+0x1e0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x1ec-0x1f0 (4)
+0x1f0|00 00                                          |..              |        number_of_relocations: 0 0x1f0-0x1f2 (2)
+0x1f0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1f2-0x1f4 (2)
+     |                                               |                |        characteristics{}: 0x1f4-0x1f8 (4)
+0x1f0|            40                                 |    @           |          cnt_uninitialized_data: false 0x1f4-0x1f4.1 (0.1)
+0x1f0|            40                                 |    @           |          cnt_initialized_data: true 0x1f4.1-0x1f4.2 (0.1)
+0x1f0|            40                                 |    @           |          cnt_code: false 0x1f4.2-0x1f4.3 (0.1)
+0x1f0|            40                                 |    @           |          reserved: false 0x1f4.3-0x1f4.4 (0.1)
+0x1f0|            40                                 |    @           |          type_no_pad: false 0x1f4.4-0x1f4.5 (0.1)
+0x1f0|            40                                 |    @           |          reserved0: false 0x1f4.5-0x1f4.6 (0.1)
+0x1f0|            40                                 |    @           |          reserved1: false 0x1f4.6-0x1f4.7 (0.1)
+0x1f0|            40                                 |    @           |          reserved2: false 0x1f4.7-0x1f5 (0.1)
+0x1f0|               00                              |     .          |          gprel: false 0x1f5-0x1f5.1 (0.1)
+0x1f0|               00                              |     .          |          unknown0: false 0x1f5.1-0x1f5.2 (0.1)
+0x1f0|               00                              |     .          |          unknown1: false 0x1f5.2-0x1f5.3 (0.1)
+0x1f0|               00                              |     .          |          lnk_comdat: false 0x1f5.3-0x1f5.4 (0.1)
+0x1f0|               00                              |     .          |          lnk_remove: false 0x1f5.4-0x1f5.5 (0.1)
+0x1f0|               00                              |     .          |          reserved3: false 0x1f5.5-0x1f5.6 (0.1)
+0x1f0|               00                              |     .          |          lnk_info: false 0x1f5.6-0x1f5.7 (0.1)
+0x1f0|               00                              |     .          |          lnk_other: false 0x1f5.7-0x1f6 (0.1)
+0x1f0|                  00                           |      .         |          align_128bytes: false 0x1f6-0x1f6.1 (0.1)
+0x1f0|                  00                           |      .         |          align_8bytes: false 0x1f6.1-0x1f6.2 (0.1)
+0x1f0|                  00                           |      .         |          align_2bytes: false 0x1f6.2-0x1f6.3 (0.1)
+0x1f0|                  00                           |      .         |          align_1bytes: false 0x1f6.3-0x1f6.4 (0.1)
+0x1f0|                  00                           |      .         |          mem_preload: false 0x1f6.4-0x1f6.5 (0.1)
+0x1f0|                  00                           |      .         |          mem_locked: false 0x1f6.5-0x1f6.6 (0.1)
+0x1f0|                  00                           |      .         |          mem_16bit: false 0x1f6.6-0x1f6.7 (0.1)
+0x1f0|                  00                           |      .         |          mem_purgeable: false 0x1f6.7-0x1f7 (0.1)
+0x1f0|                     42                        |       B        |          mem_write: false 0x1f7-0x1f7.1 (0.1)
+0x1f0|                     42                        |       B        |          mem_read: true 0x1f7.1-0x1f7.2 (0.1)
+0x1f0|                     42                        |       B        |          mem_execute: false 0x1f7.2-0x1f7.3 (0.1)
+0x1f0|                     42                        |       B        |          mem_shared: false 0x1f7.3-0x1f7.4 (0.1)
+0x1f0|                     42                        |       B        |          mem_not_paged: false 0x1f7.4-0x1f7.5 (0.1)
+0x1f0|                     42                        |       B        |          mem_not_cached: false 0x1f7.5-0x1f7.6 (0.1)
+0x1f0|                     42                        |       B        |          mem_discardable: true 0x1f7.6-0x1f7.7 (0.1)
+0x1f0|                     42                        |       B        |          lnk_nreloc_ovfl: false 0x1f7.7-0x1f8 (0.1)
+0x1f0|                        00 00 00 00 00 00 00 00|        ........|  gap0: raw bits 0x1f8-0x800 (1544)
+0x200|de a9 42 90 dc 23 38 4a 96 fb 7a de d0 80 51 6a|..B..#8J..z...Qj|
+*    |until 0x7ff.7 (end) (1544)                     |                |

format/pe/testdata/pe-Windows-ARMv7-Thumb2LE-HelloWorld.fqtest

@@ -0,0 +1,391 @@
+$ fq dv pe-Windows-ARMv7-Thumb2LE-HelloWorld
+      |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-Windows-ARMv7-Thumb2LE-HelloWorld (pe) 0x0-0x1a00 (6656)
+      |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0xf8 (248)
+0x0000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x0000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x0000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x0000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x0000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x0000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x0000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x0000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x0010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x0010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x0010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x0010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x0010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x0010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x0010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x0020|00 00 00 00                                    |....            |
+0x0020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x0020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x0020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x0030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x0030|                                    f8 00 00 00|            ....|    e_lfanew: 248 (File address of new exe header) 0x3c-0x40 (4)
+0x0040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*     |until 0x7f.7 (64)                              |                |
+0x0080|56 18 6d ac 12 79 03 ff 12 79 03 ff 12 79 03 ff|V.m..y...y...y..|    padding: raw bits 0x80-0xf8 (120)
+*     |until 0xf7.7 (120)                             |                |
+      |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0xf8-0x2e0 (488)
+0x00f0|                        50 45 00 00            |        PE..    |    signature: raw bits (valid) 0xf8-0xfc (4)
+0x00f0|                                    c4 01      |            ..  |    machine: "armnt" (0x1c4) 0xfc-0xfe (2)
+0x00f0|                                          06 00|              ..|    number_of_sections: 6 0xfe-0x100 (2)
+0x0100|0d aa 6f 53                                    |..oS            |    time_date_stamp: 1399826957 (2014-05-11T16:49:17Z) 0x100-0x104 (4)
+0x0100|            00 00 00 00                        |    ....        |    pointer_to_symbol_table: 0x0 0x104-0x108 (4)
+0x0100|                        00 00 00 00            |        ....    |    number_of_symbols: 0 0x108-0x10c (4)
+0x0100|                                    e0 00      |            ..  |    size_of_optional_header: 224 0x10c-0x10e (2)
+      |                                               |                |    characteristics{}: 0x10e-0x110 (2)
+0x0100|                                          22   |              " |      bytes_reversed_lo: false 0x10e-0x10e.1 (0.1)
+0x0100|                                          22   |              " |      reserved: false 0x10e.1-0x10e.2 (0.1)
+0x0100|                                          22   |              " |      large_address_aware: true 0x10e.2-0x10e.3 (0.1)
+0x0100|                                          22   |              " |      aggressive_ws_trim: false 0x10e.3-0x10e.4 (0.1)
+0x0100|                                          22   |              " |      local_syms_stripped: false 0x10e.4-0x10e.5 (0.1)
+0x0100|                                          22   |              " |      line_nums_stripped: false 0x10e.5-0x10e.6 (0.1)
+0x0100|                                          22   |              " |      executable_image: true 0x10e.6-0x10e.7 (0.1)
+0x0100|                                          22   |              " |      relocs_stripped: false 0x10e.7-0x10f (0.1)
+0x0100|                                             01|               .|      bytes_reversed_hi: false 0x10f-0x10f.1 (0.1)
+0x0100|                                             01|               .|      up_system_only: false 0x10f.1-0x10f.2 (0.1)
+0x0100|                                             01|               .|      dll: false 0x10f.2-0x10f.3 (0.1)
+0x0100|                                             01|               .|      system: false 0x10f.3-0x10f.4 (0.1)
+0x0100|                                             01|               .|      net_run_from_swap: false 0x10f.4-0x10f.5 (0.1)
+0x0100|                                             01|               .|      removable_run_from_swap: false 0x10f.5-0x10f.6 (0.1)
+0x0100|                                             01|               .|      debug_stripped: false 0x10f.6-0x10f.7 (0.1)
+0x0100|                                             01|               .|      32bit_machine: true 0x10f.7-0x110 (0.1)
+      |                                               |                |    optional_header{}: 0x110-0x1f0 (224)
+0x0110|0b 01                                          |..              |      format: "pe32" (0x10b) 0x110-0x112 (2)
+0x0110|      0b                                       |  .             |      major_linker_version: 11 0x112-0x113 (1)
+0x0110|         00                                    |   .            |      minor_linker_version: 0 0x113-0x114 (1)
+0x0110|            00 08 00 00                        |    ....        |      size_of_code: 2048 0x114-0x118 (4)
+0x0110|                        00 10 00 00            |        ....    |      size_of_initialized_data: 4096 0x118-0x11c (4)
+0x0110|                                    00 00 00 00|            ....|      size_of_uninitialized_data: 0 0x11c-0x120 (4)
+0x0120|e5 12 00 00                                    |....            |      address_of_entry_point: 0x12e5 0x120-0x124 (4)
+0x0120|            00 10 00 00                        |    ....        |      base_of_code: 0x1000 0x124-0x128 (4)
+0x0120|                        00 20 00 00            |        . ..    |      base_of_data: 0x2000 0x128-0x12c (4)
+0x0120|                                    00 00 40 00|            ..@.|      image_base: 0x400000 0x12c-0x130 (4)
+0x0130|00 10 00 00                                    |....            |      section_alignment: 4096 0x130-0x134 (4)
+0x0130|            00 02 00 00                        |    ....        |      file_alignment: 512 0x134-0x138 (4)
+0x0130|                        06 00                  |        ..      |      major_os_version: 6 0x138-0x13a (2)
+0x0130|                              02 00            |          ..    |      minor_os_version: 2 0x13a-0x13c (2)
+0x0130|                                    00 00      |            ..  |      major_image_version: 0 0x13c-0x13e (2)
+0x0130|                                          00 00|              ..|      minor_image_version: 0 0x13e-0x140 (2)
+0x0140|06 00                                          |..              |      major_subsystem_version: 6 0x140-0x142 (2)
+0x0140|      02 00                                    |  ..            |      minor_subsystem_version: 2 0x142-0x144 (2)
+0x0140|            00 00 00 00                        |    ....        |      win32_version: 0 0x144-0x148 (4)
+0x0140|                        00 70 00 00            |        .p..    |      size_of_image: 28672 0x148-0x14c (4)
+0x0140|                                    00 04 00 00|            ....|      size_of_headers: 1024 0x14c-0x150 (4)
+0x0150|00 00 00 00                                    |....            |      chunk_sum: 0x0 0x150-0x154 (4)
+0x0150|            03 00                              |    ..          |      subsystem: "windows_cui" (3) 0x154-0x156 (2)
+      |                                               |                |      dll_characteristics{}: 0x156-0x158 (2)
+0x0150|                  40                           |      @         |        force_integrity: false 0x156-0x156.1 (0.1)
+0x0150|                  40                           |      @         |        dynamic_base: true 0x156.1-0x156.2 (0.1)
+0x0150|                  40                           |      @         |        high_entropy_va: false 0x156.2-0x156.3 (0.1)
+0x0150|                  40                           |      @         |        reserved0: false 0x156.3-0x156.4 (0.1)
+0x0150|                  40                           |      @         |        reserved1: false 0x156.4-0x156.5 (0.1)
+0x0150|                  40                           |      @         |        reserved2: false 0x156.5-0x156.6 (0.1)
+0x0150|                  40                           |      @         |        reserved3: false 0x156.6-0x156.7 (0.1)
+0x0150|                  40                           |      @         |        reserved4: false 0x156.7-0x157 (0.1)
+0x0150|                     81                        |       .        |        terminal_server_aware: true 0x157-0x157.1 (0.1)
+0x0150|                     81                        |       .        |        guard_cf: false 0x157.1-0x157.2 (0.1)
+0x0150|                     81                        |       .        |        wdm_driver: false 0x157.2-0x157.3 (0.1)
+0x0150|                     81                        |       .        |        appcontainer: false 0x157.3-0x157.4 (0.1)
+0x0150|                     81                        |       .        |        no_bind: false 0x157.4-0x157.5 (0.1)
+0x0150|                     81                        |       .        |        no_seh: false 0x157.5-0x157.6 (0.1)
+0x0150|                     81                        |       .        |        no_isolation: false 0x157.6-0x157.7 (0.1)
+0x0150|                     81                        |       .        |        nx_compat: true 0x157.7-0x158 (0.1)
+0x0150|                        00 00 10 00            |        ....    |      size_of_track_reserve: 1048576 0x158-0x15c (4)
+0x0150|                                    00 10 00 00|            ....|      size_of_stack_commit: 4096 0x15c-0x160 (4)
+0x0160|00 00 10 00                                    |....            |      size_of_heap_reserve: 1048576 0x160-0x164 (4)
+0x0160|            00 10 00 00                        |    ....        |      size_of_heap_commit: 4096 0x164-0x168 (4)
+0x0160|                        00 00 00 00            |        ....    |      loader_flags: 0 0x168-0x16c (4)
+0x0160|                                    10 00 00 00|            ....|      number_of_rva_and_sizes: 16 0x16c-0x170 (4)
+0x0170|00 00 00 00                                    |....            |      export_table_address: 0x0 0x170-0x174 (4)
+0x0170|            00 00 00 00                        |    ....        |      export_table_size: 0 0x174-0x178 (4)
+0x0170|                        f4 21 00 00            |        .!..    |      import_table_address: 0x21f4 0x178-0x17c (4)
+0x0170|                                    3c 00 00 00|            <...|      import_table_size: 60 0x17c-0x180 (4)
+0x0180|00 50 00 00                                    |.P..            |      resource_table_address: 0x5000 0x180-0x184 (4)
+0x0180|            e0 01 00 00                        |    ....        |      resource_table_size: 480 0x184-0x188 (4)
+0x0180|                        00 40 00 00            |        .@..    |      exception_table_address: 0x4000 0x188-0x18c (4)
+0x0180|                                    90 00 00 00|            ....|      exception_table_size: 144 0x18c-0x190 (4)
+0x0190|00 00 00 00                                    |....            |      certificate_table_address: 0x0 0x190-0x194 (4)
+0x0190|            00 00 00 00                        |    ....        |      certificate_table_size: 0 0x194-0x198 (4)
+0x0190|                        00 60 00 00            |        .`..    |      base_relocation_table_address: 0x6000 0x198-0x19c (4)
+0x0190|                                    a8 00 00 00|            ....|      base_relocation_table_size: 168 0x19c-0x1a0 (4)
+0x01a0|a0 20 00 00                                    |. ..            |      debug_address: 0x20a0 0x1a0-0x1a4 (4)
+0x01a0|            38 00 00 00                        |    8...        |      debug_size: 56 0x1a4-0x1a8 (4)
+0x01a0|                        00 00 00 00 00 00 00 00|        ........|      architecture: 0 0x1a8-0x1b0 (8)
+0x01b0|00 00 00 00 00 00 00 00                        |........        |      global_ptr: 0x0 0x1b0-0x1b8 (8)
+0x01b0|                        00 00 00 00            |        ....    |      tls_table_address: 0x0 0x1b8-0x1bc (4)
+0x01b0|                                    00 00 00 00|            ....|      tls_table_size: 0 0x1bc-0x1c0 (4)
+0x01c0|00 00 00 00                                    |....            |      load_config_table_address: 0x0 0x1c0-0x1c4 (4)
+0x01c0|            00 00 00 00                        |    ....        |      load_config_table_size: 0 0x1c4-0x1c8 (4)
+0x01c0|                        00 00 00 00            |        ....    |      bound_import_address: 0x0 0x1c8-0x1cc (4)
+0x01c0|                                    00 00 00 00|            ....|      bound_import_size: 0 0x1cc-0x1d0 (4)
+0x01d0|00 20 00 00                                    |. ..            |      iat_address: 0x2000 0x1d0-0x1d4 (4)
+0x01d0|            80 00 00 00                        |    ....        |      iat_size: 128 0x1d4-0x1d8 (4)
+0x01d0|                        00 00 00 00            |        ....    |      delay_import_descriptor_address: 0x0 0x1d8-0x1dc (4)
+0x01d0|                                    00 00 00 00|            ....|      delay_import_descriptor_size: 0 0x1dc-0x1e0 (4)
+0x01e0|00 00 00 00                                    |....            |      clr_runtime_header_address: 0x0 0x1e0-0x1e4 (4)
+0x01e0|            00 00 00 00                        |    ....        |      clr_runtime_header_size: 0 0x1e4-0x1e8 (4)
+0x01e0|                        00 00 00 00 00 00 00 00|        ........|      reserved: 0 0x1e8-0x1f0 (8)
+      |                                               |                |      unknown: raw bits 0x1f0-0x1f0 (0)
+      |                                               |                |    sections[0:6]: 0x1f0-0x2e0 (240)
+      |                                               |                |      [0]{}: section 0x1f0-0x218 (40)
+0x01f0|2e 74 65 78 74 00 00 00                        |.text...        |        name: ".text" 0x1f0-0x1f8 (8)
+0x01f0|                        94 06 00 00            |        ....    |        virtual_size: 1684 0x1f8-0x1fc (4)
+0x01f0|                                    00 10 00 00|            ....|        virtual_address: 0x1000 0x1fc-0x200 (4)
+0x0200|00 08 00 00                                    |....            |        size_of_raw_data: 2048 0x200-0x204 (4)
+0x0200|            00 04 00 00                        |    ....        |        pointer_to_raw_data: 0x400 0x204-0x208 (4)
+0x0200|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x208-0x20c (4)
+0x0200|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x20c-0x210 (4)
+0x0210|00 00                                          |..              |        number_of_relocations: 0 0x210-0x212 (2)
+0x0210|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x212-0x214 (2)
+      |                                               |                |        characteristics{}: 0x214-0x218 (4)
+0x0210|            20                                 |                |          cnt_uninitialized_data: false 0x214-0x214.1 (0.1)
+0x0210|            20                                 |                |          cnt_initialized_data: false 0x214.1-0x214.2 (0.1)
+0x0210|            20                                 |                |          cnt_code: true 0x214.2-0x214.3 (0.1)
+0x0210|            20                                 |                |          reserved: false 0x214.3-0x214.4 (0.1)
+0x0210|            20                                 |                |          type_no_pad: false 0x214.4-0x214.5 (0.1)
+0x0210|            20                                 |                |          reserved0: false 0x214.5-0x214.6 (0.1)
+0x0210|            20                                 |                |          reserved1: false 0x214.6-0x214.7 (0.1)
+0x0210|            20                                 |                |          reserved2: false 0x214.7-0x215 (0.1)
+0x0210|               00                              |     .          |          gprel: false 0x215-0x215.1 (0.1)
+0x0210|               00                              |     .          |          unknown0: false 0x215.1-0x215.2 (0.1)
+0x0210|               00                              |     .          |          unknown1: false 0x215.2-0x215.3 (0.1)
+0x0210|               00                              |     .          |          lnk_comdat: false 0x215.3-0x215.4 (0.1)
+0x0210|               00                              |     .          |          lnk_remove: false 0x215.4-0x215.5 (0.1)
+0x0210|               00                              |     .          |          reserved3: false 0x215.5-0x215.6 (0.1)
+0x0210|               00                              |     .          |          lnk_info: false 0x215.6-0x215.7 (0.1)
+0x0210|               00                              |     .          |          lnk_other: false 0x215.7-0x216 (0.1)
+0x0210|                  00                           |      .         |          align_128bytes: false 0x216-0x216.1 (0.1)
+0x0210|                  00                           |      .         |          align_8bytes: false 0x216.1-0x216.2 (0.1)
+0x0210|                  00                           |      .         |          align_2bytes: false 0x216.2-0x216.3 (0.1)
+0x0210|                  00                           |      .         |          align_1bytes: false 0x216.3-0x216.4 (0.1)
+0x0210|                  00                           |      .         |          mem_preload: false 0x216.4-0x216.5 (0.1)
+0x0210|                  00                           |      .         |          mem_locked: false 0x216.5-0x216.6 (0.1)
+0x0210|                  00                           |      .         |          mem_16bit: false 0x216.6-0x216.7 (0.1)
+0x0210|                  00                           |      .         |          mem_purgeable: false 0x216.7-0x217 (0.1)
+0x0210|                     60                        |       `        |          mem_write: false 0x217-0x217.1 (0.1)
+0x0210|                     60                        |       `        |          mem_read: true 0x217.1-0x217.2 (0.1)
+0x0210|                     60                        |       `        |          mem_execute: true 0x217.2-0x217.3 (0.1)
+0x0210|                     60                        |       `        |          mem_shared: false 0x217.3-0x217.4 (0.1)
+0x0210|                     60                        |       `        |          mem_not_paged: false 0x217.4-0x217.5 (0.1)
+0x0210|                     60                        |       `        |          mem_not_cached: false 0x217.5-0x217.6 (0.1)
+0x0210|                     60                        |       `        |          mem_discardable: false 0x217.6-0x217.7 (0.1)
+0x0210|                     60                        |       `        |          lnk_nreloc_ovfl: false 0x217.7-0x218 (0.1)
+      |                                               |                |      [1]{}: section 0x218-0x240 (40)
+0x0210|                        2e 72 64 61 74 61 00 00|        .rdata..|        name: ".rdata" 0x218-0x220 (8)
+0x0220|ae 04 00 00                                    |....            |        virtual_size: 1198 0x220-0x224 (4)
+0x0220|            00 20 00 00                        |    . ..        |        virtual_address: 0x2000 0x224-0x228 (4)
+0x0220|                        00 06 00 00            |        ....    |        size_of_raw_data: 1536 0x228-0x22c (4)
+0x0220|                                    00 0c 00 00|            ....|        pointer_to_raw_data: 0xc00 0x22c-0x230 (4)
+0x0230|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x230-0x234 (4)
+0x0230|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x234-0x238 (4)
+0x0230|                        00 00                  |        ..      |        number_of_relocations: 0 0x238-0x23a (2)
+0x0230|                              00 00            |          ..    |        number_of_line_numbers: 0 0x23a-0x23c (2)
+      |                                               |                |        characteristics{}: 0x23c-0x240 (4)
+0x0230|                                    40         |            @   |          cnt_uninitialized_data: false 0x23c-0x23c.1 (0.1)
+0x0230|                                    40         |            @   |          cnt_initialized_data: true 0x23c.1-0x23c.2 (0.1)
+0x0230|                                    40         |            @   |          cnt_code: false 0x23c.2-0x23c.3 (0.1)
+0x0230|                                    40         |            @   |          reserved: false 0x23c.3-0x23c.4 (0.1)
+0x0230|                                    40         |            @   |          type_no_pad: false 0x23c.4-0x23c.5 (0.1)
+0x0230|                                    40         |            @   |          reserved0: false 0x23c.5-0x23c.6 (0.1)
+0x0230|                                    40         |            @   |          reserved1: false 0x23c.6-0x23c.7 (0.1)
+0x0230|                                    40         |            @   |          reserved2: false 0x23c.7-0x23d (0.1)
+0x0230|                                       00      |             .  |          gprel: false 0x23d-0x23d.1 (0.1)
+0x0230|                                       00      |             .  |          unknown0: false 0x23d.1-0x23d.2 (0.1)
+0x0230|                                       00      |             .  |          unknown1: false 0x23d.2-0x23d.3 (0.1)
+0x0230|                                       00      |             .  |          lnk_comdat: false 0x23d.3-0x23d.4 (0.1)
+0x0230|                                       00      |             .  |          lnk_remove: false 0x23d.4-0x23d.5 (0.1)
+0x0230|                                       00      |             .  |          reserved3: false 0x23d.5-0x23d.6 (0.1)
+0x0230|                                       00      |             .  |          lnk_info: false 0x23d.6-0x23d.7 (0.1)
+0x0230|                                       00      |             .  |          lnk_other: false 0x23d.7-0x23e (0.1)
+0x0230|                                          00   |              . |          align_128bytes: false 0x23e-0x23e.1 (0.1)
+0x0230|                                          00   |              . |          align_8bytes: false 0x23e.1-0x23e.2 (0.1)
+0x0230|                                          00   |              . |          align_2bytes: false 0x23e.2-0x23e.3 (0.1)
+0x0230|                                          00   |              . |          align_1bytes: false 0x23e.3-0x23e.4 (0.1)
+0x0230|                                          00   |              . |          mem_preload: false 0x23e.4-0x23e.5 (0.1)
+0x0230|                                          00   |              . |          mem_locked: false 0x23e.5-0x23e.6 (0.1)
+0x0230|                                          00   |              . |          mem_16bit: false 0x23e.6-0x23e.7 (0.1)
+0x0230|                                          00   |              . |          mem_purgeable: false 0x23e.7-0x23f (0.1)
+0x0230|                                             40|               @|          mem_write: false 0x23f-0x23f.1 (0.1)
+0x0230|                                             40|               @|          mem_read: true 0x23f.1-0x23f.2 (0.1)
+0x0230|                                             40|               @|          mem_execute: false 0x23f.2-0x23f.3 (0.1)
+0x0230|                                             40|               @|          mem_shared: false 0x23f.3-0x23f.4 (0.1)
+0x0230|                                             40|               @|          mem_not_paged: false 0x23f.4-0x23f.5 (0.1)
+0x0230|                                             40|               @|          mem_not_cached: false 0x23f.5-0x23f.6 (0.1)
+0x0230|                                             40|               @|          mem_discardable: false 0x23f.6-0x23f.7 (0.1)
+0x0230|                                             40|               @|          lnk_nreloc_ovfl: false 0x23f.7-0x240 (0.1)
+      |                                               |                |      [2]{}: section 0x240-0x268 (40)
+0x0240|2e 64 61 74 61 00 00 00                        |.data...        |        name: ".data" 0x240-0x248 (8)
+0x0240|                        4c 02 00 00            |        L...    |        virtual_size: 588 0x248-0x24c (4)
+0x0240|                                    00 30 00 00|            .0..|        virtual_address: 0x3000 0x24c-0x250 (4)
+0x0250|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x250-0x254 (4)
+0x0250|            00 12 00 00                        |    ....        |        pointer_to_raw_data: 0x1200 0x254-0x258 (4)
+0x0250|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x258-0x25c (4)
+0x0250|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x25c-0x260 (4)
+0x0260|00 00                                          |..              |        number_of_relocations: 0 0x260-0x262 (2)
+0x0260|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x262-0x264 (2)
+      |                                               |                |        characteristics{}: 0x264-0x268 (4)
+0x0260|            40                                 |    @           |          cnt_uninitialized_data: false 0x264-0x264.1 (0.1)
+0x0260|            40                                 |    @           |          cnt_initialized_data: true 0x264.1-0x264.2 (0.1)
+0x0260|            40                                 |    @           |          cnt_code: false 0x264.2-0x264.3 (0.1)
+0x0260|            40                                 |    @           |          reserved: false 0x264.3-0x264.4 (0.1)
+0x0260|            40                                 |    @           |          type_no_pad: false 0x264.4-0x264.5 (0.1)
+0x0260|            40                                 |    @           |          reserved0: false 0x264.5-0x264.6 (0.1)
+0x0260|            40                                 |    @           |          reserved1: false 0x264.6-0x264.7 (0.1)
+0x0260|            40                                 |    @           |          reserved2: false 0x264.7-0x265 (0.1)
+0x0260|               00                              |     .          |          gprel: false 0x265-0x265.1 (0.1)
+0x0260|               00                              |     .          |          unknown0: false 0x265.1-0x265.2 (0.1)
+0x0260|               00                              |     .          |          unknown1: false 0x265.2-0x265.3 (0.1)
+0x0260|               00                              |     .          |          lnk_comdat: false 0x265.3-0x265.4 (0.1)
+0x0260|               00                              |     .          |          lnk_remove: false 0x265.4-0x265.5 (0.1)
+0x0260|               00                              |     .          |          reserved3: false 0x265.5-0x265.6 (0.1)
+0x0260|               00                              |     .          |          lnk_info: false 0x265.6-0x265.7 (0.1)
+0x0260|               00                              |     .          |          lnk_other: false 0x265.7-0x266 (0.1)
+0x0260|                  00                           |      .         |          align_128bytes: false 0x266-0x266.1 (0.1)
+0x0260|                  00                           |      .         |          align_8bytes: false 0x266.1-0x266.2 (0.1)
+0x0260|                  00                           |      .         |          align_2bytes: false 0x266.2-0x266.3 (0.1)
+0x0260|                  00                           |      .         |          align_1bytes: false 0x266.3-0x266.4 (0.1)
+0x0260|                  00                           |      .         |          mem_preload: false 0x266.4-0x266.5 (0.1)
+0x0260|                  00                           |      .         |          mem_locked: false 0x266.5-0x266.6 (0.1)
+0x0260|                  00                           |      .         |          mem_16bit: false 0x266.6-0x266.7 (0.1)
+0x0260|                  00                           |      .         |          mem_purgeable: false 0x266.7-0x267 (0.1)
+0x0260|                     c0                        |       .        |          mem_write: true 0x267-0x267.1 (0.1)
+0x0260|                     c0                        |       .        |          mem_read: true 0x267.1-0x267.2 (0.1)
+0x0260|                     c0                        |       .        |          mem_execute: false 0x267.2-0x267.3 (0.1)
+0x0260|                     c0                        |       .        |          mem_shared: false 0x267.3-0x267.4 (0.1)
+0x0260|                     c0                        |       .        |          mem_not_paged: false 0x267.4-0x267.5 (0.1)
+0x0260|                     c0                        |       .        |          mem_not_cached: false 0x267.5-0x267.6 (0.1)
+0x0260|                     c0                        |       .        |          mem_discardable: false 0x267.6-0x267.7 (0.1)
+0x0260|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x267.7-0x268 (0.1)
+      |                                               |                |      [3]{}: section 0x268-0x290 (40)
+0x0260|                        2e 70 64 61 74 61 00 00|        .pdata..|        name: ".pdata" 0x268-0x270 (8)
+0x0270|90 00 00 00                                    |....            |        virtual_size: 144 0x270-0x274 (4)
+0x0270|            00 40 00 00                        |    .@..        |        virtual_address: 0x4000 0x274-0x278 (4)
+0x0270|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x278-0x27c (4)
+0x0270|                                    00 14 00 00|            ....|        pointer_to_raw_data: 0x1400 0x27c-0x280 (4)
+0x0280|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x280-0x284 (4)
+0x0280|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x284-0x288 (4)
+0x0280|                        00 00                  |        ..      |        number_of_relocations: 0 0x288-0x28a (2)
+0x0280|                              00 00            |          ..    |        number_of_line_numbers: 0 0x28a-0x28c (2)
+      |                                               |                |        characteristics{}: 0x28c-0x290 (4)
+0x0280|                                    40         |            @   |          cnt_uninitialized_data: false 0x28c-0x28c.1 (0.1)
+0x0280|                                    40         |            @   |          cnt_initialized_data: true 0x28c.1-0x28c.2 (0.1)
+0x0280|                                    40         |            @   |          cnt_code: false 0x28c.2-0x28c.3 (0.1)
+0x0280|                                    40         |            @   |          reserved: false 0x28c.3-0x28c.4 (0.1)
+0x0280|                                    40         |            @   |          type_no_pad: false 0x28c.4-0x28c.5 (0.1)
+0x0280|                                    40         |            @   |          reserved0: false 0x28c.5-0x28c.6 (0.1)
+0x0280|                                    40         |            @   |          reserved1: false 0x28c.6-0x28c.7 (0.1)
+0x0280|                                    40         |            @   |          reserved2: false 0x28c.7-0x28d (0.1)
+0x0280|                                       00      |             .  |          gprel: false 0x28d-0x28d.1 (0.1)
+0x0280|                                       00      |             .  |          unknown0: false 0x28d.1-0x28d.2 (0.1)
+0x0280|                                       00      |             .  |          unknown1: false 0x28d.2-0x28d.3 (0.1)
+0x0280|                                       00      |             .  |          lnk_comdat: false 0x28d.3-0x28d.4 (0.1)
+0x0280|                                       00      |             .  |          lnk_remove: false 0x28d.4-0x28d.5 (0.1)
+0x0280|                                       00      |             .  |          reserved3: false 0x28d.5-0x28d.6 (0.1)
+0x0280|                                       00      |             .  |          lnk_info: false 0x28d.6-0x28d.7 (0.1)
+0x0280|                                       00      |             .  |          lnk_other: false 0x28d.7-0x28e (0.1)
+0x0280|                                          00   |              . |          align_128bytes: false 0x28e-0x28e.1 (0.1)
+0x0280|                                          00   |              . |          align_8bytes: false 0x28e.1-0x28e.2 (0.1)
+0x0280|                                          00   |              . |          align_2bytes: false 0x28e.2-0x28e.3 (0.1)
+0x0280|                                          00   |              . |          align_1bytes: false 0x28e.3-0x28e.4 (0.1)
+0x0280|                                          00   |              . |          mem_preload: false 0x28e.4-0x28e.5 (0.1)
+0x0280|                                          00   |              . |          mem_locked: false 0x28e.5-0x28e.6 (0.1)
+0x0280|                                          00   |              . |          mem_16bit: false 0x28e.6-0x28e.7 (0.1)
+0x0280|                                          00   |              . |          mem_purgeable: false 0x28e.7-0x28f (0.1)
+0x0280|                                             40|               @|          mem_write: false 0x28f-0x28f.1 (0.1)
+0x0280|                                             40|               @|          mem_read: true 0x28f.1-0x28f.2 (0.1)
+0x0280|                                             40|               @|          mem_execute: false 0x28f.2-0x28f.3 (0.1)
+0x0280|                                             40|               @|          mem_shared: false 0x28f.3-0x28f.4 (0.1)
+0x0280|                                             40|               @|          mem_not_paged: false 0x28f.4-0x28f.5 (0.1)
+0x0280|                                             40|               @|          mem_not_cached: false 0x28f.5-0x28f.6 (0.1)
+0x0280|                                             40|               @|          mem_discardable: false 0x28f.6-0x28f.7 (0.1)
+0x0280|                                             40|               @|          lnk_nreloc_ovfl: false 0x28f.7-0x290 (0.1)
+      |                                               |                |      [4]{}: section 0x290-0x2b8 (40)
+0x0290|2e 72 73 72 63 00 00 00                        |.rsrc...        |        name: ".rsrc" 0x290-0x298 (8)
+0x0290|                        e0 01 00 00            |        ....    |        virtual_size: 480 0x298-0x29c (4)
+0x0290|                                    00 50 00 00|            .P..|        virtual_address: 0x5000 0x29c-0x2a0 (4)
+0x02a0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x2a0-0x2a4 (4)
+0x02a0|            00 16 00 00                        |    ....        |        pointer_to_raw_data: 0x1600 0x2a4-0x2a8 (4)
+0x02a0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x2a8-0x2ac (4)
+0x02a0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x2ac-0x2b0 (4)
+0x02b0|00 00                                          |..              |        number_of_relocations: 0 0x2b0-0x2b2 (2)
+0x02b0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x2b2-0x2b4 (2)
+      |                                               |                |        characteristics{}: 0x2b4-0x2b8 (4)
+0x02b0|            40                                 |    @           |          cnt_uninitialized_data: false 0x2b4-0x2b4.1 (0.1)
+0x02b0|            40                                 |    @           |          cnt_initialized_data: true 0x2b4.1-0x2b4.2 (0.1)
+0x02b0|            40                                 |    @           |          cnt_code: false 0x2b4.2-0x2b4.3 (0.1)
+0x02b0|            40                                 |    @           |          reserved: false 0x2b4.3-0x2b4.4 (0.1)
+0x02b0|            40                                 |    @           |          type_no_pad: false 0x2b4.4-0x2b4.5 (0.1)
+0x02b0|            40                                 |    @           |          reserved0: false 0x2b4.5-0x2b4.6 (0.1)
+0x02b0|            40                                 |    @           |          reserved1: false 0x2b4.6-0x2b4.7 (0.1)
+0x02b0|            40                                 |    @           |          reserved2: false 0x2b4.7-0x2b5 (0.1)
+0x02b0|               00                              |     .          |          gprel: false 0x2b5-0x2b5.1 (0.1)
+0x02b0|               00                              |     .          |          unknown0: false 0x2b5.1-0x2b5.2 (0.1)
+0x02b0|               00                              |     .          |          unknown1: false 0x2b5.2-0x2b5.3 (0.1)
+0x02b0|               00                              |     .          |          lnk_comdat: false 0x2b5.3-0x2b5.4 (0.1)
+0x02b0|               00                              |     .          |          lnk_remove: false 0x2b5.4-0x2b5.5 (0.1)
+0x02b0|               00                              |     .          |          reserved3: false 0x2b5.5-0x2b5.6 (0.1)
+0x02b0|               00                              |     .          |          lnk_info: false 0x2b5.6-0x2b5.7 (0.1)
+0x02b0|               00                              |     .          |          lnk_other: false 0x2b5.7-0x2b6 (0.1)
+0x02b0|                  00                           |      .         |          align_128bytes: false 0x2b6-0x2b6.1 (0.1)
+0x02b0|                  00                           |      .         |          align_8bytes: false 0x2b6.1-0x2b6.2 (0.1)
+0x02b0|                  00                           |      .         |          align_2bytes: false 0x2b6.2-0x2b6.3 (0.1)
+0x02b0|                  00                           |      .         |          align_1bytes: false 0x2b6.3-0x2b6.4 (0.1)
+0x02b0|                  00                           |      .         |          mem_preload: false 0x2b6.4-0x2b6.5 (0.1)
+0x02b0|                  00                           |      .         |          mem_locked: false 0x2b6.5-0x2b6.6 (0.1)
+0x02b0|                  00                           |      .         |          mem_16bit: false 0x2b6.6-0x2b6.7 (0.1)
+0x02b0|                  00                           |      .         |          mem_purgeable: false 0x2b6.7-0x2b7 (0.1)
+0x02b0|                     40                        |       @        |          mem_write: false 0x2b7-0x2b7.1 (0.1)
+0x02b0|                     40                        |       @        |          mem_read: true 0x2b7.1-0x2b7.2 (0.1)
+0x02b0|                     40                        |       @        |          mem_execute: false 0x2b7.2-0x2b7.3 (0.1)
+0x02b0|                     40                        |       @        |          mem_shared: false 0x2b7.3-0x2b7.4 (0.1)
+0x02b0|                     40                        |       @        |          mem_not_paged: false 0x2b7.4-0x2b7.5 (0.1)
+0x02b0|                     40                        |       @        |          mem_not_cached: false 0x2b7.5-0x2b7.6 (0.1)
+0x02b0|                     40                        |       @        |          mem_discardable: false 0x2b7.6-0x2b7.7 (0.1)
+0x02b0|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x2b7.7-0x2b8 (0.1)
+      |                                               |                |      [5]{}: section 0x2b8-0x2e0 (40)
+0x02b0|                        2e 72 65 6c 6f 63 00 00|        .reloc..|        name: ".reloc" 0x2b8-0x2c0 (8)
+0x02c0|9e 01 00 00                                    |....            |        virtual_size: 414 0x2c0-0x2c4 (4)
+0x02c0|            00 60 00 00                        |    .`..        |        virtual_address: 0x6000 0x2c4-0x2c8 (4)
+0x02c0|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x2c8-0x2cc (4)
+0x02c0|                                    00 18 00 00|            ....|        pointer_to_raw_data: 0x1800 0x2cc-0x2d0 (4)
+0x02d0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x2d0-0x2d4 (4)
+0x02d0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x2d4-0x2d8 (4)
+0x02d0|                        00 00                  |        ..      |        number_of_relocations: 0 0x2d8-0x2da (2)
+0x02d0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x2da-0x2dc (2)
+      |                                               |                |        characteristics{}: 0x2dc-0x2e0 (4)
+0x02d0|                                    40         |            @   |          cnt_uninitialized_data: false 0x2dc-0x2dc.1 (0.1)
+0x02d0|                                    40         |            @   |          cnt_initialized_data: true 0x2dc.1-0x2dc.2 (0.1)
+0x02d0|                                    40         |            @   |          cnt_code: false 0x2dc.2-0x2dc.3 (0.1)
+0x02d0|                                    40         |            @   |          reserved: false 0x2dc.3-0x2dc.4 (0.1)
+0x02d0|                                    40         |            @   |          type_no_pad: false 0x2dc.4-0x2dc.5 (0.1)
+0x02d0|                                    40         |            @   |          reserved0: false 0x2dc.5-0x2dc.6 (0.1)
+0x02d0|                                    40         |            @   |          reserved1: false 0x2dc.6-0x2dc.7 (0.1)
+0x02d0|                                    40         |            @   |          reserved2: false 0x2dc.7-0x2dd (0.1)
+0x02d0|                                       00      |             .  |          gprel: false 0x2dd-0x2dd.1 (0.1)
+0x02d0|                                       00      |             .  |          unknown0: false 0x2dd.1-0x2dd.2 (0.1)
+0x02d0|                                       00      |             .  |          unknown1: false 0x2dd.2-0x2dd.3 (0.1)
+0x02d0|                                       00      |             .  |          lnk_comdat: false 0x2dd.3-0x2dd.4 (0.1)
+0x02d0|                                       00      |             .  |          lnk_remove: false 0x2dd.4-0x2dd.5 (0.1)
+0x02d0|                                       00      |             .  |          reserved3: false 0x2dd.5-0x2dd.6 (0.1)
+0x02d0|                                       00      |             .  |          lnk_info: false 0x2dd.6-0x2dd.7 (0.1)
+0x02d0|                                       00      |             .  |          lnk_other: false 0x2dd.7-0x2de (0.1)
+0x02d0|                                          00   |              . |          align_128bytes: false 0x2de-0x2de.1 (0.1)
+0x02d0|                                          00   |              . |          align_8bytes: false 0x2de.1-0x2de.2 (0.1)
+0x02d0|                                          00   |              . |          align_2bytes: false 0x2de.2-0x2de.3 (0.1)
+0x02d0|                                          00   |              . |          align_1bytes: false 0x2de.3-0x2de.4 (0.1)
+0x02d0|                                          00   |              . |          mem_preload: false 0x2de.4-0x2de.5 (0.1)
+0x02d0|                                          00   |              . |          mem_locked: false 0x2de.5-0x2de.6 (0.1)
+0x02d0|                                          00   |              . |          mem_16bit: false 0x2de.6-0x2de.7 (0.1)
+0x02d0|                                          00   |              . |          mem_purgeable: false 0x2de.7-0x2df (0.1)
+0x02d0|                                             42|               B|          mem_write: false 0x2df-0x2df.1 (0.1)
+0x02d0|                                             42|               B|          mem_read: true 0x2df.1-0x2df.2 (0.1)
+0x02d0|                                             42|               B|          mem_execute: false 0x2df.2-0x2df.3 (0.1)
+0x02d0|                                             42|               B|          mem_shared: false 0x2df.3-0x2df.4 (0.1)
+0x02d0|                                             42|               B|          mem_not_paged: false 0x2df.4-0x2df.5 (0.1)
+0x02d0|                                             42|               B|          mem_not_cached: false 0x2df.5-0x2df.6 (0.1)
+0x02d0|                                             42|               B|          mem_discardable: true 0x2df.6-0x2df.7 (0.1)
+0x02d0|                                             42|               B|          lnk_nreloc_ovfl: false 0x2df.7-0x2e0 (0.1)
+0x02e0|00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................|  gap0: raw bits 0x2e0-0x1a00 (5920)
+*     |until 0x19ff.7 (end) (5920)                    |                |

format/pe/testdata/pe-Windows-x64-cmd.fqtest

@@ -0,0 +1,391 @@
+$ fq dv pe-Windows-x64-cmd
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-Windows-x64-cmd (pe) 0x0-0x54400 (345088)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0xf0 (240)
+0x00000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x00000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x00000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x00000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x00000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x00000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x00000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x00000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x00010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x00010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x00010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x00010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x00010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x00010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x00010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x00020|00 00 00 00                                    |....            |
+0x00020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x00020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x00020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x00030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x00030|                                    f0 00 00 00|            ....|    e_lfanew: 240 (File address of new exe header) 0x3c-0x40 (4)
+0x00040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*      |until 0x7f.7 (64)                              |                |
+0x00080|4d 7c a4 8a 09 1d ca d9 09 1d ca d9 09 1d ca d9|M|..............|    padding: raw bits 0x80-0xf0 (112)
+*      |until 0xef.7 (112)                             |                |
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0xf0-0x2e8 (504)
+0x000f0|50 45 00 00                                    |PE..            |    signature: raw bits (valid) 0xf0-0xf4 (4)
+0x000f0|            64 86                              |    d.          |    machine: "amd64" (0x8664) 0xf4-0xf6 (2)
+0x000f0|                  06 00                        |      ..        |    number_of_sections: 6 0xf6-0xf8 (2)
+0x000f0|                        e5 98 e7 4c            |        ...L    |    time_date_stamp: 1290246373 (2010-11-20T09:46:13Z) 0xf8-0xfc (4)
+0x000f0|                                    00 00 00 00|            ....|    pointer_to_symbol_table: 0x0 0xfc-0x100 (4)
+0x00100|00 00 00 00                                    |....            |    number_of_symbols: 0 0x100-0x104 (4)
+0x00100|            f0 00                              |    ..          |    size_of_optional_header: 240 0x104-0x106 (2)
+       |                                               |                |    characteristics{}: 0x106-0x108 (2)
+0x00100|                  22                           |      "         |      bytes_reversed_lo: false 0x106-0x106.1 (0.1)
+0x00100|                  22                           |      "         |      reserved: false 0x106.1-0x106.2 (0.1)
+0x00100|                  22                           |      "         |      large_address_aware: true 0x106.2-0x106.3 (0.1)
+0x00100|                  22                           |      "         |      aggressive_ws_trim: false 0x106.3-0x106.4 (0.1)
+0x00100|                  22                           |      "         |      local_syms_stripped: false 0x106.4-0x106.5 (0.1)
+0x00100|                  22                           |      "         |      line_nums_stripped: false 0x106.5-0x106.6 (0.1)
+0x00100|                  22                           |      "         |      executable_image: true 0x106.6-0x106.7 (0.1)
+0x00100|                  22                           |      "         |      relocs_stripped: false 0x106.7-0x107 (0.1)
+0x00100|                     00                        |       .        |      bytes_reversed_hi: false 0x107-0x107.1 (0.1)
+0x00100|                     00                        |       .        |      up_system_only: false 0x107.1-0x107.2 (0.1)
+0x00100|                     00                        |       .        |      dll: false 0x107.2-0x107.3 (0.1)
+0x00100|                     00                        |       .        |      system: false 0x107.3-0x107.4 (0.1)
+0x00100|                     00                        |       .        |      net_run_from_swap: false 0x107.4-0x107.5 (0.1)
+0x00100|                     00                        |       .        |      removable_run_from_swap: false 0x107.5-0x107.6 (0.1)
+0x00100|                     00                        |       .        |      debug_stripped: false 0x107.6-0x107.7 (0.1)
+0x00100|                     00                        |       .        |      32bit_machine: false 0x107.7-0x108 (0.1)
+       |                                               |                |    optional_header{}: 0x108-0x1f8 (240)
+0x00100|                        0b 02                  |        ..      |      format: "pe32+" (0x20b) 0x108-0x10a (2)
+0x00100|                              09               |          .     |      major_linker_version: 9 0x10a-0x10b (1)
+0x00100|                                 00            |           .    |      minor_linker_version: 0 0x10b-0x10c (1)
+0x00100|                                    00 72 02 00|            .r..|      size_of_code: 160256 0x10c-0x110 (4)
+0x00110|00 ce 02 00                                    |....            |      size_of_initialized_data: 183808 0x110-0x114 (4)
+0x00110|            00 00 00 00                        |    ....        |      size_of_uninitialized_data: 0 0x114-0x118 (4)
+0x00110|                        b4 90 00 00            |        ....    |      address_of_entry_point: 0x90b4 0x118-0x11c (4)
+0x00110|                                    00 10 00 00|            ....|      base_of_code: 0x1000 0x11c-0x120 (4)
+0x00120|00 00 d0 4a 00 00 00 00                        |...J....        |      image_base: 0x4ad00000 0x120-0x128 (8)
+0x00120|                        00 10 00 00            |        ....    |      section_alignment: 4096 0x128-0x12c (4)
+0x00120|                                    00 02 00 00|            ....|      file_alignment: 512 0x12c-0x130 (4)
+0x00130|06 00                                          |..              |      major_os_version: 6 0x130-0x132 (2)
+0x00130|      01 00                                    |  ..            |      minor_os_version: 1 0x132-0x134 (2)
+0x00130|            06 00                              |    ..          |      major_image_version: 6 0x134-0x136 (2)
+0x00130|                  01 00                        |      ..        |      minor_image_version: 1 0x136-0x138 (2)
+0x00130|                        06 00                  |        ..      |      major_subsystem_version: 6 0x138-0x13a (2)
+0x00130|                              01 00            |          ..    |      minor_subsystem_version: 1 0x13a-0x13c (2)
+0x00130|                                    00 00 00 00|            ....|      win32_version: 0 0x13c-0x140 (4)
+0x00140|00 90 05 00                                    |....            |      size_of_image: 364544 0x140-0x144 (4)
+0x00140|            00 04 00 00                        |    ....        |      size_of_headers: 1024 0x144-0x148 (4)
+0x00140|                        ec bd 05 00            |        ....    |      chunk_sum: 0x5bdec 0x148-0x14c (4)
+0x00140|                                    03 00      |            ..  |      subsystem: "windows_cui" (3) 0x14c-0x14e (2)
+       |                                               |                |      dll_characteristics{}: 0x14e-0x150 (2)
+0x00140|                                          40   |              @ |        force_integrity: false 0x14e-0x14e.1 (0.1)
+0x00140|                                          40   |              @ |        dynamic_base: true 0x14e.1-0x14e.2 (0.1)
+0x00140|                                          40   |              @ |        high_entropy_va: false 0x14e.2-0x14e.3 (0.1)
+0x00140|                                          40   |              @ |        reserved0: false 0x14e.3-0x14e.4 (0.1)
+0x00140|                                          40   |              @ |        reserved1: false 0x14e.4-0x14e.5 (0.1)
+0x00140|                                          40   |              @ |        reserved2: false 0x14e.5-0x14e.6 (0.1)
+0x00140|                                          40   |              @ |        reserved3: false 0x14e.6-0x14e.7 (0.1)
+0x00140|                                          40   |              @ |        reserved4: false 0x14e.7-0x14f (0.1)
+0x00140|                                             81|               .|        terminal_server_aware: true 0x14f-0x14f.1 (0.1)
+0x00140|                                             81|               .|        guard_cf: false 0x14f.1-0x14f.2 (0.1)
+0x00140|                                             81|               .|        wdm_driver: false 0x14f.2-0x14f.3 (0.1)
+0x00140|                                             81|               .|        appcontainer: false 0x14f.3-0x14f.4 (0.1)
+0x00140|                                             81|               .|        no_bind: false 0x14f.4-0x14f.5 (0.1)
+0x00140|                                             81|               .|        no_seh: false 0x14f.5-0x14f.6 (0.1)
+0x00140|                                             81|               .|        no_isolation: false 0x14f.6-0x14f.7 (0.1)
+0x00140|                                             81|               .|        nx_compat: true 0x14f.7-0x150 (0.1)
+0x00150|00 00 10 00 00 00 00 00                        |........        |      size_of_track_reserve: 1048576 0x150-0x158 (8)
+0x00150|                        00 c0 0f 00 00 00 00 00|        ........|      size_of_stack_commit: 1032192 0x158-0x160 (8)
+0x00160|00 00 10 00 00 00 00 00                        |........        |      size_of_heap_reserve: 1048576 0x160-0x168 (8)
+0x00160|                        00 10 00 00 00 00 00 00|        ........|      size_of_heap_commit: 4096 0x168-0x170 (8)
+0x00170|00 00 00 00                                    |....            |      loader_flags: 0 0x170-0x174 (4)
+0x00170|            10 00 00 00                        |    ....        |      number_of_rva_and_sizes: 16 0x174-0x178 (4)
+0x00170|                        00 00 00 00            |        ....    |      export_table_address: 0x0 0x178-0x17c (4)
+0x00170|                                    00 00 00 00|            ....|      export_table_size: 0 0x17c-0x180 (4)
+0x00180|58 a7 02 00                                    |X...            |      import_table_address: 0x2a758 0x180-0x184 (4)
+0x00180|            64 00 00 00                        |    d...        |      import_table_size: 100 0x184-0x188 (4)
+0x00180|                        00 f0 04 00            |        ....    |      resource_table_address: 0x4f000 0x188-0x18c (4)
+0x00180|                                    58 84 00 00|            X...|      resource_table_size: 33880 0x18c-0x190 (4)
+0x00190|00 c0 04 00                                    |....            |      exception_table_address: 0x4c000 0x190-0x194 (4)
+0x00190|            dc 26 00 00                        |    .&..        |      exception_table_size: 9948 0x194-0x198 (4)
+0x00190|                        00 00 00 00            |        ....    |      certificate_table_address: 0x0 0x198-0x19c (4)
+0x00190|                                    00 00 00 00|            ....|      certificate_table_size: 0 0x19c-0x1a0 (4)
+0x001a0|00 80 05 00                                    |....            |      base_relocation_table_address: 0x58000 0x1a0-0x1a4 (4)
+0x001a0|            24 01 00 00                        |    $...        |      base_relocation_table_size: 292 0x1a4-0x1a8 (4)
+0x001a0|                        70 80 02 00            |        p...    |      debug_address: 0x28070 0x1a8-0x1ac (4)
+0x001a0|                                    38 00 00 00|            8...|      debug_size: 56 0x1ac-0x1b0 (4)
+0x001b0|00 00 00 00 00 00 00 00                        |........        |      architecture: 0 0x1b0-0x1b8 (8)
+0x001b0|                        00 00 00 00 00 00 00 00|        ........|      global_ptr: 0x0 0x1b8-0x1c0 (8)
+0x001c0|00 00 00 00                                    |....            |      tls_table_address: 0x0 0x1c0-0x1c4 (4)
+0x001c0|            00 00 00 00                        |    ....        |      tls_table_size: 0 0x1c4-0x1c8 (4)
+0x001c0|                        00 00 00 00            |        ....    |      load_config_table_address: 0x0 0x1c8-0x1cc (4)
+0x001c0|                                    00 00 00 00|            ....|      load_config_table_size: 0 0x1cc-0x1d0 (4)
+0x001d0|e8 02 00 00                                    |....            |      bound_import_address: 0x2e8 0x1d0-0x1d4 (4)
+0x001d0|            9c 00 00 00                        |    ....        |      bound_import_size: 156 0x1d4-0x1d8 (4)
+0x001d0|                        00 90 02 00            |        ....    |      iat_address: 0x29000 0x1d8-0x1dc (4)
+0x001d0|                                    48 07 00 00|            H...|      iat_size: 1864 0x1dc-0x1e0 (4)
+0x001e0|2c a4 02 00                                    |,...            |      delay_import_descriptor_address: 0x2a42c 0x1e0-0x1e4 (4)
+0x001e0|            a0 00 00 00                        |    ....        |      delay_import_descriptor_size: 160 0x1e4-0x1e8 (4)
+0x001e0|                        00 00 00 00            |        ....    |      clr_runtime_header_address: 0x0 0x1e8-0x1ec (4)
+0x001e0|                                    00 00 00 00|            ....|      clr_runtime_header_size: 0 0x1ec-0x1f0 (4)
+0x001f0|00 00 00 00 00 00 00 00                        |........        |      reserved: 0 0x1f0-0x1f8 (8)
+       |                                               |                |      unknown: raw bits 0x1f8-0x1f8 (0)
+       |                                               |                |    sections[0:6]: 0x1f8-0x2e8 (240)
+       |                                               |                |      [0]{}: section 0x1f8-0x220 (40)
+0x001f0|                        2e 74 65 78 74 00 00 00|        .text...|        name: ".text" 0x1f8-0x200 (8)
+0x00200|cc 70 02 00                                    |.p..            |        virtual_size: 159948 0x200-0x204 (4)
+0x00200|            00 10 00 00                        |    ....        |        virtual_address: 0x1000 0x204-0x208 (4)
+0x00200|                        00 72 02 00            |        .r..    |        size_of_raw_data: 160256 0x208-0x20c (4)
+0x00200|                                    00 04 00 00|            ....|        pointer_to_raw_data: 0x400 0x20c-0x210 (4)
+0x00210|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x210-0x214 (4)
+0x00210|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x214-0x218 (4)
+0x00210|                        00 00                  |        ..      |        number_of_relocations: 0 0x218-0x21a (2)
+0x00210|                              00 00            |          ..    |        number_of_line_numbers: 0 0x21a-0x21c (2)
+       |                                               |                |        characteristics{}: 0x21c-0x220 (4)
+0x00210|                                    20         |                |          cnt_uninitialized_data: false 0x21c-0x21c.1 (0.1)
+0x00210|                                    20         |                |          cnt_initialized_data: false 0x21c.1-0x21c.2 (0.1)
+0x00210|                                    20         |                |          cnt_code: true 0x21c.2-0x21c.3 (0.1)
+0x00210|                                    20         |                |          reserved: false 0x21c.3-0x21c.4 (0.1)
+0x00210|                                    20         |                |          type_no_pad: false 0x21c.4-0x21c.5 (0.1)
+0x00210|                                    20         |                |          reserved0: false 0x21c.5-0x21c.6 (0.1)
+0x00210|                                    20         |                |          reserved1: false 0x21c.6-0x21c.7 (0.1)
+0x00210|                                    20         |                |          reserved2: false 0x21c.7-0x21d (0.1)
+0x00210|                                       00      |             .  |          gprel: false 0x21d-0x21d.1 (0.1)
+0x00210|                                       00      |             .  |          unknown0: false 0x21d.1-0x21d.2 (0.1)
+0x00210|                                       00      |             .  |          unknown1: false 0x21d.2-0x21d.3 (0.1)
+0x00210|                                       00      |             .  |          lnk_comdat: false 0x21d.3-0x21d.4 (0.1)
+0x00210|                                       00      |             .  |          lnk_remove: false 0x21d.4-0x21d.5 (0.1)
+0x00210|                                       00      |             .  |          reserved3: false 0x21d.5-0x21d.6 (0.1)
+0x00210|                                       00      |             .  |          lnk_info: false 0x21d.6-0x21d.7 (0.1)
+0x00210|                                       00      |             .  |          lnk_other: false 0x21d.7-0x21e (0.1)
+0x00210|                                          00   |              . |          align_128bytes: false 0x21e-0x21e.1 (0.1)
+0x00210|                                          00   |              . |          align_8bytes: false 0x21e.1-0x21e.2 (0.1)
+0x00210|                                          00   |              . |          align_2bytes: false 0x21e.2-0x21e.3 (0.1)
+0x00210|                                          00   |              . |          align_1bytes: false 0x21e.3-0x21e.4 (0.1)
+0x00210|                                          00   |              . |          mem_preload: false 0x21e.4-0x21e.5 (0.1)
+0x00210|                                          00   |              . |          mem_locked: false 0x21e.5-0x21e.6 (0.1)
+0x00210|                                          00   |              . |          mem_16bit: false 0x21e.6-0x21e.7 (0.1)
+0x00210|                                          00   |              . |          mem_purgeable: false 0x21e.7-0x21f (0.1)
+0x00210|                                             60|               `|          mem_write: false 0x21f-0x21f.1 (0.1)
+0x00210|                                             60|               `|          mem_read: true 0x21f.1-0x21f.2 (0.1)
+0x00210|                                             60|               `|          mem_execute: true 0x21f.2-0x21f.3 (0.1)
+0x00210|                                             60|               `|          mem_shared: false 0x21f.3-0x21f.4 (0.1)
+0x00210|                                             60|               `|          mem_not_paged: false 0x21f.4-0x21f.5 (0.1)
+0x00210|                                             60|               `|          mem_not_cached: false 0x21f.5-0x21f.6 (0.1)
+0x00210|                                             60|               `|          mem_discardable: false 0x21f.6-0x21f.7 (0.1)
+0x00210|                                             60|               `|          lnk_nreloc_ovfl: false 0x21f.7-0x220 (0.1)
+       |                                               |                |      [1]{}: section 0x220-0x248 (40)
+0x00220|2e 72 64 61 74 61 00 00                        |.rdata..        |        name: ".rdata" 0x220-0x228 (8)
+0x00220|                        10 49 00 00            |        .I..    |        virtual_size: 18704 0x228-0x22c (4)
+0x00220|                                    00 90 02 00|            ....|        virtual_address: 0x29000 0x22c-0x230 (4)
+0x00230|00 4a 00 00                                    |.J..            |        size_of_raw_data: 18944 0x230-0x234 (4)
+0x00230|            00 76 02 00                        |    .v..        |        pointer_to_raw_data: 0x27600 0x234-0x238 (4)
+0x00230|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x238-0x23c (4)
+0x00230|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x23c-0x240 (4)
+0x00240|00 00                                          |..              |        number_of_relocations: 0 0x240-0x242 (2)
+0x00240|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x242-0x244 (2)
+       |                                               |                |        characteristics{}: 0x244-0x248 (4)
+0x00240|            40                                 |    @           |          cnt_uninitialized_data: false 0x244-0x244.1 (0.1)
+0x00240|            40                                 |    @           |          cnt_initialized_data: true 0x244.1-0x244.2 (0.1)
+0x00240|            40                                 |    @           |          cnt_code: false 0x244.2-0x244.3 (0.1)
+0x00240|            40                                 |    @           |          reserved: false 0x244.3-0x244.4 (0.1)
+0x00240|            40                                 |    @           |          type_no_pad: false 0x244.4-0x244.5 (0.1)
+0x00240|            40                                 |    @           |          reserved0: false 0x244.5-0x244.6 (0.1)
+0x00240|            40                                 |    @           |          reserved1: false 0x244.6-0x244.7 (0.1)
+0x00240|            40                                 |    @           |          reserved2: false 0x244.7-0x245 (0.1)
+0x00240|               00                              |     .          |          gprel: false 0x245-0x245.1 (0.1)
+0x00240|               00                              |     .          |          unknown0: false 0x245.1-0x245.2 (0.1)
+0x00240|               00                              |     .          |          unknown1: false 0x245.2-0x245.3 (0.1)
+0x00240|               00                              |     .          |          lnk_comdat: false 0x245.3-0x245.4 (0.1)
+0x00240|               00                              |     .          |          lnk_remove: false 0x245.4-0x245.5 (0.1)
+0x00240|               00                              |     .          |          reserved3: false 0x245.5-0x245.6 (0.1)
+0x00240|               00                              |     .          |          lnk_info: false 0x245.6-0x245.7 (0.1)
+0x00240|               00                              |     .          |          lnk_other: false 0x245.7-0x246 (0.1)
+0x00240|                  00                           |      .         |          align_128bytes: false 0x246-0x246.1 (0.1)
+0x00240|                  00                           |      .         |          align_8bytes: false 0x246.1-0x246.2 (0.1)
+0x00240|                  00                           |      .         |          align_2bytes: false 0x246.2-0x246.3 (0.1)
+0x00240|                  00                           |      .         |          align_1bytes: false 0x246.3-0x246.4 (0.1)
+0x00240|                  00                           |      .         |          mem_preload: false 0x246.4-0x246.5 (0.1)
+0x00240|                  00                           |      .         |          mem_locked: false 0x246.5-0x246.6 (0.1)
+0x00240|                  00                           |      .         |          mem_16bit: false 0x246.6-0x246.7 (0.1)
+0x00240|                  00                           |      .         |          mem_purgeable: false 0x246.7-0x247 (0.1)
+0x00240|                     40                        |       @        |          mem_write: false 0x247-0x247.1 (0.1)
+0x00240|                     40                        |       @        |          mem_read: true 0x247.1-0x247.2 (0.1)
+0x00240|                     40                        |       @        |          mem_execute: false 0x247.2-0x247.3 (0.1)
+0x00240|                     40                        |       @        |          mem_shared: false 0x247.3-0x247.4 (0.1)
+0x00240|                     40                        |       @        |          mem_not_paged: false 0x247.4-0x247.5 (0.1)
+0x00240|                     40                        |       @        |          mem_not_cached: false 0x247.5-0x247.6 (0.1)
+0x00240|                     40                        |       @        |          mem_discardable: false 0x247.6-0x247.7 (0.1)
+0x00240|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x247.7-0x248 (0.1)
+       |                                               |                |      [2]{}: section 0x248-0x270 (40)
+0x00240|                        2e 64 61 74 61 00 00 00|        .data...|        name: ".data" 0x248-0x250 (8)
+0x00250|98 d3 01 00                                    |....            |        virtual_size: 119704 0x250-0x254 (4)
+0x00250|            00 e0 02 00                        |    ....        |        virtual_address: 0x2e000 0x254-0x258 (4)
+0x00250|                        00 d4 01 00            |        ....    |        size_of_raw_data: 119808 0x258-0x25c (4)
+0x00250|                                    00 c0 02 00|            ....|        pointer_to_raw_data: 0x2c000 0x25c-0x260 (4)
+0x00260|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x260-0x264 (4)
+0x00260|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x264-0x268 (4)
+0x00260|                        00 00                  |        ..      |        number_of_relocations: 0 0x268-0x26a (2)
+0x00260|                              00 00            |          ..    |        number_of_line_numbers: 0 0x26a-0x26c (2)
+       |                                               |                |        characteristics{}: 0x26c-0x270 (4)
+0x00260|                                    40         |            @   |          cnt_uninitialized_data: false 0x26c-0x26c.1 (0.1)
+0x00260|                                    40         |            @   |          cnt_initialized_data: true 0x26c.1-0x26c.2 (0.1)
+0x00260|                                    40         |            @   |          cnt_code: false 0x26c.2-0x26c.3 (0.1)
+0x00260|                                    40         |            @   |          reserved: false 0x26c.3-0x26c.4 (0.1)
+0x00260|                                    40         |            @   |          type_no_pad: false 0x26c.4-0x26c.5 (0.1)
+0x00260|                                    40         |            @   |          reserved0: false 0x26c.5-0x26c.6 (0.1)
+0x00260|                                    40         |            @   |          reserved1: false 0x26c.6-0x26c.7 (0.1)
+0x00260|                                    40         |            @   |          reserved2: false 0x26c.7-0x26d (0.1)
+0x00260|                                       00      |             .  |          gprel: false 0x26d-0x26d.1 (0.1)
+0x00260|                                       00      |             .  |          unknown0: false 0x26d.1-0x26d.2 (0.1)
+0x00260|                                       00      |             .  |          unknown1: false 0x26d.2-0x26d.3 (0.1)
+0x00260|                                       00      |             .  |          lnk_comdat: false 0x26d.3-0x26d.4 (0.1)
+0x00260|                                       00      |             .  |          lnk_remove: false 0x26d.4-0x26d.5 (0.1)
+0x00260|                                       00      |             .  |          reserved3: false 0x26d.5-0x26d.6 (0.1)
+0x00260|                                       00      |             .  |          lnk_info: false 0x26d.6-0x26d.7 (0.1)
+0x00260|                                       00      |             .  |          lnk_other: false 0x26d.7-0x26e (0.1)
+0x00260|                                          00   |              . |          align_128bytes: false 0x26e-0x26e.1 (0.1)
+0x00260|                                          00   |              . |          align_8bytes: false 0x26e.1-0x26e.2 (0.1)
+0x00260|                                          00   |              . |          align_2bytes: false 0x26e.2-0x26e.3 (0.1)
+0x00260|                                          00   |              . |          align_1bytes: false 0x26e.3-0x26e.4 (0.1)
+0x00260|                                          00   |              . |          mem_preload: false 0x26e.4-0x26e.5 (0.1)
+0x00260|                                          00   |              . |          mem_locked: false 0x26e.5-0x26e.6 (0.1)
+0x00260|                                          00   |              . |          mem_16bit: false 0x26e.6-0x26e.7 (0.1)
+0x00260|                                          00   |              . |          mem_purgeable: false 0x26e.7-0x26f (0.1)
+0x00260|                                             c0|               .|          mem_write: true 0x26f-0x26f.1 (0.1)
+0x00260|                                             c0|               .|          mem_read: true 0x26f.1-0x26f.2 (0.1)
+0x00260|                                             c0|               .|          mem_execute: false 0x26f.2-0x26f.3 (0.1)
+0x00260|                                             c0|               .|          mem_shared: false 0x26f.3-0x26f.4 (0.1)
+0x00260|                                             c0|               .|          mem_not_paged: false 0x26f.4-0x26f.5 (0.1)
+0x00260|                                             c0|               .|          mem_not_cached: false 0x26f.5-0x26f.6 (0.1)
+0x00260|                                             c0|               .|          mem_discardable: false 0x26f.6-0x26f.7 (0.1)
+0x00260|                                             c0|               .|          lnk_nreloc_ovfl: false 0x26f.7-0x270 (0.1)
+       |                                               |                |      [3]{}: section 0x270-0x298 (40)
+0x00270|2e 70 64 61 74 61 00 00                        |.pdata..        |        name: ".pdata" 0x270-0x278 (8)
+0x00270|                        dc 26 00 00            |        .&..    |        virtual_size: 9948 0x278-0x27c (4)
+0x00270|                                    00 c0 04 00|            ....|        virtual_address: 0x4c000 0x27c-0x280 (4)
+0x00280|00 28 00 00                                    |.(..            |        size_of_raw_data: 10240 0x280-0x284 (4)
+0x00280|            00 94 04 00                        |    ....        |        pointer_to_raw_data: 0x49400 0x284-0x288 (4)
+0x00280|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x288-0x28c (4)
+0x00280|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x28c-0x290 (4)
+0x00290|00 00                                          |..              |        number_of_relocations: 0 0x290-0x292 (2)
+0x00290|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x292-0x294 (2)
+       |                                               |                |        characteristics{}: 0x294-0x298 (4)
+0x00290|            40                                 |    @           |          cnt_uninitialized_data: false 0x294-0x294.1 (0.1)
+0x00290|            40                                 |    @           |          cnt_initialized_data: true 0x294.1-0x294.2 (0.1)
+0x00290|            40                                 |    @           |          cnt_code: false 0x294.2-0x294.3 (0.1)
+0x00290|            40                                 |    @           |          reserved: false 0x294.3-0x294.4 (0.1)
+0x00290|            40                                 |    @           |          type_no_pad: false 0x294.4-0x294.5 (0.1)
+0x00290|            40                                 |    @           |          reserved0: false 0x294.5-0x294.6 (0.1)
+0x00290|            40                                 |    @           |          reserved1: false 0x294.6-0x294.7 (0.1)
+0x00290|            40                                 |    @           |          reserved2: false 0x294.7-0x295 (0.1)
+0x00290|               00                              |     .          |          gprel: false 0x295-0x295.1 (0.1)
+0x00290|               00                              |     .          |          unknown0: false 0x295.1-0x295.2 (0.1)
+0x00290|               00                              |     .          |          unknown1: false 0x295.2-0x295.3 (0.1)
+0x00290|               00                              |     .          |          lnk_comdat: false 0x295.3-0x295.4 (0.1)
+0x00290|               00                              |     .          |          lnk_remove: false 0x295.4-0x295.5 (0.1)
+0x00290|               00                              |     .          |          reserved3: false 0x295.5-0x295.6 (0.1)
+0x00290|               00                              |     .          |          lnk_info: false 0x295.6-0x295.7 (0.1)
+0x00290|               00                              |     .          |          lnk_other: false 0x295.7-0x296 (0.1)
+0x00290|                  00                           |      .         |          align_128bytes: false 0x296-0x296.1 (0.1)
+0x00290|                  00                           |      .         |          align_8bytes: false 0x296.1-0x296.2 (0.1)
+0x00290|                  00                           |      .         |          align_2bytes: false 0x296.2-0x296.3 (0.1)
+0x00290|                  00                           |      .         |          align_1bytes: false 0x296.3-0x296.4 (0.1)
+0x00290|                  00                           |      .         |          mem_preload: false 0x296.4-0x296.5 (0.1)
+0x00290|                  00                           |      .         |          mem_locked: false 0x296.5-0x296.6 (0.1)
+0x00290|                  00                           |      .         |          mem_16bit: false 0x296.6-0x296.7 (0.1)
+0x00290|                  00                           |      .         |          mem_purgeable: false 0x296.7-0x297 (0.1)
+0x00290|                     40                        |       @        |          mem_write: false 0x297-0x297.1 (0.1)
+0x00290|                     40                        |       @        |          mem_read: true 0x297.1-0x297.2 (0.1)
+0x00290|                     40                        |       @        |          mem_execute: false 0x297.2-0x297.3 (0.1)
+0x00290|                     40                        |       @        |          mem_shared: false 0x297.3-0x297.4 (0.1)
+0x00290|                     40                        |       @        |          mem_not_paged: false 0x297.4-0x297.5 (0.1)
+0x00290|                     40                        |       @        |          mem_not_cached: false 0x297.5-0x297.6 (0.1)
+0x00290|                     40                        |       @        |          mem_discardable: false 0x297.6-0x297.7 (0.1)
+0x00290|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x297.7-0x298 (0.1)
+       |                                               |                |      [4]{}: section 0x298-0x2c0 (40)
+0x00290|                        2e 72 73 72 63 00 00 00|        .rsrc...|        name: ".rsrc" 0x298-0x2a0 (8)
+0x002a0|58 84 00 00                                    |X...            |        virtual_size: 33880 0x2a0-0x2a4 (4)
+0x002a0|            00 f0 04 00                        |    ....        |        virtual_address: 0x4f000 0x2a4-0x2a8 (4)
+0x002a0|                        00 86 00 00            |        ....    |        size_of_raw_data: 34304 0x2a8-0x2ac (4)
+0x002a0|                                    00 bc 04 00|            ....|        pointer_to_raw_data: 0x4bc00 0x2ac-0x2b0 (4)
+0x002b0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x2b0-0x2b4 (4)
+0x002b0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x2b4-0x2b8 (4)
+0x002b0|                        00 00                  |        ..      |        number_of_relocations: 0 0x2b8-0x2ba (2)
+0x002b0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x2ba-0x2bc (2)
+       |                                               |                |        characteristics{}: 0x2bc-0x2c0 (4)
+0x002b0|                                    40         |            @   |          cnt_uninitialized_data: false 0x2bc-0x2bc.1 (0.1)
+0x002b0|                                    40         |            @   |          cnt_initialized_data: true 0x2bc.1-0x2bc.2 (0.1)
+0x002b0|                                    40         |            @   |          cnt_code: false 0x2bc.2-0x2bc.3 (0.1)
+0x002b0|                                    40         |            @   |          reserved: false 0x2bc.3-0x2bc.4 (0.1)
+0x002b0|                                    40         |            @   |          type_no_pad: false 0x2bc.4-0x2bc.5 (0.1)
+0x002b0|                                    40         |            @   |          reserved0: false 0x2bc.5-0x2bc.6 (0.1)
+0x002b0|                                    40         |            @   |          reserved1: false 0x2bc.6-0x2bc.7 (0.1)
+0x002b0|                                    40         |            @   |          reserved2: false 0x2bc.7-0x2bd (0.1)
+0x002b0|                                       00      |             .  |          gprel: false 0x2bd-0x2bd.1 (0.1)
+0x002b0|                                       00      |             .  |          unknown0: false 0x2bd.1-0x2bd.2 (0.1)
+0x002b0|                                       00      |             .  |          unknown1: false 0x2bd.2-0x2bd.3 (0.1)
+0x002b0|                                       00      |             .  |          lnk_comdat: false 0x2bd.3-0x2bd.4 (0.1)
+0x002b0|                                       00      |             .  |          lnk_remove: false 0x2bd.4-0x2bd.5 (0.1)
+0x002b0|                                       00      |             .  |          reserved3: false 0x2bd.5-0x2bd.6 (0.1)
+0x002b0|                                       00      |             .  |          lnk_info: false 0x2bd.6-0x2bd.7 (0.1)
+0x002b0|                                       00      |             .  |          lnk_other: false 0x2bd.7-0x2be (0.1)
+0x002b0|                                          00   |              . |          align_128bytes: false 0x2be-0x2be.1 (0.1)
+0x002b0|                                          00   |              . |          align_8bytes: false 0x2be.1-0x2be.2 (0.1)
+0x002b0|                                          00   |              . |          align_2bytes: false 0x2be.2-0x2be.3 (0.1)
+0x002b0|                                          00   |              . |          align_1bytes: false 0x2be.3-0x2be.4 (0.1)
+0x002b0|                                          00   |              . |          mem_preload: false 0x2be.4-0x2be.5 (0.1)
+0x002b0|                                          00   |              . |          mem_locked: false 0x2be.5-0x2be.6 (0.1)
+0x002b0|                                          00   |              . |          mem_16bit: false 0x2be.6-0x2be.7 (0.1)
+0x002b0|                                          00   |              . |          mem_purgeable: false 0x2be.7-0x2bf (0.1)
+0x002b0|                                             40|               @|          mem_write: false 0x2bf-0x2bf.1 (0.1)
+0x002b0|                                             40|               @|          mem_read: true 0x2bf.1-0x2bf.2 (0.1)
+0x002b0|                                             40|               @|          mem_execute: false 0x2bf.2-0x2bf.3 (0.1)
+0x002b0|                                             40|               @|          mem_shared: false 0x2bf.3-0x2bf.4 (0.1)
+0x002b0|                                             40|               @|          mem_not_paged: false 0x2bf.4-0x2bf.5 (0.1)
+0x002b0|                                             40|               @|          mem_not_cached: false 0x2bf.5-0x2bf.6 (0.1)
+0x002b0|                                             40|               @|          mem_discardable: false 0x2bf.6-0x2bf.7 (0.1)
+0x002b0|                                             40|               @|          lnk_nreloc_ovfl: false 0x2bf.7-0x2c0 (0.1)
+       |                                               |                |      [5]{}: section 0x2c0-0x2e8 (40)
+0x002c0|2e 72 65 6c 6f 63 00 00                        |.reloc..        |        name: ".reloc" 0x2c0-0x2c8 (8)
+0x002c0|                        24 01 00 00            |        $...    |        virtual_size: 292 0x2c8-0x2cc (4)
+0x002c0|                                    00 80 05 00|            ....|        virtual_address: 0x58000 0x2cc-0x2d0 (4)
+0x002d0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x2d0-0x2d4 (4)
+0x002d0|            00 42 05 00                        |    .B..        |        pointer_to_raw_data: 0x54200 0x2d4-0x2d8 (4)
+0x002d0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x2d8-0x2dc (4)
+0x002d0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x2dc-0x2e0 (4)
+0x002e0|00 00                                          |..              |        number_of_relocations: 0 0x2e0-0x2e2 (2)
+0x002e0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x2e2-0x2e4 (2)
+       |                                               |                |        characteristics{}: 0x2e4-0x2e8 (4)
+0x002e0|            40                                 |    @           |          cnt_uninitialized_data: false 0x2e4-0x2e4.1 (0.1)
+0x002e0|            40                                 |    @           |          cnt_initialized_data: true 0x2e4.1-0x2e4.2 (0.1)
+0x002e0|            40                                 |    @           |          cnt_code: false 0x2e4.2-0x2e4.3 (0.1)
+0x002e0|            40                                 |    @           |          reserved: false 0x2e4.3-0x2e4.4 (0.1)
+0x002e0|            40                                 |    @           |          type_no_pad: false 0x2e4.4-0x2e4.5 (0.1)
+0x002e0|            40                                 |    @           |          reserved0: false 0x2e4.5-0x2e4.6 (0.1)
+0x002e0|            40                                 |    @           |          reserved1: false 0x2e4.6-0x2e4.7 (0.1)
+0x002e0|            40                                 |    @           |          reserved2: false 0x2e4.7-0x2e5 (0.1)
+0x002e0|               00                              |     .          |          gprel: false 0x2e5-0x2e5.1 (0.1)
+0x002e0|               00                              |     .          |          unknown0: false 0x2e5.1-0x2e5.2 (0.1)
+0x002e0|               00                              |     .          |          unknown1: false 0x2e5.2-0x2e5.3 (0.1)
+0x002e0|               00                              |     .          |          lnk_comdat: false 0x2e5.3-0x2e5.4 (0.1)
+0x002e0|               00                              |     .          |          lnk_remove: false 0x2e5.4-0x2e5.5 (0.1)
+0x002e0|               00                              |     .          |          reserved3: false 0x2e5.5-0x2e5.6 (0.1)
+0x002e0|               00                              |     .          |          lnk_info: false 0x2e5.6-0x2e5.7 (0.1)
+0x002e0|               00                              |     .          |          lnk_other: false 0x2e5.7-0x2e6 (0.1)
+0x002e0|                  00                           |      .         |          align_128bytes: false 0x2e6-0x2e6.1 (0.1)
+0x002e0|                  00                           |      .         |          align_8bytes: false 0x2e6.1-0x2e6.2 (0.1)
+0x002e0|                  00                           |      .         |          align_2bytes: false 0x2e6.2-0x2e6.3 (0.1)
+0x002e0|                  00                           |      .         |          align_1bytes: false 0x2e6.3-0x2e6.4 (0.1)
+0x002e0|                  00                           |      .         |          mem_preload: false 0x2e6.4-0x2e6.5 (0.1)
+0x002e0|                  00                           |      .         |          mem_locked: false 0x2e6.5-0x2e6.6 (0.1)
+0x002e0|                  00                           |      .         |          mem_16bit: false 0x2e6.6-0x2e6.7 (0.1)
+0x002e0|                  00                           |      .         |          mem_purgeable: false 0x2e6.7-0x2e7 (0.1)
+0x002e0|                     42                        |       B        |          mem_write: false 0x2e7-0x2e7.1 (0.1)
+0x002e0|                     42                        |       B        |          mem_read: true 0x2e7.1-0x2e7.2 (0.1)
+0x002e0|                     42                        |       B        |          mem_execute: false 0x2e7.2-0x2e7.3 (0.1)
+0x002e0|                     42                        |       B        |          mem_shared: false 0x2e7.3-0x2e7.4 (0.1)
+0x002e0|                     42                        |       B        |          mem_not_paged: false 0x2e7.4-0x2e7.5 (0.1)
+0x002e0|                     42                        |       B        |          mem_not_cached: false 0x2e7.5-0x2e7.6 (0.1)
+0x002e0|                     42                        |       B        |          mem_discardable: true 0x2e7.6-0x2e7.7 (0.1)
+0x002e0|                     42                        |       B        |          lnk_nreloc_ovfl: false 0x2e7.7-0x2e8 (0.1)
+0x002e0|                        37 c8 e7 4c 40 00 01 00|        7..L@...|  gap0: raw bits 0x2e8-0x54400 (344344)
+0x002f0|f9 c8 e7 4c 4b 00 00 00 f9 c8 e7 4c 4b 00 00 00|...LK......LK...|
+*      |until 0x543ff.7 (end) (344344)                 |                |

format/pe/testdata/pe-Windows-x86-cmd.fqtest

@@ -0,0 +1,305 @@
+$ fq dv pe-Windows-x86-cmd
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-Windows-x86-cmd (pe) 0x0-0x49a00 (301568)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0xd8 (216)
+0x00000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x00000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x00000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x00000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x00000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x00000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x00000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x00000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x00010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x00010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x00010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x00010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x00010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x00010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x00010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x00020|00 00 00 00                                    |....            |
+0x00020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x00020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x00020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x00030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x00030|                                    d8 00 00 00|            ....|    e_lfanew: 216 (File address of new exe header) 0x3c-0x40 (4)
+0x00040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*      |until 0x7f.7 (64)                              |                |
+0x00080|de 72 92 b9 9a 13 fc ea 9a 13 fc ea 9a 13 fc ea|.r..............|    padding: raw bits 0x80-0xd8 (88)
+*      |until 0xd7.7 (88)                              |                |
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0xd8-0x270 (408)
+0x000d0|                        50 45 00 00            |        PE..    |    signature: raw bits (valid) 0xd8-0xdc (4)
+0x000d0|                                    4c 01      |            L.  |    machine: "i386" (0x14c) 0xdc-0xde (2)
+0x000d0|                                          04 00|              ..|    number_of_sections: 4 0xde-0xe0 (2)
+0x000e0|9e c1 5b 4a                                    |..[J            |    time_date_stamp: 1247527326 (2009-07-13T23:22:06Z) 0xe0-0xe4 (4)
+0x000e0|            00 00 00 00                        |    ....        |    pointer_to_symbol_table: 0x0 0xe4-0xe8 (4)
+0x000e0|                        00 00 00 00            |        ....    |    number_of_symbols: 0 0xe8-0xec (4)
+0x000e0|                                    e0 00      |            ..  |    size_of_optional_header: 224 0xec-0xee (2)
+       |                                               |                |    characteristics{}: 0xee-0xf0 (2)
+0x000e0|                                          02   |              . |      bytes_reversed_lo: false 0xee-0xee.1 (0.1)
+0x000e0|                                          02   |              . |      reserved: false 0xee.1-0xee.2 (0.1)
+0x000e0|                                          02   |              . |      large_address_aware: false 0xee.2-0xee.3 (0.1)
+0x000e0|                                          02   |              . |      aggressive_ws_trim: false 0xee.3-0xee.4 (0.1)
+0x000e0|                                          02   |              . |      local_syms_stripped: false 0xee.4-0xee.5 (0.1)
+0x000e0|                                          02   |              . |      line_nums_stripped: false 0xee.5-0xee.6 (0.1)
+0x000e0|                                          02   |              . |      executable_image: true 0xee.6-0xee.7 (0.1)
+0x000e0|                                          02   |              . |      relocs_stripped: false 0xee.7-0xef (0.1)
+0x000e0|                                             00|               .|      bytes_reversed_hi: false 0xef-0xef.1 (0.1)
+0x000e0|                                             00|               .|      up_system_only: false 0xef.1-0xef.2 (0.1)
+0x000e0|                                             00|               .|      dll: false 0xef.2-0xef.3 (0.1)
+0x000e0|                                             00|               .|      system: false 0xef.3-0xef.4 (0.1)
+0x000e0|                                             00|               .|      net_run_from_swap: false 0xef.4-0xef.5 (0.1)
+0x000e0|                                             00|               .|      removable_run_from_swap: false 0xef.5-0xef.6 (0.1)
+0x000e0|                                             00|               .|      debug_stripped: false 0xef.6-0xef.7 (0.1)
+0x000e0|                                             00|               .|      32bit_machine: false 0xef.7-0xf0 (0.1)
+       |                                               |                |    optional_header{}: 0xf0-0x1d0 (224)
+0x000f0|0b 01                                          |..              |      format: "pe32" (0x10b) 0xf0-0xf2 (2)
+0x000f0|      09                                       |  .             |      major_linker_version: 9 0xf2-0xf3 (1)
+0x000f0|         00                                    |   .            |      minor_linker_version: 0 0xf3-0xf4 (1)
+0x000f0|            00 2a 02 00                        |    .*..        |      size_of_code: 141824 0xf4-0xf8 (4)
+0x000f0|                        00 6c 02 00            |        .l..    |      size_of_initialized_data: 158720 0xf8-0xfc (4)
+0x000f0|                                    00 00 00 00|            ....|      size_of_uninitialized_data: 0 0xfc-0x100 (4)
+0x00100|dc 60 00 00                                    |.`..            |      address_of_entry_point: 0x60dc 0x100-0x104 (4)
+0x00100|            00 10 00 00                        |    ....        |      base_of_code: 0x1000 0x104-0x108 (4)
+0x00100|                        00 20 02 00            |        . ..    |      base_of_data: 0x22000 0x108-0x10c (4)
+0x00100|                                    00 00 d0 4a|            ...J|      image_base: 0x4ad00000 0x10c-0x110 (4)
+0x00110|00 10 00 00                                    |....            |      section_alignment: 4096 0x110-0x114 (4)
+0x00110|            00 02 00 00                        |    ....        |      file_alignment: 512 0x114-0x118 (4)
+0x00110|                        06 00                  |        ..      |      major_os_version: 6 0x118-0x11a (2)
+0x00110|                              01 00            |          ..    |      minor_os_version: 1 0x11a-0x11c (2)
+0x00110|                                    06 00      |            ..  |      major_image_version: 6 0x11c-0x11e (2)
+0x00110|                                          01 00|              ..|      minor_image_version: 1 0x11e-0x120 (2)
+0x00120|06 00                                          |..              |      major_subsystem_version: 6 0x120-0x122 (2)
+0x00120|      01 00                                    |  ..            |      minor_subsystem_version: 1 0x122-0x124 (2)
+0x00120|            00 00 00 00                        |    ....        |      win32_version: 0 0x124-0x128 (4)
+0x00120|                        00 c0 04 00            |        ....    |      size_of_image: 311296 0x128-0x12c (4)
+0x00120|                                    00 04 00 00|            ....|      size_of_headers: 1024 0x12c-0x130 (4)
+0x00130|8f b1 04 00                                    |....            |      chunk_sum: 0x4b18f 0x130-0x134 (4)
+0x00130|            03 00                              |    ..          |      subsystem: "windows_cui" (3) 0x134-0x136 (2)
+       |                                               |                |      dll_characteristics{}: 0x136-0x138 (2)
+0x00130|                  00                           |      .         |        force_integrity: false 0x136-0x136.1 (0.1)
+0x00130|                  00                           |      .         |        dynamic_base: false 0x136.1-0x136.2 (0.1)
+0x00130|                  00                           |      .         |        high_entropy_va: false 0x136.2-0x136.3 (0.1)
+0x00130|                  00                           |      .         |        reserved0: false 0x136.3-0x136.4 (0.1)
+0x00130|                  00                           |      .         |        reserved1: false 0x136.4-0x136.5 (0.1)
+0x00130|                  00                           |      .         |        reserved2: false 0x136.5-0x136.6 (0.1)
+0x00130|                  00                           |      .         |        reserved3: false 0x136.6-0x136.7 (0.1)
+0x00130|                  00                           |      .         |        reserved4: false 0x136.7-0x137 (0.1)
+0x00130|                     81                        |       .        |        terminal_server_aware: true 0x137-0x137.1 (0.1)
+0x00130|                     81                        |       .        |        guard_cf: false 0x137.1-0x137.2 (0.1)
+0x00130|                     81                        |       .        |        wdm_driver: false 0x137.2-0x137.3 (0.1)
+0x00130|                     81                        |       .        |        appcontainer: false 0x137.3-0x137.4 (0.1)
+0x00130|                     81                        |       .        |        no_bind: false 0x137.4-0x137.5 (0.1)
+0x00130|                     81                        |       .        |        no_seh: false 0x137.5-0x137.6 (0.1)
+0x00130|                     81                        |       .        |        no_isolation: false 0x137.6-0x137.7 (0.1)
+0x00130|                     81                        |       .        |        nx_compat: true 0x137.7-0x138 (0.1)
+0x00130|                        00 00 10 00            |        ....    |      size_of_track_reserve: 1048576 0x138-0x13c (4)
+0x00130|                                    00 d0 0f 00|            ....|      size_of_stack_commit: 1036288 0x13c-0x140 (4)
+0x00140|00 00 10 00                                    |....            |      size_of_heap_reserve: 1048576 0x140-0x144 (4)
+0x00140|            00 10 00 00                        |    ....        |      size_of_heap_commit: 4096 0x144-0x148 (4)
+0x00140|                        00 00 00 00            |        ....    |      loader_flags: 0 0x148-0x14c (4)
+0x00140|                                    10 00 00 00|            ....|      number_of_rva_and_sizes: 16 0x14c-0x150 (4)
+0x00150|00 00 00 00                                    |....            |      export_table_address: 0x0 0x150-0x154 (4)
+0x00150|            00 00 00 00                        |    ....        |      export_table_size: 0 0x154-0x158 (4)
+0x00150|                        e0 25 02 00            |        .%..    |      import_table_address: 0x225e0 0x158-0x15c (4)
+0x00150|                                    64 00 00 00|            d...|      import_table_size: 100 0x15c-0x160 (4)
+0x00160|00 10 04 00                                    |....            |      resource_table_address: 0x41000 0x160-0x164 (4)
+0x00160|            48 84 00 00                        |    H...        |      resource_table_size: 33864 0x164-0x168 (4)
+0x00160|                        00 00 00 00            |        ....    |      exception_table_address: 0x0 0x168-0x16c (4)
+0x00160|                                    00 00 00 00|            ....|      exception_table_size: 0 0x16c-0x170 (4)
+0x00170|00 00 00 00                                    |....            |      certificate_table_address: 0x0 0x170-0x174 (4)
+0x00170|            00 00 00 00                        |    ....        |      certificate_table_size: 0 0x174-0x178 (4)
+0x00170|                        00 a0 04 00            |        ....    |      base_relocation_table_address: 0x4a000 0x178-0x17c (4)
+0x00170|                                    1c 1b 00 00|            ....|      base_relocation_table_size: 6940 0x17c-0x180 (4)
+0x00180|68 39 02 00                                    |h9..            |      debug_address: 0x23968 0x180-0x184 (4)
+0x00180|            38 00 00 00                        |    8...        |      debug_size: 56 0x184-0x188 (4)
+0x00180|                        00 00 00 00 00 00 00 00|        ........|      architecture: 0 0x188-0x190 (8)
+0x00190|00 00 00 00 00 00 00 00                        |........        |      global_ptr: 0x0 0x190-0x198 (8)
+0x00190|                        00 00 00 00            |        ....    |      tls_table_address: 0x0 0x198-0x19c (4)
+0x00190|                                    00 00 00 00|            ....|      tls_table_size: 0 0x19c-0x1a0 (4)
+0x001a0|90 bb 01 00                                    |....            |      load_config_table_address: 0x1bb90 0x1a0-0x1a4 (4)
+0x001a0|            40 00 00 00                        |    @...        |      load_config_table_size: 64 0x1a4-0x1a8 (4)
+0x001a0|                        70 02 00 00            |        p...    |      bound_import_address: 0x270 0x1a8-0x1ac (4)
+0x001a0|                                    94 00 00 00|            ....|      bound_import_size: 148 0x1ac-0x1b0 (4)
+0x001b0|00 10 00 00                                    |....            |      iat_address: 0x1000 0x1b0-0x1b4 (4)
+0x001b0|            98 03 00 00                        |    ....        |      iat_size: 920 0x1b4-0x1b8 (4)
+0x001b0|                        fc 22 02 00            |        ."..    |      delay_import_descriptor_address: 0x222fc 0x1b8-0x1bc (4)
+0x001b0|                                    a0 00 00 00|            ....|      delay_import_descriptor_size: 160 0x1bc-0x1c0 (4)
+0x001c0|00 00 00 00                                    |....            |      clr_runtime_header_address: 0x0 0x1c0-0x1c4 (4)
+0x001c0|            00 00 00 00                        |    ....        |      clr_runtime_header_size: 0 0x1c4-0x1c8 (4)
+0x001c0|                        00 00 00 00 00 00 00 00|        ........|      reserved: 0 0x1c8-0x1d0 (8)
+       |                                               |                |      unknown: raw bits 0x1d0-0x1d0 (0)
+       |                                               |                |    sections[0:4]: 0x1d0-0x270 (160)
+       |                                               |                |      [0]{}: section 0x1d0-0x1f8 (40)
+0x001d0|2e 74 65 78 74 00 00 00                        |.text...        |        name: ".text" 0x1d0-0x1d8 (8)
+0x001d0|                        c4 29 02 00            |        .)..    |        virtual_size: 141764 0x1d8-0x1dc (4)
+0x001d0|                                    00 10 00 00|            ....|        virtual_address: 0x1000 0x1dc-0x1e0 (4)
+0x001e0|00 2a 02 00                                    |.*..            |        size_of_raw_data: 141824 0x1e0-0x1e4 (4)
+0x001e0|            00 04 00 00                        |    ....        |        pointer_to_raw_data: 0x400 0x1e4-0x1e8 (4)
+0x001e0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x1e8-0x1ec (4)
+0x001e0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x1ec-0x1f0 (4)
+0x001f0|00 00                                          |..              |        number_of_relocations: 0 0x1f0-0x1f2 (2)
+0x001f0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1f2-0x1f4 (2)
+       |                                               |                |        characteristics{}: 0x1f4-0x1f8 (4)
+0x001f0|            20                                 |                |          cnt_uninitialized_data: false 0x1f4-0x1f4.1 (0.1)
+0x001f0|            20                                 |                |          cnt_initialized_data: false 0x1f4.1-0x1f4.2 (0.1)
+0x001f0|            20                                 |                |          cnt_code: true 0x1f4.2-0x1f4.3 (0.1)
+0x001f0|            20                                 |                |          reserved: false 0x1f4.3-0x1f4.4 (0.1)
+0x001f0|            20                                 |                |          type_no_pad: false 0x1f4.4-0x1f4.5 (0.1)
+0x001f0|            20                                 |                |          reserved0: false 0x1f4.5-0x1f4.6 (0.1)
+0x001f0|            20                                 |                |          reserved1: false 0x1f4.6-0x1f4.7 (0.1)
+0x001f0|            20                                 |                |          reserved2: false 0x1f4.7-0x1f5 (0.1)
+0x001f0|               00                              |     .          |          gprel: false 0x1f5-0x1f5.1 (0.1)
+0x001f0|               00                              |     .          |          unknown0: false 0x1f5.1-0x1f5.2 (0.1)
+0x001f0|               00                              |     .          |          unknown1: false 0x1f5.2-0x1f5.3 (0.1)
+0x001f0|               00                              |     .          |          lnk_comdat: false 0x1f5.3-0x1f5.4 (0.1)
+0x001f0|               00                              |     .          |          lnk_remove: false 0x1f5.4-0x1f5.5 (0.1)
+0x001f0|               00                              |     .          |          reserved3: false 0x1f5.5-0x1f5.6 (0.1)
+0x001f0|               00                              |     .          |          lnk_info: false 0x1f5.6-0x1f5.7 (0.1)
+0x001f0|               00                              |     .          |          lnk_other: false 0x1f5.7-0x1f6 (0.1)
+0x001f0|                  00                           |      .         |          align_128bytes: false 0x1f6-0x1f6.1 (0.1)
+0x001f0|                  00                           |      .         |          align_8bytes: false 0x1f6.1-0x1f6.2 (0.1)
+0x001f0|                  00                           |      .         |          align_2bytes: false 0x1f6.2-0x1f6.3 (0.1)
+0x001f0|                  00                           |      .         |          align_1bytes: false 0x1f6.3-0x1f6.4 (0.1)
+0x001f0|                  00                           |      .         |          mem_preload: false 0x1f6.4-0x1f6.5 (0.1)
+0x001f0|                  00                           |      .         |          mem_locked: false 0x1f6.5-0x1f6.6 (0.1)
+0x001f0|                  00                           |      .         |          mem_16bit: false 0x1f6.6-0x1f6.7 (0.1)
+0x001f0|                  00                           |      .         |          mem_purgeable: false 0x1f6.7-0x1f7 (0.1)
+0x001f0|                     60                        |       `        |          mem_write: false 0x1f7-0x1f7.1 (0.1)
+0x001f0|                     60                        |       `        |          mem_read: true 0x1f7.1-0x1f7.2 (0.1)
+0x001f0|                     60                        |       `        |          mem_execute: true 0x1f7.2-0x1f7.3 (0.1)
+0x001f0|                     60                        |       `        |          mem_shared: false 0x1f7.3-0x1f7.4 (0.1)
+0x001f0|                     60                        |       `        |          mem_not_paged: false 0x1f7.4-0x1f7.5 (0.1)
+0x001f0|                     60                        |       `        |          mem_not_cached: false 0x1f7.5-0x1f7.6 (0.1)
+0x001f0|                     60                        |       `        |          mem_discardable: false 0x1f7.6-0x1f7.7 (0.1)
+0x001f0|                     60                        |       `        |          lnk_nreloc_ovfl: false 0x1f7.7-0x1f8 (0.1)
+       |                                               |                |      [1]{}: section 0x1f8-0x220 (40)
+0x001f0|                        2e 64 61 74 61 00 00 00|        .data...|        name: ".data" 0x1f8-0x200 (8)
+0x00200|28 c9 01 00                                    |(...            |        virtual_size: 117032 0x200-0x204 (4)
+0x00200|            00 40 02 00                        |    .@..        |        virtual_address: 0x24000 0x204-0x208 (4)
+0x00200|                        00 ca 01 00            |        ....    |        size_of_raw_data: 117248 0x208-0x20c (4)
+0x00200|                                    00 2e 02 00|            ....|        pointer_to_raw_data: 0x22e00 0x20c-0x210 (4)
+0x00210|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x210-0x214 (4)
+0x00210|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x214-0x218 (4)
+0x00210|                        00 00                  |        ..      |        number_of_relocations: 0 0x218-0x21a (2)
+0x00210|                              00 00            |          ..    |        number_of_line_numbers: 0 0x21a-0x21c (2)
+       |                                               |                |        characteristics{}: 0x21c-0x220 (4)
+0x00210|                                    40         |            @   |          cnt_uninitialized_data: false 0x21c-0x21c.1 (0.1)
+0x00210|                                    40         |            @   |          cnt_initialized_data: true 0x21c.1-0x21c.2 (0.1)
+0x00210|                                    40         |            @   |          cnt_code: false 0x21c.2-0x21c.3 (0.1)
+0x00210|                                    40         |            @   |          reserved: false 0x21c.3-0x21c.4 (0.1)
+0x00210|                                    40         |            @   |          type_no_pad: false 0x21c.4-0x21c.5 (0.1)
+0x00210|                                    40         |            @   |          reserved0: false 0x21c.5-0x21c.6 (0.1)
+0x00210|                                    40         |            @   |          reserved1: false 0x21c.6-0x21c.7 (0.1)
+0x00210|                                    40         |            @   |          reserved2: false 0x21c.7-0x21d (0.1)
+0x00210|                                       00      |             .  |          gprel: false 0x21d-0x21d.1 (0.1)
+0x00210|                                       00      |             .  |          unknown0: false 0x21d.1-0x21d.2 (0.1)
+0x00210|                                       00      |             .  |          unknown1: false 0x21d.2-0x21d.3 (0.1)
+0x00210|                                       00      |             .  |          lnk_comdat: false 0x21d.3-0x21d.4 (0.1)
+0x00210|                                       00      |             .  |          lnk_remove: false 0x21d.4-0x21d.5 (0.1)
+0x00210|                                       00      |             .  |          reserved3: false 0x21d.5-0x21d.6 (0.1)
+0x00210|                                       00      |             .  |          lnk_info: false 0x21d.6-0x21d.7 (0.1)
+0x00210|                                       00      |             .  |          lnk_other: false 0x21d.7-0x21e (0.1)
+0x00210|                                          00   |              . |          align_128bytes: false 0x21e-0x21e.1 (0.1)
+0x00210|                                          00   |              . |          align_8bytes: false 0x21e.1-0x21e.2 (0.1)
+0x00210|                                          00   |              . |          align_2bytes: false 0x21e.2-0x21e.3 (0.1)
+0x00210|                                          00   |              . |          align_1bytes: false 0x21e.3-0x21e.4 (0.1)
+0x00210|                                          00   |              . |          mem_preload: false 0x21e.4-0x21e.5 (0.1)
+0x00210|                                          00   |              . |          mem_locked: false 0x21e.5-0x21e.6 (0.1)
+0x00210|                                          00   |              . |          mem_16bit: false 0x21e.6-0x21e.7 (0.1)
+0x00210|                                          00   |              . |          mem_purgeable: false 0x21e.7-0x21f (0.1)
+0x00210|                                             c0|               .|          mem_write: true 0x21f-0x21f.1 (0.1)
+0x00210|                                             c0|               .|          mem_read: true 0x21f.1-0x21f.2 (0.1)
+0x00210|                                             c0|               .|          mem_execute: false 0x21f.2-0x21f.3 (0.1)
+0x00210|                                             c0|               .|          mem_shared: false 0x21f.3-0x21f.4 (0.1)
+0x00210|                                             c0|               .|          mem_not_paged: false 0x21f.4-0x21f.5 (0.1)
+0x00210|                                             c0|               .|          mem_not_cached: false 0x21f.5-0x21f.6 (0.1)
+0x00210|                                             c0|               .|          mem_discardable: false 0x21f.6-0x21f.7 (0.1)
+0x00210|                                             c0|               .|          lnk_nreloc_ovfl: false 0x21f.7-0x220 (0.1)
+       |                                               |                |      [2]{}: section 0x220-0x248 (40)
+0x00220|2e 72 73 72 63 00 00 00                        |.rsrc...        |        name: ".rsrc" 0x220-0x228 (8)
+0x00220|                        48 84 00 00            |        H...    |        virtual_size: 33864 0x228-0x22c (4)
+0x00220|                                    00 10 04 00|            ....|        virtual_address: 0x41000 0x22c-0x230 (4)
+0x00230|00 86 00 00                                    |....            |        size_of_raw_data: 34304 0x230-0x234 (4)
+0x00230|            00 f8 03 00                        |    ....        |        pointer_to_raw_data: 0x3f800 0x234-0x238 (4)
+0x00230|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x238-0x23c (4)
+0x00230|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x23c-0x240 (4)
+0x00240|00 00                                          |..              |        number_of_relocations: 0 0x240-0x242 (2)
+0x00240|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x242-0x244 (2)
+       |                                               |                |        characteristics{}: 0x244-0x248 (4)
+0x00240|            40                                 |    @           |          cnt_uninitialized_data: false 0x244-0x244.1 (0.1)
+0x00240|            40                                 |    @           |          cnt_initialized_data: true 0x244.1-0x244.2 (0.1)
+0x00240|            40                                 |    @           |          cnt_code: false 0x244.2-0x244.3 (0.1)
+0x00240|            40                                 |    @           |          reserved: false 0x244.3-0x244.4 (0.1)
+0x00240|            40                                 |    @           |          type_no_pad: false 0x244.4-0x244.5 (0.1)
+0x00240|            40                                 |    @           |          reserved0: false 0x244.5-0x244.6 (0.1)
+0x00240|            40                                 |    @           |          reserved1: false 0x244.6-0x244.7 (0.1)
+0x00240|            40                                 |    @           |          reserved2: false 0x244.7-0x245 (0.1)
+0x00240|               00                              |     .          |          gprel: false 0x245-0x245.1 (0.1)
+0x00240|               00                              |     .          |          unknown0: false 0x245.1-0x245.2 (0.1)
+0x00240|               00                              |     .          |          unknown1: false 0x245.2-0x245.3 (0.1)
+0x00240|               00                              |     .          |          lnk_comdat: false 0x245.3-0x245.4 (0.1)
+0x00240|               00                              |     .          |          lnk_remove: false 0x245.4-0x245.5 (0.1)
+0x00240|               00                              |     .          |          reserved3: false 0x245.5-0x245.6 (0.1)
+0x00240|               00                              |     .          |          lnk_info: false 0x245.6-0x245.7 (0.1)
+0x00240|               00                              |     .          |          lnk_other: false 0x245.7-0x246 (0.1)
+0x00240|                  00                           |      .         |          align_128bytes: false 0x246-0x246.1 (0.1)
+0x00240|                  00                           |      .         |          align_8bytes: false 0x246.1-0x246.2 (0.1)
+0x00240|                  00                           |      .         |          align_2bytes: false 0x246.2-0x246.3 (0.1)
+0x00240|                  00                           |      .         |          align_1bytes: false 0x246.3-0x246.4 (0.1)
+0x00240|                  00                           |      .         |          mem_preload: false 0x246.4-0x246.5 (0.1)
+0x00240|                  00                           |      .         |          mem_locked: false 0x246.5-0x246.6 (0.1)
+0x00240|                  00                           |      .         |          mem_16bit: false 0x246.6-0x246.7 (0.1)
+0x00240|                  00                           |      .         |          mem_purgeable: false 0x246.7-0x247 (0.1)
+0x00240|                     40                        |       @        |          mem_write: false 0x247-0x247.1 (0.1)
+0x00240|                     40                        |       @        |          mem_read: true 0x247.1-0x247.2 (0.1)
+0x00240|                     40                        |       @        |          mem_execute: false 0x247.2-0x247.3 (0.1)
+0x00240|                     40                        |       @        |          mem_shared: false 0x247.3-0x247.4 (0.1)
+0x00240|                     40                        |       @        |          mem_not_paged: false 0x247.4-0x247.5 (0.1)
+0x00240|                     40                        |       @        |          mem_not_cached: false 0x247.5-0x247.6 (0.1)
+0x00240|                     40                        |       @        |          mem_discardable: false 0x247.6-0x247.7 (0.1)
+0x00240|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x247.7-0x248 (0.1)
+       |                                               |                |      [3]{}: section 0x248-0x270 (40)
+0x00240|                        2e 72 65 6c 6f 63 00 00|        .reloc..|        name: ".reloc" 0x248-0x250 (8)
+0x00250|1c 1b 00 00                                    |....            |        virtual_size: 6940 0x250-0x254 (4)
+0x00250|            00 a0 04 00                        |    ....        |        virtual_address: 0x4a000 0x254-0x258 (4)
+0x00250|                        00 1c 00 00            |        ....    |        size_of_raw_data: 7168 0x258-0x25c (4)
+0x00250|                                    00 7e 04 00|            .~..|        pointer_to_raw_data: 0x47e00 0x25c-0x260 (4)
+0x00260|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x260-0x264 (4)
+0x00260|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x264-0x268 (4)
+0x00260|                        00 00                  |        ..      |        number_of_relocations: 0 0x268-0x26a (2)
+0x00260|                              00 00            |          ..    |        number_of_line_numbers: 0 0x26a-0x26c (2)
+       |                                               |                |        characteristics{}: 0x26c-0x270 (4)
+0x00260|                                    40         |            @   |          cnt_uninitialized_data: false 0x26c-0x26c.1 (0.1)
+0x00260|                                    40         |            @   |          cnt_initialized_data: true 0x26c.1-0x26c.2 (0.1)
+0x00260|                                    40         |            @   |          cnt_code: false 0x26c.2-0x26c.3 (0.1)
+0x00260|                                    40         |            @   |          reserved: false 0x26c.3-0x26c.4 (0.1)
+0x00260|                                    40         |            @   |          type_no_pad: false 0x26c.4-0x26c.5 (0.1)
+0x00260|                                    40         |            @   |          reserved0: false 0x26c.5-0x26c.6 (0.1)
+0x00260|                                    40         |            @   |          reserved1: false 0x26c.6-0x26c.7 (0.1)
+0x00260|                                    40         |            @   |          reserved2: false 0x26c.7-0x26d (0.1)
+0x00260|                                       00      |             .  |          gprel: false 0x26d-0x26d.1 (0.1)
+0x00260|                                       00      |             .  |          unknown0: false 0x26d.1-0x26d.2 (0.1)
+0x00260|                                       00      |             .  |          unknown1: false 0x26d.2-0x26d.3 (0.1)
+0x00260|                                       00      |             .  |          lnk_comdat: false 0x26d.3-0x26d.4 (0.1)
+0x00260|                                       00      |             .  |          lnk_remove: false 0x26d.4-0x26d.5 (0.1)
+0x00260|                                       00      |             .  |          reserved3: false 0x26d.5-0x26d.6 (0.1)
+0x00260|                                       00      |             .  |          lnk_info: false 0x26d.6-0x26d.7 (0.1)
+0x00260|                                       00      |             .  |          lnk_other: false 0x26d.7-0x26e (0.1)
+0x00260|                                          00   |              . |          align_128bytes: false 0x26e-0x26e.1 (0.1)
+0x00260|                                          00   |              . |          align_8bytes: false 0x26e.1-0x26e.2 (0.1)
+0x00260|                                          00   |              . |          align_2bytes: false 0x26e.2-0x26e.3 (0.1)
+0x00260|                                          00   |              . |          align_1bytes: false 0x26e.3-0x26e.4 (0.1)
+0x00260|                                          00   |              . |          mem_preload: false 0x26e.4-0x26e.5 (0.1)
+0x00260|                                          00   |              . |          mem_locked: false 0x26e.5-0x26e.6 (0.1)
+0x00260|                                          00   |              . |          mem_16bit: false 0x26e.6-0x26e.7 (0.1)
+0x00260|                                          00   |              . |          mem_purgeable: false 0x26e.7-0x26f (0.1)
+0x00260|                                             42|               B|          mem_write: false 0x26f-0x26f.1 (0.1)
+0x00260|                                             42|               B|          mem_read: true 0x26f.1-0x26f.2 (0.1)
+0x00260|                                             42|               B|          mem_execute: false 0x26f.2-0x26f.3 (0.1)
+0x00260|                                             42|               B|          mem_shared: false 0x26f.3-0x26f.4 (0.1)
+0x00260|                                             42|               B|          mem_not_paged: false 0x26f.4-0x26f.5 (0.1)
+0x00260|                                             42|               B|          mem_not_cached: false 0x26f.5-0x26f.6 (0.1)
+0x00260|                                             42|               B|          mem_discardable: true 0x26f.6-0x26f.7 (0.1)
+0x00260|                                             42|               B|          lnk_nreloc_ovfl: false 0x26f.7-0x270 (0.1)
+0x00270|6f da 5b 4a 38 00 00 00 db da 5b 4a 43 00 00 00|o.[J8.....[JC...|  gap0: raw bits 0x270-0x49a00 (300944)
+*      |until 0x499ff.7 (end) (300944)                 |                |

format/pe/testdata/pe-cygwin-ls.exe.fqtest

@@ -0,0 +1,525 @@
+$ fq dv pe-cygwin-ls.exe
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-cygwin-ls.exe (pe) 0x0-0x2101d (135197)
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0x80 (128)
+0x00000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x00000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x00000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x00000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x00000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x00000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x00000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x00000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x00010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x00010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x00010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x00010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x00010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x00010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x00010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x00020|00 00 00 00                                    |....            |
+0x00020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x00020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x00020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x00030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x00030|                                    80 00 00 00|            ....|    e_lfanew: 128 (File address of new exe header) 0x3c-0x40 (4)
+0x00040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*      |until 0x7f.7 (64)                              |                |
+       |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0x80-0x2101d (135069)
+0x00080|50 45 00 00                                    |PE..            |    signature: raw bits (valid) 0x80-0x84 (4)
+0x00080|            4c 01                              |    L.          |    machine: "i386" (0x14c) 0x84-0x86 (2)
+0x00080|                  09 00                        |      ..        |    number_of_sections: 9 0x86-0x88 (2)
+0x00080|                        00 00 11 00            |        ....    |    time_date_stamp: 1114112 (1970-01-13T21:28:32Z) 0x88-0x8c (4)
+0x00080|                                    00 10 02 00|            ....|    pointer_to_symbol_table: 0x21000 0x8c-0x90 (4)
+0x00090|00 00 00 00                                    |....            |    number_of_symbols: 0 0x90-0x94 (4)
+0x00090|            e0 00                              |    ..          |    size_of_optional_header: 224 0x94-0x96 (2)
+       |                                               |                |    characteristics{}: 0x96-0x98 (2)
+0x00090|                  2f                           |      /         |      bytes_reversed_lo: false 0x96-0x96.1 (0.1)
+0x00090|                  2f                           |      /         |      reserved: false 0x96.1-0x96.2 (0.1)
+0x00090|                  2f                           |      /         |      large_address_aware: true 0x96.2-0x96.3 (0.1)
+0x00090|                  2f                           |      /         |      aggressive_ws_trim: false 0x96.3-0x96.4 (0.1)
+0x00090|                  2f                           |      /         |      local_syms_stripped: true 0x96.4-0x96.5 (0.1)
+0x00090|                  2f                           |      /         |      line_nums_stripped: true 0x96.5-0x96.6 (0.1)
+0x00090|                  2f                           |      /         |      executable_image: true 0x96.6-0x96.7 (0.1)
+0x00090|                  2f                           |      /         |      relocs_stripped: true 0x96.7-0x97 (0.1)
+0x00090|                     01                        |       .        |      bytes_reversed_hi: false 0x97-0x97.1 (0.1)
+0x00090|                     01                        |       .        |      up_system_only: false 0x97.1-0x97.2 (0.1)
+0x00090|                     01                        |       .        |      dll: false 0x97.2-0x97.3 (0.1)
+0x00090|                     01                        |       .        |      system: false 0x97.3-0x97.4 (0.1)
+0x00090|                     01                        |       .        |      net_run_from_swap: false 0x97.4-0x97.5 (0.1)
+0x00090|                     01                        |       .        |      removable_run_from_swap: false 0x97.5-0x97.6 (0.1)
+0x00090|                     01                        |       .        |      debug_stripped: false 0x97.6-0x97.7 (0.1)
+0x00090|                     01                        |       .        |      32bit_machine: true 0x97.7-0x98 (0.1)
+       |                                               |                |    optional_header{}: 0x98-0x178 (224)
+0x00090|                        0b 01                  |        ..      |      format: "pe32" (0x10b) 0x98-0x9a (2)
+0x00090|                              02               |          .     |      major_linker_version: 2 0x9a-0x9b (1)
+0x00090|                                 19            |           .    |      minor_linker_version: 25 0x9b-0x9c (1)
+0x00090|                                    00 4e 01 00|            .N..|      size_of_code: 85504 0x9c-0xa0 (4)
+0x000a0|00 0a 02 00                                    |....            |      size_of_initialized_data: 133632 0xa0-0xa4 (4)
+0x000a0|            00 16 00 00                        |    ....        |      size_of_uninitialized_data: 5632 0xa4-0xa8 (4)
+0x000a0|                        00 10 00 00            |        ....    |      address_of_entry_point: 0x1000 0xa8-0xac (4)
+0x000a0|                                    00 10 00 00|            ....|      base_of_code: 0x1000 0xac-0xb0 (4)
+0x000b0|00 60 01 00                                    |.`..            |      base_of_data: 0x16000 0xb0-0xb4 (4)
+0x000b0|            00 00 40 00                        |    ..@.        |      image_base: 0x400000 0xb4-0xb8 (4)
+0x000b0|                        00 10 00 00            |        ....    |      section_alignment: 4096 0xb8-0xbc (4)
+0x000b0|                                    00 02 00 00|            ....|      file_alignment: 512 0xbc-0xc0 (4)
+0x000c0|04 00                                          |..              |      major_os_version: 4 0xc0-0xc2 (2)
+0x000c0|      00 00                                    |  ..            |      minor_os_version: 0 0xc2-0xc4 (2)
+0x000c0|            01 00                              |    ..          |      major_image_version: 1 0xc4-0xc6 (2)
+0x000c0|                  00 00                        |      ..        |      minor_image_version: 0 0xc6-0xc8 (2)
+0x000c0|                        04 00                  |        ..      |      major_subsystem_version: 4 0xc8-0xca (2)
+0x000c0|                              00 00            |          ..    |      minor_subsystem_version: 0 0xca-0xcc (2)
+0x000c0|                                    00 00 00 00|            ....|      win32_version: 0 0xcc-0xd0 (4)
+0x000d0|00 80 02 00                                    |....            |      size_of_image: 163840 0xd0-0xd4 (4)
+0x000d0|            00 04 00 00                        |    ....        |      size_of_headers: 1024 0xd4-0xd8 (4)
+0x000d0|                        4c 89 02 00            |        L...    |      chunk_sum: 0x2894c 0xd8-0xdc (4)
+0x000d0|                                    03 00      |            ..  |      subsystem: "windows_cui" (3) 0xdc-0xde (2)
+       |                                               |                |      dll_characteristics{}: 0xde-0xe0 (2)
+0x000d0|                                          00   |              . |        force_integrity: false 0xde-0xde.1 (0.1)
+0x000d0|                                          00   |              . |        dynamic_base: false 0xde.1-0xde.2 (0.1)
+0x000d0|                                          00   |              . |        high_entropy_va: false 0xde.2-0xde.3 (0.1)
+0x000d0|                                          00   |              . |        reserved0: false 0xde.3-0xde.4 (0.1)
+0x000d0|                                          00   |              . |        reserved1: false 0xde.4-0xde.5 (0.1)
+0x000d0|                                          00   |              . |        reserved2: false 0xde.5-0xde.6 (0.1)
+0x000d0|                                          00   |              . |        reserved3: false 0xde.6-0xde.7 (0.1)
+0x000d0|                                          00   |              . |        reserved4: false 0xde.7-0xdf (0.1)
+0x000d0|                                             80|               .|        terminal_server_aware: true 0xdf-0xdf.1 (0.1)
+0x000d0|                                             80|               .|        guard_cf: false 0xdf.1-0xdf.2 (0.1)
+0x000d0|                                             80|               .|        wdm_driver: false 0xdf.2-0xdf.3 (0.1)
+0x000d0|                                             80|               .|        appcontainer: false 0xdf.3-0xdf.4 (0.1)
+0x000d0|                                             80|               .|        no_bind: false 0xdf.4-0xdf.5 (0.1)
+0x000d0|                                             80|               .|        no_seh: false 0xdf.5-0xdf.6 (0.1)
+0x000d0|                                             80|               .|        no_isolation: false 0xdf.6-0xdf.7 (0.1)
+0x000d0|                                             80|               .|        nx_compat: false 0xdf.7-0xe0 (0.1)
+0x000e0|00 00 20 00                                    |.. .            |      size_of_track_reserve: 2097152 0xe0-0xe4 (4)
+0x000e0|            00 10 00 00                        |    ....        |      size_of_stack_commit: 4096 0xe4-0xe8 (4)
+0x000e0|                        00 00 10 00            |        ....    |      size_of_heap_reserve: 1048576 0xe8-0xec (4)
+0x000e0|                                    00 10 00 00|            ....|      size_of_heap_commit: 4096 0xec-0xf0 (4)
+0x000f0|00 00 00 00                                    |....            |      loader_flags: 0 0xf0-0xf4 (4)
+0x000f0|            10 00 00 00                        |    ....        |      number_of_rva_and_sizes: 16 0xf4-0xf8 (4)
+0x000f0|                        00 00 00 00            |        ....    |      export_table_address: 0x0 0xf8-0xfc (4)
+0x000f0|                                    00 00 00 00|            ....|      export_table_size: 0 0xfc-0x100 (4)
+0x00100|00 50 02 00                                    |.P..            |      import_table_address: 0x25000 0x100-0x104 (4)
+0x00100|            30 0e 00 00                        |    0...        |      import_table_size: 3632 0x104-0x108 (4)
+0x00100|                        00 60 02 00            |        .`..    |      resource_table_address: 0x26000 0x108-0x10c (4)
+0x00100|                                    e8 04 00 00|            ....|      resource_table_size: 1256 0x10c-0x110 (4)
+0x00110|00 00 00 00                                    |....            |      exception_table_address: 0x0 0x110-0x114 (4)
+0x00110|            00 00 00 00                        |    ....        |      exception_table_size: 0 0x114-0x118 (4)
+0x00110|                        00 00 00 00            |        ....    |      certificate_table_address: 0x0 0x118-0x11c (4)
+0x00110|                                    00 00 00 00|            ....|      certificate_table_size: 0 0x11c-0x120 (4)
+0x00120|00 00 00 00                                    |....            |      base_relocation_table_address: 0x0 0x120-0x124 (4)
+0x00120|            00 00 00 00                        |    ....        |      base_relocation_table_size: 0 0x124-0x128 (4)
+0x00120|                        00 e0 01 00            |        ....    |      debug_address: 0x1e000 0x128-0x12c (4)
+0x00120|                                    1c 00 00 00|            ....|      debug_size: 28 0x12c-0x130 (4)
+0x00130|00 00 00 00 00 00 00 00                        |........        |      architecture: 0 0x130-0x138 (8)
+0x00130|                        00 00 00 00 00 00 00 00|        ........|      global_ptr: 0x0 0x138-0x140 (8)
+0x00140|00 00 00 00                                    |....            |      tls_table_address: 0x0 0x140-0x144 (4)
+0x00140|            00 00 00 00                        |    ....        |      tls_table_size: 0 0x144-0x148 (4)
+0x00140|                        00 00 00 00            |        ....    |      load_config_table_address: 0x0 0x148-0x14c (4)
+0x00140|                                    00 00 00 00|            ....|      load_config_table_size: 0 0x14c-0x150 (4)
+0x00150|00 00 00 00                                    |....            |      bound_import_address: 0x0 0x150-0x154 (4)
+0x00150|            00 00 00 00                        |    ....        |      bound_import_size: 0 0x154-0x158 (4)
+0x00150|                        8c 52 02 00            |        .R..    |      iat_address: 0x2528c 0x158-0x15c (4)
+0x00150|                                    28 02 00 00|            (...|      iat_size: 552 0x15c-0x160 (4)
+0x00160|00 00 00 00                                    |....            |      delay_import_descriptor_address: 0x0 0x160-0x164 (4)
+0x00160|            00 00 00 00                        |    ....        |      delay_import_descriptor_size: 0 0x164-0x168 (4)
+0x00160|                        00 00 00 00            |        ....    |      clr_runtime_header_address: 0x0 0x168-0x16c (4)
+0x00160|                                    00 00 00 00|            ....|      clr_runtime_header_size: 0 0x16c-0x170 (4)
+0x00170|00 00 00 00 00 00 00 00                        |........        |      reserved: 0 0x170-0x178 (8)
+       |                                               |                |      unknown: raw bits 0x178-0x178 (0)
+       |                                               |                |    sections[0:9]: 0x178-0x2e0 (360)
+       |                                               |                |      [0]{}: section 0x178-0x1a0 (40)
+0x00170|                        2e 74 65 78 74 00 00 00|        .text...|        name: ".text" 0x178-0x180 (8)
+0x00180|04 4c 01 00                                    |.L..            |        virtual_size: 84996 0x180-0x184 (4)
+0x00180|            00 10 00 00                        |    ....        |        virtual_address: 0x1000 0x184-0x188 (4)
+0x00180|                        00 4e 01 00            |        .N..    |        size_of_raw_data: 85504 0x188-0x18c (4)
+0x00180|                                    00 04 00 00|            ....|        pointer_to_raw_data: 0x400 0x18c-0x190 (4)
+0x00190|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x190-0x194 (4)
+0x00190|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x194-0x198 (4)
+0x00190|                        00 00                  |        ..      |        number_of_relocations: 0 0x198-0x19a (2)
+0x00190|                              00 00            |          ..    |        number_of_line_numbers: 0 0x19a-0x19c (2)
+       |                                               |                |        characteristics{}: 0x19c-0x1a0 (4)
+0x00190|                                    60         |            `   |          cnt_uninitialized_data: false 0x19c-0x19c.1 (0.1)
+0x00190|                                    60         |            `   |          cnt_initialized_data: true 0x19c.1-0x19c.2 (0.1)
+0x00190|                                    60         |            `   |          cnt_code: true 0x19c.2-0x19c.3 (0.1)
+0x00190|                                    60         |            `   |          reserved: false 0x19c.3-0x19c.4 (0.1)
+0x00190|                                    60         |            `   |          type_no_pad: false 0x19c.4-0x19c.5 (0.1)
+0x00190|                                    60         |            `   |          reserved0: false 0x19c.5-0x19c.6 (0.1)
+0x00190|                                    60         |            `   |          reserved1: false 0x19c.6-0x19c.7 (0.1)
+0x00190|                                    60         |            `   |          reserved2: false 0x19c.7-0x19d (0.1)
+0x00190|                                       00      |             .  |          gprel: false 0x19d-0x19d.1 (0.1)
+0x00190|                                       00      |             .  |          unknown0: false 0x19d.1-0x19d.2 (0.1)
+0x00190|                                       00      |             .  |          unknown1: false 0x19d.2-0x19d.3 (0.1)
+0x00190|                                       00      |             .  |          lnk_comdat: false 0x19d.3-0x19d.4 (0.1)
+0x00190|                                       00      |             .  |          lnk_remove: false 0x19d.4-0x19d.5 (0.1)
+0x00190|                                       00      |             .  |          reserved3: false 0x19d.5-0x19d.6 (0.1)
+0x00190|                                       00      |             .  |          lnk_info: false 0x19d.6-0x19d.7 (0.1)
+0x00190|                                       00      |             .  |          lnk_other: false 0x19d.7-0x19e (0.1)
+0x00190|                                          50   |              P |          align_128bytes: false 0x19e-0x19e.1 (0.1)
+0x00190|                                          50   |              P |          align_8bytes: true 0x19e.1-0x19e.2 (0.1)
+0x00190|                                          50   |              P |          align_2bytes: false 0x19e.2-0x19e.3 (0.1)
+0x00190|                                          50   |              P |          align_1bytes: true 0x19e.3-0x19e.4 (0.1)
+0x00190|                                          50   |              P |          mem_preload: false 0x19e.4-0x19e.5 (0.1)
+0x00190|                                          50   |              P |          mem_locked: false 0x19e.5-0x19e.6 (0.1)
+0x00190|                                          50   |              P |          mem_16bit: false 0x19e.6-0x19e.7 (0.1)
+0x00190|                                          50   |              P |          mem_purgeable: false 0x19e.7-0x19f (0.1)
+0x00190|                                             60|               `|          mem_write: false 0x19f-0x19f.1 (0.1)
+0x00190|                                             60|               `|          mem_read: true 0x19f.1-0x19f.2 (0.1)
+0x00190|                                             60|               `|          mem_execute: true 0x19f.2-0x19f.3 (0.1)
+0x00190|                                             60|               `|          mem_shared: false 0x19f.3-0x19f.4 (0.1)
+0x00190|                                             60|               `|          mem_not_paged: false 0x19f.4-0x19f.5 (0.1)
+0x00190|                                             60|               `|          mem_not_cached: false 0x19f.5-0x19f.6 (0.1)
+0x00190|                                             60|               `|          mem_discardable: false 0x19f.6-0x19f.7 (0.1)
+0x00190|                                             60|               `|          lnk_nreloc_ovfl: false 0x19f.7-0x1a0 (0.1)
+       |                                               |                |      [1]{}: section 0x1a0-0x1c8 (40)
+0x001a0|2e 64 61 74 61 00 00 00                        |.data...        |        name: ".data" 0x1a0-0x1a8 (8)
+0x001a0|                        c4 01 00 00            |        ....    |        virtual_size: 452 0x1a8-0x1ac (4)
+0x001a0|                                    00 60 01 00|            .`..|        virtual_address: 0x16000 0x1ac-0x1b0 (4)
+0x001b0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x1b0-0x1b4 (4)
+0x001b0|            00 52 01 00                        |    .R..        |        pointer_to_raw_data: 0x15200 0x1b4-0x1b8 (4)
+0x001b0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x1b8-0x1bc (4)
+0x001b0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x1bc-0x1c0 (4)
+0x001c0|00 00                                          |..              |        number_of_relocations: 0 0x1c0-0x1c2 (2)
+0x001c0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1c2-0x1c4 (2)
+       |                                               |                |        characteristics{}: 0x1c4-0x1c8 (4)
+0x001c0|            40                                 |    @           |          cnt_uninitialized_data: false 0x1c4-0x1c4.1 (0.1)
+0x001c0|            40                                 |    @           |          cnt_initialized_data: true 0x1c4.1-0x1c4.2 (0.1)
+0x001c0|            40                                 |    @           |          cnt_code: false 0x1c4.2-0x1c4.3 (0.1)
+0x001c0|            40                                 |    @           |          reserved: false 0x1c4.3-0x1c4.4 (0.1)
+0x001c0|            40                                 |    @           |          type_no_pad: false 0x1c4.4-0x1c4.5 (0.1)
+0x001c0|            40                                 |    @           |          reserved0: false 0x1c4.5-0x1c4.6 (0.1)
+0x001c0|            40                                 |    @           |          reserved1: false 0x1c4.6-0x1c4.7 (0.1)
+0x001c0|            40                                 |    @           |          reserved2: false 0x1c4.7-0x1c5 (0.1)
+0x001c0|               00                              |     .          |          gprel: false 0x1c5-0x1c5.1 (0.1)
+0x001c0|               00                              |     .          |          unknown0: false 0x1c5.1-0x1c5.2 (0.1)
+0x001c0|               00                              |     .          |          unknown1: false 0x1c5.2-0x1c5.3 (0.1)
+0x001c0|               00                              |     .          |          lnk_comdat: false 0x1c5.3-0x1c5.4 (0.1)
+0x001c0|               00                              |     .          |          lnk_remove: false 0x1c5.4-0x1c5.5 (0.1)
+0x001c0|               00                              |     .          |          reserved3: false 0x1c5.5-0x1c5.6 (0.1)
+0x001c0|               00                              |     .          |          lnk_info: false 0x1c5.6-0x1c5.7 (0.1)
+0x001c0|               00                              |     .          |          lnk_other: false 0x1c5.7-0x1c6 (0.1)
+0x001c0|                  60                           |      `         |          align_128bytes: false 0x1c6-0x1c6.1 (0.1)
+0x001c0|                  60                           |      `         |          align_8bytes: true 0x1c6.1-0x1c6.2 (0.1)
+0x001c0|                  60                           |      `         |          align_2bytes: true 0x1c6.2-0x1c6.3 (0.1)
+0x001c0|                  60                           |      `         |          align_1bytes: false 0x1c6.3-0x1c6.4 (0.1)
+0x001c0|                  60                           |      `         |          mem_preload: false 0x1c6.4-0x1c6.5 (0.1)
+0x001c0|                  60                           |      `         |          mem_locked: false 0x1c6.5-0x1c6.6 (0.1)
+0x001c0|                  60                           |      `         |          mem_16bit: false 0x1c6.6-0x1c6.7 (0.1)
+0x001c0|                  60                           |      `         |          mem_purgeable: false 0x1c6.7-0x1c7 (0.1)
+0x001c0|                     c0                        |       .        |          mem_write: true 0x1c7-0x1c7.1 (0.1)
+0x001c0|                     c0                        |       .        |          mem_read: true 0x1c7.1-0x1c7.2 (0.1)
+0x001c0|                     c0                        |       .        |          mem_execute: false 0x1c7.2-0x1c7.3 (0.1)
+0x001c0|                     c0                        |       .        |          mem_shared: false 0x1c7.3-0x1c7.4 (0.1)
+0x001c0|                     c0                        |       .        |          mem_not_paged: false 0x1c7.4-0x1c7.5 (0.1)
+0x001c0|                     c0                        |       .        |          mem_not_cached: false 0x1c7.5-0x1c7.6 (0.1)
+0x001c0|                     c0                        |       .        |          mem_discardable: false 0x1c7.6-0x1c7.7 (0.1)
+0x001c0|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x1c7.7-0x1c8 (0.1)
+       |                                               |                |      [2]{}: section 0x1c8-0x1f0 (40)
+0x001c0|                        2e 72 64 61 74 61 00 00|        .rdata..|        name: ".rdata" 0x1c8-0x1d0 (8)
+0x001d0|70 65 00 00                                    |pe..            |        virtual_size: 25968 0x1d0-0x1d4 (4)
+0x001d0|            00 70 01 00                        |    .p..        |        virtual_address: 0x17000 0x1d4-0x1d8 (4)
+0x001d0|                        00 66 00 00            |        .f..    |        size_of_raw_data: 26112 0x1d8-0x1dc (4)
+0x001d0|                                    00 54 01 00|            .T..|        pointer_to_raw_data: 0x15400 0x1dc-0x1e0 (4)
+0x001e0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x1e0-0x1e4 (4)
+0x001e0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x1e4-0x1e8 (4)
+0x001e0|                        00 00                  |        ..      |        number_of_relocations: 0 0x1e8-0x1ea (2)
+0x001e0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x1ea-0x1ec (2)
+       |                                               |                |        characteristics{}: 0x1ec-0x1f0 (4)
+0x001e0|                                    40         |            @   |          cnt_uninitialized_data: false 0x1ec-0x1ec.1 (0.1)
+0x001e0|                                    40         |            @   |          cnt_initialized_data: true 0x1ec.1-0x1ec.2 (0.1)
+0x001e0|                                    40         |            @   |          cnt_code: false 0x1ec.2-0x1ec.3 (0.1)
+0x001e0|                                    40         |            @   |          reserved: false 0x1ec.3-0x1ec.4 (0.1)
+0x001e0|                                    40         |            @   |          type_no_pad: false 0x1ec.4-0x1ec.5 (0.1)
+0x001e0|                                    40         |            @   |          reserved0: false 0x1ec.5-0x1ec.6 (0.1)
+0x001e0|                                    40         |            @   |          reserved1: false 0x1ec.6-0x1ec.7 (0.1)
+0x001e0|                                    40         |            @   |          reserved2: false 0x1ec.7-0x1ed (0.1)
+0x001e0|                                       00      |             .  |          gprel: false 0x1ed-0x1ed.1 (0.1)
+0x001e0|                                       00      |             .  |          unknown0: false 0x1ed.1-0x1ed.2 (0.1)
+0x001e0|                                       00      |             .  |          unknown1: false 0x1ed.2-0x1ed.3 (0.1)
+0x001e0|                                       00      |             .  |          lnk_comdat: false 0x1ed.3-0x1ed.4 (0.1)
+0x001e0|                                       00      |             .  |          lnk_remove: false 0x1ed.4-0x1ed.5 (0.1)
+0x001e0|                                       00      |             .  |          reserved3: false 0x1ed.5-0x1ed.6 (0.1)
+0x001e0|                                       00      |             .  |          lnk_info: false 0x1ed.6-0x1ed.7 (0.1)
+0x001e0|                                       00      |             .  |          lnk_other: false 0x1ed.7-0x1ee (0.1)
+0x001e0|                                          60   |              ` |          align_128bytes: false 0x1ee-0x1ee.1 (0.1)
+0x001e0|                                          60   |              ` |          align_8bytes: true 0x1ee.1-0x1ee.2 (0.1)
+0x001e0|                                          60   |              ` |          align_2bytes: true 0x1ee.2-0x1ee.3 (0.1)
+0x001e0|                                          60   |              ` |          align_1bytes: false 0x1ee.3-0x1ee.4 (0.1)
+0x001e0|                                          60   |              ` |          mem_preload: false 0x1ee.4-0x1ee.5 (0.1)
+0x001e0|                                          60   |              ` |          mem_locked: false 0x1ee.5-0x1ee.6 (0.1)
+0x001e0|                                          60   |              ` |          mem_16bit: false 0x1ee.6-0x1ee.7 (0.1)
+0x001e0|                                          60   |              ` |          mem_purgeable: false 0x1ee.7-0x1ef (0.1)
+0x001e0|                                             40|               @|          mem_write: false 0x1ef-0x1ef.1 (0.1)
+0x001e0|                                             40|               @|          mem_read: true 0x1ef.1-0x1ef.2 (0.1)
+0x001e0|                                             40|               @|          mem_execute: false 0x1ef.2-0x1ef.3 (0.1)
+0x001e0|                                             40|               @|          mem_shared: false 0x1ef.3-0x1ef.4 (0.1)
+0x001e0|                                             40|               @|          mem_not_paged: false 0x1ef.4-0x1ef.5 (0.1)
+0x001e0|                                             40|               @|          mem_not_cached: false 0x1ef.5-0x1ef.6 (0.1)
+0x001e0|                                             40|               @|          mem_discardable: false 0x1ef.6-0x1ef.7 (0.1)
+0x001e0|                                             40|               @|          lnk_nreloc_ovfl: false 0x1ef.7-0x1f0 (0.1)
+       |                                               |                |      [3]{}: section 0x1f0-0x218 (40)
+0x001f0|2e 62 75 69 6c 64 69 64                        |.buildid        |        name: ".buildid" 0x1f0-0x1f8 (8)
+0x001f0|                        35 00 00 00            |        5...    |        virtual_size: 53 0x1f8-0x1fc (4)
+0x001f0|                                    00 e0 01 00|            ....|        virtual_address: 0x1e000 0x1fc-0x200 (4)
+0x00200|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x200-0x204 (4)
+0x00200|            00 ba 01 00                        |    ....        |        pointer_to_raw_data: 0x1ba00 0x204-0x208 (4)
+0x00200|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x208-0x20c (4)
+0x00200|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x20c-0x210 (4)
+0x00210|00 00                                          |..              |        number_of_relocations: 0 0x210-0x212 (2)
+0x00210|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x212-0x214 (2)
+       |                                               |                |        characteristics{}: 0x214-0x218 (4)
+0x00210|            40                                 |    @           |          cnt_uninitialized_data: false 0x214-0x214.1 (0.1)
+0x00210|            40                                 |    @           |          cnt_initialized_data: true 0x214.1-0x214.2 (0.1)
+0x00210|            40                                 |    @           |          cnt_code: false 0x214.2-0x214.3 (0.1)
+0x00210|            40                                 |    @           |          reserved: false 0x214.3-0x214.4 (0.1)
+0x00210|            40                                 |    @           |          type_no_pad: false 0x214.4-0x214.5 (0.1)
+0x00210|            40                                 |    @           |          reserved0: false 0x214.5-0x214.6 (0.1)
+0x00210|            40                                 |    @           |          reserved1: false 0x214.6-0x214.7 (0.1)
+0x00210|            40                                 |    @           |          reserved2: false 0x214.7-0x215 (0.1)
+0x00210|               00                              |     .          |          gprel: false 0x215-0x215.1 (0.1)
+0x00210|               00                              |     .          |          unknown0: false 0x215.1-0x215.2 (0.1)
+0x00210|               00                              |     .          |          unknown1: false 0x215.2-0x215.3 (0.1)
+0x00210|               00                              |     .          |          lnk_comdat: false 0x215.3-0x215.4 (0.1)
+0x00210|               00                              |     .          |          lnk_remove: false 0x215.4-0x215.5 (0.1)
+0x00210|               00                              |     .          |          reserved3: false 0x215.5-0x215.6 (0.1)
+0x00210|               00                              |     .          |          lnk_info: false 0x215.6-0x215.7 (0.1)
+0x00210|               00                              |     .          |          lnk_other: false 0x215.7-0x216 (0.1)
+0x00210|                  30                           |      0         |          align_128bytes: false 0x216-0x216.1 (0.1)
+0x00210|                  30                           |      0         |          align_8bytes: false 0x216.1-0x216.2 (0.1)
+0x00210|                  30                           |      0         |          align_2bytes: true 0x216.2-0x216.3 (0.1)
+0x00210|                  30                           |      0         |          align_1bytes: true 0x216.3-0x216.4 (0.1)
+0x00210|                  30                           |      0         |          mem_preload: false 0x216.4-0x216.5 (0.1)
+0x00210|                  30                           |      0         |          mem_locked: false 0x216.5-0x216.6 (0.1)
+0x00210|                  30                           |      0         |          mem_16bit: false 0x216.6-0x216.7 (0.1)
+0x00210|                  30                           |      0         |          mem_purgeable: false 0x216.7-0x217 (0.1)
+0x00210|                     40                        |       @        |          mem_write: false 0x217-0x217.1 (0.1)
+0x00210|                     40                        |       @        |          mem_read: true 0x217.1-0x217.2 (0.1)
+0x00210|                     40                        |       @        |          mem_execute: false 0x217.2-0x217.3 (0.1)
+0x00210|                     40                        |       @        |          mem_shared: false 0x217.3-0x217.4 (0.1)
+0x00210|                     40                        |       @        |          mem_not_paged: false 0x217.4-0x217.5 (0.1)
+0x00210|                     40                        |       @        |          mem_not_cached: false 0x217.5-0x217.6 (0.1)
+0x00210|                     40                        |       @        |          mem_discardable: false 0x217.6-0x217.7 (0.1)
+0x00210|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x217.7-0x218 (0.1)
+       |                                               |                |      [4]{}: section 0x218-0x240 (40)
+0x00210|                        2f 34 00 00 00 00 00 00|        /4......|        name: ".eh_frame" ("/4") 0x218-0x220 (8)
+0x00220|0c 3a 00 00                                    |.:..            |        virtual_size: 14860 0x220-0x224 (4)
+0x00220|            00 f0 01 00                        |    ....        |        virtual_address: 0x1f000 0x224-0x228 (4)
+0x00220|                        00 3c 00 00            |        .<..    |        size_of_raw_data: 15360 0x228-0x22c (4)
+0x00220|                                    00 bc 01 00|            ....|        pointer_to_raw_data: 0x1bc00 0x22c-0x230 (4)
+0x00230|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x230-0x234 (4)
+0x00230|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x234-0x238 (4)
+0x00230|                        00 00                  |        ..      |        number_of_relocations: 0 0x238-0x23a (2)
+0x00230|                              00 00            |          ..    |        number_of_line_numbers: 0 0x23a-0x23c (2)
+       |                                               |                |        characteristics{}: 0x23c-0x240 (4)
+0x00230|                                    40         |            @   |          cnt_uninitialized_data: false 0x23c-0x23c.1 (0.1)
+0x00230|                                    40         |            @   |          cnt_initialized_data: true 0x23c.1-0x23c.2 (0.1)
+0x00230|                                    40         |            @   |          cnt_code: false 0x23c.2-0x23c.3 (0.1)
+0x00230|                                    40         |            @   |          reserved: false 0x23c.3-0x23c.4 (0.1)
+0x00230|                                    40         |            @   |          type_no_pad: false 0x23c.4-0x23c.5 (0.1)
+0x00230|                                    40         |            @   |          reserved0: false 0x23c.5-0x23c.6 (0.1)
+0x00230|                                    40         |            @   |          reserved1: false 0x23c.6-0x23c.7 (0.1)
+0x00230|                                    40         |            @   |          reserved2: false 0x23c.7-0x23d (0.1)
+0x00230|                                       00      |             .  |          gprel: false 0x23d-0x23d.1 (0.1)
+0x00230|                                       00      |             .  |          unknown0: false 0x23d.1-0x23d.2 (0.1)
+0x00230|                                       00      |             .  |          unknown1: false 0x23d.2-0x23d.3 (0.1)
+0x00230|                                       00      |             .  |          lnk_comdat: false 0x23d.3-0x23d.4 (0.1)
+0x00230|                                       00      |             .  |          lnk_remove: false 0x23d.4-0x23d.5 (0.1)
+0x00230|                                       00      |             .  |          reserved3: false 0x23d.5-0x23d.6 (0.1)
+0x00230|                                       00      |             .  |          lnk_info: false 0x23d.6-0x23d.7 (0.1)
+0x00230|                                       00      |             .  |          lnk_other: false 0x23d.7-0x23e (0.1)
+0x00230|                                          30   |              0 |          align_128bytes: false 0x23e-0x23e.1 (0.1)
+0x00230|                                          30   |              0 |          align_8bytes: false 0x23e.1-0x23e.2 (0.1)
+0x00230|                                          30   |              0 |          align_2bytes: true 0x23e.2-0x23e.3 (0.1)
+0x00230|                                          30   |              0 |          align_1bytes: true 0x23e.3-0x23e.4 (0.1)
+0x00230|                                          30   |              0 |          mem_preload: false 0x23e.4-0x23e.5 (0.1)
+0x00230|                                          30   |              0 |          mem_locked: false 0x23e.5-0x23e.6 (0.1)
+0x00230|                                          30   |              0 |          mem_16bit: false 0x23e.6-0x23e.7 (0.1)
+0x00230|                                          30   |              0 |          mem_purgeable: false 0x23e.7-0x23f (0.1)
+0x00230|                                             40|               @|          mem_write: false 0x23f-0x23f.1 (0.1)
+0x00230|                                             40|               @|          mem_read: true 0x23f.1-0x23f.2 (0.1)
+0x00230|                                             40|               @|          mem_execute: false 0x23f.2-0x23f.3 (0.1)
+0x00230|                                             40|               @|          mem_shared: false 0x23f.3-0x23f.4 (0.1)
+0x00230|                                             40|               @|          mem_not_paged: false 0x23f.4-0x23f.5 (0.1)
+0x00230|                                             40|               @|          mem_not_cached: false 0x23f.5-0x23f.6 (0.1)
+0x00230|                                             40|               @|          mem_discardable: false 0x23f.6-0x23f.7 (0.1)
+0x00230|                                             40|               @|          lnk_nreloc_ovfl: false 0x23f.7-0x240 (0.1)
+       |                                               |                |      [5]{}: section 0x240-0x268 (40)
+0x00240|2e 62 73 73 00 00 00 00                        |.bss....        |        name: ".bss" 0x240-0x248 (8)
+0x00240|                        74 15 00 00            |        t...    |        virtual_size: 5492 0x248-0x24c (4)
+0x00240|                                    00 30 02 00|            .0..|        virtual_address: 0x23000 0x24c-0x250 (4)
+0x00250|00 00 00 00                                    |....            |        size_of_raw_data: 0 0x250-0x254 (4)
+0x00250|            00 00 00 00                        |    ....        |        pointer_to_raw_data: 0x0 0x254-0x258 (4)
+0x00250|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x258-0x25c (4)
+0x00250|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x25c-0x260 (4)
+0x00260|00 00                                          |..              |        number_of_relocations: 0 0x260-0x262 (2)
+0x00260|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x262-0x264 (2)
+       |                                               |                |        characteristics{}: 0x264-0x268 (4)
+0x00260|            80                                 |    .           |          cnt_uninitialized_data: true 0x264-0x264.1 (0.1)
+0x00260|            80                                 |    .           |          cnt_initialized_data: false 0x264.1-0x264.2 (0.1)
+0x00260|            80                                 |    .           |          cnt_code: false 0x264.2-0x264.3 (0.1)
+0x00260|            80                                 |    .           |          reserved: false 0x264.3-0x264.4 (0.1)
+0x00260|            80                                 |    .           |          type_no_pad: false 0x264.4-0x264.5 (0.1)
+0x00260|            80                                 |    .           |          reserved0: false 0x264.5-0x264.6 (0.1)
+0x00260|            80                                 |    .           |          reserved1: false 0x264.6-0x264.7 (0.1)
+0x00260|            80                                 |    .           |          reserved2: false 0x264.7-0x265 (0.1)
+0x00260|               00                              |     .          |          gprel: false 0x265-0x265.1 (0.1)
+0x00260|               00                              |     .          |          unknown0: false 0x265.1-0x265.2 (0.1)
+0x00260|               00                              |     .          |          unknown1: false 0x265.2-0x265.3 (0.1)
+0x00260|               00                              |     .          |          lnk_comdat: false 0x265.3-0x265.4 (0.1)
+0x00260|               00                              |     .          |          lnk_remove: false 0x265.4-0x265.5 (0.1)
+0x00260|               00                              |     .          |          reserved3: false 0x265.5-0x265.6 (0.1)
+0x00260|               00                              |     .          |          lnk_info: false 0x265.6-0x265.7 (0.1)
+0x00260|               00                              |     .          |          lnk_other: false 0x265.7-0x266 (0.1)
+0x00260|                  60                           |      `         |          align_128bytes: false 0x266-0x266.1 (0.1)
+0x00260|                  60                           |      `         |          align_8bytes: true 0x266.1-0x266.2 (0.1)
+0x00260|                  60                           |      `         |          align_2bytes: true 0x266.2-0x266.3 (0.1)
+0x00260|                  60                           |      `         |          align_1bytes: false 0x266.3-0x266.4 (0.1)
+0x00260|                  60                           |      `         |          mem_preload: false 0x266.4-0x266.5 (0.1)
+0x00260|                  60                           |      `         |          mem_locked: false 0x266.5-0x266.6 (0.1)
+0x00260|                  60                           |      `         |          mem_16bit: false 0x266.6-0x266.7 (0.1)
+0x00260|                  60                           |      `         |          mem_purgeable: false 0x266.7-0x267 (0.1)
+0x00260|                     c0                        |       .        |          mem_write: true 0x267-0x267.1 (0.1)
+0x00260|                     c0                        |       .        |          mem_read: true 0x267.1-0x267.2 (0.1)
+0x00260|                     c0                        |       .        |          mem_execute: false 0x267.2-0x267.3 (0.1)
+0x00260|                     c0                        |       .        |          mem_shared: false 0x267.3-0x267.4 (0.1)
+0x00260|                     c0                        |       .        |          mem_not_paged: false 0x267.4-0x267.5 (0.1)
+0x00260|                     c0                        |       .        |          mem_not_cached: false 0x267.5-0x267.6 (0.1)
+0x00260|                     c0                        |       .        |          mem_discardable: false 0x267.6-0x267.7 (0.1)
+0x00260|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x267.7-0x268 (0.1)
+       |                                               |                |      [6]{}: section 0x268-0x290 (40)
+0x00260|                        2e 69 64 61 74 61 00 00|        .idata..|        name: ".idata" 0x268-0x270 (8)
+0x00270|30 0e 00 00                                    |0...            |        virtual_size: 3632 0x270-0x274 (4)
+0x00270|            00 50 02 00                        |    .P..        |        virtual_address: 0x25000 0x274-0x278 (4)
+0x00270|                        00 10 00 00            |        ....    |        size_of_raw_data: 4096 0x278-0x27c (4)
+0x00270|                                    00 f8 01 00|            ....|        pointer_to_raw_data: 0x1f800 0x27c-0x280 (4)
+0x00280|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x280-0x284 (4)
+0x00280|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x284-0x288 (4)
+0x00280|                        00 00                  |        ..      |        number_of_relocations: 0 0x288-0x28a (2)
+0x00280|                              00 00            |          ..    |        number_of_line_numbers: 0 0x28a-0x28c (2)
+       |                                               |                |        characteristics{}: 0x28c-0x290 (4)
+0x00280|                                    40         |            @   |          cnt_uninitialized_data: false 0x28c-0x28c.1 (0.1)
+0x00280|                                    40         |            @   |          cnt_initialized_data: true 0x28c.1-0x28c.2 (0.1)
+0x00280|                                    40         |            @   |          cnt_code: false 0x28c.2-0x28c.3 (0.1)
+0x00280|                                    40         |            @   |          reserved: false 0x28c.3-0x28c.4 (0.1)
+0x00280|                                    40         |            @   |          type_no_pad: false 0x28c.4-0x28c.5 (0.1)
+0x00280|                                    40         |            @   |          reserved0: false 0x28c.5-0x28c.6 (0.1)
+0x00280|                                    40         |            @   |          reserved1: false 0x28c.6-0x28c.7 (0.1)
+0x00280|                                    40         |            @   |          reserved2: false 0x28c.7-0x28d (0.1)
+0x00280|                                       00      |             .  |          gprel: false 0x28d-0x28d.1 (0.1)
+0x00280|                                       00      |             .  |          unknown0: false 0x28d.1-0x28d.2 (0.1)
+0x00280|                                       00      |             .  |          unknown1: false 0x28d.2-0x28d.3 (0.1)
+0x00280|                                       00      |             .  |          lnk_comdat: false 0x28d.3-0x28d.4 (0.1)
+0x00280|                                       00      |             .  |          lnk_remove: false 0x28d.4-0x28d.5 (0.1)
+0x00280|                                       00      |             .  |          reserved3: false 0x28d.5-0x28d.6 (0.1)
+0x00280|                                       00      |             .  |          lnk_info: false 0x28d.6-0x28d.7 (0.1)
+0x00280|                                       00      |             .  |          lnk_other: false 0x28d.7-0x28e (0.1)
+0x00280|                                          30   |              0 |          align_128bytes: false 0x28e-0x28e.1 (0.1)
+0x00280|                                          30   |              0 |          align_8bytes: false 0x28e.1-0x28e.2 (0.1)
+0x00280|                                          30   |              0 |          align_2bytes: true 0x28e.2-0x28e.3 (0.1)
+0x00280|                                          30   |              0 |          align_1bytes: true 0x28e.3-0x28e.4 (0.1)
+0x00280|                                          30   |              0 |          mem_preload: false 0x28e.4-0x28e.5 (0.1)
+0x00280|                                          30   |              0 |          mem_locked: false 0x28e.5-0x28e.6 (0.1)
+0x00280|                                          30   |              0 |          mem_16bit: false 0x28e.6-0x28e.7 (0.1)
+0x00280|                                          30   |              0 |          mem_purgeable: false 0x28e.7-0x28f (0.1)
+0x00280|                                             c0|               .|          mem_write: true 0x28f-0x28f.1 (0.1)
+0x00280|                                             c0|               .|          mem_read: true 0x28f.1-0x28f.2 (0.1)
+0x00280|                                             c0|               .|          mem_execute: false 0x28f.2-0x28f.3 (0.1)
+0x00280|                                             c0|               .|          mem_shared: false 0x28f.3-0x28f.4 (0.1)
+0x00280|                                             c0|               .|          mem_not_paged: false 0x28f.4-0x28f.5 (0.1)
+0x00280|                                             c0|               .|          mem_not_cached: false 0x28f.5-0x28f.6 (0.1)
+0x00280|                                             c0|               .|          mem_discardable: false 0x28f.6-0x28f.7 (0.1)
+0x00280|                                             c0|               .|          lnk_nreloc_ovfl: false 0x28f.7-0x290 (0.1)
+       |                                               |                |      [7]{}: section 0x290-0x2b8 (40)
+0x00290|2e 72 73 72 63 00 00 00                        |.rsrc...        |        name: ".rsrc" 0x290-0x298 (8)
+0x00290|                        e8 04 00 00            |        ....    |        virtual_size: 1256 0x298-0x29c (4)
+0x00290|                                    00 60 02 00|            .`..|        virtual_address: 0x26000 0x29c-0x2a0 (4)
+0x002a0|00 06 00 00                                    |....            |        size_of_raw_data: 1536 0x2a0-0x2a4 (4)
+0x002a0|            00 08 02 00                        |    ....        |        pointer_to_raw_data: 0x20800 0x2a4-0x2a8 (4)
+0x002a0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x2a8-0x2ac (4)
+0x002a0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x2ac-0x2b0 (4)
+0x002b0|00 00                                          |..              |        number_of_relocations: 0 0x2b0-0x2b2 (2)
+0x002b0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x2b2-0x2b4 (2)
+       |                                               |                |        characteristics{}: 0x2b4-0x2b8 (4)
+0x002b0|            40                                 |    @           |          cnt_uninitialized_data: false 0x2b4-0x2b4.1 (0.1)
+0x002b0|            40                                 |    @           |          cnt_initialized_data: true 0x2b4.1-0x2b4.2 (0.1)
+0x002b0|            40                                 |    @           |          cnt_code: false 0x2b4.2-0x2b4.3 (0.1)
+0x002b0|            40                                 |    @           |          reserved: false 0x2b4.3-0x2b4.4 (0.1)
+0x002b0|            40                                 |    @           |          type_no_pad: false 0x2b4.4-0x2b4.5 (0.1)
+0x002b0|            40                                 |    @           |          reserved0: false 0x2b4.5-0x2b4.6 (0.1)
+0x002b0|            40                                 |    @           |          reserved1: false 0x2b4.6-0x2b4.7 (0.1)
+0x002b0|            40                                 |    @           |          reserved2: false 0x2b4.7-0x2b5 (0.1)
+0x002b0|               00                              |     .          |          gprel: false 0x2b5-0x2b5.1 (0.1)
+0x002b0|               00                              |     .          |          unknown0: false 0x2b5.1-0x2b5.2 (0.1)
+0x002b0|               00                              |     .          |          unknown1: false 0x2b5.2-0x2b5.3 (0.1)
+0x002b0|               00                              |     .          |          lnk_comdat: false 0x2b5.3-0x2b5.4 (0.1)
+0x002b0|               00                              |     .          |          lnk_remove: false 0x2b5.4-0x2b5.5 (0.1)
+0x002b0|               00                              |     .          |          reserved3: false 0x2b5.5-0x2b5.6 (0.1)
+0x002b0|               00                              |     .          |          lnk_info: false 0x2b5.6-0x2b5.7 (0.1)
+0x002b0|               00                              |     .          |          lnk_other: false 0x2b5.7-0x2b6 (0.1)
+0x002b0|                  30                           |      0         |          align_128bytes: false 0x2b6-0x2b6.1 (0.1)
+0x002b0|                  30                           |      0         |          align_8bytes: false 0x2b6.1-0x2b6.2 (0.1)
+0x002b0|                  30                           |      0         |          align_2bytes: true 0x2b6.2-0x2b6.3 (0.1)
+0x002b0|                  30                           |      0         |          align_1bytes: true 0x2b6.3-0x2b6.4 (0.1)
+0x002b0|                  30                           |      0         |          mem_preload: false 0x2b6.4-0x2b6.5 (0.1)
+0x002b0|                  30                           |      0         |          mem_locked: false 0x2b6.5-0x2b6.6 (0.1)
+0x002b0|                  30                           |      0         |          mem_16bit: false 0x2b6.6-0x2b6.7 (0.1)
+0x002b0|                  30                           |      0         |          mem_purgeable: false 0x2b6.7-0x2b7 (0.1)
+0x002b0|                     c0                        |       .        |          mem_write: true 0x2b7-0x2b7.1 (0.1)
+0x002b0|                     c0                        |       .        |          mem_read: true 0x2b7.1-0x2b7.2 (0.1)
+0x002b0|                     c0                        |       .        |          mem_execute: false 0x2b7.2-0x2b7.3 (0.1)
+0x002b0|                     c0                        |       .        |          mem_shared: false 0x2b7.3-0x2b7.4 (0.1)
+0x002b0|                     c0                        |       .        |          mem_not_paged: false 0x2b7.4-0x2b7.5 (0.1)
+0x002b0|                     c0                        |       .        |          mem_not_cached: false 0x2b7.5-0x2b7.6 (0.1)
+0x002b0|                     c0                        |       .        |          mem_discardable: false 0x2b7.6-0x2b7.7 (0.1)
+0x002b0|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x2b7.7-0x2b8 (0.1)
+       |                                               |                |      [8]{}: section 0x2b8-0x2e0 (40)
+0x002b0|                        2f 31 34 00 00 00 00 00|        /14.....|        name: ".gnu_debuglink" ("/14") 0x2b8-0x2c0 (8)
+0x002c0|10 00 00 00                                    |....            |        virtual_size: 16 0x2c0-0x2c4 (4)
+0x002c0|            00 70 02 00                        |    .p..        |        virtual_address: 0x27000 0x2c4-0x2c8 (4)
+0x002c0|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x2c8-0x2cc (4)
+0x002c0|                                    00 0e 02 00|            ....|        pointer_to_raw_data: 0x20e00 0x2cc-0x2d0 (4)
+0x002d0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x2d0-0x2d4 (4)
+0x002d0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x2d4-0x2d8 (4)
+0x002d0|                        00 00                  |        ..      |        number_of_relocations: 0 0x2d8-0x2da (2)
+0x002d0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x2da-0x2dc (2)
+       |                                               |                |        characteristics{}: 0x2dc-0x2e0 (4)
+0x002d0|                                    40         |            @   |          cnt_uninitialized_data: false 0x2dc-0x2dc.1 (0.1)
+0x002d0|                                    40         |            @   |          cnt_initialized_data: true 0x2dc.1-0x2dc.2 (0.1)
+0x002d0|                                    40         |            @   |          cnt_code: false 0x2dc.2-0x2dc.3 (0.1)
+0x002d0|                                    40         |            @   |          reserved: false 0x2dc.3-0x2dc.4 (0.1)
+0x002d0|                                    40         |            @   |          type_no_pad: false 0x2dc.4-0x2dc.5 (0.1)
+0x002d0|                                    40         |            @   |          reserved0: false 0x2dc.5-0x2dc.6 (0.1)
+0x002d0|                                    40         |            @   |          reserved1: false 0x2dc.6-0x2dc.7 (0.1)
+0x002d0|                                    40         |            @   |          reserved2: false 0x2dc.7-0x2dd (0.1)
+0x002d0|                                       00      |             .  |          gprel: false 0x2dd-0x2dd.1 (0.1)
+0x002d0|                                       00      |             .  |          unknown0: false 0x2dd.1-0x2dd.2 (0.1)
+0x002d0|                                       00      |             .  |          unknown1: false 0x2dd.2-0x2dd.3 (0.1)
+0x002d0|                                       00      |             .  |          lnk_comdat: false 0x2dd.3-0x2dd.4 (0.1)
+0x002d0|                                       00      |             .  |          lnk_remove: false 0x2dd.4-0x2dd.5 (0.1)
+0x002d0|                                       00      |             .  |          reserved3: false 0x2dd.5-0x2dd.6 (0.1)
+0x002d0|                                       00      |             .  |          lnk_info: false 0x2dd.6-0x2dd.7 (0.1)
+0x002d0|                                       00      |             .  |          lnk_other: false 0x2dd.7-0x2de (0.1)
+0x002d0|                                          30   |              0 |          align_128bytes: false 0x2de-0x2de.1 (0.1)
+0x002d0|                                          30   |              0 |          align_8bytes: false 0x2de.1-0x2de.2 (0.1)
+0x002d0|                                          30   |              0 |          align_2bytes: true 0x2de.2-0x2de.3 (0.1)
+0x002d0|                                          30   |              0 |          align_1bytes: true 0x2de.3-0x2de.4 (0.1)
+0x002d0|                                          30   |              0 |          mem_preload: false 0x2de.4-0x2de.5 (0.1)
+0x002d0|                                          30   |              0 |          mem_locked: false 0x2de.5-0x2de.6 (0.1)
+0x002d0|                                          30   |              0 |          mem_16bit: false 0x2de.6-0x2de.7 (0.1)
+0x002d0|                                          30   |              0 |          mem_purgeable: false 0x2de.7-0x2df (0.1)
+0x002d0|                                             42|               B|          mem_write: false 0x2df-0x2df.1 (0.1)
+0x002d0|                                             42|               B|          mem_read: true 0x2df.1-0x2df.2 (0.1)
+0x002d0|                                             42|               B|          mem_execute: false 0x2df.2-0x2df.3 (0.1)
+0x002d0|                                             42|               B|          mem_shared: false 0x2df.3-0x2df.4 (0.1)
+0x002d0|                                             42|               B|          mem_not_paged: false 0x2df.4-0x2df.5 (0.1)
+0x002d0|                                             42|               B|          mem_not_cached: false 0x2df.5-0x2df.6 (0.1)
+0x002d0|                                             42|               B|          mem_discardable: true 0x2df.6-0x2df.7 (0.1)
+0x002d0|                                             42|               B|          lnk_nreloc_ovfl: false 0x2df.7-0x2e0 (0.1)
+       |                                               |                |    symbol_table[0:0]: 0x2e0-0x2e0 (0)
+       |                                               |                |    string_table{}: 0x21000-0x2101d (29)
+0x21000|1d 00 00 00                                    |....            |      size: 29 0x21000-0x21004 (4)
+       |                                               |                |      entries[0:2]: 0x21004-0x2101d (25)
+0x21000|            2e 65 68 5f 66 72 61 6d 65 00      |    .eh_frame.  |        [0]: ".eh_frame" entry 0x21004-0x2100e (10)
+0x21000|                                          2e 67|              .g|        [1]: ".gnu_debuglink" entry 0x2100e-0x2101d (15)
+0x21010|6e 75 5f 64 65 62 75 67 6c 69 6e 6b 00|        |nu_debuglink.|  |
+0x002e0|00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................|  gap0: raw bits 0x2e0-0x21000 (134432)
+*      |until 0x20fff.7 (134432)                       |                |

format/pe/testdata/pe-mingw32-strip.exe.fqtest

@@ -0,0 +1,481 @@
+$ fq dv pe-mingw32-strip.exe
+        |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: pe-mingw32-strip.exe (pe) 0x0-0x11b60e (1160718)
+        |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  ms_dos_stub{}: (msdos_stub) 0x0-0x80 (128)
+0x000000|4d 5a                                          |MZ              |    e_magic: 0x5a4d (valid) 0x0-0x2 (2)
+0x000000|      90 00                                    |  ..            |    e_cblp: 144 (Bytes on last page of file) 0x2-0x4 (2)
+0x000000|            03 00                              |    ..          |    e_cp: 3 (Pages in file) 0x4-0x6 (2)
+0x000000|                  00 00                        |      ..        |    e_crlc: 0 (Relocations) 0x6-0x8 (2)
+0x000000|                        04 00                  |        ..      |    e_cparhdr: 4 (Size of header in paragraphs) 0x8-0xa (2)
+0x000000|                              00 00            |          ..    |    e_minalloc: 0 (Minimum extra paragraphs needed) 0xa-0xc (2)
+0x000000|                                    ff ff      |            ..  |    e_maxalloc: 65535 (Maximum extra paragraphs needed) 0xc-0xe (2)
+0x000000|                                          00 00|              ..|    e_ss: 0 (Initial (relative) SS value) 0xe-0x10 (2)
+0x000010|b8 00                                          |..              |    e_sp: 184 (Initial SP value) 0x10-0x12 (2)
+0x000010|      00 00                                    |  ..            |    e_csum: 0 (Checksum) 0x12-0x14 (2)
+0x000010|            00 00                              |    ..          |    e_ip: 0 (Initial IP value) 0x14-0x16 (2)
+0x000010|                  00 00                        |      ..        |    e_cs: 0 (Initial (relative) CS value) 0x16-0x18 (2)
+0x000010|                        40 00                  |        @.      |    e_lfarlc: 64 (File address of relocation table) 0x18-0x1a (2)
+0x000010|                              00 00            |          ..    |    e_ovno: 0 (Overlay number) 0x1a-0x1c (2)
+0x000010|                                    00 00 00 00|            ....|    e_res: raw bits (Reserved words) 0x1c-0x24 (8)
+0x000020|00 00 00 00                                    |....            |
+0x000020|            00 00                              |    ..          |    e_oemid: 0 (OEM identifier (for e_oeminfo)) 0x24-0x26 (2)
+0x000020|                  00 00                        |      ..        |    e_oeminfo: 0 (OEM information; e_oemid specific) 0x26-0x28 (2)
+0x000020|                        00 00 00 00 00 00 00 00|        ........|    e_res2: raw bits (Reserved words) 0x28-0x3c (20)
+0x000030|00 00 00 00 00 00 00 00 00 00 00 00            |............    |
+0x000030|                                    80 00 00 00|            ....|    e_lfanew: 128 (File address of new exe header) 0x3c-0x40 (4)
+0x000040|0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68|........!..L.!Th|    stub: raw bits (Sub program) 0x40-0x80 (64)
+*       |until 0x7f.7 (64)                              |                |
+        |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|  coff{}: (coff) 0x80-0x11b60e (1160590)
+0x000080|50 45 00 00                                    |PE..            |    signature: raw bits (valid) 0x80-0x84 (4)
+0x000080|            4c 01                              |    L.          |    machine: "i386" (0x14c) 0x84-0x86 (2)
+0x000080|                  08 00                        |      ..        |    number_of_sections: 8 0x86-0x88 (2)
+0x000080|                        00 00 00 00            |        ....    |    time_date_stamp: 0 (1970-01-01T00:00:00Z) 0x88-0x8c (4)
+0x000080|                                    00 b6 11 00|            ....|    pointer_to_symbol_table: 0x11b600 0x8c-0x90 (4)
+0x000090|00 00 00 00                                    |....            |    number_of_symbols: 0 0x90-0x94 (4)
+0x000090|            e0 00                              |    ..          |    size_of_optional_header: 224 0x94-0x96 (2)
+        |                                               |                |    characteristics{}: 0x96-0x98 (2)
+0x000090|                  0f                           |      .         |      bytes_reversed_lo: false 0x96-0x96.1 (0.1)
+0x000090|                  0f                           |      .         |      reserved: false 0x96.1-0x96.2 (0.1)
+0x000090|                  0f                           |      .         |      large_address_aware: false 0x96.2-0x96.3 (0.1)
+0x000090|                  0f                           |      .         |      aggressive_ws_trim: false 0x96.3-0x96.4 (0.1)
+0x000090|                  0f                           |      .         |      local_syms_stripped: true 0x96.4-0x96.5 (0.1)
+0x000090|                  0f                           |      .         |      line_nums_stripped: true 0x96.5-0x96.6 (0.1)
+0x000090|                  0f                           |      .         |      executable_image: true 0x96.6-0x96.7 (0.1)
+0x000090|                  0f                           |      .         |      relocs_stripped: true 0x96.7-0x97 (0.1)
+0x000090|                     03                        |       .        |      bytes_reversed_hi: false 0x97-0x97.1 (0.1)
+0x000090|                     03                        |       .        |      up_system_only: false 0x97.1-0x97.2 (0.1)
+0x000090|                     03                        |       .        |      dll: false 0x97.2-0x97.3 (0.1)
+0x000090|                     03                        |       .        |      system: false 0x97.3-0x97.4 (0.1)
+0x000090|                     03                        |       .        |      net_run_from_swap: false 0x97.4-0x97.5 (0.1)
+0x000090|                     03                        |       .        |      removable_run_from_swap: false 0x97.5-0x97.6 (0.1)
+0x000090|                     03                        |       .        |      debug_stripped: true 0x97.6-0x97.7 (0.1)
+0x000090|                     03                        |       .        |      32bit_machine: true 0x97.7-0x98 (0.1)
+        |                                               |                |    optional_header{}: 0x98-0x178 (224)
+0x000090|                        0b 01                  |        ..      |      format: "pe32" (0x10b) 0x98-0x9a (2)
+0x000090|                              02               |          .     |      major_linker_version: 2 0x9a-0x9b (1)
+0x000090|                                 1c            |           .    |      minor_linker_version: 28 0x9b-0x9c (1)
+0x000090|                                    00 b6 0c 00|            ....|      size_of_code: 833024 0x9c-0xa0 (4)
+0x0000a0|00 b2 11 00                                    |....            |      size_of_initialized_data: 1159680 0xa0-0xa4 (4)
+0x0000a0|            00 58 00 00                        |    .X..        |      size_of_uninitialized_data: 22528 0xa4-0xa8 (4)
+0x0000a0|                        e0 12 00 00            |        ....    |      address_of_entry_point: 0x12e0 0xa8-0xac (4)
+0x0000a0|                                    00 10 00 00|            ....|      base_of_code: 0x1000 0xac-0xb0 (4)
+0x0000b0|00 d0 0c 00                                    |....            |      base_of_data: 0xcd000 0xb0-0xb4 (4)
+0x0000b0|            00 00 40 00                        |    ..@.        |      image_base: 0x400000 0xb4-0xb8 (4)
+0x0000b0|                        00 10 00 00            |        ....    |      section_alignment: 4096 0xb8-0xbc (4)
+0x0000b0|                                    00 02 00 00|            ....|      file_alignment: 512 0xbc-0xc0 (4)
+0x0000c0|04 00                                          |..              |      major_os_version: 4 0xc0-0xc2 (2)
+0x0000c0|      00 00                                    |  ..            |      minor_os_version: 0 0xc2-0xc4 (2)
+0x0000c0|            01 00                              |    ..          |      major_image_version: 1 0xc4-0xc6 (2)
+0x0000c0|                  00 00                        |      ..        |      minor_image_version: 0 0xc6-0xc8 (2)
+0x0000c0|                        04 00                  |        ..      |      major_subsystem_version: 4 0xc8-0xca (2)
+0x0000c0|                              00 00            |          ..    |      minor_subsystem_version: 0 0xca-0xcc (2)
+0x0000c0|                                    00 00 00 00|            ....|      win32_version: 0 0xcc-0xd0 (4)
+0x0000d0|00 70 12 00                                    |.p..            |      size_of_image: 1208320 0xd0-0xd4 (4)
+0x0000d0|            00 04 00 00                        |    ....        |      size_of_headers: 1024 0xd4-0xd8 (4)
+0x0000d0|                        95 80 12 00            |        ....    |      chunk_sum: 0x128095 0xd8-0xdc (4)
+0x0000d0|                                    03 00      |            ..  |      subsystem: "windows_cui" (3) 0xdc-0xde (2)
+        |                                               |                |      dll_characteristics{}: 0xde-0xe0 (2)
+0x0000d0|                                          00   |              . |        force_integrity: false 0xde-0xde.1 (0.1)
+0x0000d0|                                          00   |              . |        dynamic_base: false 0xde.1-0xde.2 (0.1)
+0x0000d0|                                          00   |              . |        high_entropy_va: false 0xde.2-0xde.3 (0.1)
+0x0000d0|                                          00   |              . |        reserved0: false 0xde.3-0xde.4 (0.1)
+0x0000d0|                                          00   |              . |        reserved1: false 0xde.4-0xde.5 (0.1)
+0x0000d0|                                          00   |              . |        reserved2: false 0xde.5-0xde.6 (0.1)
+0x0000d0|                                          00   |              . |        reserved3: false 0xde.6-0xde.7 (0.1)
+0x0000d0|                                          00   |              . |        reserved4: false 0xde.7-0xdf (0.1)
+0x0000d0|                                             00|               .|        terminal_server_aware: false 0xdf-0xdf.1 (0.1)
+0x0000d0|                                             00|               .|        guard_cf: false 0xdf.1-0xdf.2 (0.1)
+0x0000d0|                                             00|               .|        wdm_driver: false 0xdf.2-0xdf.3 (0.1)
+0x0000d0|                                             00|               .|        appcontainer: false 0xdf.3-0xdf.4 (0.1)
+0x0000d0|                                             00|               .|        no_bind: false 0xdf.4-0xdf.5 (0.1)
+0x0000d0|                                             00|               .|        no_seh: false 0xdf.5-0xdf.6 (0.1)
+0x0000d0|                                             00|               .|        no_isolation: false 0xdf.6-0xdf.7 (0.1)
+0x0000d0|                                             00|               .|        nx_compat: false 0xdf.7-0xe0 (0.1)
+0x0000e0|00 00 c0 00                                    |....            |      size_of_track_reserve: 12582912 0xe0-0xe4 (4)
+0x0000e0|            00 10 00 00                        |    ....        |      size_of_stack_commit: 4096 0xe4-0xe8 (4)
+0x0000e0|                        00 00 10 00            |        ....    |      size_of_heap_reserve: 1048576 0xe8-0xec (4)
+0x0000e0|                                    00 10 00 00|            ....|      size_of_heap_commit: 4096 0xec-0xf0 (4)
+0x0000f0|00 00 00 00                                    |....            |      loader_flags: 0 0xf0-0xf4 (4)
+0x0000f0|            10 00 00 00                        |    ....        |      number_of_rva_and_sizes: 16 0xf4-0xf8 (4)
+0x0000f0|                        00 00 00 00            |        ....    |      export_table_address: 0x0 0xf8-0xfc (4)
+0x0000f0|                                    00 00 00 00|            ....|      export_table_size: 0 0xfc-0x100 (4)
+0x000100|00 30 12 00                                    |.0..            |      import_table_address: 0x123000 0x100-0x104 (4)
+0x000100|            d4 10 00 00                        |    ....        |      import_table_size: 4308 0x104-0x108 (4)
+0x000100|                        00 00 00 00            |        ....    |      resource_table_address: 0x0 0x108-0x10c (4)
+0x000100|                                    00 00 00 00|            ....|      resource_table_size: 0 0x10c-0x110 (4)
+0x000110|00 00 00 00                                    |....            |      exception_table_address: 0x0 0x110-0x114 (4)
+0x000110|            00 00 00 00                        |    ....        |      exception_table_size: 0 0x114-0x118 (4)
+0x000110|                        00 00 00 00            |        ....    |      certificate_table_address: 0x0 0x118-0x11c (4)
+0x000110|                                    00 00 00 00|            ....|      certificate_table_size: 0 0x11c-0x120 (4)
+0x000120|00 00 00 00                                    |....            |      base_relocation_table_address: 0x0 0x120-0x124 (4)
+0x000120|            00 00 00 00                        |    ....        |      base_relocation_table_size: 0 0x124-0x128 (4)
+0x000120|                        00 00 00 00            |        ....    |      debug_address: 0x0 0x128-0x12c (4)
+0x000120|                                    00 00 00 00|            ....|      debug_size: 0 0x12c-0x130 (4)
+0x000130|00 00 00 00 00 00 00 00                        |........        |      architecture: 0 0x130-0x138 (8)
+0x000130|                        00 00 00 00 00 00 00 00|        ........|      global_ptr: 0x0 0x138-0x140 (8)
+0x000140|04 60 12 00                                    |.`..            |      tls_table_address: 0x126004 0x140-0x144 (4)
+0x000140|            18 00 00 00                        |    ....        |      tls_table_size: 24 0x144-0x148 (4)
+0x000140|                        00 00 00 00            |        ....    |      load_config_table_address: 0x0 0x148-0x14c (4)
+0x000140|                                    00 00 00 00|            ....|      load_config_table_size: 0 0x14c-0x150 (4)
+0x000150|00 00 00 00                                    |....            |      bound_import_address: 0x0 0x150-0x154 (4)
+0x000150|            00 00 00 00                        |    ....        |      bound_import_size: 0 0x154-0x158 (4)
+0x000150|                        24 33 12 00            |        $3..    |      iat_address: 0x123324 0x158-0x15c (4)
+0x000150|                                    98 02 00 00|            ....|      iat_size: 664 0x15c-0x160 (4)
+0x000160|00 00 00 00                                    |....            |      delay_import_descriptor_address: 0x0 0x160-0x164 (4)
+0x000160|            00 00 00 00                        |    ....        |      delay_import_descriptor_size: 0 0x164-0x168 (4)
+0x000160|                        00 00 00 00            |        ....    |      clr_runtime_header_address: 0x0 0x168-0x16c (4)
+0x000160|                                    00 00 00 00|            ....|      clr_runtime_header_size: 0 0x16c-0x170 (4)
+0x000170|00 00 00 00 00 00 00 00                        |........        |      reserved: 0 0x170-0x178 (8)
+        |                                               |                |      unknown: raw bits 0x178-0x178 (0)
+        |                                               |                |    sections[0:8]: 0x178-0x2b8 (320)
+        |                                               |                |      [0]{}: section 0x178-0x1a0 (40)
+0x000170|                        2e 74 65 78 74 00 00 00|        .text...|        name: ".text" 0x178-0x180 (8)
+0x000180|d4 b5 0c 00                                    |....            |        virtual_size: 832980 0x180-0x184 (4)
+0x000180|            00 10 00 00                        |    ....        |        virtual_address: 0x1000 0x184-0x188 (4)
+0x000180|                        00 b6 0c 00            |        ....    |        size_of_raw_data: 833024 0x188-0x18c (4)
+0x000180|                                    00 04 00 00|            ....|        pointer_to_raw_data: 0x400 0x18c-0x190 (4)
+0x000190|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x190-0x194 (4)
+0x000190|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x194-0x198 (4)
+0x000190|                        00 00                  |        ..      |        number_of_relocations: 0 0x198-0x19a (2)
+0x000190|                              00 00            |          ..    |        number_of_line_numbers: 0 0x19a-0x19c (2)
+        |                                               |                |        characteristics{}: 0x19c-0x1a0 (4)
+0x000190|                                    60         |            `   |          cnt_uninitialized_data: false 0x19c-0x19c.1 (0.1)
+0x000190|                                    60         |            `   |          cnt_initialized_data: true 0x19c.1-0x19c.2 (0.1)
+0x000190|                                    60         |            `   |          cnt_code: true 0x19c.2-0x19c.3 (0.1)
+0x000190|                                    60         |            `   |          reserved: false 0x19c.3-0x19c.4 (0.1)
+0x000190|                                    60         |            `   |          type_no_pad: false 0x19c.4-0x19c.5 (0.1)
+0x000190|                                    60         |            `   |          reserved0: false 0x19c.5-0x19c.6 (0.1)
+0x000190|                                    60         |            `   |          reserved1: false 0x19c.6-0x19c.7 (0.1)
+0x000190|                                    60         |            `   |          reserved2: false 0x19c.7-0x19d (0.1)
+0x000190|                                       00      |             .  |          gprel: false 0x19d-0x19d.1 (0.1)
+0x000190|                                       00      |             .  |          unknown0: false 0x19d.1-0x19d.2 (0.1)
+0x000190|                                       00      |             .  |          unknown1: false 0x19d.2-0x19d.3 (0.1)
+0x000190|                                       00      |             .  |          lnk_comdat: false 0x19d.3-0x19d.4 (0.1)
+0x000190|                                       00      |             .  |          lnk_remove: false 0x19d.4-0x19d.5 (0.1)
+0x000190|                                       00      |             .  |          reserved3: false 0x19d.5-0x19d.6 (0.1)
+0x000190|                                       00      |             .  |          lnk_info: false 0x19d.6-0x19d.7 (0.1)
+0x000190|                                       00      |             .  |          lnk_other: false 0x19d.7-0x19e (0.1)
+0x000190|                                          50   |              P |          align_128bytes: false 0x19e-0x19e.1 (0.1)
+0x000190|                                          50   |              P |          align_8bytes: true 0x19e.1-0x19e.2 (0.1)
+0x000190|                                          50   |              P |          align_2bytes: false 0x19e.2-0x19e.3 (0.1)
+0x000190|                                          50   |              P |          align_1bytes: true 0x19e.3-0x19e.4 (0.1)
+0x000190|                                          50   |              P |          mem_preload: false 0x19e.4-0x19e.5 (0.1)
+0x000190|                                          50   |              P |          mem_locked: false 0x19e.5-0x19e.6 (0.1)
+0x000190|                                          50   |              P |          mem_16bit: false 0x19e.6-0x19e.7 (0.1)
+0x000190|                                          50   |              P |          mem_purgeable: false 0x19e.7-0x19f (0.1)
+0x000190|                                             60|               `|          mem_write: false 0x19f-0x19f.1 (0.1)
+0x000190|                                             60|               `|          mem_read: true 0x19f.1-0x19f.2 (0.1)
+0x000190|                                             60|               `|          mem_execute: true 0x19f.2-0x19f.3 (0.1)
+0x000190|                                             60|               `|          mem_shared: false 0x19f.3-0x19f.4 (0.1)
+0x000190|                                             60|               `|          mem_not_paged: false 0x19f.4-0x19f.5 (0.1)
+0x000190|                                             60|               `|          mem_not_cached: false 0x19f.5-0x19f.6 (0.1)
+0x000190|                                             60|               `|          mem_discardable: false 0x19f.6-0x19f.7 (0.1)
+0x000190|                                             60|               `|          lnk_nreloc_ovfl: false 0x19f.7-0x1a0 (0.1)
+        |                                               |                |      [1]{}: section 0x1a0-0x1c8 (40)
+0x0001a0|2e 64 61 74 61 00 00 00                        |.data...        |        name: ".data" 0x1a0-0x1a8 (8)
+0x0001a0|                        e8 1e 00 00            |        ....    |        virtual_size: 7912 0x1a8-0x1ac (4)
+0x0001a0|                                    00 d0 0c 00|            ....|        virtual_address: 0xcd000 0x1ac-0x1b0 (4)
+0x0001b0|00 20 00 00                                    |. ..            |        size_of_raw_data: 8192 0x1b0-0x1b4 (4)
+0x0001b0|            00 ba 0c 00                        |    ....        |        pointer_to_raw_data: 0xcba00 0x1b4-0x1b8 (4)
+0x0001b0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x1b8-0x1bc (4)
+0x0001b0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x1bc-0x1c0 (4)
+0x0001c0|00 00                                          |..              |        number_of_relocations: 0 0x1c0-0x1c2 (2)
+0x0001c0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x1c2-0x1c4 (2)
+        |                                               |                |        characteristics{}: 0x1c4-0x1c8 (4)
+0x0001c0|            40                                 |    @           |          cnt_uninitialized_data: false 0x1c4-0x1c4.1 (0.1)
+0x0001c0|            40                                 |    @           |          cnt_initialized_data: true 0x1c4.1-0x1c4.2 (0.1)
+0x0001c0|            40                                 |    @           |          cnt_code: false 0x1c4.2-0x1c4.3 (0.1)
+0x0001c0|            40                                 |    @           |          reserved: false 0x1c4.3-0x1c4.4 (0.1)
+0x0001c0|            40                                 |    @           |          type_no_pad: false 0x1c4.4-0x1c4.5 (0.1)
+0x0001c0|            40                                 |    @           |          reserved0: false 0x1c4.5-0x1c4.6 (0.1)
+0x0001c0|            40                                 |    @           |          reserved1: false 0x1c4.6-0x1c4.7 (0.1)
+0x0001c0|            40                                 |    @           |          reserved2: false 0x1c4.7-0x1c5 (0.1)
+0x0001c0|               00                              |     .          |          gprel: false 0x1c5-0x1c5.1 (0.1)
+0x0001c0|               00                              |     .          |          unknown0: false 0x1c5.1-0x1c5.2 (0.1)
+0x0001c0|               00                              |     .          |          unknown1: false 0x1c5.2-0x1c5.3 (0.1)
+0x0001c0|               00                              |     .          |          lnk_comdat: false 0x1c5.3-0x1c5.4 (0.1)
+0x0001c0|               00                              |     .          |          lnk_remove: false 0x1c5.4-0x1c5.5 (0.1)
+0x0001c0|               00                              |     .          |          reserved3: false 0x1c5.5-0x1c5.6 (0.1)
+0x0001c0|               00                              |     .          |          lnk_info: false 0x1c5.6-0x1c5.7 (0.1)
+0x0001c0|               00                              |     .          |          lnk_other: false 0x1c5.7-0x1c6 (0.1)
+0x0001c0|                  60                           |      `         |          align_128bytes: false 0x1c6-0x1c6.1 (0.1)
+0x0001c0|                  60                           |      `         |          align_8bytes: true 0x1c6.1-0x1c6.2 (0.1)
+0x0001c0|                  60                           |      `         |          align_2bytes: true 0x1c6.2-0x1c6.3 (0.1)
+0x0001c0|                  60                           |      `         |          align_1bytes: false 0x1c6.3-0x1c6.4 (0.1)
+0x0001c0|                  60                           |      `         |          mem_preload: false 0x1c6.4-0x1c6.5 (0.1)
+0x0001c0|                  60                           |      `         |          mem_locked: false 0x1c6.5-0x1c6.6 (0.1)
+0x0001c0|                  60                           |      `         |          mem_16bit: false 0x1c6.6-0x1c6.7 (0.1)
+0x0001c0|                  60                           |      `         |          mem_purgeable: false 0x1c6.7-0x1c7 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_write: true 0x1c7-0x1c7.1 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_read: true 0x1c7.1-0x1c7.2 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_execute: false 0x1c7.2-0x1c7.3 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_shared: false 0x1c7.3-0x1c7.4 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_not_paged: false 0x1c7.4-0x1c7.5 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_not_cached: false 0x1c7.5-0x1c7.6 (0.1)
+0x0001c0|                     c0                        |       .        |          mem_discardable: false 0x1c7.6-0x1c7.7 (0.1)
+0x0001c0|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x1c7.7-0x1c8 (0.1)
+        |                                               |                |      [2]{}: section 0x1c8-0x1f0 (40)
+0x0001c0|                        2e 72 64 61 74 61 00 00|        .rdata..|        name: ".rdata" 0x1c8-0x1d0 (8)
+0x0001d0|a8 21 03 00                                    |.!..            |        virtual_size: 205224 0x1d0-0x1d4 (4)
+0x0001d0|            00 f0 0c 00                        |    ....        |        virtual_address: 0xcf000 0x1d4-0x1d8 (4)
+0x0001d0|                        00 22 03 00            |        ."..    |        size_of_raw_data: 205312 0x1d8-0x1dc (4)
+0x0001d0|                                    00 da 0c 00|            ....|        pointer_to_raw_data: 0xcda00 0x1dc-0x1e0 (4)
+0x0001e0|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x1e0-0x1e4 (4)
+0x0001e0|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x1e4-0x1e8 (4)
+0x0001e0|                        00 00                  |        ..      |        number_of_relocations: 0 0x1e8-0x1ea (2)
+0x0001e0|                              00 00            |          ..    |        number_of_line_numbers: 0 0x1ea-0x1ec (2)
+        |                                               |                |        characteristics{}: 0x1ec-0x1f0 (4)
+0x0001e0|                                    40         |            @   |          cnt_uninitialized_data: false 0x1ec-0x1ec.1 (0.1)
+0x0001e0|                                    40         |            @   |          cnt_initialized_data: true 0x1ec.1-0x1ec.2 (0.1)
+0x0001e0|                                    40         |            @   |          cnt_code: false 0x1ec.2-0x1ec.3 (0.1)
+0x0001e0|                                    40         |            @   |          reserved: false 0x1ec.3-0x1ec.4 (0.1)
+0x0001e0|                                    40         |            @   |          type_no_pad: false 0x1ec.4-0x1ec.5 (0.1)
+0x0001e0|                                    40         |            @   |          reserved0: false 0x1ec.5-0x1ec.6 (0.1)
+0x0001e0|                                    40         |            @   |          reserved1: false 0x1ec.6-0x1ec.7 (0.1)
+0x0001e0|                                    40         |            @   |          reserved2: false 0x1ec.7-0x1ed (0.1)
+0x0001e0|                                       00      |             .  |          gprel: false 0x1ed-0x1ed.1 (0.1)
+0x0001e0|                                       00      |             .  |          unknown0: false 0x1ed.1-0x1ed.2 (0.1)
+0x0001e0|                                       00      |             .  |          unknown1: false 0x1ed.2-0x1ed.3 (0.1)
+0x0001e0|                                       00      |             .  |          lnk_comdat: false 0x1ed.3-0x1ed.4 (0.1)
+0x0001e0|                                       00      |             .  |          lnk_remove: false 0x1ed.4-0x1ed.5 (0.1)
+0x0001e0|                                       00      |             .  |          reserved3: false 0x1ed.5-0x1ed.6 (0.1)
+0x0001e0|                                       00      |             .  |          lnk_info: false 0x1ed.6-0x1ed.7 (0.1)
+0x0001e0|                                       00      |             .  |          lnk_other: false 0x1ed.7-0x1ee (0.1)
+0x0001e0|                                          60   |              ` |          align_128bytes: false 0x1ee-0x1ee.1 (0.1)
+0x0001e0|                                          60   |              ` |          align_8bytes: true 0x1ee.1-0x1ee.2 (0.1)
+0x0001e0|                                          60   |              ` |          align_2bytes: true 0x1ee.2-0x1ee.3 (0.1)
+0x0001e0|                                          60   |              ` |          align_1bytes: false 0x1ee.3-0x1ee.4 (0.1)
+0x0001e0|                                          60   |              ` |          mem_preload: false 0x1ee.4-0x1ee.5 (0.1)
+0x0001e0|                                          60   |              ` |          mem_locked: false 0x1ee.5-0x1ee.6 (0.1)
+0x0001e0|                                          60   |              ` |          mem_16bit: false 0x1ee.6-0x1ee.7 (0.1)
+0x0001e0|                                          60   |              ` |          mem_purgeable: false 0x1ee.7-0x1ef (0.1)
+0x0001e0|                                             40|               @|          mem_write: false 0x1ef-0x1ef.1 (0.1)
+0x0001e0|                                             40|               @|          mem_read: true 0x1ef.1-0x1ef.2 (0.1)
+0x0001e0|                                             40|               @|          mem_execute: false 0x1ef.2-0x1ef.3 (0.1)
+0x0001e0|                                             40|               @|          mem_shared: false 0x1ef.3-0x1ef.4 (0.1)
+0x0001e0|                                             40|               @|          mem_not_paged: false 0x1ef.4-0x1ef.5 (0.1)
+0x0001e0|                                             40|               @|          mem_not_cached: false 0x1ef.5-0x1ef.6 (0.1)
+0x0001e0|                                             40|               @|          mem_discardable: false 0x1ef.6-0x1ef.7 (0.1)
+0x0001e0|                                             40|               @|          lnk_nreloc_ovfl: false 0x1ef.7-0x1f0 (0.1)
+        |                                               |                |      [3]{}: section 0x1f0-0x218 (40)
+0x0001f0|2f 34 00 00 00 00 00 00                        |/4......        |        name: ".eh_frame" ("/4") 0x1f0-0x1f8 (8)
+0x0001f0|                        64 a2 01 00            |        d...    |        virtual_size: 107108 0x1f8-0x1fc (4)
+0x0001f0|                                    00 20 10 00|            . ..|        virtual_address: 0x102000 0x1fc-0x200 (4)
+0x000200|00 a4 01 00                                    |....            |        size_of_raw_data: 107520 0x200-0x204 (4)
+0x000200|            00 fc 0f 00                        |    ....        |        pointer_to_raw_data: 0xffc00 0x204-0x208 (4)
+0x000200|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x208-0x20c (4)
+0x000200|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x20c-0x210 (4)
+0x000210|00 00                                          |..              |        number_of_relocations: 0 0x210-0x212 (2)
+0x000210|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x212-0x214 (2)
+        |                                               |                |        characteristics{}: 0x214-0x218 (4)
+0x000210|            40                                 |    @           |          cnt_uninitialized_data: false 0x214-0x214.1 (0.1)
+0x000210|            40                                 |    @           |          cnt_initialized_data: true 0x214.1-0x214.2 (0.1)
+0x000210|            40                                 |    @           |          cnt_code: false 0x214.2-0x214.3 (0.1)
+0x000210|            40                                 |    @           |          reserved: false 0x214.3-0x214.4 (0.1)
+0x000210|            40                                 |    @           |          type_no_pad: false 0x214.4-0x214.5 (0.1)
+0x000210|            40                                 |    @           |          reserved0: false 0x214.5-0x214.6 (0.1)
+0x000210|            40                                 |    @           |          reserved1: false 0x214.6-0x214.7 (0.1)
+0x000210|            40                                 |    @           |          reserved2: false 0x214.7-0x215 (0.1)
+0x000210|               00                              |     .          |          gprel: false 0x215-0x215.1 (0.1)
+0x000210|               00                              |     .          |          unknown0: false 0x215.1-0x215.2 (0.1)
+0x000210|               00                              |     .          |          unknown1: false 0x215.2-0x215.3 (0.1)
+0x000210|               00                              |     .          |          lnk_comdat: false 0x215.3-0x215.4 (0.1)
+0x000210|               00                              |     .          |          lnk_remove: false 0x215.4-0x215.5 (0.1)
+0x000210|               00                              |     .          |          reserved3: false 0x215.5-0x215.6 (0.1)
+0x000210|               00                              |     .          |          lnk_info: false 0x215.6-0x215.7 (0.1)
+0x000210|               00                              |     .          |          lnk_other: false 0x215.7-0x216 (0.1)
+0x000210|                  30                           |      0         |          align_128bytes: false 0x216-0x216.1 (0.1)
+0x000210|                  30                           |      0         |          align_8bytes: false 0x216.1-0x216.2 (0.1)
+0x000210|                  30                           |      0         |          align_2bytes: true 0x216.2-0x216.3 (0.1)
+0x000210|                  30                           |      0         |          align_1bytes: true 0x216.3-0x216.4 (0.1)
+0x000210|                  30                           |      0         |          mem_preload: false 0x216.4-0x216.5 (0.1)
+0x000210|                  30                           |      0         |          mem_locked: false 0x216.5-0x216.6 (0.1)
+0x000210|                  30                           |      0         |          mem_16bit: false 0x216.6-0x216.7 (0.1)
+0x000210|                  30                           |      0         |          mem_purgeable: false 0x216.7-0x217 (0.1)
+0x000210|                     40                        |       @        |          mem_write: false 0x217-0x217.1 (0.1)
+0x000210|                     40                        |       @        |          mem_read: true 0x217.1-0x217.2 (0.1)
+0x000210|                     40                        |       @        |          mem_execute: false 0x217.2-0x217.3 (0.1)
+0x000210|                     40                        |       @        |          mem_shared: false 0x217.3-0x217.4 (0.1)
+0x000210|                     40                        |       @        |          mem_not_paged: false 0x217.4-0x217.5 (0.1)
+0x000210|                     40                        |       @        |          mem_not_cached: false 0x217.5-0x217.6 (0.1)
+0x000210|                     40                        |       @        |          mem_discardable: false 0x217.6-0x217.7 (0.1)
+0x000210|                     40                        |       @        |          lnk_nreloc_ovfl: false 0x217.7-0x218 (0.1)
+        |                                               |                |      [4]{}: section 0x218-0x240 (40)
+0x000210|                        2e 62 73 73 00 00 00 00|        .bss....|        name: ".bss" 0x218-0x220 (8)
+0x000220|60 56 00 00                                    |`V..            |        virtual_size: 22112 0x220-0x224 (4)
+0x000220|            00 d0 11 00                        |    ....        |        virtual_address: 0x11d000 0x224-0x228 (4)
+0x000220|                        00 00 00 00            |        ....    |        size_of_raw_data: 0 0x228-0x22c (4)
+0x000220|                                    00 00 00 00|            ....|        pointer_to_raw_data: 0x0 0x22c-0x230 (4)
+0x000230|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x230-0x234 (4)
+0x000230|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x234-0x238 (4)
+0x000230|                        00 00                  |        ..      |        number_of_relocations: 0 0x238-0x23a (2)
+0x000230|                              00 00            |          ..    |        number_of_line_numbers: 0 0x23a-0x23c (2)
+        |                                               |                |        characteristics{}: 0x23c-0x240 (4)
+0x000230|                                    80         |            .   |          cnt_uninitialized_data: true 0x23c-0x23c.1 (0.1)
+0x000230|                                    80         |            .   |          cnt_initialized_data: false 0x23c.1-0x23c.2 (0.1)
+0x000230|                                    80         |            .   |          cnt_code: false 0x23c.2-0x23c.3 (0.1)
+0x000230|                                    80         |            .   |          reserved: false 0x23c.3-0x23c.4 (0.1)
+0x000230|                                    80         |            .   |          type_no_pad: false 0x23c.4-0x23c.5 (0.1)
+0x000230|                                    80         |            .   |          reserved0: false 0x23c.5-0x23c.6 (0.1)
+0x000230|                                    80         |            .   |          reserved1: false 0x23c.6-0x23c.7 (0.1)
+0x000230|                                    80         |            .   |          reserved2: false 0x23c.7-0x23d (0.1)
+0x000230|                                       00      |             .  |          gprel: false 0x23d-0x23d.1 (0.1)
+0x000230|                                       00      |             .  |          unknown0: false 0x23d.1-0x23d.2 (0.1)
+0x000230|                                       00      |             .  |          unknown1: false 0x23d.2-0x23d.3 (0.1)
+0x000230|                                       00      |             .  |          lnk_comdat: false 0x23d.3-0x23d.4 (0.1)
+0x000230|                                       00      |             .  |          lnk_remove: false 0x23d.4-0x23d.5 (0.1)
+0x000230|                                       00      |             .  |          reserved3: false 0x23d.5-0x23d.6 (0.1)
+0x000230|                                       00      |             .  |          lnk_info: false 0x23d.6-0x23d.7 (0.1)
+0x000230|                                       00      |             .  |          lnk_other: false 0x23d.7-0x23e (0.1)
+0x000230|                                          60   |              ` |          align_128bytes: false 0x23e-0x23e.1 (0.1)
+0x000230|                                          60   |              ` |          align_8bytes: true 0x23e.1-0x23e.2 (0.1)
+0x000230|                                          60   |              ` |          align_2bytes: true 0x23e.2-0x23e.3 (0.1)
+0x000230|                                          60   |              ` |          align_1bytes: false 0x23e.3-0x23e.4 (0.1)
+0x000230|                                          60   |              ` |          mem_preload: false 0x23e.4-0x23e.5 (0.1)
+0x000230|                                          60   |              ` |          mem_locked: false 0x23e.5-0x23e.6 (0.1)
+0x000230|                                          60   |              ` |          mem_16bit: false 0x23e.6-0x23e.7 (0.1)
+0x000230|                                          60   |              ` |          mem_purgeable: false 0x23e.7-0x23f (0.1)
+0x000230|                                             c0|               .|          mem_write: true 0x23f-0x23f.1 (0.1)
+0x000230|                                             c0|               .|          mem_read: true 0x23f.1-0x23f.2 (0.1)
+0x000230|                                             c0|               .|          mem_execute: false 0x23f.2-0x23f.3 (0.1)
+0x000230|                                             c0|               .|          mem_shared: false 0x23f.3-0x23f.4 (0.1)
+0x000230|                                             c0|               .|          mem_not_paged: false 0x23f.4-0x23f.5 (0.1)
+0x000230|                                             c0|               .|          mem_not_cached: false 0x23f.5-0x23f.6 (0.1)
+0x000230|                                             c0|               .|          mem_discardable: false 0x23f.6-0x23f.7 (0.1)
+0x000230|                                             c0|               .|          lnk_nreloc_ovfl: false 0x23f.7-0x240 (0.1)
+        |                                               |                |      [5]{}: section 0x240-0x268 (40)
+0x000240|2e 69 64 61 74 61 00 00                        |.idata..        |        name: ".idata" 0x240-0x248 (8)
+0x000240|                        d4 10 00 00            |        ....    |        virtual_size: 4308 0x248-0x24c (4)
+0x000240|                                    00 30 12 00|            .0..|        virtual_address: 0x123000 0x24c-0x250 (4)
+0x000250|00 12 00 00                                    |....            |        size_of_raw_data: 4608 0x250-0x254 (4)
+0x000250|            00 a0 11 00                        |    ....        |        pointer_to_raw_data: 0x11a000 0x254-0x258 (4)
+0x000250|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x258-0x25c (4)
+0x000250|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x25c-0x260 (4)
+0x000260|00 00                                          |..              |        number_of_relocations: 0 0x260-0x262 (2)
+0x000260|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x262-0x264 (2)
+        |                                               |                |        characteristics{}: 0x264-0x268 (4)
+0x000260|            40                                 |    @           |          cnt_uninitialized_data: false 0x264-0x264.1 (0.1)
+0x000260|            40                                 |    @           |          cnt_initialized_data: true 0x264.1-0x264.2 (0.1)
+0x000260|            40                                 |    @           |          cnt_code: false 0x264.2-0x264.3 (0.1)
+0x000260|            40                                 |    @           |          reserved: false 0x264.3-0x264.4 (0.1)
+0x000260|            40                                 |    @           |          type_no_pad: false 0x264.4-0x264.5 (0.1)
+0x000260|            40                                 |    @           |          reserved0: false 0x264.5-0x264.6 (0.1)
+0x000260|            40                                 |    @           |          reserved1: false 0x264.6-0x264.7 (0.1)
+0x000260|            40                                 |    @           |          reserved2: false 0x264.7-0x265 (0.1)
+0x000260|               00                              |     .          |          gprel: false 0x265-0x265.1 (0.1)
+0x000260|               00                              |     .          |          unknown0: false 0x265.1-0x265.2 (0.1)
+0x000260|               00                              |     .          |          unknown1: false 0x265.2-0x265.3 (0.1)
+0x000260|               00                              |     .          |          lnk_comdat: false 0x265.3-0x265.4 (0.1)
+0x000260|               00                              |     .          |          lnk_remove: false 0x265.4-0x265.5 (0.1)
+0x000260|               00                              |     .          |          reserved3: false 0x265.5-0x265.6 (0.1)
+0x000260|               00                              |     .          |          lnk_info: false 0x265.6-0x265.7 (0.1)
+0x000260|               00                              |     .          |          lnk_other: false 0x265.7-0x266 (0.1)
+0x000260|                  30                           |      0         |          align_128bytes: false 0x266-0x266.1 (0.1)
+0x000260|                  30                           |      0         |          align_8bytes: false 0x266.1-0x266.2 (0.1)
+0x000260|                  30                           |      0         |          align_2bytes: true 0x266.2-0x266.3 (0.1)
+0x000260|                  30                           |      0         |          align_1bytes: true 0x266.3-0x266.4 (0.1)
+0x000260|                  30                           |      0         |          mem_preload: false 0x266.4-0x266.5 (0.1)
+0x000260|                  30                           |      0         |          mem_locked: false 0x266.5-0x266.6 (0.1)
+0x000260|                  30                           |      0         |          mem_16bit: false 0x266.6-0x266.7 (0.1)
+0x000260|                  30                           |      0         |          mem_purgeable: false 0x266.7-0x267 (0.1)
+0x000260|                     c0                        |       .        |          mem_write: true 0x267-0x267.1 (0.1)
+0x000260|                     c0                        |       .        |          mem_read: true 0x267.1-0x267.2 (0.1)
+0x000260|                     c0                        |       .        |          mem_execute: false 0x267.2-0x267.3 (0.1)
+0x000260|                     c0                        |       .        |          mem_shared: false 0x267.3-0x267.4 (0.1)
+0x000260|                     c0                        |       .        |          mem_not_paged: false 0x267.4-0x267.5 (0.1)
+0x000260|                     c0                        |       .        |          mem_not_cached: false 0x267.5-0x267.6 (0.1)
+0x000260|                     c0                        |       .        |          mem_discardable: false 0x267.6-0x267.7 (0.1)
+0x000260|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x267.7-0x268 (0.1)
+        |                                               |                |      [6]{}: section 0x268-0x290 (40)
+0x000260|                        2e 43 52 54 00 00 00 00|        .CRT....|        name: ".CRT" 0x268-0x270 (8)
+0x000270|18 00 00 00                                    |....            |        virtual_size: 24 0x270-0x274 (4)
+0x000270|            00 50 12 00                        |    .P..        |        virtual_address: 0x125000 0x274-0x278 (4)
+0x000270|                        00 02 00 00            |        ....    |        size_of_raw_data: 512 0x278-0x27c (4)
+0x000270|                                    00 b2 11 00|            ....|        pointer_to_raw_data: 0x11b200 0x27c-0x280 (4)
+0x000280|00 00 00 00                                    |....            |        pointer_to_relocations: 0x0 0x280-0x284 (4)
+0x000280|            00 00 00 00                        |    ....        |        pointer_to_line_numbers: 0x0 0x284-0x288 (4)
+0x000280|                        00 00                  |        ..      |        number_of_relocations: 0 0x288-0x28a (2)
+0x000280|                              00 00            |          ..    |        number_of_line_numbers: 0 0x28a-0x28c (2)
+        |                                               |                |        characteristics{}: 0x28c-0x290 (4)
+0x000280|                                    40         |            @   |          cnt_uninitialized_data: false 0x28c-0x28c.1 (0.1)
+0x000280|                                    40         |            @   |          cnt_initialized_data: true 0x28c.1-0x28c.2 (0.1)
+0x000280|                                    40         |            @   |          cnt_code: false 0x28c.2-0x28c.3 (0.1)
+0x000280|                                    40         |            @   |          reserved: false 0x28c.3-0x28c.4 (0.1)
+0x000280|                                    40         |            @   |          type_no_pad: false 0x28c.4-0x28c.5 (0.1)
+0x000280|                                    40         |            @   |          reserved0: false 0x28c.5-0x28c.6 (0.1)
+0x000280|                                    40         |            @   |          reserved1: false 0x28c.6-0x28c.7 (0.1)
+0x000280|                                    40         |            @   |          reserved2: false 0x28c.7-0x28d (0.1)
+0x000280|                                       00      |             .  |          gprel: false 0x28d-0x28d.1 (0.1)
+0x000280|                                       00      |             .  |          unknown0: false 0x28d.1-0x28d.2 (0.1)
+0x000280|                                       00      |             .  |          unknown1: false 0x28d.2-0x28d.3 (0.1)
+0x000280|                                       00      |             .  |          lnk_comdat: false 0x28d.3-0x28d.4 (0.1)
+0x000280|                                       00      |             .  |          lnk_remove: false 0x28d.4-0x28d.5 (0.1)
+0x000280|                                       00      |             .  |          reserved3: false 0x28d.5-0x28d.6 (0.1)
+0x000280|                                       00      |             .  |          lnk_info: false 0x28d.6-0x28d.7 (0.1)
+0x000280|                                       00      |             .  |          lnk_other: false 0x28d.7-0x28e (0.1)
+0x000280|                                          30   |              0 |          align_128bytes: false 0x28e-0x28e.1 (0.1)
+0x000280|                                          30   |              0 |          align_8bytes: false 0x28e.1-0x28e.2 (0.1)
+0x000280|                                          30   |              0 |          align_2bytes: true 0x28e.2-0x28e.3 (0.1)
+0x000280|                                          30   |              0 |          align_1bytes: true 0x28e.3-0x28e.4 (0.1)
+0x000280|                                          30   |              0 |          mem_preload: false 0x28e.4-0x28e.5 (0.1)
+0x000280|                                          30   |              0 |          mem_locked: false 0x28e.5-0x28e.6 (0.1)
+0x000280|                                          30   |              0 |          mem_16bit: false 0x28e.6-0x28e.7 (0.1)
+0x000280|                                          30   |              0 |          mem_purgeable: false 0x28e.7-0x28f (0.1)
+0x000280|                                             c0|               .|          mem_write: true 0x28f-0x28f.1 (0.1)
+0x000280|                                             c0|               .|          mem_read: true 0x28f.1-0x28f.2 (0.1)
+0x000280|                                             c0|               .|          mem_execute: false 0x28f.2-0x28f.3 (0.1)
+0x000280|                                             c0|               .|          mem_shared: false 0x28f.3-0x28f.4 (0.1)
+0x000280|                                             c0|               .|          mem_not_paged: false 0x28f.4-0x28f.5 (0.1)
+0x000280|                                             c0|               .|          mem_not_cached: false 0x28f.5-0x28f.6 (0.1)
+0x000280|                                             c0|               .|          mem_discardable: false 0x28f.6-0x28f.7 (0.1)
+0x000280|                                             c0|               .|          lnk_nreloc_ovfl: false 0x28f.7-0x290 (0.1)
+        |                                               |                |      [7]{}: section 0x290-0x2b8 (40)
+0x000290|2e 74 6c 73 00 00 00 00                        |.tls....        |        name: ".tls" 0x290-0x298 (8)
+0x000290|                        20 00 00 00            |         ...    |        virtual_size: 32 0x298-0x29c (4)
+0x000290|                                    00 60 12 00|            .`..|        virtual_address: 0x126000 0x29c-0x2a0 (4)
+0x0002a0|00 02 00 00                                    |....            |        size_of_raw_data: 512 0x2a0-0x2a4 (4)
+0x0002a0|            00 b4 11 00                        |    ....        |        pointer_to_raw_data: 0x11b400 0x2a4-0x2a8 (4)
+0x0002a0|                        00 00 00 00            |        ....    |        pointer_to_relocations: 0x0 0x2a8-0x2ac (4)
+0x0002a0|                                    00 00 00 00|            ....|        pointer_to_line_numbers: 0x0 0x2ac-0x2b0 (4)
+0x0002b0|00 00                                          |..              |        number_of_relocations: 0 0x2b0-0x2b2 (2)
+0x0002b0|      00 00                                    |  ..            |        number_of_line_numbers: 0 0x2b2-0x2b4 (2)
+        |                                               |                |        characteristics{}: 0x2b4-0x2b8 (4)
+0x0002b0|            40                                 |    @           |          cnt_uninitialized_data: false 0x2b4-0x2b4.1 (0.1)
+0x0002b0|            40                                 |    @           |          cnt_initialized_data: true 0x2b4.1-0x2b4.2 (0.1)
+0x0002b0|            40                                 |    @           |          cnt_code: false 0x2b4.2-0x2b4.3 (0.1)
+0x0002b0|            40                                 |    @           |          reserved: false 0x2b4.3-0x2b4.4 (0.1)
+0x0002b0|            40                                 |    @           |          type_no_pad: false 0x2b4.4-0x2b4.5 (0.1)
+0x0002b0|            40                                 |    @           |          reserved0: false 0x2b4.5-0x2b4.6 (0.1)
+0x0002b0|            40                                 |    @           |          reserved1: false 0x2b4.6-0x2b4.7 (0.1)
+0x0002b0|            40                                 |    @           |          reserved2: false 0x2b4.7-0x2b5 (0.1)
+0x0002b0|               00                              |     .          |          gprel: false 0x2b5-0x2b5.1 (0.1)
+0x0002b0|               00                              |     .          |          unknown0: false 0x2b5.1-0x2b5.2 (0.1)
+0x0002b0|               00                              |     .          |          unknown1: false 0x2b5.2-0x2b5.3 (0.1)
+0x0002b0|               00                              |     .          |          lnk_comdat: false 0x2b5.3-0x2b5.4 (0.1)
+0x0002b0|               00                              |     .          |          lnk_remove: false 0x2b5.4-0x2b5.5 (0.1)
+0x0002b0|               00                              |     .          |          reserved3: false 0x2b5.5-0x2b5.6 (0.1)
+0x0002b0|               00                              |     .          |          lnk_info: false 0x2b5.6-0x2b5.7 (0.1)
+0x0002b0|               00                              |     .          |          lnk_other: false 0x2b5.7-0x2b6 (0.1)
+0x0002b0|                  30                           |      0         |          align_128bytes: false 0x2b6-0x2b6.1 (0.1)
+0x0002b0|                  30                           |      0         |          align_8bytes: false 0x2b6.1-0x2b6.2 (0.1)
+0x0002b0|                  30                           |      0         |          align_2bytes: true 0x2b6.2-0x2b6.3 (0.1)
+0x0002b0|                  30                           |      0         |          align_1bytes: true 0x2b6.3-0x2b6.4 (0.1)
+0x0002b0|                  30                           |      0         |          mem_preload: false 0x2b6.4-0x2b6.5 (0.1)
+0x0002b0|                  30                           |      0         |          mem_locked: false 0x2b6.5-0x2b6.6 (0.1)
+0x0002b0|                  30                           |      0         |          mem_16bit: false 0x2b6.6-0x2b6.7 (0.1)
+0x0002b0|                  30                           |      0         |          mem_purgeable: false 0x2b6.7-0x2b7 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_write: true 0x2b7-0x2b7.1 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_read: true 0x2b7.1-0x2b7.2 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_execute: false 0x2b7.2-0x2b7.3 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_shared: false 0x2b7.3-0x2b7.4 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_not_paged: false 0x2b7.4-0x2b7.5 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_not_cached: false 0x2b7.5-0x2b7.6 (0.1)
+0x0002b0|                     c0                        |       .        |          mem_discardable: false 0x2b7.6-0x2b7.7 (0.1)
+0x0002b0|                     c0                        |       .        |          lnk_nreloc_ovfl: false 0x2b7.7-0x2b8 (0.1)
+        |                                               |                |    symbol_table[0:0]: 0x2b8-0x2b8 (0)
+        |                                               |                |    string_table{}: 0x11b600-0x11b60e (14)
+0x11b600|0e 00 00 00                                    |....            |      size: 14 0x11b600-0x11b604 (4)
+        |                                               |                |      entries[0:1]: 0x11b604-0x11b60e (10)
+0x11b600|            2e 65 68 5f 66 72 61 6d 65 00|     |    .eh_frame.| |        [0]: ".eh_frame" entry 0x11b604-0x11b60e (10)
+0x0002b0|                        00 00 00 00 00 00 00 00|        ........|  gap0: raw bits 0x2b8-0x11b600 (1160008)
+0x0002c0|00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00|................|
+*       |until 0x11b5ff.7 (1160008)                     |                |

format/tap/tap.go

@@ -0,0 +1,158 @@
+package tzx
+
+// https://worldofspectrum.net/zx-modules/fileformats/tapformat.html
+
+import (
+	"bufio"
+	"bytes"
+	"embed"
+
+	"golang.org/x/text/encoding/charmap"
+
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/pkg/bitio"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+	"github.com/wader/fq/pkg/scalar"
+)
+
+//go:embed tap.md
+var tapFS embed.FS
+
+func init() {
+	interp.RegisterFormat(
+		format.TAP,
+		&decode.Format{
+			Description: "TAP tape format for ZX Spectrum computers",
+			DecodeFn:    tapDecoder,
+		})
+
+	interp.RegisterFS(tapFS)
+}
+
+// The TAP- (and BLK-) format is nearly a direct copy of the data that is stored
+// in real tapes, as it is written by the ROM save routine of the ZX-Spectrum.
+// A TAP file is simply one data block or a group of 2 or more data blocks, one
+// followed after the other. The TAP file may be empty.
+func tapDecoder(d *decode.D) any {
+	d.Endian = decode.LittleEndian
+
+	d.FieldArray("blocks", func(d *decode.D) {
+		for !d.End() {
+			d.FieldStruct("block", func(d *decode.D) {
+				decodeTapBlock(d)
+			})
+		}
+	})
+	return nil
+}
+
+func decodeTapBlock(d *decode.D) {
+	// Length of the following data.
+	length := d.FieldU16("length")
+
+	// read header, fragment, or data block
+	switch length {
+	case 0:
+		// fragment with no data
+	case 1:
+		d.FieldRawLen("data", 8)
+	case 19:
+		d.FieldStruct("header", func(d *decode.D) {
+			decodeHeader(d)
+		})
+	default:
+		d.FieldStruct("data", func(d *decode.D) {
+			decodeDataBlock(d, length)
+		})
+	}
+}
+
+// decodes the different types of 19-byte header blocks.
+func decodeHeader(d *decode.D) {
+	blockStartPosition := d.Pos()
+
+	// Always 0: byte indicating a standard ROM loading header
+	d.FieldU8("flag", scalar.UintMapSymStr{0: "standard_speed_data"})
+	// Header type
+	dataType := d.FieldU8("data_type", scalar.UintMapSymStr{
+		0x00: "program",
+		0x01: "numeric",
+		0x02: "alphanumeric",
+		0x03: "data",
+	})
+	// Loading name of the program. Filled with spaces (0x20) to 10 characters.
+	d.FieldStr("program_name", 10, charmap.ISO8859_1)
+
+	switch dataType {
+	case 0:
+		// Length of data following the header = length of BASIC program + variables.
+		d.FieldU16("data_length")
+		// LINE parameter of SAVE command. Value 32768 means "no auto-loading".
+		// 0..9999 are valid line numbers.
+		d.FieldU16("auto_start_line")
+		// Length of BASIC program;
+		// remaining bytes ([data length] - [program length]) = offset of variables.
+		d.FieldU16("program_length")
+	case 1:
+		// Length of data following the header = length of number array * 5 + 3.
+		d.FieldU16("data_length")
+		// Unused byte.
+		d.FieldU8("unused0")
+		// (1..26 meaning A..Z) + 128.
+		d.FieldU8("variable_name", scalar.UintHex)
+		// UnusedWord: 32768.
+		d.FieldU16("unused1")
+	case 2:
+		// Length of data following the header = length of string array + 3.
+		d.FieldU16("data_length")
+		// Unused byte.
+		d.FieldU8("unused0")
+		// (1..26 meaning A$..Z$) + 192.
+		d.FieldU8("variable_name", scalar.UintHex)
+		// UnusedWord: 32768.
+		d.FieldU16("unused1")
+	case 3:
+		// Length of data following the header, in case of a SCREEN$ header = 6912.
+		d.FieldU16("data_length")
+		// In case of a SCREEN$ header = 16384.
+		d.FieldU16("start_address", scalar.UintHex)
+		//	UnusedWord: 32768.
+		d.FieldU16("unused")
+	default:
+		d.Fatalf("invalid TAP header type, got: %d", dataType)
+	}
+
+	// Simply all bytes XORed (including flag byte).
+	d.FieldU8("checksum", d.UintValidate(calculateChecksum(d, blockStartPosition, d.Pos()-blockStartPosition)), scalar.UintHex)
+}
+
+func decodeDataBlock(d *decode.D, length uint64) {
+	blockStartPosition := d.Pos()
+
+	// flag indicating the type of data block, usually 255 (standard speed data)
+	d.FieldU8("flag", scalar.UintFn(func(s scalar.Uint) (scalar.Uint, error) {
+		if s.Actual == 0xFF {
+			s.Sym = "standard_speed_data"
+		} else {
+			s.Sym = "custom_data_block"
+		}
+		return s, nil
+	}))
+	// The essential data: length minus the flag/checksum bytes (may be empty)
+	d.FieldRawLen("data", int64(length-2)*8)
+	// Simply all bytes (including flag byte) XORed
+	d.FieldU8("checksum", d.UintValidate(calculateChecksum(d, blockStartPosition, d.Pos()-blockStartPosition)), scalar.UintHex)
+}
+
+func calculateChecksum(d *decode.D, blockStartPos, blockEndPos int64) uint64 {
+	var blockSlice bytes.Buffer
+	writer := bufio.NewWriter(&blockSlice)
+	d.Copy(writer, bitio.NewIOReader(d.BitBufRange(blockStartPos, blockEndPos)))
+
+	var checksum uint8
+	for _, v := range blockSlice.Bytes() {
+		checksum ^= v
+	}
+	return uint64(checksum)
+}

format/tap/tap.md

@@ -0,0 +1,16 @@
+The TAP- (and BLK-) format is nearly a direct copy of the data that is stored
+in real tapes, as it is written by the ROM save routine of the ZX-Spectrum.
+A TAP file is simply one data block or a group of 2 or more data blocks, one
+followed after the other. The TAP file may be empty.
+
+You will often find this format embedded inside the TZX tape format.
+
+The default file extension is `.tap`.
+
+### Authors
+
+- Michael R. Cook work.mrc@pm.me, original author
+
+### References
+
+- https://worldofspectrum.net/zx-modules/fileformats/tapformat.html

format/tap/testdata/README.md

@@ -0,0 +1,22 @@
+### basic_prog1.tap
+
+The `basic_prog1.tap` test file was created directory from the FUSE emulator.
+
+Inside the emulated ZX Spectrum a BASIC program was created:
+
+```
+10 PRINT "fq is the best!"
+20 GOTO 10
+```
+
+and saved to tape:
+
+```
+SAVE "fqTestProg", LINE 10
+```
+
+Then from FUSE select the menu item `Media > Tape > Save As..`.
+
+Any BASIC, machine code, screen image, or other data, can be saved directly
+using the `SAVE` command. Further instructions can be found here:
+https://worldofspectrum.org/ZXBasicManual/zxmanchap20.html

format/tap/testdata/basic_prog1.fqtest

@@ -0,0 +1,21 @@
+$ fq -d tap dv basic_prog1.tap
+    |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: basic_prog1.tap (tap) 0x0-0x3f (63)
+    |                                               |                |  blocks[0:2]: 0x0-0x3f (63)
+    |                                               |                |    [0]{}: block 0x0-0x15 (21)
+0x00|13 00                                          |..              |      length: 19 0x0-0x2 (2)
+    |                                               |                |      header{}: 0x2-0x15 (19)
+0x00|      00                                       |  .             |        flag: "standard_speed_data" (0) 0x2-0x3 (1)
+0x00|         00                                    |   .            |        data_type: "program" (0) 0x3-0x4 (1)
+0x00|            66 71 54 65 73 74 50 72 6f 67      |    fqTestProg  |        program_name: "fqTestProg" 0x4-0xe (10)
+0x00|                                          26 00|              &.|        data_length: 38 0xe-0x10 (2)
+0x10|0a 00                                          |..              |        auto_start_line: 10 0x10-0x12 (2)
+0x10|      26 00                                    |  &.            |        program_length: 38 0x12-0x14 (2)
+0x10|            01                                 |    .           |        checksum: 0x1 (valid) 0x14-0x15 (1)
+    |                                               |                |    [1]{}: block 0x15-0x3f (42)
+0x10|               28 00                           |     (.         |      length: 40 0x15-0x17 (2)
+    |                                               |                |      data{}: 0x17-0x3f (40)
+0x10|                     ff                        |       .        |        flag: "standard_speed_data" (255) 0x17-0x18 (1)
+0x10|                        00 0a 14 00 20 f5 22 66|        .... ."f|        data: raw bits 0x18-0x3e (38)
+0x20|71 20 69 73 20 74 68 65 20 62 65 73 74 21 22 0d|q is the best!".|
+0x30|00 14 0a 00 ec 31 30 0e 00 00 0a 00 00 0d      |.....10.......  |
+0x30|                                          b6|  |              .||        checksum: 0xb6 (valid) 0x3e-0x3f (1)

format/tzx/testdata/README.md

@@ -0,0 +1,28 @@
+### basic_prog1.tzx
+
+The `basic_prog1.tzx` test file was created directory from the FUSE emulator.
+
+Inside the emulated ZX Spectrum a BASIC program was created:
+
+```
+10 PRINT "fq is the best!"
+20 GOTO 10
+```
+
+and saved to tape:
+
+```
+SAVE "fqTestProg", LINE 10
+```
+
+Then from FUSE select the menu item `Media > Tape > Save As..`.
+
+Any BASIC, machine code, screen image, or other data, can be saved directly
+using the `SAVE` command. Further instructions can be found here:
+https://worldofspectrum.org/ZXBasicManual/zxmanchap20.html
+
+
+#### Archive Info
+
+The FUSE emulator is not able to add the tape metadata. As this tape block is
+very simple, it was added manually using a Hex editor.

format/tzx/testdata/basic_prog1.fqtest

@@ -0,0 +1,81 @@
+$ fq -d tzx dv basic_prog1.tzx
+    |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.{}: basic_prog1.tzx (tzx) 0x0-0xcd (205)
+0x00|5a 58 54 61 70 65 21 1a                        |ZXTape!.        |  signature: raw bits (valid) 0x0-0x8 (8)
+0x00|                        01                     |        .       |  major_version: 1 0x8-0x9 (1)
+0x00|                           14                  |         .      |  minor_version: 20 0x9-0xa (1)
+    |                                               |                |  blocks[0:3]: 0xa-0xcd (195)
+    |                                               |                |    [0]{}: block 0xa-0x88 (126)
+0x00|                              32               |          2     |      type: "archive_info" (50) 0xa-0xb (1)
+0x00|                                 7b 00         |           {.   |      length: 123 0xb-0xd (2)
+0x00|                                       09      |             .  |      count: 9 0xd-0xe (1)
+    |                                               |                |      archive_info[0:9]: 0xe-0x88 (122)
+    |                                               |                |        [0]{}: entry 0xe-0x1a (12)
+0x00|                                          00   |              . |          id: "title" (0) 0xe-0xf (1)
+0x00|                                             0a|               .|          length: 10 0xf-0x10 (1)
+0x10|66 71 74 65 73 74 70 72 6f 67                  |fqtestprog      |          value: "fqtestprog" 0x10-0x1a (10)
+    |                                               |                |        [1]{}: entry 0x1a-0x21 (7)
+0x10|                              01               |          .     |          id: "publisher" (1) 0x1a-0x1b (1)
+0x10|                                 05            |           .    |          length: 5 0x1b-0x1c (1)
+0x10|                                    77 61 64 65|            wade|          value: "wader" 0x1c-0x21 (5)
+0x20|72                                             |r               |
+    |                                               |                |        [2]{}: entry 0x21-0x32 (17)
+0x20|   02                                          | .              |          id: "author" (2) 0x21-0x22 (1)
+0x20|      0f                                       |  .             |          length: 15 0x22-0x23 (1)
+0x20|         4d 69 63 68 61 65 6c 20 52 2e 20 43 6f|   Michael R. Co|          value: "Michael R. Cook" 0x23-0x32 (15)
+0x30|6f 6b                                          |ok              |
+    |                                               |                |        [3]{}: entry 0x32-0x38 (6)
+0x30|      03                                       |  .             |          id: "year" (3) 0x32-0x33 (1)
+0x30|         04                                    |   .            |          length: 4 0x33-0x34 (1)
+0x30|            32 30 32 34                        |    2024        |          value: "2024" 0x34-0x38 (4)
+    |                                               |                |        [4]{}: entry 0x38-0x41 (9)
+0x30|                        04                     |        .       |          id: "language" (4) 0x38-0x39 (1)
+0x30|                           07                  |         .      |          length: 7 0x39-0x3a (1)
+0x30|                              45 6e 67 6c 69 73|          Englis|          value: "English" 0x3a-0x41 (7)
+0x40|68                                             |h               |
+    |                                               |                |        [5]{}: entry 0x41-0x4f (14)
+0x40|   05                                          | .              |          id: "category" (5) 0x41-0x42 (1)
+0x40|      0c                                       |  .             |          length: 12 0x42-0x43 (1)
+0x40|         54 65 73 74 20 50 72 6f 67 72 61 6d   |   Test Program |          value: "Test Program" 0x43-0x4f (12)
+    |                                               |                |        [6]{}: entry 0x4f-0x5c (13)
+0x40|                                             07|               .|          id: "loader" (7) 0x4f-0x50 (1)
+0x50|0b                                             |.               |          length: 11 0x50-0x51 (1)
+0x50|   52 4f 4d 20 74 69 6d 69 6e 67 73            | ROM timings    |          value: "ROM timings" 0x51-0x5c (11)
+    |                                               |                |        [7]{}: entry 0x5c-0x6e (18)
+0x50|                                    08         |            .   |          id: "origin" (8) 0x5c-0x5d (1)
+0x50|                                       10      |             .  |          length: 16 0x5d-0x5e (1)
+0x50|                                          4f 72|              Or|          value: "Original release" 0x5e-0x6e (16)
+0x60|69 67 69 6e 61 6c 20 72 65 6c 65 61 73 65      |iginal release  |
+    |                                               |                |        [8]{}: entry 0x6e-0x88 (26)
+0x60|                                          ff   |              . |          id: "comment" (255) 0x6e-0x6f (1)
+0x60|                                             18|               .|          length: 24 0x6f-0x70 (1)
+0x70|54 5a 58 65 64 20 62 79 20 4d 69 63 68 61 65 6c|TZXed by Michael|          value: "TZXed by Michael R. Cook" 0x70-0x88 (24)
+0x80|20 52 2e 20 43 6f 6f 6b                        | R. Cook        |
+    |                                               |                |    [1]{}: block 0x88-0xa0 (24)
+0x80|                        10                     |        .       |      type: "standard_speed_data" (16) 0x88-0x89 (1)
+0x80|                           e8 03               |         ..     |      pause: 1000 0x89-0x8b (2)
+    |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|      tap{}: (tap) 0x8b-0xa0 (21)
+    |                                               |                |        blocks[0:1]: 0x8b-0xa0 (21)
+    |                                               |                |          [0]{}: block 0x8b-0xa0 (21)
+0x80|                                 13 00         |           ..   |            length: 19 0x8b-0x8d (2)
+    |                                               |                |            header{}: 0x8d-0xa0 (19)
+0x80|                                       00      |             .  |              flag: "standard_speed_data" (0) 0x8d-0x8e (1)
+0x80|                                          00   |              . |              data_type: "program" (0) 0x8e-0x8f (1)
+0x80|                                             66|               f|              program_name: "fqTestProg" 0x8f-0x99 (10)
+0x90|71 54 65 73 74 50 72 6f 67                     |qTestProg       |
+0x90|                           26 00               |         &.     |              data_length: 38 0x99-0x9b (2)
+0x90|                                 0a 00         |           ..   |              auto_start_line: 10 0x9b-0x9d (2)
+0x90|                                       26 00   |             &. |              program_length: 38 0x9d-0x9f (2)
+0x90|                                             01|               .|              checksum: 0x1 (valid) 0x9f-0xa0 (1)
+    |                                               |                |    [2]{}: block 0xa0-0xcd (45)
+0xa0|10                                             |.               |      type: "standard_speed_data" (16) 0xa0-0xa1 (1)
+0xa0|   e8 03                                       | ..             |      pause: 1000 0xa1-0xa3 (2)
+    |00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|      tap{}: (tap) 0xa3-0xcd (42)
+    |                                               |                |        blocks[0:1]: 0xa3-0xcd (42)
+    |                                               |                |          [0]{}: block 0xa3-0xcd (42)
+0xa0|         28 00                                 |   (.           |            length: 40 0xa3-0xa5 (2)
+    |                                               |                |            data{}: 0xa5-0xcd (40)
+0xa0|               ff                              |     .          |              flag: "standard_speed_data" (255) 0xa5-0xa6 (1)
+0xa0|                  00 0a 14 00 20 f5 22 66 71 20|      .... ."fq |              data: raw bits 0xa6-0xcc (38)
+0xb0|69 73 20 74 68 65 20 62 65 73 74 21 22 0d 00 14|is the best!"...|
+0xc0|0a 00 ec 31 30 0e 00 00 0a 00 00 0d            |...10.......    |
+0xc0|                                    b6|        |            .|  |              checksum: 0xb6 (valid) 0xcc-0xcd (1)

format/tzx/tzx.go

@@ -0,0 +1,655 @@
+package tzx
+
+// https://worldofspectrum.net/TZXformat.html
+
+import (
+	"embed"
+
+	"golang.org/x/text/encoding/charmap"
+
+	"github.com/wader/fq/format"
+	"github.com/wader/fq/pkg/decode"
+	"github.com/wader/fq/pkg/interp"
+	"github.com/wader/fq/pkg/scalar"
+)
+
+//go:embed tzx.md
+var tzxFS embed.FS
+
+var tapFormat decode.Group
+
+func init() {
+	interp.RegisterFormat(
+		format.TZX,
+		&decode.Format{
+			Description: "TZX tape format for ZX Spectrum computers",
+			Groups:      []*decode.Group{format.Probe},
+			DecodeFn:    tzxDecode,
+			Dependencies: []decode.Dependency{
+				{Groups: []*decode.Group{format.TAP}, Out: &tapFormat},
+			},
+		})
+	interp.RegisterFS(tzxFS)
+}
+
+func tzxDecode(d *decode.D) any {
+	d.Endian = decode.LittleEndian
+
+	d.FieldRawLen("signature", 8*8, d.AssertBitBuf([]byte("ZXTape!\x1A")))
+	d.FieldU8("major_version")
+	d.FieldU8("minor_version")
+	decodeBlocks(d)
+
+	return nil
+}
+
+func decodeBlocks(d *decode.D) {
+	d.FieldArray("blocks", func(d *decode.D) {
+		for !d.End() {
+			d.FieldStruct("block", func(d *decode.D) {
+				decodeBlock(d)
+			})
+		}
+	})
+}
+
+func decodeBlock(d *decode.D) {
+	blocks := map[uint64]func(d *decode.D){
+		// ID: 10h (16d) | Standard Speed Data
+		// This block is replayed with the standard Spectrum ROM timing values
+		// (the values in curly brackets in block ID 11). The pilot tone
+		// consists of 8063 pulses if the first data byte (the flag byte)
+		// is < 128, 3223 otherwise.
+		0x10: func(d *decode.D) {
+			// Pause after this block (ms.) {1000}
+			d.FieldU16("pause")
+
+			// A single TAP Data Block
+			peekBytes := d.PeekBytes(2)                              // get the TAP data block length
+			length := uint16(peekBytes[1])<<8 | uint16(peekBytes[0]) // bytes are stored in LittleEndian
+			length += 2                                              // include the two bytes for this value
+			d.FieldFormatLen("tap", int64(length)*8, &tapFormat, nil)
+		},
+
+		// ID: 11h (17d) | Turbo Speed Data
+		// This block is very similar to the normal TAP block but with some
+		// additional info on the timings and other important differences. The
+		// same tape encoding is used as for the standard speed data block. If
+		// a block should use some non-standard sync or pilot tones (i.e. all
+		// sorts of protection schemes) then the next three blocks describe it.
+		0x11: func(d *decode.D) {
+			d.FieldU16("pilot_pulse")  // Length of PILOT pulse {2168}
+			d.FieldU16("sync_pulse_1") // Length of SYNC first pulse {667}
+			d.FieldU16("sync_pulse_2") // Length of SYNC second pulse {735}
+			d.FieldU16("bit0_pulse")   // Length of ZERO bit pulse {855}
+			d.FieldU16("bit1_pulse")   // Length of ONE bit pulse {1710}
+
+			// Length of PILOT tone (number of pulses)
+			// {8063 header (flag<128), 3223 data (flag>=128)}
+			d.FieldU16("pilot_tone")
+
+			// Used bits in the last byte (other bits should be 0) {8}
+			// e.g. if this is 6, then the bits used (x) in the last byte are: xxxxxx00,
+			// where MSb is the leftmost bit, LSb is the rightmost bit
+			d.FieldU8("used_bits")
+
+			d.FieldU16("pause")            // Pause after this block (ms.) {1000}
+			length := d.FieldU24("length") // Length of data that follows
+
+			// Data as in .TAP files
+			d.FieldRawLen("data", int64(length*8))
+		},
+
+		// ID: 12h (18d) | Pure Tone
+		// This will produce a tone which is basically the same as the pilot
+		// tone in 10h and 11h blocks.
+		0x12: func(d *decode.D) {
+			d.FieldU16("pulse_length") // Length of one pulse in T-states
+			d.FieldU16("pulse_count")  // Number of pulses
+		},
+
+		// ID: 13h (19d) | Sequence of Pulses
+		// This will produce N pulses, each having its own timing. Up to 255
+		// pulses can be stored in this block.
+		0x13: func(d *decode.D) {
+			count := d.FieldU8("pulse_count")
+			d.FieldArray("pulses", func(d *decode.D) {
+				for i := uint64(0); i < count; i++ {
+					d.FieldU16("pulse")
+				}
+			})
+		},
+
+		// ID: 14h (20d) | Pure Data
+		// This is the same as in the turbo loading data block, except that it
+		// has no pilot or sync pulses.
+		0x14: func(d *decode.D) {
+			d.FieldU16("bit0_pulse")       // Length of ZERO bit pulse
+			d.FieldU16("bit1_pulse")       // Length of ONE bit pulse
+			d.FieldU8("used_bits")         // Used bits in last byte
+			d.FieldU16("pause")            // Pause after this block (ms.)
+			length := d.FieldU24("length") // Length of data that follows
+
+			// Data as in .TAP files
+			d.FieldRawLen("data", int64(length*8))
+		},
+
+		// ID: 15h (21d) | Direct Recording
+		// This block is used for tapes which have some parts in a format such
+		// that the turbo loader block cannot be used. This is not like a VOC
+		// file since the information is much more compact. Each sample value
+		// is represented by one bit only (0 for low, 1 for high) which means
+		// that the block will be at most 1/8 the size of the equivalent VOC.
+		// The preferred sampling frequencies are 22050 or 44100 Hz
+		// (158 or 79 T-states/sample).
+		0x15: func(d *decode.D) {
+			d.FieldU16("t_states")                 // Number of T-states per sample (bit of data)
+			d.FieldU16("pause")                    // Pause after this block in milliseconds (ms.)
+			d.FieldU8("used_bits")                 // Used bits (samples) in last byte of data (1-8)
+			length := d.FieldU24("length")         // Length of data that follows
+			d.FieldRawLen("data", int64(length*8)) // Samples data. Each bit represents a state on the EAR port
+		},
+
+		// ID: 18h (24d) | CSW Recording
+		// This block contains a sequence of raw pulses encoded in CSW format
+		// v2 (Compressed Square Wave).
+		0x18: func(d *decode.D) {
+			length := d.FieldU32("length") // Block length (without these four bytes)
+
+			// NOTE: remove these next 4 fields from the length so
+			// the data size is calculated correctly
+			length -= 2 + 3 + 1 + 4
+
+			// Pause after this block (in ms)
+			d.FieldU16("pause")
+			// Sampling rate
+			d.FieldU24("sample_rate")
+			// Compression type
+			d.FieldU8("compression_type", scalar.UintMapSymStr{0x01: "rle", 0x02: "zrle"})
+			// Number of stored pulses (after decompression)
+			d.FieldU32("stored_pulse_count")
+
+			// CSW data, encoded according to the CSW specification
+			d.FieldRawLen("data", int64(length*8))
+		},
+
+		// ID: 19h (25d) | Generalized Data
+		// This block was developed to represent an extremely wide range of data
+		// encoding techniques. Each loading component (pilot tone, sync pulses,
+		// data) is associated to a specific sequence of pulses, where each
+		// sequence (wave) can contain a different number of pulses from the
+		// others. In this way it is possible to have a situation where bit 0 is
+		// represented with 4 pulses and bit 1 with 8 pulses.
+		0x19: func(d *decode.D) {
+			length := d.FieldU32("length") // Block length (without these four bytes)
+			// TBD:
+			//	Pause        uint16     // Pause after this block (ms)
+			//	TOTP         uint32     // Total number of symbols in pilot/sync block (can be 0)
+			//	NPP          uint8      // Maximum number of pulses per pilot/sync symbol
+			//	ASP          uint8      // Number of pilot/sync symbols in the alphabet table (0=256)
+			//	TOTD         uint32     // Total number of symbols in data stream (can be 0)
+			//	NPD          uint8      // Maximum number of pulses per data symbol
+			//	ASD          uint8      // Number of data symbols in the alphabet table (0=256)
+			//	PilotSymbols []Symbol   // 0x12  SYMDEF[ASP] Pilot and sync symbols definition table
+			//	PilotStreams []PilotRLE // 0x12+ (2*NPP+1)*ASP - PRLE[TOTP]  Pilot and sync data stream
+			//	DataSymbols  []Symbol   // 0x12+ (TOTP>0)*((2*NPP+1)*ASP)+TOTP*3  - SYMDEF[ASD] Data symbols definition table
+			//	DataStreams  []uint8    // 0x12+ (TOTP>0)*((2*NPP+1)*ASP)+ TOTP*3+(2*NPD+1)*ASD - BYTE[DS]  Data stream
+			d.FieldRawLen("data", int64(length*8))
+		},
+
+		// ID: 20h (32d) | Pause Tape Command
+		// This will make a silence (low amplitude level (0)) for a given time
+		// in milliseconds. If the value is 0 then the emulator or utility should
+		// (in effect) STOP THE TAPE, until the user or emulator requests it.
+		0x20: func(d *decode.D) {
+			d.FieldU16("pause") // Pause duration in ms.
+		},
+
+		// ID: 21h (33d) | Group Start
+		// This block marks the start of a group of blocks which are to be
+		// treated as one single (composite) block. For each group start block
+		// there must be a group end block. Nesting of groups is not allowed.
+		0x21: func(d *decode.D) {
+			length := d.FieldU8("length")
+			d.FieldStr("group_name", int(length), charmap.ISO8859_1)
+		},
+
+		// ID: 22h (34d) | Group End
+		// This indicates the end of a group. This block has no body.
+		0x22: func(d *decode.D) {},
+
+		// JumpTo
+		// ID: 23h (35d)
+		// This block will allow for jumping from one block to another within
+		// the file. All blocks are included in the block count!
+		0x23: func(d *decode.D) {
+			d.FieldS16("value", scalar.SintMapSymStr{
+				0:  "loop_forever",
+				1:  "next_block",
+				2:  "skip_block",
+				-1: "prev_block",
+			})
+		},
+
+		// ID: 24h (36d) | Loop Start
+		// Indicates a sequence of identical blocks, or of identical groups of
+		// blocks. This block is the same as the FOR statement in BASIC.
+		0x24: func(d *decode.D) {
+			d.FieldU16("repetitions") // Number of repetitions (greater than 1)
+		},
+
+		// ID: 25h (37d) | Loop End
+		// This is the same as BASIC's NEXT statement. It means that the utility
+		// should jump back to the start of the loop if it hasn't been run for
+		// the specified number of times. This block has no body.
+		0x25: func(d *decode.D) {},
+
+		// ID: 26h (38d) | Call Sequence
+		// This block is an analogue of the CALL Subroutine statement. It
+		// basically executes a sequence of blocks that are somewhere else and
+		// then goes back to the next block. Because more than one call can be
+		// normally used you can include a list of sequences to be called. CALL
+		// blocks can be used in the LOOP sequences and vice versa. The value
+		// is relative so that you can add some blocks in the beginning of the
+		// file without disturbing the call values.
+		// Look at 'Jump To Block' for reference on the values.
+		0x26: func(d *decode.D) {
+			count := d.FieldU16("count")
+			d.FieldArray("call_blocks", func(d *decode.D) {
+				for i := uint64(0); i < count; i++ {
+					d.FieldS16("offset")
+				}
+			})
+		},
+
+		// ID: 27h (39d) | Return From Sequence
+		// This block indicates the end of the Called Sequence. The next block
+		// played will be the block after the last CALL block (or the next Call,
+		// if the Call block had multiple calls). This block has no body.
+		0x27: func(d *decode.D) {},
+
+		// ID: 28h (40d) | Select
+		// This block is useful when the tape consists of two or more separately
+		// loadable parts. With this block it is possible to select one of the
+		// parts and the utility/emulator will start loading from that block.
+		// All offsets are relative signed words.
+		0x28: func(d *decode.D) {
+			// Length of the whole block (without these two bytes)
+			d.FieldU16("length")
+
+			count := d.FieldU8("count")
+			d.FieldArray("selections", func(d *decode.D) {
+				for i := 0; i < int(count); i++ {
+					d.FieldStruct("selection", func(d *decode.D) {
+						d.FieldS16("offset")          // Relative Offset as `signed` value
+						length := d.FieldU8("length") // Length of description text (max 30 chars)
+						d.FieldStr("description", int(length), charmap.ISO8859_1)
+					})
+				}
+			})
+		},
+
+		// ID: 2Ah (42d) | Stop Tape When 48k Mode
+		// When this block is encountered, the tape will stop ONLY if the machine
+		// is an 48K Spectrum. This block is to be used for multi-loading games
+		// that load one level at a time in 48K mode, but load the entire tape at
+		// once if in 128K mode.
+		// This block has no body of its own, but follows the extension rule.
+		0x2A: func(d *decode.D) {
+			d.FieldU32("length") // Length of the block without these four bytes (0)
+		},
+
+		// ID: 2Bh (43d) | Set Signal Level
+		// This block sets the current signal level to the specified value
+		// (high or low). It should be used whenever it is necessary to avoid
+		// any ambiguities, e.g. with custom loaders which are level-sensitive.
+		0x2B: func(d *decode.D) {
+			d.FieldU32("length") // Block length (without these four bytes)
+			d.FieldU8("signal_level", scalar.UintMapSymStr{0: "low", 1: "high"})
+		},
+
+		// ID: 30h (48d) | Text Description
+		// This is meant to identify parts of the tape, such as where level 1
+		// starts, where to rewind to when the game ends, etc. This description
+		// is not guaranteed to be shown while the tape is playing, but can be
+		// read while browsing the tape or changing the tape pointer.
+		// The description can be up to 255 characters long.
+		0x30: func(d *decode.D) {
+			length := d.FieldU8("length")
+			d.FieldStr("description", int(length), charmap.ISO8859_1)
+		},
+
+		// ID: 31h (49d) | Message
+		// This will enable the emulators to display a message for a given time.
+		// This should not stop the tape and it should not make silence. If the
+		// time is 0 then the emulator should wait for the user to press a key.
+		0x31: func(d *decode.D) {
+			// Time (in seconds) for which the message should be displayed
+			d.FieldU8("display_time")
+			// Length of the text message
+			length := d.FieldU8("length")
+			// Message that should be displayed in ASCII format
+			d.FieldStr("message", int(length), charmap.ISO8859_1)
+		},
+
+		// ID: 32h (50d) | Archive Info
+		// This optional block is used at the beginning of the tape containing
+		// various metadata about the tape.
+		0x32: func(d *decode.D) {
+			d.FieldU16("length")        // Length of the whole block without these two bytes
+			count := d.FieldU8("count") // Number of entries in the archive info
+
+			// the archive strings
+			d.FieldArray("archive_info", func(d *decode.D) {
+				for i := uint64(0); i < count; i++ {
+					d.FieldStruct("entry", func(d *decode.D) {
+						d.FieldU8("id", scalar.UintMapSymStr{
+							0x00: "title",
+							0x01: "publisher",
+							0x02: "author",
+							0x03: "year",
+							0x04: "language",
+							0x05: "category",
+							0x06: "price",
+							0x07: "loader",
+							0x08: "origin",
+							0xFF: "comment",
+						})
+						length := d.FieldU8("length")
+						d.FieldStr("value", int(length), charmap.ISO8859_1)
+					})
+				}
+			})
+		},
+
+		// ID: 33h (51d) | Hardware Type
+		// This blocks contains information about the hardware that the programs
+		// on this tape use.
+		0x33: func(d *decode.D) {
+			// Number of machines and hardware types for which info is supplied
+			count := d.FieldU8("count")
+			d.FieldArray("hardware_info", func(d *decode.D) {
+				for i := uint64(0); i < count; i++ {
+					d.FieldStruct("info", func(d *decode.D) {
+						// Hardware Type ID (computers, printers, mice, etc.)
+						typeId := d.FieldU8("type", hwInfoTypeMapper)
+						// Hardware ID (ZX81, Kempston Joystick, etc.)
+						d.FieldU8("id", hwInfoTypeIdMapper[typeId])
+						// Hardware compatibility information
+						d.FieldU8("info_id", hwInfoIdMapper)
+					})
+				}
+			})
+		},
+
+		// ID: 35h (53d) | Custom Info
+		// This block contains various custom data. For example, it might contain
+		// some information written by a utility, extra settings required by a
+		// particular emulator, etc.
+		0x35: func(d *decode.D) {
+			d.FieldStr("identification", 10, charmap.ISO8859_1)
+			length := d.FieldU32("length")
+			d.FieldRawLen("info", int64(length*8))
+		},
+
+		// ID: 5Ah (90d) | Glue Block
+		// This block is generated when two ZX Tape files are merged together.
+		// It is here so that you can easily copy the files together and use
+		// them. Of course, this means that resulting file would be 10 bytes
+		// longer than if this block was not used. All you have to do if you
+		// encounter this block ID is to skip next 9 bytes. If you can avoid
+		// using this block for this purpose, then do so; it is preferable to
+		// use a utility to join the two files and ensure that they are both
+		// of the higher version number.
+		0x5A: func(d *decode.D) {
+			// Value: { "XTape!",0x1A,MajR,MinR }
+			// Just skip these 9 bytes and you will end up on the next ID.
+			d.FieldRawLen("value", int64(9*8))
+		},
+	}
+
+	blockType := d.FieldU8("type", blockTypeMapper)
+
+	// Deprecated block types: C64RomType, C64TurboData, EmulationInfo, Snapshot
+	if blockType == 0x16 || blockType == 0x17 || blockType == 0x34 || blockType == 0x40 {
+		d.Fatalf("deprecated block type encountered: %02x", blockType)
+	}
+
+	if fn, ok := blocks[blockType]; ok {
+		fn(d)
+	} else {
+		d.Fatalf("block type not valid, got: %02x", blockType)
+	}
+}
+
+var blockTypeMapper = scalar.UintMapSymStr{
+	0x10: "standard_speed_data",
+	0x11: "turbo_speed_data",
+	0x12: "pure_tone",
+	0x13: "sequence_of_pulses",
+	0x14: "pure_data",
+	0x15: "direct_recording", // deprecated
+	0x16: "c64_rom_type",     // deprecated
+	0x17: "c64_turbo_data",
+	0x18: "csw_recording",
+	0x19: "generalized_data",
+	0x20: "pause_tape_command",
+	0x21: "group_start",
+	0x22: "group_end",
+	0x23: "jump_to",
+	0x24: "loop_start",
+	0x25: "loop_end",
+	0x26: "call_sequence",
+	0x27: "return_from_sequence",
+	0x28: "select",
+	0x2A: "stop_tape_when_48k_mode",
+	0x2B: "set_signal_level",
+	0x30: "text_description",
+	0x31: "message",
+	0x32: "archive_info",
+	0x33: "hardware_type",
+	0x34: "emulation_info", // deprecated
+	0x35: "custom_info",
+	0x40: "snapshot", // deprecated
+	0x5A: "glue_block",
+}
+
+var hwInfoTypeMapper = scalar.UintMapDescription{
+	0x00: "Computers",
+	0x01: "External storage",
+	0x02: "ROM/RAM type add-ons",
+	0x03: "Sound devices",
+	0x04: "Joysticks",
+	0x05: "Mice",
+	0x06: "Other controllers",
+	0x07: "Serial ports",
+	0x08: "Parallel ports",
+	0x09: "Printers",
+	0x0a: "Modems",
+	0x0b: "Digitizers",
+	0x0c: "Network adapters",
+	0x0d: "Keyboards & keypads",
+	0x0e: "AD/DA converters",
+	0x0f: "EPROM programmers",
+	0x10: "Graphics",
+}
+
+var hwInfoTypeIdMapper = map[uint64]scalar.UintMapDescription{
+	0x00: { // Computers
+		0x00: "ZX Spectrum 16k",
+		0x01: "ZX Spectrum 48k, Plus",
+		0x02: "ZX Spectrum 48k ISSUE 1",
+		0x03: "ZX Spectrum 128k +(Sinclair)",
+		0x04: "ZX Spectrum 128k +2 (grey case)",
+		0x05: "ZX Spectrum 128k +2A, +3",
+		0x06: "Timex Sinclair TC-2048",
+		0x07: "Timex Sinclair TS-2068",
+		0x08: "Pentagon 128",
+		0x09: "Sam Coupe",
+		0x0a: "Didaktik M",
+		0x0b: "Didaktik Gama",
+		0x0c: "ZX-80",
+		0x0d: "ZX-81",
+		0x0e: "ZX Spectrum 128k, Spanish version",
+		0x0f: "ZX Spectrum, Arabic version",
+		0x10: "Microdigital TK 90-X",
+		0x11: "Microdigital TK 95",
+		0x12: "Byte",
+		0x13: "Elwro 800-3 ",
+		0x14: "ZS Scorpion 256",
+		0x15: "Amstrad CPC 464",
+		0x16: "Amstrad CPC 664",
+		0x17: "Amstrad CPC 6128",
+		0x18: "Amstrad CPC 464+",
+		0x19: "Amstrad CPC 6128+",
+		0x1a: "Jupiter ACE",
+		0x1b: "Enterprise",
+		0x1c: "Commodore 64",
+		0x1d: "Commodore 128",
+		0x1e: "Inves Spectrum+",
+		0x1f: "Profi",
+		0x20: "GrandRomMax",
+		0x21: "Kay 1024",
+		0x22: "Ice Felix HC 91",
+		0x23: "Ice Felix HC 2000",
+		0x24: "Amaterske RADIO Mistrum",
+		0x25: "Quorum 128",
+		0x26: "MicroART ATM",
+		0x27: "MicroART ATM Turbo 2",
+		0x28: "Chrome",
+		0x29: "ZX Badaloc",
+		0x2a: "TS-1500",
+		0x2b: "Lambda",
+		0x2c: "TK-65",
+		0x2d: "ZX-97",
+	},
+	0x01: { // External storage
+		0x00: "ZX Microdrive",
+		0x01: "Opus Discovery",
+		0x02: "MGT Disciple",
+		0x03: "MGT Plus-D",
+		0x04: "Rotronics Wafadrive",
+		0x05: "TR-DOS (BetaDisk)",
+		0x06: "Byte Drive",
+		0x07: "Watsford",
+		0x08: "FIZ",
+		0x09: "Radofin",
+		0x0a: "Didaktik disk drives",
+		0x0b: "BS-DOS (MB-02)",
+		0x0c: "ZX Spectrum +3 disk drive",
+		0x0d: "JLO (Oliger) disk interface",
+		0x0e: "Timex FDD3000",
+		0x0f: "Zebra disk drive",
+		0x10: "Ramex Millennia",
+		0x11: "Larken",
+		0x12: "Kempston disk interface",
+		0x13: "Sandy",
+		0x14: "ZX Spectrum +3e hard disk",
+		0x15: "ZXATASP",
+		0x16: "DivIDE",
+		0x17: "ZXCF",
+	},
+	0x02: { // ROM/RAM type add_ons
+		0x00: "Sam Ram",
+		0x01: "Multiface ONE",
+		0x02: "Multiface 128k",
+		0x03: "Multiface +3",
+		0x04: "MultiPrint",
+		0x05: "MB-02 ROM/RAM expansion",
+		0x06: "SoftROM",
+		0x07: "1k",
+		0x08: "16k",
+		0x09: "48k",
+		0x0a: "Memory in 8-16k used",
+	},
+	0x03: { // Sound devices
+		0x00: "Classic AY hardware (compatible with 128k ZXs)",
+		0x01: "Fuller Box AY sound hardware",
+		0x02: "Currah microSpeech",
+		0x03: "SpecDrum",
+		0x04: "AY ACB stereo (A+C=left, B+C=right); Melodik",
+		0x05: "AY ABC stereo (A+B=left, B+C=right)",
+		0x06: "RAM Music Machine",
+		0x07: "Covox",
+		0x08: "General Sound",
+		0x09: "Intec Electronics Digital Interface B8001",
+		0x0a: "Zon-X AY",
+		0x0b: "QuickSilva AY",
+		0x0c: "Jupiter ACE",
+	},
+	0x04: { // Joysticks
+		0x00: "Kempston",
+		0x01: "Cursor, Protek, AGF",
+		0x02: "Sinclair 2 Left (12345)",
+		0x03: "Sinclair 1 Right (67890)",
+		0x04: "Fuller",
+	},
+	0x05: { // Mice
+		0x00: "AMX mouse",
+		0x01: "Kempston mouse",
+	},
+	0x06: { // Other controllers
+		0x00: "Trickstick",
+		0x01: "ZX Light Gun",
+		0x02: "Zebra Graphics Tablet",
+		0x03: "Defender Light Gun",
+	},
+	0x07: { // Serial ports
+		0x00: "ZX Interface 1",
+		0x01: "ZX Spectrum 128k",
+	},
+	0x08: { // Parallel ports
+		0x00: "Kempston S",
+		0x01: "Kempston E",
+		0x02: "ZX Spectrum +3",
+		0x03: "Tasman",
+		0x04: "DK'Tronics",
+		0x05: "Hilderbay",
+		0x06: "INES Printerface",
+		0x07: "ZX LPrint Interface 3",
+		0x08: "MultiPrint",
+		0x09: "Opus Discovery",
+		0x0a: "Standard 8255 chip with ports 31,63,95",
+	},
+	0x09: { // Printers
+		0x00: "ZX Printer, Alphacom 32 & compatibles",
+		0x01: "Generic printer",
+		0x02: "EPSON compatible",
+	},
+	0x0a: { // Modems
+		0x00: "Prism VTX 5000",
+		0x01: "T/S 2050 or Westridge 2050",
+	},
+	0x0b: { // Digitizers
+		0x00: "RD Digital Tracer",
+		0x01: "DK'Tronics Light Pen",
+		0x02: "British MicroGraph Pad",
+		0x03: "Romantic Robot Videoface",
+	},
+	0x0c: { // Network adapters
+		0x00: "ZX Interface 1",
+	},
+	0x0d: { // Keyboards & keypads
+		0x00: "Keypad for ZX Spectrum 128k",
+	},
+	0x0e: { // AD/DA converters
+		0x00: "Harley Systems ADC 8.2",
+		0x01: "Blackboard Electronics",
+	},
+	0x0f: { // EPROM programmers
+		0x00: "Orme Electronics",
+	},
+	0x10: { // Graphics
+		0x00: "WRX Hi-Res",
+		0x01: "G007",
+		0x02: "Memotech",
+		0x03: "Lambda Colour",
+	},
+}
+
+var hwInfoIdMapper = scalar.UintMapDescription{
+	00: "RUNS on this machine or with this hardware, but may or may not use the hardware or special features of the machine.",
+	01: "USES the hardware or special features of the machine, such as extra memory or a sound chip.",
+	02: "RUNS but it DOESN'T use the hardware or special features of the machine.",
+	03: "DOESN'T RUN on this machine or with this hardware.",
+}

format/tzx/tzx.md

@@ -0,0 +1,17 @@
+`TZX` is a file format designed to preserve cassette tapes compatible with the
+ZX Spectrum computers, although some specialized versions of the format have
+been defined for other machines such as the Amstrad CPC and C64.
+
+The format was originally created by Tomaz Kac, who was maintainer until
+`revision 1.13`, before passing it to Martijn v.d. Heide. For a brief period
+the company Ramsoft became the maintainers, and created revision `v1.20`.
+
+The default file extension is `.tzx`.
+
+### Authors
+
+- Michael R. Cook work.mrc@pm.me, original author
+
+### References
+
+- https://worldofspectrum.net/TZXformat.html

go.mod

@@ -48,7 +48,7 @@ require (
 	// bump: gomod-golang-x-crypto /golang\.org\/x\/crypto v(.*)/ https://github.com/golang/crypto.git|^0
 	// bump: gomod-golang-x-crypto command go get -d golang.org/x/crypto@v$LATEST && go mod tidy
 	// bump: gomod-golang-x-crypto link "Tags" https://github.com/golang/crypto/tags
-	golang.org/x/crypto v0.25.0
+	golang.org/x/crypto v0.26.0
 
 	// has no tags
 	// go get -d golang.org/x/exp@master && go mod tidy
@@ -57,17 +57,17 @@ require (
 	// bump: gomod-golang-x-net /golang\.org\/x\/net v(.*)/ https://github.com/golang/net.git|^0
 	// bump: gomod-golang-x-net command go get -d golang.org/x/net@v$LATEST && go mod tidy
 	// bump: gomod-golang-x-net link "Tags" https://github.com/golang/net/tags
-	golang.org/x/net v0.27.0
+	golang.org/x/net v0.28.0
 
 	// bump: gomod-golang-x-term /golang\.org\/x\/term v(.*)/ https://github.com/golang/term.git|^0
 	// bump: gomod-golang-x-term command go get -d golang.org/x/term@v$LATEST && go mod tidy
 	// bump: gomod-golang-x-term link "Tags" https://github.com/golang/term/tags
-	golang.org/x/term v0.22.0
+	golang.org/x/term v0.23.0
 
 	// bump: gomod-golang/text /golang\.org\/x\/text v(.*)/ https://github.com/golang/text.git|^0
 	// bump: gomod-golang/text command go get -d golang.org/x/text@v$LATEST && go mod tidy
 	// bump: gomod-golang/text link "Source diff $CURRENT..$LATEST" https://github.com/golang/text/compare/v$CURRENT..v$LATEST
-	golang.org/x/text v0.16.0
+	golang.org/x/text v0.17.0
 
 	// bump: gomod-gopkg.in/yaml.v3 /gopkg\.in\/yaml\.v3 v(.*)/ https://github.com/go-yaml/yaml.git|^3
 	// bump: gomod-gopkg.in/yaml.v3 command go get -d gopkg.in/yaml.v3@v$LATEST && go mod tidy
@@ -79,6 +79,6 @@ require (
 	github.com/itchyny/timefmt-go v0.1.5 // indirect
 	github.com/mitchellh/reflectwalk v1.0.2 // indirect
 	github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e // indirect
-	golang.org/x/sys v0.22.0 // indirect
+	golang.org/x/sys v0.23.0 // indirect
 	gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f // indirect
 )

go.sum

@@ -25,18 +25,18 @@ github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e h1:fD57ERR4JtEqsWb
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
 github.com/wader/gojq v0.12.1-0.20240401131232-6c6bc364201a h1:P881Oecjt9FEXrwkGJ6UObJksxejJaF/fKq1ZfXpiVE=
 github.com/wader/gojq v0.12.1-0.20240401131232-6c6bc364201a/go.mod h1:qVrzkUdnBtJvM4twyRQ6xdziPSnSp35dLm4s/DN2iP4=
-golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30=
-golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M=
+golang.org/x/crypto v0.26.0 h1:RrRspgV4mU+YwB4FYnuBoKsUapNIL5cohGAmSH3azsw=
+golang.org/x/crypto v0.26.0/go.mod h1:GY7jblb9wI+FOo5y8/S2oY4zWP07AkOJ4+jxCqdqn54=
 golang.org/x/exp v0.0.0-20240325151524-a685a6edb6d8 h1:aAcj0Da7eBAtrTp03QXWvm88pSyOt+UgdZw2BFZ+lEw=
 golang.org/x/exp v0.0.0-20240325151524-a685a6edb6d8/go.mod h1:CQ1k9gNrJ50XIzaKCRR2hssIjF07kZFEiieALBM/ARQ=
-golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys=
-golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE=
-golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI=
-golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk=
-golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4=
-golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4=
-golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI=
+golang.org/x/net v0.28.0 h1:a9JDOJc5GMUJ0+UDqmLT86WiEy7iWyIhz8gz8E4e5hE=
+golang.org/x/net v0.28.0/go.mod h1:yqtgsTWOOnlGLG9GFRrK3++bGOUEkNBoHZc8MEDWPNg=
+golang.org/x/sys v0.23.0 h1:YfKFowiIMvtgl1UERQoTPPToxltDeZfbj4H7dVUCwmM=
+golang.org/x/sys v0.23.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/term v0.23.0 h1:F6D4vR+EHoL9/sWAWgAR1H2DcHr4PareCbAaCo1RpuU=
+golang.org/x/term v0.23.0/go.mod h1:DgV24QBUrK6jhZXl+20l6UWznPlwAHm1Q1mGHtydmSk=
+golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc=
+golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f h1:BLraFXnmrev5lT+xlilqcH8XK9/i0At2xKjWk4p6zsU=
 gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=