/ImHex-Patterns

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

Primary LanguageRustGNU General Public License v2.0GPL-2.0

ImHex-Patterns

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

Table of Contents

Hex Patterns

Name MIME Path Description
BMP image/bmp patterns/bmp.hexpat OS2/Windows Bitmap files
ELF application/x-executable patterns/elf.hexpat ELF header in elf binaries
PE application/x-dosexec patterns/pe.hexpat PE header, COFF header, Standard COFF fields and Windows Specific fields
NE patterns/ne.hexpat NE header and Standard NE fields
Intel HEX patterns/intel_hex.hexpat Intel hexadecimal object file format definition
MIDI audio/midi patterns/midi.hexpat MIDI header, event fields provided
WAV audio/wav patterns/wav.hexpat RIFF header, WAVE header, PCM header
ZIP application/zip patterns/zip.hexpat End of Central Directory Header, Central Directory File Headers
PCAP application/vnd.tcpdump.pcap patterns/pcap.hexpat pcap header and packets
SPIRV patterns/spirv.hexpat SPIR-V header and instructions
AFE2 patterns/afe2.hexpat Nintendo Switch Atmosphère CFW Fatal Error log
AR application/x-archive patterns/ar.hexpat Static library archive files
NACP patterns/nacp.hexpat Nintendo Switch NACP files
NRO patterns/nro.hexpat Nintendo Switch NRO files
PRODINFO patterns/prodinfo.hexpat Nintendo Switch PRODINFO
Java Class application/x-java-applet patterns/java_class.hexpat Java Class files
ARM VTOR patterns/arm_cm_vtor.hexpat ARM Cortex M Vector Table Layout
ICO patterns/ico.hexpat Icon (.ico) or Cursor (.cur) files
PNG image/png patterns/png.hexpat PNG image files
DDS image/vnd-ms.dds patterns/dds.hexpat DirectDraw Surface
TGA image/tga patterns/tga.hexpat Truevision TGA/TARGA image
ISO patterns/iso.hexpat ISO 9660 file system
VDF patterns/vdf.hexpat Binary Value Data Format (.vdf) files
IP patterns/ip.hexpat Ethernet II Frames (IP Packets)
UF2 patterns/uf2.hexpat USB Flashing Format
File System patterns/fs.hexpat Drive File System
Bencode application/x-bittorrent patterns/bencode.hexpat Bencode encoding, used by Torrent files
Protobuf patterns/protobuf.hexpat Google Protobuf encoding
OGG audio/ogg patterns/ogg.hexpat OGG Audio format
STL model/stl patterns/stl.hexpat STL 3D Model format
VHDX patterns/vhdx.hexpat Microsoft Hyper-V Virtual Hard Disk format
NTAG patterns/ntag.hexpat NTAG213/NTAG215/NTAG216, NFC Forum Type 2 Tag compliant IC
Shell Link application/x-ms-shortcut patterns/lnk.hexpat Windows Shell Link file format
Xilinx BIT patterns/xilinx_bit.hexpat Xilinx FPGA Bitstreams
FLAC audio/flac patterns/flac.hexpat Free Lossless Audio Codec, FLAC Audio Format
BSON application/bson patterns/bson.hexpat BSON (Binary JSON) format
msgpack application/x-msgpack patterns/msgpack.hexpat MessagePack binary serialization format
MiniDump application/x-dmp patterns/minidump.hexpat Windows MiniDump files
ID3 audio/mpeg patterns/id3tag.hexpat ID3 tags in MP3 files
TAR application/x-tar patterns/tar.hexpat Tar file format
CPIO application/x-cpio patterns/cpio.hexpat Old Binary CPIO Format
FDT patterns/fdt.hexpat Flat Linux Device Tree blob
StuffItV5 application/x-stuffit patterns/sit5.hexpat StuffIt V5 archive
NBT patterns/nbt.hexpat Minecraft NBT format
PCX application/x-pcx patterns/pcx.hexpat PCX Image format
GZIP application/gzip patterns/gzip.hexpat GZip compressed data format
PFS0 patterns/pfs0.hexpat Nintendo Switch PFS0 archive (NSP files)
XCI patterns/xci.hexpat Nintendo Switch XCI cardridge ROM
WAD patterns/wad.hexpat DOOM WAD Archive
GIF image/gif patterns/gif.hexpat GIF image files
ZSTD application/zstd patterns/zstd.hexpat Zstandard compressed data format
COFF application/x-coff patterns/coff.hexpat Common Object File Format (COFF) executable
Mach-O application/x-mach-binary patterns/macho.hexpat Mach-O executable
CHM patterns/chm.hexpat Windows HtmlHelp Data (ITSF / CHM)
DMG patterns/dmg.hexpat Apple Disk Image Trailer (DMG)

Scripts

Name Path Description
svd2pat scripts/svd2pat.py Converts a ARM .svd register MMIO definition file into a pattern
csv2tbl scripts/csv2tbl.py Converts a 010 editor CSV encoding file into a table file

Pattern Libraries

Name Path Description
libstd includes/std/* Pattern Language Standard Libaray
libtype includes/type/* Various custom types with special formatters
libhex includes/hex/* Functions to interact with ImHex

Yara rules

Name Path Description
Official Rules yara/official_rules/* Official Yara rules repository

Magic files

Name Path Description
Nintendo Switch magic/nintendo_switch_magic Identifies common file types used on the Nintendo Switch
Portable Executable magic/portable_executable_magic Identifies PE files used on Windows

Constants files

Name Path Description
CRC-16 constants/crc16.json Constants associated with CRC-16 operations
CRC-32 constants/crc32.json Constants associated with CRC-32 operations
HTTP-Codes constants/http_status.json HTTP Status code values
Linux Error Codes constants/linux_errors.json Values of Linux error results

Encoding files

Name Path Description
Arabic ISO encodings/arabic_iso.tbl Arabic ISO encoding
Arabic Windows encodings/arabic_windows.tbl Arabic Windows encoding
ASCII encodings/ascii.tbl Regular ASCII encoding
ASCII+ANSI encodings/ascii_ansi.tbl Extended ASCII encoding
ASCII+OEM encodings/ascii_oem.tbl ASCII encoding with Windows OEM characters
Baltic ISO encodings/baltic_iso.tbl Baltic ISO encoding
Baltic Windows encodings/baltic_windows.tbl Baltic Windows encoding
Cyrillic ISO encodings/cyrillic_iso.tbl Cyrillic ISO encoding
Cyrillic Windows encodings/cyrillic_windows.tbl Cyrillic Windows encoding
Cyrillic KOI8-R encodings/cyrillic_koi8_r.tbl Cyrillic KOI8-R encoding (Russian Characters)
Cyrillic KOI8-U encodings/cyrillic_koi8_u.tbl Cyrillic KOI8-U encoding (Ukranian Characters)
Eastern Europe ISO encodings/eastern_europe_iso.tbl Eastern Europe ISO encoding
Eastern Europe Windows encodings/eastern_europe_windows.tbl Eastern Europe Windows encoding
EBCDIC encodings/ebcdic.tbl Extended Binary Coded Decimal Interchange Code, developed by IBM for their Main Frames
EUC-JP encodings/euc_jp.tbl EUC-JP encoding with NEC special and IBM extended characters
EUC-KR encodings/euc_kr.tbl EUC-KR encoding
Greek ISO encodings/greek_iso.tbl Greek ISO encoding
Greek Windows encodings/greek_windows.tbl Greek Windows encoding
Hebrew ISO encodings/hebrew_iso.tbl Hebrew ISO encoding
Hebrew Windows encodings/hebrew_windows.tbl Hebrew Windows encoding
ISO/IEC 646 encodings/iso_646.tbl ISO/IEC 646 encoding, an older version of ASCII
ISO/IEC 6937 encodings/iso_6937.tbl ISO/IEC 6937 encoding, an extension of ASCII containing additional character
JIS 0201 encodings/jis_x_0201.tbl JIS X 0201 encoding in UTF-8
JIS X 0211 encodings/jis_x_0211.tbl JIS X 0211 encoding in UTF-8
JIS 0213 encodings/jis_x_0213.tbl JIS X 0213 encoding in UTF-8
Macintosh encodings/macintosh.tbl Macintosh character encoding used by the Kermit protocol
Pokémon (English, Generation 1) encodings/pokegen1_en.tbl Character encoding used by the English generation 1 Pokémon games
Shift-JIS UTF-8 encodings/shiftjis.tbl Shift-JIS encoding in UTF-8
Thai encodings/thai.tbl Thai character encoding
Turkish ISO encodings/turkish_iso.tbl Turkish ISO encoding
Turkish Windows encodings/turkish_windows.tbl Turkish Windows encoding
UTF-8 encodings/utf8.tbl UTF-8 encoding
Vietnamese encodings/vietnamese.tbl Vietnamese character encoding

Contributing

If you want to contribute a file to the database, please make a PR which adds it to the right folder and adds a new entry to the table in this readme. To take advantage of the automatic pattern testing, please consider adding a test file named <pattern_name>.hexpat.<extension> to the /tests/patterns/test_data directory. Try to keep this file as small as possible so the repository doesn't become excessively large

Thanks a lot :)