ImHex Database

This repository serves as a database for files to use with the ImHex Hex Editor. It currently contains

Patterns - Binary Format definitions for the Pattern Language
Pattern Libraries - Libraries that make using the Pattern Language easier
Magic Files - Custom magic file definitions for the use with libmagic
Encodings - Custom encodings in the .tbl format
Data Processor Nodes - Custom nodes made for ImHex's Data Processor
Themes - Custom themes for ImHex
Constants - Constants definition files
Scripts - Various scripts to generate code or automate some tasks
Yara - Custom Yara rules

Submissions

Most files in this repository have been submitted by the community. Please feel free to open a PR on your own and add files to it! Everything will immediately show up in ImHex's Content Store and gets bundled with the next release of ImHex.

Hex Patterns

Name	MIME	Path	Description
BMP	`image/bmp`	`patterns/bmp.hexpat`	OS2/Windows Bitmap files
ELF	`application/x-executable`	`patterns/elf.hexpat`	ELF header in elf binaries
PE	`application/x-dosexec`	`patterns/pe.hexpat`	PE header, COFF header, Standard COFF fields and Windows Specific fields
NE		`patterns/ne.hexpat`	NE header and Standard NE fields
Intel HEX		`patterns/intel_hex.hexpat`	Intel hexadecimal object file format definition
MIDI	`audio/midi`	`patterns/midi.hexpat`	MIDI header, event fields provided
WAV	`audio/wav`	`patterns/wav.hexpat`	RIFF header, WAVE header, PCM header
ZIP	`application/zip`	`patterns/zip.hexpat`	End of Central Directory Header, Central Directory File Headers
PCAP	`application/vnd.tcpdump.pcap`	`patterns/pcap.hexpat`	pcap header and packets
SPIRV		`patterns/spirv.hexpat`	SPIR-V header and instructions
AFE2		`patterns/afe2.hexpat`	Nintendo Switch Atmosphère CFW Fatal Error log
AR	`application/x-archive`	`patterns/ar.hexpat`	Static library archive files
NACP		`patterns/nacp.hexpat`	Nintendo Switch NACP files
NRO		`patterns/nro.hexpat`	Nintendo Switch NRO files
PRODINFO		`patterns/prodinfo.hexpat`	Nintendo Switch PRODINFO
Java Class	`application/x-java-applet`	`patterns/java_class.hexpat`	Java Class files
ARM VTOR		`patterns/arm_cm_vtor.hexpat`	ARM Cortex M Vector Table Layout
ICO		`patterns/ico.hexpat`	Icon (.ico) or Cursor (.cur) files
PNG	`image/png`	`patterns/png.hexpat`	PNG image files
QOI	`image/qoi`	`patterns/qoi.hexpat`	QOI image files
DDS	`image/vnd-ms.dds`	`patterns/dds.hexpat`	DirectDraw Surface
TGA	`image/tga`	`patterns/tga.hexpat`	Truevision TGA/TARGA image
ISO		`patterns/iso.hexpat`	ISO 9660 file system
VDF		`patterns/vdf.hexpat`	Binary Value Data Format (.vdf) files
IP		`patterns/ip.hexpat`	Ethernet II Frames (IP Packets)
UF2		`patterns/uf2.hexpat`	USB Flashing Format
File System		`patterns/fs.hexpat`	Drive File System
Bencode	`application/x-bittorrent`	`patterns/bencode.hexpat`	Bencode encoding, used by Torrent files
Protobuf		`patterns/protobuf.hexpat`	Google Protobuf encoding
OGG	`audio/ogg`	`patterns/ogg.hexpat`	OGG Audio format
STL	`model/stl`	`patterns/stl.hexpat`	STL 3D Model format
VHDX		`patterns/vhdx.hexpat`	Microsoft Hyper-V Virtual Hard Disk format
NTAG		`patterns/ntag.hexpat`	NTAG213/NTAG215/NTAG216, NFC Forum Type 2 Tag compliant IC
Shell Link	`application/x-ms-shortcut`	`patterns/lnk.hexpat`	Windows Shell Link file format
Xilinx BIT		`patterns/xilinx_bit.hexpat`	Xilinx FPGA Bitstreams
FLAC	`audio/flac`	`patterns/flac.hexpat`	Free Lossless Audio Codec, FLAC Audio Format
BSON	`application/bson`	`patterns/bson.hexpat`	BSON (Binary JSON) format
msgpack	`application/x-msgpack`	`patterns/msgpack.hexpat`	MessagePack binary serialization format
MiniDump	`application/x-dmp`	`patterns/minidump.hexpat`	Windows MiniDump files
ID3	`audio/mpeg`	`patterns/id3.hexpat`	ID3 tags in MP3 files
TAR	`application/x-tar`	`patterns/tar.hexpat`	Tar file format
CPIO	`application/x-cpio`	`patterns/cpio.hexpat`	Old Binary CPIO Format
FDT		`patterns/fdt.hexpat`	Flat Linux Device Tree blob
StuffItV5	`application/x-stuffit`	`patterns/sit5.hexpat`	StuffIt V5 archive
NBT		`patterns/nbt.hexpat`	Minecraft NBT format
PCX	`application/x-pcx`	`patterns/pcx.hexpat`	PCX Image format
GZIP	`application/gzip`	`patterns/gzip.hexpat`	GZip compressed data format
PFS0		`patterns/pfs0.hexpat`	Nintendo Switch PFS0 archive (NSP files)
XCI		`patterns/xci.hexpat`	Nintendo Switch XCI cardridge ROM
WAD		`patterns/wad.hexpat`	DOOM WAD Archive
GIF	`image/gif`	`patterns/gif.hexpat`	GIF image files
ZSTD	`application/zstd`	`patterns/zstd.hexpat`	Zstandard compressed data format
COFF	`application/x-coff`	`patterns/coff.hexpat`	Common Object File Format (COFF) executable
Mach-O	`application/x-mach-binary`	`patterns/macho.hexpat`	Mach-O executable
CHM		`patterns/chm.hexpat`	Windows HtmlHelp Data (ITSF / CHM)
DMG		`patterns/dmg.hexpat`	Apple Disk Image Trailer (DMG)
XBEH	`audio/x-xbox-executable`	`patterns/xbeh.hexpat`	Xbox executable
QBCL		`patterns/qbcl.hexpat`	Qubicle voxel scene project file
CCHVA		`patterns/cchva.hexpat`	Command and Conquer Voxel Animation
CCVXL		`patterns/ccvxl.hexpat`	Command and Conquer Voxel Model
CCPAL		`patterns/ccpal.hexpat`	Command and Conquer Voxel Palette
PIF	`image/pif`	`patterns/pif.hexpat`	PIF Image Format
JPEG	`image/jpeg`	`patterns/jpeg.hexpat`	JPEG Image Format
Lua 5.4		`patterns/lua54.hexpat`	Lua 5.4 bytecode
DEX		`patterns/dex.hexpat`	Dalvik EXecutable Format
DS_Store	`application/octet-stream`	`patterns/dsstore.hexpat`	.DS_Store file format
UEFI		`patterns/uefi.hexpat``	UEFI structs for parsing efivars
EVTX		`patterns/evtx.hexpat`	MS Windows Vista Event Log
BSP		`patterns/bsp_goldsrc.hexpat`	GoldSrc engine maps format (used in Half-Life 1)

Scripts

Name	Path	Description
svd2pat	`scripts/svd2pat.py`	Converts a ARM .svd register MMIO definition file into a pattern
csv2tbl	`scripts/csv2tbl.py`	Converts a 010 editor CSV encoding file into a table file

Pattern Libraries

Name	Path	Description
libstd	`includes/std/*`	Pattern Language Standard Libaray
libtype	`includes/type/*`	Various custom types with special formatters
libhex	`includes/hex/*`	Functions to interact with ImHex

Yara rules

Name	Path	Description
Official Rules	`yara/official_rules/*`	Official Yara rules repository

Magic files

Name	Path	Description
Nintendo Switch	`magic/nintendo_switch_magic`	Identifies common file types used on the Nintendo Switch
Portable Executable	`magic/portable_executable_magic`	Identifies PE files used on Windows

Constants files

Name	Path	Description
CRC-16	`constants/crc16.json`	Constants associated with CRC-16 operations
CRC-32	`constants/crc32.json`	Constants associated with CRC-32 operations
HTTP-Codes	`constants/http_status.json`	HTTP Status code values
Linux Error Codes	`constants/linux_errors.json`	Values of Linux error results

Encoding files

Name	Path	Description
Arabic ISO	`encodings/arabic_iso.tbl`	Arabic ISO encoding
Arabic Windows	`encodings/arabic_windows.tbl`	Arabic Windows encoding
ASCII	`encodings/ascii.tbl`	Regular ASCII encoding
ASCII+ANSI	`encodings/ascii_ansi.tbl`	Extended ASCII encoding
ASCII+OEM	`encodings/ascii_oem.tbl`	ASCII encoding with Windows OEM characters
Baltic ISO	`encodings/baltic_iso.tbl`	Baltic ISO encoding
Baltic Windows	`encodings/baltic_windows.tbl`	Baltic Windows encoding
Cyrillic ISO	`encodings/cyrillic_iso.tbl`	Cyrillic ISO encoding
Cyrillic Windows	`encodings/cyrillic_windows.tbl`	Cyrillic Windows encoding
Cyrillic KOI8-R	`encodings/cyrillic_koi8_r.tbl`	Cyrillic KOI8-R encoding (Russian Characters)
Cyrillic KOI8-U	`encodings/cyrillic_koi8_u.tbl`	Cyrillic KOI8-U encoding (Ukranian Characters)
Eastern Europe ISO	`encodings/eastern_europe_iso.tbl`	Eastern Europe ISO encoding
Eastern Europe Windows	`encodings/eastern_europe_windows.tbl`	Eastern Europe Windows encoding
EBCDIC	`encodings/ebcdic.tbl`	Extended Binary Coded Decimal Interchange Code, developed by IBM for their Main Frames
EUC-JP	`encodings/euc_jp.tbl`	EUC-JP encoding with NEC special and IBM extended characters
EUC-KR	`encodings/euc_kr.tbl`	EUC-KR encoding
Greek ISO	`encodings/greek_iso.tbl`	Greek ISO encoding
Greek Windows	`encodings/greek_windows.tbl`	Greek Windows encoding
Hebrew ISO	`encodings/hebrew_iso.tbl`	Hebrew ISO encoding
Hebrew Windows	`encodings/hebrew_windows.tbl`	Hebrew Windows encoding
ISO/IEC 646	`encodings/iso_646.tbl`	ISO/IEC 646 encoding, an older version of ASCII
ISO/IEC 6937	`encodings/iso_6937.tbl`	ISO/IEC 6937 encoding, an extension of ASCII containing additional character
JIS 0201	`encodings/jis_x_0201.tbl`	JIS X 0201 encoding in UTF-8
JIS X 0211	`encodings/jis_x_0211.tbl`	JIS X 0211 encoding in UTF-8
JIS 0213	`encodings/jis_x_0213.tbl`	JIS X 0213 encoding in UTF-8
Macintosh	`encodings/macintosh.tbl`	Macintosh character encoding used by the Kermit protocol
Pokémon (English, Generation 1)	`encodings/pokegen1_en.tbl`	Character encoding used by the English generation 1 Pokémon games
Pokémon (English, Generation 3)	`encodings/pokegen3_en.tbl`	Character encoding used by the English generation 3 Pokémon games
Shift-JIS UTF-8	`encodings/shiftjis.tbl`	Shift-JIS encoding in UTF-8
Thai	`encodings/thai.tbl`	Thai character encoding
Turkish ISO	`encodings/turkish_iso.tbl`	Turkish ISO encoding
Turkish Windows	`encodings/turkish_windows.tbl`	Turkish Windows encoding
UTF-8	`encodings/utf8.tbl`	UTF-8 encoding
Vietnamese	`encodings/vietnamese.tbl`	Vietnamese character encoding

Data Processor Nodes

Name	Path	Description
Caesar Cipher	`nodes/caesar.hexnode`	Simple adjustable per-byte Caecar Cipher (ROT)
XOR Cipher	`nodes/xor.hexnode`	XORs a input with a repeating XOR pad

Themes

Name	Path	Description
Visual Studio Dark	`themes/vs_dark.json`	Theme similar to Visual Studio's Dark theme
Solarized Dark	`themes/solarized_dark.json`	Solarized Dark Theme

Berylskid / ImHex-Patterns