ImHex Database

This repository serves as a database for files to use with the ImHex Hex Editor. It currently contains

• Patterns - Binary Format definitions for the Pattern Language
• Pattern Libraries - Libraries that make using the Pattern Language easier
• Magic Files - Custom magic file definitions for the use with libmagic
• Encodings - Custom encodings in the .tbl format
• Data Processor Nodes - Custom nodes made for ImHex's Data Processor
• Themes - Custom themes for ImHex
• Constants - Constants definition files
• Scripts - Various scripts to generate code or automate some tasks
• Yara - Custom Yara rules

Submissions

Most files in this repository have been submitted by the community. Please feel free to open a PR on your own and add files to it! Everything will immediately show up in ImHex's Content Store and gets bundled with the next release of ImHex.

Table of Contents

Hex Patterns

Name	MIME	Path	Description
BMP	image/bmp	patterns/bmp.hexpat	OS2/Windows Bitmap files
ELF	application/x-executable	patterns/elf.hexpat	ELF header in elf binaries
PE	application/x-dosexec	patterns/pe.hexpat	PE header, COFF header, Standard COFF fields and Windows Specific fields
NE		patterns/ne.hexpat	NE header and Standard NE fields
Intel HEX		patterns/intel_hex.hexpat	Intel hexadecimal object file format definition
MIDI	audio/midi	patterns/midi.hexpat	MIDI header, event fields provided
WAV	audio/wav	patterns/wav.hexpat	RIFF header, WAVE header, PCM header
ZIP	application/zip	patterns/zip.hexpat	End of Central Directory Header, Central Directory File Headers
PCAP	application/vnd.tcpdump.pcap	patterns/pcap.hexpat	pcap header and packets
SPIRV		patterns/spirv.hexpat	SPIR-V header and instructions
AFE2		patterns/afe2.hexpat	Nintendo Switch Atmosphère CFW Fatal Error log
AR	application/x-archive	patterns/ar.hexpat	Static library archive files
NACP		patterns/nacp.hexpat	Nintendo Switch NACP files
NRO		patterns/nro.hexpat	Nintendo Switch NRO files
PRODINFO		patterns/prodinfo.hexpat	Nintendo Switch PRODINFO
Java Class	application/x-java-applet	patterns/java_class.hexpat	Java Class files
ARM VTOR		patterns/arm_cm_vtor.hexpat	ARM Cortex M Vector Table Layout
ICO		patterns/ico.hexpat	Icon (.ico) or Cursor (.cur) files
PNG	image/png	patterns/png.hexpat	PNG image files
QOI	image/qoi	patterns/qoi.hexpat	QOI image files
DDS	image/vnd-ms.dds	patterns/dds.hexpat	DirectDraw Surface
TGA	image/tga	patterns/tga.hexpat	Truevision TGA/TARGA image
ISO		patterns/iso.hexpat	ISO 9660 file system
VDF		patterns/vdf.hexpat	Binary Value Data Format (.vdf) files
IP		patterns/ip.hexpat	Ethernet II Frames (IP Packets)
UF2		patterns/uf2.hexpat	USB Flashing Format
File System		patterns/fs.hexpat	Drive File System
Bencode	application/x-bittorrent	patterns/bencode.hexpat	Bencode encoding, used by Torrent files
Protobuf		patterns/protobuf.hexpat	Google Protobuf encoding
OGG	audio/ogg	patterns/ogg.hexpat	OGG Audio format
STL	model/stl	patterns/stl.hexpat	STL 3D Model format
VHDX		patterns/vhdx.hexpat	Microsoft Hyper-V Virtual Hard Disk format
NTAG		patterns/ntag.hexpat	NTAG213/NTAG215/NTAG216, NFC Forum Type 2 Tag compliant IC
Shell Link	application/x-ms-shortcut	patterns/lnk.hexpat	Windows Shell Link file format
Xilinx BIT		patterns/xilinx_bit.hexpat	Xilinx FPGA Bitstreams
FLAC	audio/flac	patterns/flac.hexpat	Free Lossless Audio Codec, FLAC Audio Format
BSON	application/bson	patterns/bson.hexpat	BSON (Binary JSON) format
msgpack	application/x-msgpack	patterns/msgpack.hexpat	MessagePack binary serialization format
MiniDump	application/x-dmp	patterns/minidump.hexpat	Windows MiniDump files
ID3	audio/mpeg	patterns/id3.hexpat	ID3 tags in MP3 files
TAR	application/x-tar	patterns/tar.hexpat	Tar file format
CPIO	application/x-cpio	patterns/cpio.hexpat	Old Binary CPIO Format
FDT		patterns/fdt.hexpat	Flat Linux Device Tree blob
StuffItV5	application/x-stuffit	patterns/sit5.hexpat	StuffIt V5 archive
NBT		patterns/nbt.hexpat	Minecraft NBT format
PCX	application/x-pcx	patterns/pcx.hexpat	PCX Image format
GZIP	application/gzip	patterns/gzip.hexpat	GZip compressed data format
PFS0		patterns/pfs0.hexpat	Nintendo Switch PFS0 archive (NSP files)
XCI		patterns/xci.hexpat	Nintendo Switch XCI cardridge ROM
WAD		patterns/wad.hexpat	DOOM WAD Archive
GIF	image/gif	patterns/gif.hexpat	GIF image files
ZSTD	application/zstd	patterns/zstd.hexpat	Zstandard compressed data format
COFF	application/x-coff	patterns/coff.hexpat	Common Object File Format (COFF) executable
Mach-O	application/x-mach-binary	patterns/macho.hexpat	Mach-O executable
CHM		patterns/chm.hexpat	Windows HtmlHelp Data (ITSF / CHM)
DMG		patterns/dmg.hexpat	Apple Disk Image Trailer (DMG)
XBEH	audio/x-xbox-executable	patterns/xbeh.hexpat	Xbox executable
QBCL		patterns/qbcl.hexpat	Qubicle voxel scene project file
CCHVA		patterns/cchva.hexpat	Command and Conquer Voxel Animation
CCVXL		patterns/ccvxl.hexpat	Command and Conquer Voxel Model
CCPAL		patterns/ccpal.hexpat	Command and Conquer Voxel Palette
PIF	image/pif	patterns/pif.hexpat	PIF Image Format
JPEG	image/jpeg	patterns/jpeg.hexpat	JPEG Image Format
Lua 5.4		patterns/lua54.hexpat	Lua 5.4 bytecode
DEX		patterns/dex.hexpat	Dalvik EXecutable Format
DS_Store	application/octet-stream	patterns/dsstore.hexpat	.DS_Store file format
UEFI		patterns/uefi.hexpat`	UEFI structs for parsing efivars
EVTX		patterns/evtx.hexpat	MS Windows Vista Event Log
BSP		patterns/bsp_goldsrc.hexpat	GoldSrc engine maps format (used in Half-Life 1)

Scripts

Name	Path	Description
svd2pat	scripts/svd2pat.py	Converts a ARM .svd register MMIO definition file into a pattern
csv2tbl	scripts/csv2tbl.py	Converts a 010 editor CSV encoding file into a table file

Pattern Libraries

Name	Path	Description
libstd	includes/std/*	Pattern Language Standard Libaray
libtype	includes/type/*	Various custom types with special formatters
libhex	includes/hex/*	Functions to interact with ImHex

Yara rules

Name	Path	Description
Official Rules	yara/official_rules/*	Official Yara rules repository

Magic files

Name	Path	Description
Nintendo Switch	magic/nintendo_switch_magic	Identifies common file types used on the Nintendo Switch
Portable Executable	magic/portable_executable_magic	Identifies PE files used on Windows

Constants files

Name	Path	Description
CRC-16	constants/crc16.json	Constants associated with CRC-16 operations
CRC-32	constants/crc32.json	Constants associated with CRC-32 operations
HTTP-Codes	constants/http_status.json	HTTP Status code values
Linux Error Codes	constants/linux_errors.json	Values of Linux error results

Encoding files

Name	Path	Description
Arabic ISO	encodings/arabic_iso.tbl	Arabic ISO encoding
Arabic Windows	encodings/arabic_windows.tbl	Arabic Windows encoding
ASCII	encodings/ascii.tbl	Regular ASCII encoding
ASCII+ANSI	encodings/ascii_ansi.tbl	Extended ASCII encoding
ASCII+OEM	encodings/ascii_oem.tbl	ASCII encoding with Windows OEM characters
Baltic ISO	encodings/baltic_iso.tbl	Baltic ISO encoding
Baltic Windows	encodings/baltic_windows.tbl	Baltic Windows encoding
Cyrillic ISO	encodings/cyrillic_iso.tbl	Cyrillic ISO encoding
Cyrillic Windows	encodings/cyrillic_windows.tbl	Cyrillic Windows encoding
Cyrillic KOI8-R	encodings/cyrillic_koi8_r.tbl	Cyrillic KOI8-R encoding (Russian Characters)
Cyrillic KOI8-U	encodings/cyrillic_koi8_u.tbl	Cyrillic KOI8-U encoding (Ukranian Characters)
Eastern Europe ISO	encodings/eastern_europe_iso.tbl	Eastern Europe ISO encoding
Eastern Europe Windows	encodings/eastern_europe_windows.tbl	Eastern Europe Windows encoding
EBCDIC	encodings/ebcdic.tbl	Extended Binary Coded Decimal Interchange Code, developed by IBM for their Main Frames
EUC-JP	encodings/euc_jp.tbl	EUC-JP encoding with NEC special and IBM extended characters
EUC-KR	encodings/euc_kr.tbl	EUC-KR encoding
Greek ISO	encodings/greek_iso.tbl	Greek ISO encoding
Greek Windows	encodings/greek_windows.tbl	Greek Windows encoding
Hebrew ISO	encodings/hebrew_iso.tbl	Hebrew ISO encoding
Hebrew Windows	encodings/hebrew_windows.tbl	Hebrew Windows encoding
ISO/IEC 646	encodings/iso_646.tbl	ISO/IEC 646 encoding, an older version of ASCII
ISO/IEC 6937	encodings/iso_6937.tbl	ISO/IEC 6937 encoding, an extension of ASCII containing additional character
JIS 0201	encodings/jis_x_0201.tbl	JIS X 0201 encoding in UTF-8
JIS X 0211	encodings/jis_x_0211.tbl	JIS X 0211 encoding in UTF-8
JIS 0213	encodings/jis_x_0213.tbl	JIS X 0213 encoding in UTF-8
Macintosh	encodings/macintosh.tbl	Macintosh character encoding used by the Kermit protocol
Pokémon (English, Generation 1)	encodings/pokegen1_en.tbl	Character encoding used by the English generation 1 Pokémon games
Pokémon (English, Generation 3)	encodings/pokegen3_en.tbl	Character encoding used by the English generation 3 Pokémon games
Shift-JIS UTF-8	encodings/shiftjis.tbl	Shift-JIS encoding in UTF-8
Thai	encodings/thai.tbl	Thai character encoding
Turkish ISO	encodings/turkish_iso.tbl	Turkish ISO encoding
Turkish Windows	encodings/turkish_windows.tbl	Turkish Windows encoding
UTF-8	encodings/utf8.tbl	UTF-8 encoding
Vietnamese	encodings/vietnamese.tbl	Vietnamese character encoding

Data Processor Nodes

Name	Path	Description
Caesar Cipher	nodes/caesar.hexnode	Simple adjustable per-byte Caecar Cipher (ROT)
XOR Cipher	nodes/xor.hexnode	XORs a input with a repeating XOR pad

Themes

Name	Path	Description
Visual Studio Dark	themes/vs_dark.json	Theme similar to Visual Studio's Dark theme
Solarized Dark	themes/solarized_dark.json	Solarized Dark Theme