Zackary Newman
69077b919d
patterns/ext4: Increase pattern limit to 2 GiB ( #440 )
2025-09-12 22:42:55 +02:00
Nightowl
297f611fed
patterns: Add terminfo pattern ( #437 )
...
* patterns/terminfo: Add pattern for compiled term info entry files.
This adds support for the compiled (legacy and extended) term info entry files that are used for determining terminal capabilities.
* Add .bin extension to the terminfo test file.
2025-09-09 22:39:59 +02:00
DmitriLeon2000
b24ae36638
patterns: Add .gmf (Game Maker 3.x Data) pattern file and its test files ( #438 )
...
* Add .fas and .was pattern files (Oska DeskMates)
* Update .was pattern file
* Update .was/.wa3 pattern file
* Update README.md
* Update README.md
* Update .fas & .was pattern files
* Update README.md
* Update fas_oskasoftware_old.hexpat
* Added WAS test file
* Update WAS test file
* Update was_oskasoftware.hexpat
* Update was_oskasoftware.hexpat
* Update fas_oskasoftware_old.hexpat
* Update fas_oskasoftware.hexpat
* Update README.md
Replacing backward slashes with forward ones in the `WAS` row.
* Update fas_oskasoftware_old.hexpat
* Update was_oskasoftware.hexpat
* Add files via upload
* Add Game Maker 3.x Data pattern
* Update gmf.hexpat
2025-09-09 18:22:02 +02:00
Zackary Newman
50d776f497
patterns/ext4: Fix group descriptor table location for non-1024 block sizes ( #439 )
2025-09-09 18:21:12 +02:00
Nik
75bcb487ee
patterns/ico: Fixed duplicate variable name
2025-09-01 22:22:43 +02:00
Ivy Fan-Chiang
fb214600ec
patterns/ico: Add embedded BMP and PNG parsing to ICO pattern ( #426 )
...
Co-authored-by: Nik <werwolv98@gmail.com >
2025-08-31 14:32:21 +02:00
Kris Dekeyser
d95390ea42
patterns/jpeg: added support for extra data in APP0 section ( #417 )
...
Apple Multi-Picture Format JPEGs often have 4 extra bytes in the APP0 section. The pattern now skips any extra bytes beyond the fixed APP0 data.
Co-authored-by: Nik <werwolv98@gmail.com >
2025-08-31 11:40:27 +02:00
Marc Jones
284ca8d325
patterns: Add UEFI Firmare Volume Variable Store pattern ( #421 )
...
* Add UEFI Firmare Volume Variable Store pattern
Add a pattern for UEFI Firmare Volume Variable store.
This file type is commonly used with virtual machine UEFI variable files,
like OVMF.fd used with QEMU. You could also extract a UEFI firmware binary
from a flash device, search for the FV Variable Store, and set this pattern
to the FV address.
Signed-off-by: Marc Jones <marcj303@gmail.com >
* Fixed description pragma
---------
Signed-off-by: Marc Jones <marcj303@gmail.com >
Co-authored-by: Nik <werwolv98@gmail.com >
2025-08-31 11:38:32 +02:00
ODeux
6630180276
patterns: Add .NET BinaryFormatter pattern ( #416 )
...
* Add dotnet BinaryFormatter pattern
* Add dotnet BinaryFormatter test
* Update README.md
---------
Co-authored-by: Nik <werwolv98@gmail.com >
2025-08-31 11:37:59 +02:00
Henri Asseily
ff68d1e23d
patterns: Added Apple IIGS SHR + SHR 3200 + SHR PWA Animation pattern ( #432 )
...
* Added SHR pattern
* Added IIGS SHR animation test file
* Added pattern to readme
* Added description and author
---------
Co-authored-by: Nik <werwolv98@gmail.com >
2025-08-31 11:36:00 +02:00
Tom Arrow
70dd55aa6b
patterns/q3demo: Quake 3 demos: Handle corrupted files more gracefully ( #414 )
...
Quake 3 demos: Basic safeguard against corrupted files
Co-authored-by: Tom <tomarrowtomarrow@hotmail.com >
2025-08-31 11:31:20 +02:00
DmitriLeon2000
76f850c543
patterns/fas/was: Update FAS, WAS/WA3 pattern files and README.md ( #425 )
...
* Add .fas and .was pattern files (Oska DeskMates)
* Update .was pattern file
* Update .was/.wa3 pattern file
* Update README.md
* Update README.md
* Update .fas & .was pattern files
* Update README.md
* Update fas_oskasoftware_old.hexpat
* Added WAS test file
* Update WAS test file
* Update was_oskasoftware.hexpat
* Update was_oskasoftware.hexpat
* Update fas_oskasoftware_old.hexpat
* Update fas_oskasoftware.hexpat
* Update README.md
Replacing backward slashes with forward ones in the `WAS` row.
* Update fas_oskasoftware_old.hexpat
* Update was_oskasoftware.hexpat
2025-08-31 11:28:45 +02:00
MicroBlock
74c06b74f7
patterns/lua53: Fix lua53 long string ( #427 )
...
Update lua53.hexpat
2025-08-31 11:27:59 +02:00
Vemmi
f13d9d3894
patterns/upk-ue3: Add magic pragma ( #436 )
2025-08-31 11:23:09 +02:00
mjarduk
c4c75a9ab2
patterns: Add a pattern for Roblox .pack files ( #435 )
...
* Added the .pack format
* Clarified some fields by changing the naming
2025-08-25 22:22:32 +02:00
Lexi Mayfield
7fd79ec9fd
patterns: Added AppleSingle, AppleDouble, CHD, TARC patterns ( #431 )
...
* Commit patterns I've collected
- AppleSingle/AppleDouble pattern, used for macOS resource forks.
- MAME CHD file format, currently only supports v5.
- KEX Engine proprietary TARC format, used by various Nightdive games.
* Add to README
2025-08-20 19:32:11 +02:00
Mark Jansen
6b9f39cc21
patterns: Add SDB pattern ( #424 )
...
Co-authored-by: Nik <werwolv98@gmail.com >
2025-08-15 17:16:50 +02:00
Stephen Hewitt
9207282bcf
patterns: Added Commodore BASIC ( #428 )
...
* Commodore BASIC
* Update desc
* I made it
* Implemented suggestion
* Implemented suggestion
* Test file
* Rename file
---------
Co-authored-by: Nik <werwolv98@gmail.com >
2025-08-02 20:13:35 +02:00
Dominik Tamiołło
bc35349e0f
PEF - fix export count calculation ( #418 )
...
* Initial version of PEF
* add pef test file
* Fixed export hash slot count calculation
---------
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-07-08 15:21:07 -07:00
Nik
fed5db4109
Add Capcom's Devil May Cry 3 HD .mod hexpat ( #415 )
...
* Add Capcom's Devil May Cry 3 HD .mod hexpat
Hex Pattern file for Capcom's Devil May Cry 3 HD Collection's .mod (3D Models) files
* Update DMC3 HD Mod.hexpat
* Update DMC3 HD Mod.hexpat
* Update DMC3 HD Mod.hexpat
* Add files via upload
* Update README.md
* Rename DMC3 HD Mod.hexpat to dmc3_hd_mod.hexpat
* Delete patterns/dmc3_hd_mod.hexpat
* Delete tests/patterns/test_data/dmc3_hd_mod.hexpat.mod
* Add files via upload
* Update dmc3_hd_mod.hexpat
---------
Co-authored-by: haruse23 <mrjokeromar123@outlook.com >
2025-07-08 14:51:54 -07:00
klirktag
1d41392215
Add support for medium and large mp4 files ( #413 )
...
add support for medium and large mp4
2025-06-29 07:33:48 -07:00
ruokeqx
0b75336638
feat(pcapng): add support for Decryption Secrets Block ( #411 )
...
feat(pcapng): add support for Decryption Secrets Block
2025-06-19 05:13:43 -07:00
Dominik Tamiołło
103d434cc5
Add PEF (Preffered Executable Format) support ( #406 )
...
* Initial version of PEF
* add pef test file
---------
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-06-17 22:24:54 -07:00
Fabian Neundorf
7716b9d6e7
patterns: Add support for smk ( #399 )
...
* patterns: Add support for smk
* patterns: Use builtin function and separate SMK struct
---------
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-06-17 14:57:36 -07:00
Tom Arrow
ad1e300674
Quake 3 Engine demo pattern & test file ( #402 )
...
* Quake 3 Engine demo pattern & test file
* Quake 3 Engine demo: Increase limits (demo files can be big) and additional condition
* Quake 3 demo specify little endian
* Quake 3 demo format: Add message type detection
* Quake 3 demo format: Read serverTime for snapshot messages
* Quake 3 demo pattern: fixed bug/typo/sleepy coding
* Quake 3 demo pattern: Ability to read CS_SERVERINFO
* Quake 3 demo pattern: Read CS_SYSTEMINFO as well
* Quake 3 demo pattern: Read first serverCommand per message
* Added Quake 3 engine demo pattern to readme
* Change Quake 3 engine demo entry in readme table
---------
Co-authored-by: Tom <tomarrowtomarrow@hotmail.com >
2025-06-17 02:06:24 -07:00
zn123
e918ce52b9
Add flv.hexpat ( #401 )
...
* Add flv.hexpat
https://veovera.org/docs/enhanced/enhanced-rtmp-v2#flv-file-format-overview
* test flv.hexpat
* Update README.md
add flv patterns
* Update flv.hexpat
Optimize spaces
* Update flv.hexpat
fix
2025-06-16 20:25:54 -07:00
Nik
db4d62aa20
patterns/fs: Refactor all partition types into a FS module
2025-05-25 19:51:32 +02:00
WerWolv
d96bfbb942
tests: Execute and test format functions
2025-05-25 12:43:21 +02:00
Nik
6b279b8375
patterns/exfat: Fixed eval depth error
2025-05-17 16:07:11 +02:00
Khoo Hao Yit
a692b22ecc
patterns: Add support for exFAT ( #398 )
2025-05-17 13:13:35 +02:00
Claudius Coenen
2ae0499293
patterns/wintec_tes: Slightly nicer formatting in a list of entries ( #397 )
...
slightly nicer formatting in a list of entries
2025-05-16 20:25:04 +02:00
thrasher
bd06987e8e
patterns/zip: Add zip64 support ( #395 )
...
Co-authored-by: Nik <werwolv98@gmail.com >
2025-05-15 21:22:20 +02:00
Fabian Neundorf
74e08623f1
patterns: Add support for flc/flic files ( #396 )
...
* patterns: Add support for flc/flic files
* patterns: Add #pragma description for flc
---------
Co-authored-by: Nik <werwolv98@gmail.com >
2025-05-15 20:17:13 +02:00
Nik
a860c396fa
patterns: Added Java HPROF pattern
2025-05-15 17:23:06 +02:00
Nik
da934e2045
patterns/optee_ta: Fixed missing author and description pragmas
2025-05-15 08:07:13 +02:00
Nik
394ef80611
patterns: Added OPTEE Trusted Application format
2025-05-13 22:17:05 +02:00
Grant Kim
2ce182b1b3
patterns/tiff: Tags for DNG and TIFF extensions ( #376 )
...
Add Tags for DNG and TIFF extensions
References: https://www.loc.gov/preservation/digital/formats/content/tiff_tags.shtml
https://helpx.adobe.com/camera-raw/digital-negative.html
Co-authored-by: Nik <werwolv98@gmail.com >
2025-05-10 13:59:22 +02:00
Glenn Hartmann
6cadad3d1f
pattern/protobuf: Allow parsing of nested messages ( #378 )
...
Mostly this enables attempted recursive parsing of submessages. Note
that it is inherently impossible to determine the underlying data type
for LengthDelimited for sure, so this is a best-effort attempt. The user
can disable recursive submessage parsing via Settings.
Other minor changes:
* added #pragma MIME and #pragma endian directives
* enabled UTF-8 display for LengthDelimited types
* added signed LEB128 display for Varint types (although this doesn't
seem to be working on my test case)
* swapped if/else-if structure for match
* fail upon receiving unknown or unsupported WireType
Co-authored-by: Nik <werwolv98@gmail.com >
2025-05-10 13:53:01 +02:00
David Schneider
7ad9cd4f41
patterns: Added support for GNU MO files ( #383 )
2025-05-10 11:49:02 +00:00
0xZ3R0
bcaeef31d7
pattern: Added DJI Firmware Pattern ( #392 )
...
* added IM*H pattern
* improved README
2025-05-10 13:35:14 +02:00
Niketin
ee8d2f50b7
pattern/bencode: Various fixes ( #393 )
...
* Fix bencode dictionary
When parsing a bencode dictionary, the end character 'e' was never
consumed. This caused a misinterpretation of the character as struct Value of
an unknown type 'e'.
* Fix bencode list
A list was not included in the Value's parsing logic so it may have
been mistakenly parsed as a string.
* Fix std::ctype::isprint not including space
The space character, 0x20, is considered as a printable character in ASCII
and in >=C89. Adding it to the range of std::ctype::isprint also fixes
other std::ctype functions that use it.
* Fix bencode byte string formatting
Byte strings do not render nicely in pattern data's value column if they
contain non-printable characters. This commit makes the value of byte
strings to be surrounded by quotation marks, and renders a warning text
without quotation marks if the byte string contains non-printable
characters.
2025-05-10 13:34:36 +02:00
DEREFERENC3D
5b8dde19a9
patterns: Added definition for the OpenRGB profile format ( #387 )
...
patterns: Add definition for the OpenRGB profile format (up to version 5)
2025-05-10 13:34:16 +02:00
Dhash Shrivathsa
0b0eff0cb6
pattern/macho: Load Commands should include additional specializations (LoadDyLib) ( #386 )
...
* add additional command specialization
* address PR feedback
2025-05-10 13:34:01 +02:00
Enaium
3185503be1
patterns: Added valve vpk pattern ( #384 )
2025-05-10 10:29:50 +00:00
Sabhya
3a64207e58
pattern: Added pcapng capture file pattern ( #385 )
...
add: pcapng hexpat
2025-05-10 12:26:39 +02:00
bluisblu
c94d42d5c0
patterns: Added Radcore Cement v1.2 file pattern ( #382 )
...
* Add Radcore Cement file pattern
* Update pattern list in README.md
2025-05-10 11:57:51 +02:00
Caleb Denio
45c4c1d35b
patterns/uf2: Added magic number ( #379 )
2025-05-10 11:54:29 +02:00
Shadlock0133
5ed9c0fd4d
patterns/elf: use Rel{a} structs for parsing REL{A} section data ( #375 )
2025-05-10 11:52:35 +02:00
C3pa
11d373319f
pattern/pe: Check for imageNameRVA in pe.hexpat before reading imageName ( #372 )
2025-05-10 11:52:00 +02:00
Jonathan Ostrus
e7d366571d
pattern/pex: Added formatter for opcode and some other name cleanups ( #371 )
2025-05-10 11:51:43 +02:00