Dominik Tamiołło
bc35349e0f
PEF - fix export count calculation ( #418 )
...
* Initial version of PEF
* add pef test file
* Fixed export hash slot count calculation
---------
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-07-08 15:21:07 -07:00
Nik
fed5db4109
Add Capcom's Devil May Cry 3 HD .mod hexpat ( #415 )
...
* Add Capcom's Devil May Cry 3 HD .mod hexpat
Hex Pattern file for Capcom's Devil May Cry 3 HD Collection's .mod (3D Models) files
* Update DMC3 HD Mod.hexpat
* Update DMC3 HD Mod.hexpat
* Update DMC3 HD Mod.hexpat
* Add files via upload
* Update README.md
* Rename DMC3 HD Mod.hexpat to dmc3_hd_mod.hexpat
* Delete patterns/dmc3_hd_mod.hexpat
* Delete tests/patterns/test_data/dmc3_hd_mod.hexpat.mod
* Add files via upload
* Update dmc3_hd_mod.hexpat
---------
Co-authored-by: haruse23 <mrjokeromar123@outlook.com >
2025-07-08 14:51:54 -07:00
klirktag
1d41392215
Add support for medium and large mp4 files ( #413 )
...
add support for medium and large mp4
2025-06-29 07:33:48 -07:00
ruokeqx
0b75336638
feat(pcapng): add support for Decryption Secrets Block ( #411 )
...
feat(pcapng): add support for Decryption Secrets Block
2025-06-19 05:13:43 -07:00
C3pa
e3edbd5a6f
Small documentation improvements ( #408 )
...
doc: add syntax highlighting to std::ptr::NullablePtr example, fix description of type::escape_bytes
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-06-17 23:55:51 -07:00
C3pa
b10a37af67
Docs: describe how to create multidimensional std::Array ( #407 )
...
doc: descirbe how to create multidimensional std::Array
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-06-17 23:46:33 -07:00
Dominik Tamiołło
103d434cc5
Add PEF (Preffered Executable Format) support ( #406 )
...
* Initial version of PEF
* add pef test file
---------
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-06-17 22:24:54 -07:00
Fabian Neundorf
7716b9d6e7
patterns: Add support for smk ( #399 )
...
* patterns: Add support for smk
* patterns: Use builtin function and separate SMK struct
---------
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-06-17 14:57:36 -07:00
Tom Arrow
ad1e300674
Quake 3 Engine demo pattern & test file ( #402 )
...
* Quake 3 Engine demo pattern & test file
* Quake 3 Engine demo: Increase limits (demo files can be big) and additional condition
* Quake 3 demo specify little endian
* Quake 3 demo format: Add message type detection
* Quake 3 demo format: Read serverTime for snapshot messages
* Quake 3 demo pattern: fixed bug/typo/sleepy coding
* Quake 3 demo pattern: Ability to read CS_SERVERINFO
* Quake 3 demo pattern: Read CS_SYSTEMINFO as well
* Quake 3 demo pattern: Read first serverCommand per message
* Added Quake 3 engine demo pattern to readme
* Change Quake 3 engine demo entry in readme table
---------
Co-authored-by: Tom <tomarrowtomarrow@hotmail.com >
2025-06-17 02:06:24 -07:00
zn123
e918ce52b9
Add flv.hexpat ( #401 )
...
* Add flv.hexpat
https://veovera.org/docs/enhanced/enhanced-rtmp-v2#flv-file-format-overview
* test flv.hexpat
* Update README.md
add flv patterns
* Update flv.hexpat
Optimize spaces
* Update flv.hexpat
fix
2025-06-16 20:25:54 -07:00
Nik
db4d62aa20
patterns/fs: Refactor all partition types into a FS module
2025-05-25 19:51:32 +02:00
WerWolv
d96bfbb942
tests: Execute and test format functions
2025-05-25 12:43:21 +02:00
Nik
2070c95f58
yara: Added crypto identification rules
2025-05-24 23:56:56 +02:00
Nik
877895741d
includes/hex: Fixed Json types being twice the size they need to be
2025-05-17 19:45:30 +02:00
Nik
6b279b8375
patterns/exfat: Fixed eval depth error
2025-05-17 16:07:11 +02:00
Khoo Hao Yit
a692b22ecc
patterns: Add support for exFAT ( #398 )
2025-05-17 13:13:35 +02:00
Claudius Coenen
2ae0499293
patterns/wintec_tes: Slightly nicer formatting in a list of entries ( #397 )
...
slightly nicer formatting in a list of entries
2025-05-16 20:25:04 +02:00
thrasher
bd06987e8e
patterns/zip: Add zip64 support ( #395 )
...
Co-authored-by: Nik <werwolv98@gmail.com >
2025-05-15 21:22:20 +02:00
Fabian Neundorf
74e08623f1
patterns: Add support for flc/flic files ( #396 )
...
* patterns: Add support for flc/flic files
* patterns: Add #pragma description for flc
---------
Co-authored-by: Nik <werwolv98@gmail.com >
2025-05-15 20:17:13 +02:00
Nik
a860c396fa
patterns: Added Java HPROF pattern
2025-05-15 17:23:06 +02:00
Nik
da934e2045
patterns/optee_ta: Fixed missing author and description pragmas
2025-05-15 08:07:13 +02:00
Nik
394ef80611
patterns: Added OPTEE Trusted Application format
2025-05-13 22:17:05 +02:00
Grant Kim
2ce182b1b3
patterns/tiff: Tags for DNG and TIFF extensions ( #376 )
...
Add Tags for DNG and TIFF extensions
References: https://www.loc.gov/preservation/digital/formats/content/tiff_tags.shtml
https://helpx.adobe.com/camera-raw/digital-negative.html
Co-authored-by: Nik <werwolv98@gmail.com >
2025-05-10 13:59:22 +02:00
Glenn Hartmann
6cadad3d1f
pattern/protobuf: Allow parsing of nested messages ( #378 )
...
Mostly this enables attempted recursive parsing of submessages. Note
that it is inherently impossible to determine the underlying data type
for LengthDelimited for sure, so this is a best-effort attempt. The user
can disable recursive submessage parsing via Settings.
Other minor changes:
* added #pragma MIME and #pragma endian directives
* enabled UTF-8 display for LengthDelimited types
* added signed LEB128 display for Varint types (although this doesn't
seem to be working on my test case)
* swapped if/else-if structure for match
* fail upon receiving unknown or unsupported WireType
Co-authored-by: Nik <werwolv98@gmail.com >
2025-05-10 13:53:01 +02:00
David Schneider
7ad9cd4f41
patterns: Added support for GNU MO files ( #383 )
2025-05-10 11:49:02 +00:00
0xZ3R0
bcaeef31d7
pattern: Added DJI Firmware Pattern ( #392 )
...
* added IM*H pattern
* improved README
2025-05-10 13:35:14 +02:00
Niketin
ee8d2f50b7
pattern/bencode: Various fixes ( #393 )
...
* Fix bencode dictionary
When parsing a bencode dictionary, the end character 'e' was never
consumed. This caused a misinterpretation of the character as struct Value of
an unknown type 'e'.
* Fix bencode list
A list was not included in the Value's parsing logic so it may have
been mistakenly parsed as a string.
* Fix std::ctype::isprint not including space
The space character, 0x20, is considered as a printable character in ASCII
and in >=C89. Adding it to the range of std::ctype::isprint also fixes
other std::ctype functions that use it.
* Fix bencode byte string formatting
Byte strings do not render nicely in pattern data's value column if they
contain non-printable characters. This commit makes the value of byte
strings to be surrounded by quotation marks, and renders a warning text
without quotation marks if the byte string contains non-printable
characters.
2025-05-10 13:34:36 +02:00
DEREFERENC3D
5b8dde19a9
patterns: Added definition for the OpenRGB profile format ( #387 )
...
patterns: Add definition for the OpenRGB profile format (up to version 5)
2025-05-10 13:34:16 +02:00
Dhash Shrivathsa
0b0eff0cb6
pattern/macho: Load Commands should include additional specializations (LoadDyLib) ( #386 )
...
* add additional command specialization
* address PR feedback
2025-05-10 13:34:01 +02:00
Enaium
3185503be1
patterns: Added valve vpk pattern ( #384 )
2025-05-10 10:29:50 +00:00
Sabhya
3a64207e58
pattern: Added pcapng capture file pattern ( #385 )
...
add: pcapng hexpat
2025-05-10 12:26:39 +02:00
bluisblu
c94d42d5c0
patterns: Added Radcore Cement v1.2 file pattern ( #382 )
...
* Add Radcore Cement file pattern
* Update pattern list in README.md
2025-05-10 11:57:51 +02:00
Caleb Denio
45c4c1d35b
patterns/uf2: Added magic number ( #379 )
2025-05-10 11:54:29 +02:00
Jean Pereira
f93be1ea06
themes: Added Nocture theme ( #377 )
...
minimal dark theme based on Dracula but more darker
2025-05-10 11:53:28 +02:00
Shadlock0133
5ed9c0fd4d
patterns/elf: use Rel{a} structs for parsing REL{A} section data ( #375 )
2025-05-10 11:52:35 +02:00
C3pa
11d373319f
pattern/pe: Check for imageNameRVA in pe.hexpat before reading imageName ( #372 )
2025-05-10 11:52:00 +02:00
Jonathan Ostrus
e7d366571d
pattern/pex: Added formatter for opcode and some other name cleanups ( #371 )
2025-05-10 11:51:43 +02:00
Caleb Denio
b6df1742b6
patterns: Add ZIM pattern ( #367 )
...
* Add ZIM pattern file
* Add test file
* namespace!
2025-05-10 11:51:04 +02:00
Jake Ryan
0b9e83ff8a
patterns: Add support for MagicaVoxel .vox files ( #390 )
...
* patterns: Added support for MagicaVoxel .vox files
* Fixed incorrect IMAP field size and added basic chunk size mismatch detection and recovery.
* Fixed pattern for "_r" values and added RotationToMat3.
* Added test vox file.
---------
Co-authored-by: paxcut <53811119+paxcut@users.noreply.github.com >
2025-04-30 08:55:53 -07:00
paxcut
c0fc748de6
fix: rgb color attribute is always blue.
...
The color attribute does not nclude an alpha component but the RGB types were including an alpha of 255 in their color attributes. The 0xFF was being assigned to the blue component hence the error.
2025-04-30 08:40:32 -07:00
Hrant
89307ba8a5
added NTFS pattern ( #391 )
...
Thank you!
* added NTFS pattern
* improved the PR
* remove test-data & fixed sd
---------
Co-authored-by: Hrant Tadevosyan <Hrant.Tadevosyan@connectwise.com >
2025-04-30 04:00:52 -07:00
ZHANG Yuntian
a12b5ba406
git: Fix table formatting ( #374 )
...
Signed-off-by: ZHANG Yuntian <yt@radxa.com >
2025-03-24 07:33:01 +01:00
ZHANG Yuntian
537ce67895
patterns/partition_table: Added basic MBR and GPT patterns ( #358 )
...
Both are conbined into a single pattern due to how GPT always has a pseudo MBR to maintain backward compatibility.
2025-03-24 07:15:25 +01:00
Scrivener07
1771c1f077
patterns: Added support for PEX Papyrus executables ( #370 )
...
Added support for PEX, Bethesda's Papyrus executable for compiled script files.
- Skyrim
- Fallout 4
- Fallout 76
- Starfield
Co-authored-by: Jonathan Ostrus <12855515+jbostrus@users.noreply.github.com >
2025-03-23 11:30:43 +01:00
Caleb
cef20e24a7
patterns/zip: Fix 0x5455 extended timestamp fields crash, improve date/time presentation ( #363 )
...
Co-authored-by: Nik <werwolv98@gmail.com >
2025-03-22 13:57:42 +01:00
Andreas Wallner
8e7cfd9442
patterns: Add STDFv4 pattern ( #326 )
2025-03-22 13:54:50 +01:00
5ec1cff
d0ba754dc2
patterns/zip: Handling padded extra fields ( #369 )
...
* Handling unresolved extra fields
* Update zip.hexpat
* Update zip.hexpat
* Update zip.hexpat
2025-03-22 13:54:26 +01:00
mheimlich
9f92c38ecf
patterns: Add ADTFDAT pattern ( #368 )
2025-03-22 13:52:59 +01:00
Geky
0844e07056
patterns: Added DS Cartridge Header pattern, updated pyc versions ( #366 )
...
* add support for cartridge size type $54
Added support for cartridge size type $54, corresponding to 1.5 MiB (96 banks).
* add missing license
* Add GBA Cartridge Header
* Update README.md
Added GBA information to README.md and corrected a typo.
* Add DS Cartridge Header
* Update ReadMe.md
* Update pyc.hexpat
Included additional versions
2025-03-22 13:51:46 +01:00
C3pa
66fc006b08
includes/std: Update hex::dec::zlib_decompress description ( #364 )
...
docs: Update hex::dec::zlib_decompress description
2025-03-22 13:51:00 +01:00