ThisALV 2f41f6e233 Improved PE patterns for both x86 and x64 files. (#9)
* Improved PE patterns for both x86 and x64 files.

Added sections table and data directories.
Support for 64bits binaries.
Separated files for 32bits and 64bits binaries.

* Deleted old PE pattern.

* Single file used for both PE32 and PE32+.

Change FORMAT preprocessor constant to switch mode.

* Improved sections table localization.

Using recently added nextAfter() builtin-function to locate sections
table.

* Automatic detection for 64bits executables.

Automatically detect if PE32+ format is enabled by checking machine
value.

* Updated README.md for single PE hexpat file.

* Use String for sections name.

* Remove silly usage of define preprocessor.
2021-01-24 14:31:51 +01:00
2020-12-03 21:49:54 +01:00
2020-12-03 21:17:55 +01:00
2020-12-12 00:29:36 +01:00

ImHex-Patterns

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

Table of Contents

Hex Patterns

Name MIME Path Description
ELF application/x-executable patterns/elf.hexpat ELF header in elf binaries
PE application/x-dosexec patterns/pe.hexpat PE header, COFF header, Standard COFF fields and Windows Specific fields
MIDI audio/midi patterns/midi.hexpat MIDI header, event fields provided

Include Patterns

Name Path Description
cstdint includes/cstdint.hexpat C standard style fixed width integer types

Magic files

Name Path Description
Nintendo Switch magic/nintendo_switch_magic Identifies common file types used on the Nintendo Switch

Contributing

If you want to contribute a file to the database, please make a PR which adds it to the right folder and adds a new entry to the table in this readme. Thanks a lot :)

Languages
Rust 97.1%
Python 0.5%
C++ 0.5%
YARA 0.5%
Arc 0.4%
Other 1%