WerWolv/ImHex-Patterns
GitHub: WerWolv/ImHex-Patterns
ImHex 十六进制编辑器的社区维护数据库,提供了大量用于解析二进制文件结构的模式、魔术文件及编码定义。
Stars: 945 | Forks: 292
# ImHex 数据库
此仓库作为与 [ImHex 十六进制编辑器](https://github.com/WerWolv/ImHex) 配合使用的文件的数据库。它目前包含:
- [模式](/patterns) - 用于模式语言的二进制格式定义
- [模式库](/includes) - 使模式语言更易于使用的库
- [Magic 文件](/magic) - 用于 libmagic 的自定义 magic 文件定义
- [编码](/encodings) - .tbl 格式的自定义编码
- [数据处理器节点](/nodes) - 为 ImHex 的数据处理器定制的节点
- [主题](/themes) - ImHex 的自定义主题
- [常量](/constants) - 常量定义文件
- [脚本](/scripts) - 用于生成代码或自动化某些任务的各种脚本
- [Yara](/yara) - 自定义 Yara 规则
## 提交
此仓库中的大多数文件均由社区提交。请随时自行发起 PR 并向其中添加文件!
所有内容将立即显示在 ImHex 的内容商店中,并会随 ImHex 的下一个版本一起打包。
## 目录
### Hex 模式
| 名称 | MIME | 路径 | 描述 |
|------|------|------|-------------|
| 3DS | | [`patterns/3ds.hexpat`](patterns/3ds.hexpat) | Autodesk 3DS Max 模型文件 |
| 7Z | | [`patterns/7z.hexpat`](patterns/7z.hexpat) | 7z 文件格式 |
| ADTFDAT | | [`patterns/adtfdat.hexpat`](patterns/adtfdat.hexpat) | [ADTFDAT 文件](https://digitalwerk.gitlab.io/solutions/adtf_content/adtf_base/adtf_file_library) |
| ADTS | `audio/x-hx-aac-adts` | [`patterns/adts.hexpat`](patterns/adts.hexpat) | ADTS/AAC 音频文件 |
| AFE2 | | [`patterns/afe2.hexpat`](patterns/afe2.hexpat) | Nintendo Switch Atmosphère CFW 致命错误日志 |
| ANI | `application/x-navi-animation` | [`patterns/ani.hexpat`](patterns/ani.hexpat) | Windows 动画光标文件 |
| APFS | | [`patterns/fs/apfs.hexpat`](patterns/fs/apfs.hexpat) | Apple 文件系统 (APFS) |
| AppleSingle | `application/applefile` | [`patterns/apple_single_double.hexpat`](patterns/apple_single_double.hexpat) | AppleSingle 双分支 文件 |
| AppleDouble | `multipart/appledouble` | [`patterns/apple_single_double.hexpat`](patterns/apple_single_double.hexpat) | AppleDouble 资源分支/Finder 元数据文件 |
| AR | `application/x-archive` | [`patterns/ar.hexpat`](patterns/ar.hexpat) | 静态库归档文件 |
| ARC | | [`patterns/arc.hexpat`](patterns/arc.hexpat) | Minecraft 遗留主机版 ARC 文件 |
| ARIA2 | | [`patterns/aria2.hexpat`](patterns/aria2.hexpat) | ARIA2 下载管理器控制文件 |
| ARM VTOR | | [`patterns/arm_cm_vtor.hexpat`](patterns/arm_cm_vtor.hexpat) | ARM Cortex M 向量表布局 |
| Arma 3 config | `application/x.a3-rap` | [`patterns/a3/a3_rap.hexpat`](patterns/a3/a3_rap.hexpat) | Arma 3 二进制/rapified 配置 |
| Arma 3 P3D (MLOD) | `model/x.a3-p3d-mlod` | [`patterns/a3/a3_p3d_mlod.hexpat`](patterns/a3/a3_p3d_mlod.hexpat) | Arma 3 P3D 模型文件 (MLOD) |
| Arma 3 PAA | `image/x.a3-paa` | [`patterns/a3/a3_paa.hexpat`](patterns/a3/a3_paa.hexpat) | Arma 3 PAA 纹理文件 |
| Arma 3 RTM | `application/x.a3-rtm` | [`patterns/a3/a3_rtm.hexpat`](patterns/a3/a3_rtm.hexpat) | Arma 3 RTM 动画文件 (plain) |
| Arma 3 RTM (binarized) | `application/x.a3-bmtr` | [`patterns/a3/a3_bmtr.hexpat`](patterns/a3/a3_bmtr.hexpat) | Arma 3 RTM 动画文件 (binarized) |
| Arma 3 texHeaders.bin | `application/x.a3-texheaders` | [`patterns/a3/a3_texheaders.hexpat`](patterns/a3/a3_texheaders.hexpat) | Arma 3 纹理索引文件 |
| Assassin's Creed: Unity | | [`patterns/AC Unity`](patterns/Assassin's Creed: Unity) | 刺客信条:大革命 存档文件 -- .forge & .data (压缩和解压) -- |
| Bastion | | [`patterns/bastion/*`](https://gitlab.com/EvelynTSMG/imhex-bastion-pats) | 各种 [Bastion](https://en.wikipedia.org/wiki/Bastion_(video_game)) 文件 |
| BeyondCompare BCSS | | [`patterns/bcss.hexpat`](patterns/bcss.hexpat) | BeyondCompare 快照 (BCSS) 文件 |
| Bencode | `application/x-bittorrent` | [`patterns/bencode.hexpat`](patterns/bencode.hexpat) | Bencode 编码,用于 Torrent 文件 |
| Prusa BGCODE | | [`patterns/bgcode.hexpat`](patterns/bgcode.hexpat) | PrusaSlicer 二进制 G-Code 文件 |
| BLEND | | [`patterns/blend.hexpat`](patterns/blend.hexpat) | Blender 项目文件 |
| BLF | | [`patterns/blf.hexpat`](patterns/blf.hexpat) | Vector BLF 帧日志文件 |
| BMP | `image/bmp` | [`patterns/bmp.hexpat`](patterns/bmp.hexpat) | OS2/Windows 位图文件 |
| BIN | | [`patterns/selinux.hexpat`](patterns/selinux.pat) | SE Linux 模块 |
| BINKA | | [`patterns/binka.hexpat`](patterns/binka.pat) | RAD Game Tools Bink 音频 (BINKA) 文件 |
| BSON | `application/bson` | [`patterns/bson.hexpat`](patterns/bson.hexpat) | BSON (二进制 JSON) 格式 |
| bplist | `application/x-bplist` | [`patterns/bplist.hexpat`](patterns/bplist.hexpat) | Apple 二进制属性列表格式 (bplist) |
| BSP | | [`patterns/bsp_goldsrc.hexpat`](patterns/bsp_goldsrc.hexpat) | GoldSrc 引擎地图格式 (用于 Half-Life 1) |
| BZIP3 | | [`patterns/bzip3.hexpat`](patterns/bzip3.hexpat) | 解析 BZip3 压缩 (文件格式) by Kamila Szewczyk |
| CAB | | [`patterns/cab.hexpat`](patterns/cab.hexpat) | Microsoft Cabinet (CAB) 文件 |
| CCHVA | | [`patterns/cchva.hexpat`](patterns/cchva.hexpat) | Command and Conquer Voxel Animation |
| CCVXL | | [`patterns/ccvxl.hexpat`](patterns/ccvxl.hexpat) | Command and Conquer Voxel Model |
| CCPAL | | [`patterns/ccpal.hexpat`](patterns/ccpal.hexpat) | Command and Conquer Voxel Palette |
| CDA | | [`patterns/cda.hexpat`](patterns/cda.hexpat) | 紧凑光盘 音轨 |
| CHD | | [`patterns/chd.hexpat`](patterns/chd.hexpat) | MAME 压缩数据块 文件 |
| CHM | `application/vnd.ms-htmlhelp` | [`patterns/chm.hexpat`](patterns/chm.hexpat) | Windows HTML 帮助数据 (ITSF / CHM) |
| Chromium Pak | | [`patterns/chromium_pak.hexpat`](patterns/chromium_pak.hexpat) | Chromium pak 文件 |
| COFF | `application/x-coff` | [`patterns/coff.hexpat`](patterns/coff.hexpat) | 通用对象文件格式 (COFF) 可执行文件 |
| CPIO | `application/x-cpio` | [`patterns/cpio.hexpat`](patterns/cpio.hexpat) | 旧式二进制 CPIO 格式 |
| CPIO | | [`patterns/cpio_portable_ascii.hexpat`](patterns/cpio_portable_ascii.hexpat) | 便携式 ASCII CPIO 格式 |
| CPIO | | [`patterns/cpio_new_ascii.hexpat`](patterns/cpio_new_ascii.hexpat) | "新" ASCII CPIO 格式 |
| CrashLvl | | [`patterns/Crashlvl.hexpat`](patterns/Crashlvl.hexpat) | Crash Bandicoot - Back in Time (同人游戏) 用户自定义关卡格式 |
| CREDHIST | | [`patterns/credhist.hexpat`](patterns/credhist.hexpat) | CREDHIST 格式 |
| DDS | `image/vnd-ms.dds` | [`patterns/dds.hexpat`](patterns/dds.hexpat) | DirectDraw Surface |
| DEX | | [`patterns/dex.hexpat`](patterns/dex.hexpat) | Dalvik 可执行格式 |
| Devil May Cry HD Collection | | [`patterns/Devil May Cry HD Collection`](patterns/Devil May Cry HD Collection) | 鬼泣 HD 合集中使用的 3D 模型文件 |
| DICOM | `application/dicom` | [`patterns/dicom.hexpat`](patterns/dicom.hexpat) | DICOM 图像格式 |
| DISK_PARSER (DFIR) | `application/x-ima` | [`patterns/DFIR/DISK_PARSER.hexpat`](patterns/DFIR/DISK_PARSER.hexpat) | 递归磁盘/卷/文件系统解析 |
| DMG | | [`patterns/dmg.hexpat`](patterns/dmg.hexpat) | Apple 磁盘映像尾部 (DMG) |
| DMP | | [`patterns/dmp64.hexpat`](patterns/dmp64.hexpat) | Windows 内核转储 (DMP64) |
| DOS | `application/x-dosexec` | [`patterns/dos.hexpat`](patterns/dos.hexpat) | 16 位实模式 DOS EXE 文件 |
| DOTNET_BinaryFormatter | | [`patterns/dotnet_binaryformatter.hexpat`](patterns/dotnet_binaryformatter.hexpat) | .NET BinaryFormatter |
| DPAPI_Blob | | [`patterns/dpapblob.hexpat`](patterns/dpapiblob.hexpat) | 数据保护 API Blob 文件格式 |
| DPAPI_MasterKey | | [`patterns/dpapimasterkey.hexpat`](patterns/dpapimasterkey.hexpat) | 数据保护 API MasterKey |
| DS_Store | | [`patterns/dsstore.hexpat`](patterns/dsstore.hexpat) | .DS_Store 文件格式 |
| DTA | | [`patterns/max_v104.hexpat`](patterns/max_v104.hexpat) | Mechanized Assault and Exploration v1.04 (策略游戏) 存档文件格式 |
| DTED | | [`patterns/dted.hexpat`](patterns/dted.hexpat) | 数字地形高程数据 (DTED) |
| ELF | `application/x-executable` | [`patterns/elf.hexpat`](patterns/elf.hexpat) | ELF 二进制文件中的 ELF 头 |
| ESP32 Image | | [`patterns/esp32_image.hexpat`](patterns/esp32_image.hexpat) | ESP32 芯片系列的固件映像格式 |
| EVTX | `application/x-ms-evtx` | [`patterns/evtx.hexpat`](patterns/evtx.hexpat) | MS Windows Vista 事件日志 |
| EXFAT | | [`patterns/fs/exfat.hexpat`](patterns/fs/exfat.hexpat) | 可扩展文件分配表 (exFAT) |
| EXFAT (DFIR) | | [`patterns/DFIR/exFAT.hexpat`](patterns/DFIR/exFAT.hexpat) | 由 DISK_PARSER.hexpat 导入 |
| EXT4 | | [`patterns/fs/ext4.hexpat`](patterns/fs/ext4.hexpat) | Ext4 文件系统 |
| FAS | | [`patterns/fas_oskasoftware.hexpat`](patterns/fas_oskasoftware.hexpat) [`patterns/fas_oskasoftware_old.hexpat`](patterns/fas_oskasoftware_old.hexpat) (旧版本的 Oska DeskMate) | Oska Software DeskMates FAS (帧和序列) 文件 |
| FAT32 | | [`patterns/fs/fat32.hexpat`](patterns/fs/fat32.hexpat) | FAT32 文件系统 |
| FAT32 (DFIR) | | [`patterns/DFIR/FAT32.hexpat`](patterns/DFIR/FAT32.hexpat) | 由 DISK_PARSER.hexpat 导入 |
| FBX | | [`patterns/fbx.hexpat`](patterns/fbx.hexpat) | Kaydara FBX 二进制 |
| FDT | | [`patterns/fdt.hexpat`](patterns/fdt.hexpat) | 扁平 Linux 设备树 blob |
| FFX | | [`patterns/ffx/*`](https://gitlab.com/EvelynTSMG/imhex-ffx-pats) | 各种最终幻想 X (Final Fantasy X) 文件 |
| File System | `application/x-ima` | [`patterns/fs/pattern.hexpat`](patterns/fs/pattern.hexpat) | 驱动器文件系统 |
| | `audio/flac` | [`patterns/flac.hexpat`](patterns/flac.hexpat) | 自由无损音频编解码器,FLAC 音频格式 |
| FLC/FLIC | | [`patterns/flc.hexpat`](patterns/flc.hexpat) | FLC/FLIC 动画文件 |
| FLV | | [`patterns/flv.hexpat`](patterns/flv.hexpat) | FLv 动画文件 |
| Flipper Zero Settings | | [`patterns/flipper_settings.hexpat`](patterns/flipper_settings.hexpat) | Flipper Zero 设置文件 |
| GB | `application/x-gameboy-rom` | [`patterns/gb.hexpat`](patterns/gb.hexpat) | Game Boy ROM |
| GBA | `application/x-gameboy-advance-rom` | [`patterns/gba.hexpat`](patterns/gba.hexpat) | Game Boy Advance ROM 头 |
| GBX | | [`patterns/gbx.hexpat`](patterns/gbx.hexpat) | GameBoy ROM 文件 GBX 尾部 |
| Gen | | [`patterns/gen.hexpat`](patterns/gen.hexpat) | Sega Genesis/MegaDrive ROM |
| GGUF | | [`patterns/gguf.hexpat`](patterns/gguf.hexpat) | GGML 推理模型 |
| GIF | `image/gif` | [`patterns/gif.hexpat`](patterns/gif.hexpat) | GIF 图像文件 |
| GLTF | `model/gltf-binary` | [`patterns/gltf.hexpat`](patterns/gltf.hexpat) | GL 传输格式二进制 3D 模型文件 |
| GZIP | `application/gzip` | [`patterns/gzip.hexpat`](patterns/gzip.hexpat) | GZip 压缩数据格式 |
| Halo Tag || [`patterns/hinf_tag.hexpat`](patterns/hinf_tag.hexpat) | Halo Infinite Tag 文件 |
| Halo Module || [`patterns/hinf_module.hexpat`](patterns/hinf_module.hexpat) | Halo Infinite 模块归档文件 |
| Halo HavokScript || [`patterns/hinf_luas.hexpat`](patterns/hinf_luas.hexpat) | Halo Infinite HavokScript 5.1 字节码 |
| HPROF || [`patterns/hprof.hexpat`](patterns/hprof.hexpat) | Java HPROF 分析器数据格式 |
| HSDT || [`patterns/hsdt.hexpat`](patterns/hsdt.hexpat) | HiSilicon 设备树表映像 |
| ICO | | [`patterns/ico.hexpat`](patterns/ico.hexpat) | 图标 (.ico) 或光标 (.cur) 文件 |
| ID3 | `audio/mpeg` | [`patterns/id3.hexpat`](patterns/id3.hexpat) | MP3 文件中的 ID3 标签 |
| IM*H || [`patterns/imah.hexpat`](patterns/imah.hexpat) | DJI 签名固件 (IM*H) |
| Intel HEX | | [`patterns/intel_hex.hexpat`](patterns/intel_hex.hexpat) | [Intel 十六进制目标文件格式定义]("https://en.wikipedia.org/wiki/Intel_HEX") |
| IP | | [`patterns/ip.hexpat`](patterns/ip.hexpat) | Ethernet II 帧 (IP 数据包) |
| IPS | | [`patterns/ips.hexpat`](patterns/ips.hexpat) | IPS (国际补丁系统) 文件 |
| ISO | `application/x-iso9660-image` | [`patterns/iso.hexpat`](patterns/iso.hexpat) | ISO 9660 文件系统 |
| Java Class | `application/x-java-applet` | [`patterns/java_class.hexpat`](patterns/java_class.hexpat) | Java Class 文件 |
| JPEG | `image/jpeg` | [`patterns/jpeg.hexpat`](patterns/jpeg.hexpat) | JPEG 图像格式 |
| Kindle Update | | [`patterns/kindle_update.hexpat`](patterns/kindle_update.hexpat) | Kindle 更新包 |
| KTX | `image/ktx` | [`patterns/ktx.hexpat`](patterns/ktx.hexpat) | Khronos TeXture 1.0 |
| LOC | | [`patterns/loc.hexpat`](patterns/loc.hexpat) | Minecraft 遗留主机版语言文件 |
| Lua 4.0 | | [`patterns/lua40.hexpat`](patterns/lua40.hexpat) | Lua 4.0 字节码 |
| LUC | | [`patterns/popcap_luc.hexpat`](patterns/popcap_luc.hexpat) | PopCap 专有 Lua 字节码 |
| Lua 5.0 | | [`patterns/lua50.hexpat`](patterns/lua50.hexpat) | Lua 5.0 字节码 |
| Lua 5.1 | | [`patterns/lua51.hexpat`](patterns/lua51.hexpat) | Lua 5.1 字节码 |
| Lua 5.2 | | [`patterns/lua52.hexpat`](patterns/lua52.hexpat) | Lua 5.2 字节码 |
| Lua 5.3 | | [`patterns/lua53.hexpat`](patterns/lua53.hexpat) | Lua 5.3 字节码 |
| Lua 5.4 | | [`patterns/lua54.hexpat`](patterns/lua54.hexpat) | Lua 5.4 字节码 |
| LCE Savefile | | [`patterns/lcesave.hexpat`](patterns/lcesave.hexpat) | Minecraft 遗留主机版存档文件 |
| LZNT1 | | [`patterns/lznt1.hexpat`](patterns/lznt1.hexpat) | LZNT1 压缩数据格式 |
| Mach-O | `application/x-mach-binary` | [`patterns/macho.hexpat`](patterns/macho.hexpat) | Mach-O 可执行文件 |
| MIDI | `audio/midi` | [`patterns/midi.hexpat`](patterns/midi.hexpat) | MIDI 头,提供了事件字段 |
| MiniDump | `application/x-dmp` | [`patterns/minidump.hexpat`](patterns/minidump.hexpat) | Windows MiniDump 文件 |
| MO | | [`patterns/mo.hexpat`](patterns/mo.hexpat) | 包含 gettext 翻译的 GNU 机器对象 (MO) 文件 |
| mp4 | `video/mp4` | [`patterns/mp4.hexpat`](patterns/mp4.hexpat) | MPEG-4 Part 14 数字多媒体容器格式 |
| msgpack | `application/x-msgpack` | [`patterns/msgpack.hexpat`](patterns/msgpack.hexpat) | MessagePack 二进制序列化格式 |
| MSSCMP | | [`patterns/msscmp.hexpat`](patterns/msscmp.hexpat) | Miles 声音系统压缩归档 |
| NACP | | [`patterns/nacp.hexpat`](patterns/nacp.hexpat) | Nintendo Switch NACP 文件 |
| NBT | | [`patterns/nbt.hexpat`](patterns/nbt.hexpat) | Minecraft NBT 格式 |
| N64 | | [`patterns/n64.hexpat`](patterns/n64.hexpat) | Nintendo 64 ROM 头 |
| NDS | `application/x-nintendo-ds-rom` | [`patterns/nds.hexpat`](patterns/nds.hexpat) | DS 卡带头 |
| NE | `application/x-ms-ne-executable` | [`patterns/ne.hexpat`](patterns/ne.hexpat) | NE 头和标准 NE 字段 |
| nes | | [`patterns/nes.hexpat`](patterns/nes.hexpat) | Nintendo Entertainment System ROM |
| NSF | | [`patterns/nsf.hexpat`](patterns/nsf.hexpat) | NES 声音格式 |
| NSFe | | [`patterns/nsfe.hexpat`](patterns/nsfe.hexpat) | NES 声音格式扩展 |
| NotepadCache | | [`patterns/notepad-cache.hexpat`](patterns/notepad-cache.hexpat) | Windows 记事本缓存 |
| NotepadStateFile | | [`patterns/notepad-state.hexpat`](patterns/notepad-state.hexpat) | Windows 记事本 .bin 状态文件 |
| NotepadWindowState | | [`patterns/notepadwindowstate.hexpat`](patterns/notepadwindowstate.hexpat) | Windows 11 记事本 - 窗口状态 .bin 文件 |
| NRO | | [`patterns/nro.hexpat`](patterns/nro.hexpat) | Nintendo Switch NRO 文件 |
| NTAG | | [`patterns/ntag.hexpat`](patterns/ntag.hexpat) | NTAG213/NTAG215/NTAG216,符合 NFC 论坛类型 2 标签的 IC |
| NTFS | | [`patterns/fs/ntfs.hexpat`](patterns/fs/ntfs.hexpat) | NTFS (NT 文件系统) |
| NTFS (DFIR) | | [`patterns/DFIR/NTFS.hexpat`](patterns/DFIR/NTFS.hexpat) | 由 DISK_PARSER.hexpat 导入 |
| OGG | `audio/ogg` | [`patterns/ogg.hexpat`](patterns/ogg.hexpat) | OGG 音频格式 |
| ORP / ORS | | [`patterns/orp.hexpat`](patterns/orp.hexpat) | OpenRGB 配置文件格式 |
| PACK | | [`patterns/roblox_pack.hexpat`](patterns/roblox_pack.hexpat) | Roblox 着色器归档格式 |
| PAK | | [`patterns/xgspak.hexpat`](patterns/xgspak.hexpat) | Exient XGS 引擎 Pak 文件 |
| PCAP | `application/vnd.tcpdump.pcap` | [`patterns/pcap.hexpat`](patterns/pcap.hexpat) | pcap 头和数据包 |
| PcapNG | `application/vnd.tcpdump.pcap` | [`patterns/pcapng.hexpat`](patterns/pcapng.hexpat) | pcapng 头和数据包 |
| PCK | | [`patterns/pck.hexpat`](patterns/pck.hexpat) | Minecraft 遗留主机版 .pck 文件 |
| PCX | `application/x-pcx` | [`patterns/pcx.hexpat`](patterns/pcx.hexpat) | PCX 图像格式 |
| PE | `application/x-dosexec` `application/x-msdownload` | [`patterns/pe.hexpat`](patterns/pe.hexpat) | PE 头、COFF 头、标准 COFF 字段和 Windows 特定字段 |
| PEF | | [`patterns/pef.hexpat`](patterns/pef.hexpat) | 首选可执行格式可执行文件 (用于 Mac OS 7.1.2 - Mac OS 10.4 / BeOS) |
| PEX | | [`patterns/pex.hexpat`](patterns/pex.hexpat) | Bethesda Papyrus 可执行编译脚本文件 |
| PP | | [`patterns/selinuxpp.hexpat`](patterns/selinuxpp.pat) | SE Linux 包 |
| PFS0 | | [`patterns/pfs0.hexpat`](patterns/pfs0.hexpat) | Nintendo Switch PFS0 归档 (NSP 文件) |
| PF | | [`patterns/pf.hexpat`](patterns/pf.hexpat) | Microsoft 未压缩预取文件 (.pf) |
| Pickle | | [`patterns/pickle.hexpat`](patterns/pickle.hexpat) | Python Pickle 协议 |
| PIF | `image/pif` | [`patterns/pif.hexpat`](patterns/pif.hexpat) | PIF 图像格式 |
| PKM | | [`patterns/pkm.hexpat`](patterns/pkm.hexpat) | PKM 纹理格式 |
| PNG | `image/png` | [`patterns/png.hexpat`](patterns/png.hexpat) | PNG 图像文件 |
| PRODINFO | | [`patterns/prodinfo.hexpat`](patterns/prodinfo.hexpat) | Nintendo Switch PRODINFO |
| Protobuf | | [`patterns/protobuf.hexpat`](patterns/protobuf.hexpat) | Google Protobuf 编码 |
| psafe3 | | [`patterns/psafe3.hexpat`](patterns/psafe3.hexpat`) | Password Safe V3 |
| PyInstaller | | [`patterns/pyinstaller.hexpat`](patterns/pyinstaller.hexpat) | PyInstaller 二进制文件 |
| PYC | `application/x-bytecode.python` | [`patterns/pyc.hexpat`](patterns/pyc.hexpat) | Python 字节码文件 |
| QBCL | | [`patterns/qbcl.hexpat`](patterns/qbcl.hexpat) | Qubicle 体素场景项目文件 |
| QOI | `image/qoi` | [`patterns/qoi.hexpat`](patterns/qoi.hexpat) | QOI 图像文件 |
| Quake 3 engine demo | | [`patterns/q3demo.hexpat`](patterns/q3demo.hexpat) | 大多数 Quake 3 引擎游戏的演示/回放 |
| quantized-mesh | | [`patterns/quantized-mesh.hexpat`](patterns/quantized-mesh.hexpat) | Cesium 量化网格 地形 |
| RAR | `application/x-rar` | [`patterns/rar.hexpat`](patterns/rar.hexpat) | RAR 归档文件格式 |
| RAS | `image/x-sun-raster` | [`patterns/ras.hexpat`](patterns/ras.hexpat) | RAS 图像文件 |
| RCF 1.2 | | [`patterns/rcf_v1_2.hexpat`](patterns/rcf_v1_2.hexpat) | Radcore Cement Library 1.2 文件 |
| ReFS | | [`patterns/refs.hexpat`](patterns/fs/refs.hexpat) | Microsoft 弹性文件系统 |
| RGBDS | | [`patterns/rgbds.hexpat`](patterns/rgbds.hexpat) | [RGBDS](https://rgbds.gbdev.io) 对象文件格式 |
| RPM | | [`patterns/rpm.hexpat`](patterns/rpm.hexpat) | [RPM](http://ftp.rpm.org/max-rpm/s1-rpm-file-format-rpm-file-format.html) 包文件格式 |
| SDB | | [`patterns/sdb.hexpat`](patterns/sdb.hexpat) | [Shim 数据库](https://learn.microsoft.com/en-us/windows/win32/devnotes/application-compatibility-database) 文件格式 |
| Shell Link | `application/x-ms-shortcut` | [`patterns/lnk.hexpat`](patterns/lnk.hexpat) | Windows Shell 链接文件格式 |
| shp | | [`patterns/shp.hexpat`](patterns/shp.hexpat) | ESRI shape 文件 |
| SHR | | [`patterns/SHR.hexpat`](patterns/SHR.hexpat) | Apple IIgs 超高分辨率 (SHR) + PaintWorks 动画 (ANI) |
| shx | | [`patterns/shx.hexpat`](patterns/shx.hexpat) | ESRI 索引文件 |
| smk | | [`patterns/smk.hexpat`](patterns/smk.hexpat) | Smacker 视频文件 |
| SNES | | [`patterns/snes.hexpat`](patterns/snes.hexpat) | 超级任天堂娱乐系统 ROM 头 |
| sup | | [`patterns/sup.hexpat`](patterns/sup.hexpat) | PGS 字幕 |
| SPC | | [`patterns/spc.hexpat`](patterns/spc.hexpat) | 超级任天堂娱乐系统 SPC-700 转储文件 |
| SPIRV | | [`patterns/spirv.hexpat`](patterns/spirv.hexpat) | SPIR-V 头和指令 |
| STDF | | [`patterns/stdfv4.hexpat`](patterns/stdfv4.hexpat) | IC 测试仪的标准测试数据格式 |
| STL | `model/stl` | [`patterns/stl.hexpat`](patterns/stl.hexpat) | STL 3D 模型格式 |
| StuffItV5 | `application/x-stuffit` | [`patterns/sit5.hexpat`](patterns/sit5.hexpat) | StuffIt V5 归档 |
| SQLite3 | `application/vnd.sqlite3` | [`patterns/sqlite3.hexpat`](patterns/sqlite3.hexpat) | SQLite3 数据库 |
| SWF | `application/x-shockwave-flash` |[`patterns/swf.hexpat`](patterns/swf.hexpat) | Shockwave Flash 文件格式 |
| TA | | [`patterns/optee_ta.hexpat`](patterns/optee_ta.hexpat) | OPTEE 可信应用程序可执行文件 |
| TAR | `application/x-tar` | [`patterns/tar.hexpat`](patterns/tar.hexpat) | Tar 文件格式 |
| TARC | | [`patterns/tarc.hexpat`](patterns/tarc.hexpat) | KEX 引擎 TARC 文件格式 |
| TES | | [`patterns/wintec_tes.hexpat`](patterns/wintec_tes.hexpat) | Wintec TES GPS 日志 |
| Thumbcache | | [`patterns/thumbcache.hexpat`](patterns/thumbcache.hexpat) | Windows thumbcache_*.db |
| TIFF | `image/tiff` | [`patterns/tiff.hexpat`](patterns/tiff.hexpat) | 标签图像文件格式 |
| TGA | `image/tga` | [`patterns/tga.hexpat`](patterns/tga.hexpat) | Truevision TGA/TARGA 图像 |
| TTF | `font/ttf`, `font/otf` | [`patterns/ttf.hexpat`](patterns/ttf.hexpat) | TrueType 和 OpenType 字体格式 |
| Ubiquiti | | [`patterns/ubiquiti.hexpat`](patterns/ubiquiti.hexpat) | Ubiquiti 固件 (更新) 映像 |
| UPK | | [`patterns/upk-ue3.hexpat`](patterns/upk-ue3.hexpat) | Unreal Engine 3 UPK 文件 |
| UEFI | | [`patterns/uefi.hexpat`](patterns/uefi.hexpat)` | 用于解析 efivars 的 UEFI 结构体 |
| UEFI Boot Entry | | [`patterns/uefi_boot_entry.hexpat`](patterns/uefi_boot_entry.hexpat) | UEFI 启动项 (加载选项) |
| UEFI Variable Store | | [`patterns/uefi_fv_varstore.hexpat`](patterns/uefi_fv_varstore.hexpat) | UEFI 固件卷变量存储 |
| UF2 | | [`patterns/uf2.hexpat`](patterns/uf2.hexpat) | [USB 闪存格式](https://github.com/microsoft/uf2) |
| Unity Asset Bundle | | [`patterns/unity-asset-bundle.hexpat`](patterns/unity-asset-bundle.hexpat) | Unity 资源包 |
| Valve VPK | | [`patterns/valve_vpk.hexpat`](valve_vpk.hexpat) | Valve 包文件 |
| VBMeta | | [`patterns/vbmeta.hexpat`](patterns/vbmeta.hexpat) | Android VBMeta 映像 |
| VDF | | [`patterns/vdf.hexpat`](patterns/vdf.hexpat) | 二进制值数据格式 (.vdf) 文件 |
| VEADO | | [`patterns/veado.hexpat`](patterns/veado.hexpat) | veadotube mini 头像文件 |
| VGM | | [`patterns/vgm.hexpat`](patterns/vgm.hexpat) | VGM (Video Game Music) 声音日志 |
| VHDX | | [`patterns/vhdx.hexpat`](patterns/vhdx.hexpat) | Microsoft Hyper-V 虚拟硬盘格式 |
| VOX | | [`patterns/vox.hexpat`](patterns/vox.hexpat) | MagicaVoxel 场景描述格式 |
| WAV | `audio/x-wav` | [`patterns/wav.hexpat`](patterns/wav.hexpat) | RIFF 头,WAVE 头,PCM 头 |
| WAS | | [`patterns/was_oskasoftware.hexpat`](patterns/was_oskasoftware.hexpat) | Oska Software DeskMates WAS/WA3 (WAVE/MP3 集合) 文件
| WAD | | [`patterns/wad.hexpat`](patterns/wad.hexpat) | DOOM WAD 归档 |
| WebP | `image/webp` | [`patterns/webp.hexpat`](patterns/webp.hexpat) | Google WebP 图像 |
| XBEH | `audio/x-xbox-executable` | [`patterns/xbeh.hexpat`](patterns/xbeh.hexpat) | Xbox 可执行文件 |
| XCI | | [`patterns/xci.hexpat`](patterns/xci.hexpat) | Nintendo Switch XCI 卡带 ROM |
| XGT | | [`patterns/xgt.hexpat`](patterns/xgstexture.hexpat) | Exient XGS 引擎纹理 |
| Xilinx BIT | | [`patterns/xilinx_bit.hexpat`](patterns/xilinx_bit.hexpat) | Xilinx FPGA 比特流 |
| Xilinx Bootgen | `application/x-xilinx-boot-zynqmp` | [`patterns/xilinx_bootgen.hexpat`](patterns/xilinx_bootgen.hexpat) | Xilinx ZynqMP 启动映像 |
| ZIM | | [`patterns/zim.hexpat`](patterns/zim.hexpat) | [ZIM](https://openzim.org) 文件格式 |
| ZIP | `application/zip` | [`patterns/zip.hexpat`](patterns/zip.hexpat) | 中央目录尾部记录,中央目录文件头 |
| ZLIB | `application/zlib` | [`patterns/zlib.hexpat`](patterns/zlib.hexpat) | ZLIB 压缩数据格式 |
| ZSTD | `application/zstd` | [`patterns/zstd.hexpat`](patterns/zstd.hexpat) | Zstandard 压缩数据格式 |
| MOD | `3d-model/mod` | [`patterns/DMC3HD-Mod.hexpat`](patterns/dmc3_hd_mod.hexpat) | 鬼泣 HD 合集中使用的 3D 模型文件 |
| CBM BASIC | | [`commodore_basic.hexpat`](patterns/commodore_basic.hexpat) | Commodore BASIC |
| Atari XEX | | [`xex.hexpat`](patterns/xex.hexpat) | Atari 8 位二进制格式 |
| Terminfo | `application/x-terminfo` 和 `application/x-terminfo2` | [`patterns/terminfo.hexpat`](patterns/terminfo.hexpat) | 编译后的 *(遗留和扩展)* term info 条目 |
### 脚本
| 名称 | 路径 | 描述 |
|------|------|-------------|
| svd2pat | [`scripts/svd2pat.py`](scripts/svd2pat.py) | 将 ARM .svd 寄存器 MMIO 定义文件转换为模式 |
| csv2tbl | [`scripts/csv2tbl.py`](scripts/csv2tbl.py) | 将 010 编辑器 CSV 编码文件转换为表文件 |
### 模式库
| 名称 | 路径 | 描述 |
|------|------|-------------|
| libhex | [`includes/hex/*`](includes/hex) | 与 ImHex 交互的函数 |
| libstd | [`includes/std/*`](includes/std) | 模式语言标准库 |
| libtype | [`includes/type/*`](includes/type) | 具有特殊格式化程序的各种自定义类型 |
### Yara 规则
| 名称 | 路径 | 描述 |
|------|------|-------------|
| Official Rules | [`yara/official_rules/*`](yara/official_rules) | 官方 Yara 规则仓库 |
### Magic 文件
| 名称 | 路径 | 描述 |
|------|------|-------------|
| Arma 3 | [`magic/arma3_magic`](magic/arma3_magic) | 识别 Arma 3 二进制格式 |
| Nintendo Switch | [`magic/nintendo_switch_magic`](magic/nintendo_switch_magic) | 识别 Nintendo Switch 上使用的常见文件类型 |
| Portable Executable | [`magic/portable_executable_magic`](magic/portable_executable_magic) | 识别 Windows 上使用的 PE 文件
### 常量文件
| 名称 | 路径 | 描述 |
|------|------|-------------|
| CRC-16 | [`constants/crc16.json`](constants/crc16.json) | 与 CRC-16 操作相关的常量 |
| CRC-32 | [`constants/crc32.json`](constants/crc32.json) | 与 CRC-32 操作相关的常量 |
| HTTP-Codes | [`constants/http_status.json`](constants/http_status.json) | HTTP 状态代码值 |
| Linux Error Codes | [`constants/linux_errors.json`](constants/linux_errors.json) | Linux 错误结果的值 |
### 编码文件
| 名称 | 路径 | 描述 |
|------|------|-------------|
| Arabic ISO | [`encodings/arabic_iso.tbl`](encodings/arabic_iso.tbl) | 阿拉伯语 ISO 编码 |
| Arabic Windows | [`encodings/arabic_windows.tbl`](encodings/arabic_windows.tbl) | 阿拉伯语 Windows 编码 |
| ASCII | [`encodings/ascii.tbl`](encodings/ascii.tbl) | 常规 ASCII 编码 |
| ASCII+ANSI | [`encodings/ascii_ansi.tbl`](encodings/ascii_ansi.tbl) | 扩展 ASCII 编码 |
| ASCII+OEM | [`encodings/ascii_oem.tbl`](encodings/ascii_oem.tbl) | 带有 Windows OEM 字符的 ASCII 编码 |
| Baltic ISO | [`encodings/baltic_iso.tbl`](encodings/baltic_iso.tbl) | 波罗的海 ISO 编码 |
| Baltic Windows | [`encodings/baltic_windows.tbl`](encodings/baltic_windows.tbl) | 波罗的海 Windows 编码 |
| Big5 (Traditional Chinese) | [`encodings/big5.tbl`](encodings/big5.tbl) | 繁体中文 Big5 编码 |
| Cyrillic ISO | [`encodings/cyrillic_iso.tbl`](encodings/cyrillic_iso.tbl) | 西里尔 ISO 编码 |
| Cyrillic Windows | [`encodings/cyrillic_windows.tbl`](encodings/cyrillic_windows.tbl) | 西里尔 Windows 编码 |
| Cyrillic KOI8-R | [`encodings/cyrillic_koi8_r.tbl`](encodings/cyrillic_koi8_r.tbl) | 西里尔 KOI8-R 编码 (俄语字符) |
| Cyrillic KOI8-U | [`encodings/cyrillic_koi8_u.tbl`](encodings/cyrillic_koi8_u.tbl) | 西里尔 KOI8-U 编码 (乌克兰语字符) |
| Eastern Europe ISO | [`encodings/eastern_europe_iso.tbl`](encodings/eastern_europe_iso.tbl) | 东欧 ISO 编码 |
| Eastern Europe Windows | [`encodings/eastern_europe_windows.tbl`](encodings/eastern_europe_windows.tbl) | 东欧 Windows 编码 |
| EBCDIC | [`encodings/ebcdic.tbl`](encodings/ebcdic.tbl) | 扩展二进制编码的十进制交换码,由 IBM 为其大型主机开发 |
| EUCP | [`encodings/euc_jp.tbl`](encodings/euc_jp.tbl) | 带有 NEC 特殊字符和 IBM 扩展字符的 EUC-JP 编码 |
| EUC-KR | [`encodings/euc_kr.tbl`](encodings/euc_kr.tbl) | EUC-KR 编码 |
| Greek ISO | [`encodings/greek_iso.tbl`](encodings/greek_iso.tbl) | 希腊语 ISO 编码 |
| Greek Windows | [`encodings/greek_windows.tbl`](encodings/greek_windows.tbl) | 希腊语 Windows 编码 |
| Hebrew ISO | [`encodings/hebrew_iso.tbl`](encodings/hebrew_iso.tbl) | 希伯来语 ISO 编码 |
| Hebrew Windows | [`encodings/hebrew_windows.tbl`](encodings/hebrew_windows.tbl) | 希伯来语 Windows 编码 |
| ISO/IEC 646 | [`encodings/iso_646.tbl`](encodings/iso_646.tbl) | ISO/IEC 646 编码,旧版 ASCII |
| ISO/IEC 6937 | [`encodings/iso_6937.tbl`](encodings/iso_6937.tbl) | ISO/IEC 6937 编码,包含附加字符的 ASCII 扩展 |
| JIS 0201 | [`encodings/jis_x_0201.tbl`](encodings/jis_x_0201.tbl) | UTF-8 中的 JIS X 0201 编码 |
| JIS X 0211 | [`encodings/jis_x_0211.tbl`](encodings/jis_x_0211.tbl) | UTF-8 中的 JIS X 0211 编码 |
| JIS 0213 | [`encodings/jis_x_0213.tbl`](encodings/jis_x_0213.tbl) | UTF-8 中的 JIS X 0213 编码 |
| Macintosh | [`encodings/macintosh.tbl`](encodings/macintosh.tbl) | Macintosh 字符编码,由 Kermit 协议使用 |
| Pokémon (English, Generation 1) | [`encodings/pokegen1_en.tbl`](encodings/pokegen1_en.tbl) | 英文第一代 Pokémon 游戏使用的字符编码 |
| Pokémon (English, Generation 3) | [`encodings/pokegen3_en.tbl`](encodings/pokegen3_en.tbl) | 英文第三代 Pokémon 游戏使用的字符编码 |
| Shift-JIS UTF-8 | [`encodings/shiftjis.tbl`](encodings/shiftjis.tbl) | UTF-8 中的 Shift-JIS 编码 |
| Thai | [`encodings/thai.tbl`](encodings/thai.tbl) | 泰语字符编码 |
| Turkish ISO | [`encodings/turkish_iso.tbl`](encodings/turkish_iso.tbl) | 土耳其语 ISO 编码 |
| Turkish Windows | [`encodings/turkish_windows.tbl`](encodings/turkish_windows.tbl) | 土耳其语 Windows 编码 |
| UTF-8 | [`encodings/utf8.tbl`](encodings/utf8.tbl) | UTF-8 编码 |
| Vietnamese | [`encodings/vietnamese.tbl`](encodings/vietnamese.tbl) | 越南语字符编码 |
### 数据处理器节点
| 名称 | 路径 | 描述 |
|------|------|-------------|
| Caesar Cipher | [`nodes/caesar.hexnode`](nodes/caesar.hexnode) | 简单可调的逐字节 Caesar 密码 (ROT) |
| XOR Cipher | [`nodes/xor.hexnode`](nodes/xor.hexnode) | 将输入与重复的 XOR 填充进行异或 |
### 主题
| 名称 | 路径 | 描述 |
|------|------|-------------|
| Visual Studio Dark | [`themes/vs_dark.json`](themes/vs_dark.json) | 类似于 Visual Studio 深色主题的主题 |
| Solarized Dark | [`themes/solarized_dark.json`](themes/solarized_dark.json) | Solarized Dark 主题 |
| Catppuccin Latte | [`themes/catppuccin-latte.json`](themes/catppuccin-latte.json) | Catppuccin Latte 风格 (浅色主题) |
| Catppuccin Frappe | [`themes/catppuccin-frappe.json`](themes/catppuccin-frappe.json) | Catppuccin Frappe 风格 (深色主题) |
| Catppuccin Macchiato | [`themes/catppuccin-macchiato.json`](themes/catppuccin-macchiato.json) | Catppuccin Macchiato 风格 (深色主题) |
| Catppuccin Mocha | [`themes/catppuccin-mocha.json`](themes/catppuccin-mocha.json) | Catppuccin Mocha 风格 (深色主题) |
| Theme Lion | [`themes/theme_lion.json`](themes/theme_lion.json) | 语义化 CLion 灵感主题 (深色主题) |
| Retina Dark | [`themes/retina_dark.json`](themes/retina_dark.json) | 基于深色主题的语义化主题 |
### 反汇编器
| 名称 | 路径 | 描述 |
|------|------|-------------|
| 8051 | [`disassemblers/8051.json`](disassemblers/8051.json) | Intel 8051 架构 |
标签:3DS, 7z, APFS, Binary Pattern, Capture The Flag, DAST, Data Processor, Digital Forensics, Encodings, Hex Editor, Homebrew安装, ImHex, libmagic, Magic File, Malware Analysis, Reverse Engineering, Yara Rules, Yara 规则, 二进制格式, 云资产清单, 域环境安全, 威胁情报, 开发者工具, 开源, 恶意软件分析, 数字取证, 数据库, 数据结构, 数据解析, 文件格式定义, 文件系统, 特征码, 编码表, 网络调试, 脚本, 自动化, 自动化脚本, 自定义主题, 资源仓库, 逆向工具, 逆向工程, 通知系统