HexWalk – Hex Editor/Viewer/Analyzer

"Hacking" like this is such an important skill that someone can develop. I've been working a lot with getting older games to run on modern Windows, and a good chunk of my time has been spent in a hex editor.

The other day for example I was trying to figure out why "Lord of the Rings: Battle for Middle-earth II - Rise of the Witch King" (boy what a title) was hard set on pulling out some registry key from HKLM's "App Paths". Between x86dbg and a hex editor I was able to patch the hard coded 0x80000002 DWORD value for HKLM to 0x80000001 to point it towards HKCU. Is this a lot of work to avoid needing admin privileges to install the game? Absolutely, but it can be fun and rewarding.

This is what I primarily use hex editors for; I've made some simple romhacks and occasionally do some reverse engineering. I'm curious what hex editors people would recommend for this purpose though, I've tried a few over the years but have yet to really find one that "clicks".

During my first job out of college, I was assigned to maintain an ancient Windows codebase. A few different groups of people had been assigned to maintain this specific website and the people responsible before me had hardcoded secrets in the compiled executables but had excluded them from the source code. My experience using hex editors from tinkering with old video games (Diablo 2) gave me the skills to extract the secrets for work.

I tried it, on Windows you need Python only if you want to use the embedded binwalk feature, but you don't have to install binwalk or any other dependencies since it is provided in the zip file. It worked seamlessly.

By the way I don't know any other good solutions to use binwalk on Windows

HexWalk is much simpler than ImHex. It uses Qt so the GUI is more native (ImHex, of course, uses Dear ImGui). HexWalk is much more "fixed function" than ImHex. ImHex is basically a core hex editor view with a canvas you can fill with an endless stream of plugins.

For a comparative newbie, I'd say HexWalk is simpler than ImHex and offers a decent baseline feature set for simple tasks. I prefer the native UI widgets to Dear ImGui ones. It gains features each release and is slowly catching up to HxD (which is IMO the Gold Standard for "fixed function advanced features hex editor," to the point that I run it in Wine even on Linux and OSX). Some elements of the UI feel wasteful/clunky compared to HxD, but a lot about hex editors boils down to personal preference.

Haven't used HexWalk, but ImHex definitely supports this. It's called out in their README under Data Searching, called Sequence Search.

https://github.com/WerWolv/ImHex/blob/v1.32.2/README.md?plai...

At the first glance from what I see, the advantages of new HexWalk:

* free software / open source

* cross-platform

* theming (e.g. dark)

* more analysis capabilities through 3rd-party binwalk (but python and thus not suited for very large files).