Way back in July I was doing some simple binary data file reverse engineering, and got annoyed at the fact that I couldn’t find a free hex editor for Windows which offered all of the following:

Seeing all interpretations of data (e.g. various integer types, floats and text) while hovering over some binary data.
Searching data of a given type (e.g. uint32) quickly and conveniently in different numerical formats (e.g. decimal or hex).
Marking identified pieces of data with their type and some notes.

I thought “it can’t be that hard now, can it?” and set out to create my own. After some deliberation I choose C#/Winforms to implement it, simply because the tool support is second to none and I didn’t want to waste more time on UI stuff than strictly necessary.

After spending a few hours on it way back then, and finally a few more today, it has turned into quite a usable (but far from complete or user-friendly) program. I called it Hexer, which is both appropriate in English and also means “Warlock” (or even “Witcher”, literally) in German.

It has all the features which I was missing:

The pane on the left shows various interpretations of selected and hovered-over data.
You can easily enter different types of numerical addresses written in any C-style string format (e.g. “161″ searches for the decimal number 161, “0xFF” searches for decimal 255 and 010 searches for decimal 8).
As seen in the screenshot, you can mark ranges of data with some data type, and see the in-line interpretation of that data in the file. These markers can be stored and loaded independently of the files they apply to.

I put the source up on GitHub here, and here’s an executable if you want to give it a try. (You’ll need the right version of the .net Runtime of course)

Of the entire implementation I like this part best, which is a simple descriptive listing of all the data types, including their properties (such as name and size) as well as the ability to convert values of that type to and from raw binary and strings. It’s succinct, easy to extend (both with new data types and new meta-information about them), and many of the UI elements are generated directly from that list.

Hexer is far from fully-featured – I put up a short list of TODOs in the Github readme, but there’s a lot more which could (and should) be done.

3af4_28.09.2015_EXELAB.rU.tgz - hexer.zip

| Сообщение посчитали полезным:

Gideon Vi пишет:
(You’ll need the right version of the .net Runtime of course)

.. What version is right?


File linked for "OS=4 SubSystem=6", but if fixed to "OS=1 Subsystem=3.10" under WinXP types messagebox:
".NET framework initialisation error:
Unable to find a version of the runtime to run this application"


-- Добавлено --

Похоже, фигня короче.
В теме хекс-редакторов уже полно нормальніх решений, чтоб ещё с .NET туда влазить..



| Сообщение посчитали полезным: elch

win7 -> crash TypeLoadExeption

-----
Наша работа во тьме, Мы делаем, что умеем. Мы отдаем, что имеем, Наша работа во тьме....

| Сообщение посчитали полезным:

dosprog framework видимо нужен не ниже 4.5. На xp не пойдет.

Хотя из исходников собрал в 10 версии студии))

Можно глянуть, если кому интересно.

867b_28.09.2015_EXELAB.rU.tgz - hexer.exe

| Сообщение посчитали полезным:

Ммм... Очередной хекс редактор. Миленько.

-----
xchg dword [eax], eax

| Сообщение посчитали полезным:

JohnyDoe пишет:
Можно глянуть, если кому интересно.
теперь запустилось.. но ф топку... налепили кучу видов представления данных.. лучшеб дат разных налепили.. больше пользыб было.. а так функционал на уровне "а я налепил его за 5 минут"

-----
Наша работа во тьме, Мы делаем, что умеем. Мы отдаем, что имеем, Наша работа во тьме....

| Сообщение посчитали полезным: DimitarSerg