winhex data recovery software [ ☜ borrow your finger to use it ] is a very powerful data processing software with a hexadecimal editor as the core, which can help you easily check computer data, repair files, restore deleted files, Data loss caused by hard disk damage, etc., can also allow you to see files and data hidden by other programs. Moreover, winhex data recovery software can be used to deal with data recovery, computer forensics, low-level data processing, IT security and various daily emergency situations. It can not only edit and modify Hex and ASCII codes, but also support multi-file search and replacement functions. mode. When processing data, you can display text and hexadecimal characters at the same time, so that you can check whether the selected range is correct when you modify it. The built-in character set view, and the template manager and character value table are provided. The data viewing tool in, so that you can get more references when editing the base.
winhex installation tutorial
1. After downloading and decompressing on this site, you will get the following files 
2. Double-click to open the folder "WinHex_20.0SR0_Green" 
3. Double-click to run the "WinHex64.exe" program to open the software; 
4. The software has integrated patches. If you are prompted to register, please use the following Registration code
Name: ghpym.com
Addr: [email protected]
Addr: https://www.ghpym.com
Data: B5091BEA3D7BBC673C9C8C810B003E58
Data: 51D3B6D8163E221C0529D522C5848474
Cksm: AB834292
Winhex use tutorial
1. Open the disk
menu: Tools-Open the disk; 
2. The
upper part of the interface is the folder and file situation; the lower part is the hexadecimal value of the opened disk; 
3. Look for the end sign of the MBR as
described above, MBR occupies 1 fan Area, 512 bytes, the end flag is 55AA. You can open the calculator directly from Winhex, the decimal 512 is converted to hexadecimal is 200; 
find the offset 00000200, such as the following figure, there is a horizontal line mark at the end of each sector; the offset starts from 00000000, then the second The starting offset of each sector is 00000200; look at the figure below, the Offset column value is the last 2 bytes of the corresponding row of 000001F0. It is 55 AA, which is the end sign of MBR. This will find the area where the MBR is located; 
4. The partition table is located 64 bytes before the end mark; each row is 16 bytes, 4*16=64; the 
first byte of the partition table is the boot mark. If the value is 80H, it means the active partition; the 
fifth byte is the partition type:
00H——means that the partition is not used
06H——FAT16 basic partition
0BH——FAT32 basic partition
05H——extended partition
07H——NTFS partition
0FH——( LBA mode) extended partition
83H-Linux partition