WinHex

WinHex It is a small tool specially designed to deal with various daily emergencies.WinHexcan be used to check andRepair various files, recover deleted files, data loss caused by hard disk damage, etc. At the same timeWinHexIt also allows you to see files hidden by other programs anddata. overall WinHex It is a very good hexadecimal editor. It has received the highest five-star rating from ZDNetSoftwareLibrary and has powerful system utility.

WinHex Tutorial

1. How to set Chinese?

Click "help"-"setup"-"Chinese, please!" at the end of the menu bar.

2. Software usage tutorial?

Title bar: Like general application software, the title bar displays the name of the software and the name of the currently opened file;

Menu bar: Winhex's menu bar consists of eight menu items - File menu, Edit menu, Search, Locate, Tools, Options menu, File Management, Window and Help menu.

In the file menu, in addition to the regular new, open file and save and exit commands, there are also backup management, create backup and load backup functions. Select the Properties item in the File menu to pop up the file properties window, including file path, name, size, creation time, modification date, etc. In the edit menu, in addition to the regular copy, paste and cut functions, there are also functions for data format conversion and modification. In the search menu, you can find or replace text content and hexadecimal files, search for integer values ​​and floating point values. In the positioning menu, you can quickly locate based on the offset address and block position. The tools menu includes disk editing tools, text editing tools, calculators, template management tools, and Hex converters, which are very convenient to use. In the options menu, include general option settings, security settings and restore option settings.

The Winhex toolbar includes file creation, opening, saving, printing, and property tools; cut, paste, and copy editing tools; find text and Hex values, replace text and Hex values; file location tools, RAM editor, calculator, block analysis, and disk editing tools; option setting tools and help tool buttons. Operations can be made more convenient by using the shortcut buttons in the toolbar, which are the same as the corresponding commands in the menu.

Before using Winhex, you need to make corresponding option settings. Click the option setting shortcut icon button in the toolbar to pop up the option setting dialog box. It includes whether to use WinHex as the default association, whether to add WinHex to the context menu, whether to not update the file name, whether to quickly open the file, and whether to display the file icon and toolbar. And you can also set the number of files in the recently opened file list, choose whether to use the TAB key to generate tags, and set the paths for temporary folders, backup folders, and text editing. In the general settings, you can choose whether to display double cursors and page separators, whether to scroll line by line, and whether to display the Windows progress bar. In addition, you can also set the font type and color. I believe you will learn it soon. Execute the security item in the options menu, and the security protection option setting window will pop up. You can choose whether to restrict driver control, whether to calculate standard checks and sector read caches, and whether to confirm the update file. In addition, you can choose whether to automatically check the disk cluster, whether to always display the recovery report, whether to keep the driver image for the next session, whether to hide the encryption key (*****), and whether to check virtual memory transformation and keep the key in RAM. After all settings are completed, click the Save button and then the OK button to return to the main window.

3. Prerequisites for data recovery

Data cannot be destroyed or overwritten twice!

Hard disk data structure

The following is the data structure of an entire hard disk divided into three areas.

MBR C drive EBRD drive EBR E drive

MBR, the master boot record, is located in cylinder 0, track 1 and sector 1 of the entire hard disk. It occupies a total of 63 sectors, but only 1 sector (512 bytes) is actually used. In the total 512-byte master boot record, the MBR can be divided into three parts: the first part: the boot code, which occupies 446 bytes; the second part: the partition table, which occupies 64 bytes; the third part: 55AA, the end flag, which occupies two bytes. What we will talk about later is using winhex software to recover mistaken partitions, mainly to recover the second part: the partition table.

4. Recovery tutorial

Winhex has complete partition management functions and file management functions. It can automatically analyze partition chains and file cluster chains, back up the hard disk in different ways and to varying degrees, and even clone the entire hard disk. It can edit the binary content of any file type (displayed in hexadecimal). Its disk editor can edit any sector of the physical disk or logical disk, making it the first choice tool software for manual data recovery.

First, you need to install Winhex. After the installation is completed, you can start winhex. After starting, the first thing that appears is the Start Center dialog box.

Here we want to operate the disk, so select "Open Disk" and the "Edit Disk" dialog box will appear:

In this dialog box, we can choose to open a single partition or the entire hard disk. HD0 is the Western Digital 40G system disk I am currently using, and HD1 is the hard disk we want to analyze, Maxtor 2G. Here we choose to open the entire HD1 hard drive and click OK. Then we see the entire working interface of Winhex.

The top is the menu bar and toolbar, and the largest window below is the workspace. What you see now is the content of the first sector of the hard disk, displayed in hexadecimal, and the corresponding ASCII code is displayed on the right. The right is the detailed resource panel, which is divided into five parts: status, capacity, current position, window status, and clipboard status. These situations are very helpful to grasp the situation of the entire hard disk. In addition, right-clicking on it can swap the position of the detailed resource panel with the window, or close the resource panel. (If the resource panel is closed, it can be opened through the "View" menu - "Show" command - "Detailed Resource Panel").

The bottom column is very useful auxiliary information, such as current sector/total number of sectors...etc.

Pull down the scroll bar and you will see a gray horizontal bar. Each horizontal bar is a sector. A sector has a total of 512 bytes. Every two numbers is a byte, such as 00.

WinHex update log

* Several other local improvements and bugfixes

* Different templates available online for UFS.