Kris Kasperski                      2:5063/61.8     23 Mar 99  17:54:00

                                HIEW

                                    "H       祣"
                                     . pp. ""

    :

           ⮫쪮     ⥫ 
 hiew  6.03.  ⠬    pp   p hiew. ᫥ ⪨
   p p鸞 ⮢  p襫  뢮,   
 ᮡ⢥ *view  , 祬  p  p.
     p⭮,    p  ⪠  p   ppp㥬
   p⮢    p⠢    API  (p         ᠬ
 ),    p  筮    p, p
 pp  PE\LE\LX 䠩.

 P.S.  p _㡮_    p. p. 訡 :(

     HIEW        ⥫      몭      p㬥,
 p祭        pp pp p⢥ 
 ᯮ塞 .
     ⨫ﬨ    ⮩ 楫 p樮 ᯮ짮 hex-pp,
 p  楯㠫쭮    ⫨砫 p  p㣠.  p䥩 
 p⠢塞 p - ⮫쪮  ᥣ. HexWorkShop  Windows 95  hexed
   -9  (      ⠪  設)    室, 祬
 p稩.      ᫨,     p      pp 
 ⭠p  pp ᥬp.  p p  ᮢp襭
 묨  ⢠.    p   p㦠  IDA  SOURCER
 ᯮ塞 䠩    ? ⪨ ᮢ 㦦  
 ⭨   p   ᢮    p      堪p.    ᠬ
 ᥬp?  쪮  ᪥  p,       p, ᫨
 p⮨ p " 륧"?
         ⪮  襭  hiew. p, , pp, 
 㬥  p㪠    ᯮᮡ  ⢮p  㤥,  p ⮬ p稢 ᫮
 "p묨" pﬨ  pp.
        p⢨   ᪮쪨  ,    ⮩  ⨫  ⭮
 p᫨.  p⭮,  ᪠稢  p 6.03 (᫥   ᠭ
  p㪮⢠)  pp⠥   䫠:

     ⭠p  pp 䠩 p祭 

     쭮 p⢮ ᪠ ᥬp᪨   ᪥

     p ᥬp                       (Pentiun Pro)

     p ᥬp                    (Pentiun Pro)

     ppp㬠 p-⥬               (Virtual CPU)

     묨  ᫮  ⮢  p㬥p   砨 . H 墠⠥
 ⮫쪮  ppp㥬  몠,   ⥣p樨  ⫠稪.
     p᫥      ⪠  ⠫
 p㬥⮢    p  pp,  ᯮ 祣 p hiew.
 p  ⮬    騪      ᫮  ᫨   ᪠
 p.  HIEW  ⭮    HH  ᥬp,     
 p ⭮襭 p    IDA.
     .. p ᥬp ᭮ 易  짮⥫. ᫥
 ᠬ    p   ,   ,  ppp  
   p.  ᫥  ᮡ  㠫쭮   ᠬp騬 
 p  .
     ⨬,     IDA  Sourcer ᥬp  䠩 楫,
   p  ⥫쭮  p    ,  hiew-  뢠  p
 ⮫쪮  让  p  pp    p.  筮,  ᫨  p
   p  㬥p  ⨭  pp,     
 p 㤠 p⮬,    p 堪p ᫥ 筮  
 p.  ⭮,    hiew    p  pp   p
   (  p⥫쭮  ᪠  p    IDA),  ⠪    p
   (  IDA  ᫥   㤥 ᥬp, 祬 堪p
 ᭮    hiew).
     p   ⮣,  HIEW        p⮬ p 
 LE/PE/NE/LX/NLM  䠩,      ᫥   p    pp,  
 pp,  ⠡  p       ᢮   .   p   ⮬     hiew
     ⢥    ⭠p    pp    p騬
 ⠡  p 㪠 䠩:

 ﭨ  ᫥騩 p:

 .00401145: 83EC18                   sub       esp,018 ;"."
 .00401148: 57                       push      edi
 .00401149: 33FF                     xor       edi,edi
 .0040114B: 57                       push      edi
 .0040114C: FF1500204000             call      GetCommandLineA ;KERNEL32.dll
                                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 .00401152: 50                       push      eax
 .00401153: 57                       push      edi
 .00401154: 57                       push      edi
 .00401155: FF1504204000             call      GetModuleHandleA;KERNEL32.dll
                                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 .0040115B: 50                       push      eax

  p , pp  qview:


  00001145: 83EC18                    sub    esp,00000018
  00001148: 57                        push   edi
  00001149: 33FF                      xor    edi,edi
  0000114B: 57                        push   edi
  0000114C: FF1500204000              call   dword ptr [00402000]
                                      ^^^^^^^^^^^^^^^^^^^^^^^^^^
  00001152: 50                        push   eax
  00001153: 57                        push   edi
  00001154: 57                        push   edi
  00001155: FF1504204000              call   dword ptr [00402004]
                                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^
     H  p  p騥   ⭠p筮 pp?
 HIEW            業    win32\DOS\OS/2   ᥬp,
 p騬    ⮫쪮  32-  p樨,   p ᯮ塞
 䠩 p p樮 ⥬.
     ⨬,      ⠪    p  ᥬp  p
 LE-p.  H  hiew  - p, ⠢   魨
 p  ⢨    p  VxD. ᯮ짮  ⮩ 楫 IDA  ᥣ
 㤮  -   p 筮 ⭮   䠩 pp稪 ⨫
   堭    p      冷    
 pp p㠫쭮 p⢠. IDA p  p  p㧪, 祬 
   .    ,    -    設⢥  砥    
 p㡥, ⮬  p ,  , pp,    祢:

 .00000007: B800000000                   mov       eax,000000000 ;
 .0000000C: B94A000000                   mov       ecx,00000004A ;
 .00000011: C7400400000000               mov       d,[eax][00004],000000000
 .00000018: CD2014000A00                 VxDcall   VDD.Get_DISPLAYINFO
                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 .0000001E: 66F705020000000008           test      w,[000000002],00800 ;
 .00000027: 0F85790D0000                 jne      .000000DA6   -------- (1)

     HIEW       p業 p 堪p, p
    p        ,  祬  ⮬⥫쭮  
 砭 p㧪 䠩.
           p      ⪠ 
 IDA. .  㭨  ᢮ ⥣p p㬥,  p
         p 饬   p. H IDA   
 殮 p⥣᪮ p㦨,  饭 c hiew-   p
 p稪.
       ,      pp  p⢥   hiew- 
 ᫮,  祬    ⫠稪    業  ᥬp.  Hp 
    "訬   ⠦".   H              ,  祬
 ppp   㦤.     ᪫祭,       IDA, hiew
 ᯥ稢       p,   p⠢塞   p㣨   "業묨"
 ᥬp, p ⮬   p騬 IDA ﬨ - pp,
 p⨢.    SOURCER        ᡨ   ⮫ p
 p  pp稪  ,  hiew- ⠪  p, ᪮ 
 p⠥   ᭮ 離  祫. Hp㤭  設,  祫
 祫   pp        (  p        p
 㦤).
       ᮦ  p  hiew-  ⨫  p , p
     堪p    p⭮        p.  Hpp,
 訩  p qview  ᮧ  䠩 p,  hiew
 -  .  p祬,  ᫥    뢠  ᮡ  p   㤥
 p  ᫥ p.
    H   㤥      ᫥  p  pp
 ⨫,    p    ᠭ    ⠢.    p 6.03 室
 ᫥騥 䠩:

 
 FILES.LST  -  ᠭ (, ᮢ⨬  DN  p. 窠)
 HIEW.EXE   - ⢥ ᠬ HIEW (p  DOS  OS\2)
 HIEW.INI   - 䨣p樮 䠩
 HIEW.HLP   -  
 HIEW.ORD   - 쭠 p p ppp 䠩
 HIEW.VMM   - VMMcall/VxDcall  LE 䠩
 HIEW.XLT   -  pp (Windows-1251\KOI-8R)
 HIEWR.nnn  - p⪮ ᠭ  p᪮    몥
 HIEWE.nnn  - p⪮ ᠭ  ᪮ 몥
 NEDUMP.EXE - ⨫  ᫥ NE-䠩 ( 㠫쭠 ᥣ)
 LXDUMP.EXE - ⨫  ᫥ LX\LE-䠩
 DEXEM.EXE  - ⨫  p  Dual-EXE (NE/LE/LX/PE) 䠩
 SEN.ASC    - 㡫 PGP  p
 

    HIEW.exe  祭  殮.    284,855  ,  ⭨  ,
 pp,    ᯠ⥫쭮  ᪥  (    ᥣ  .   
   pᠬ    p). H ᠬ   DUAL-exe 䠩, ..
 __  䠩   MS-DOS  OS\2 _p_.  p쭮,  ᫨誮
 p⥫쭮.  (⨬,    ⠪  pp    ⢮  
 windows).
    p,    室  ᤥ  - "pp" 䠩    
   "p"    襩  p樮 ⥬.  ⮣ p祭
 ⨫ dexem.exe
    p    㤥  pᬮp  ,      p  ⨬  
 ᫥騬  p  dexem.exe /S hiew.exe p ⮬ DUAL-exe 㤥 p襯
     䠩  hiew.mz  (MS-DOS)    hiew.ne (OS\2)  102  183 
 ᮮ⢥⢥.  ⬥⨬,   102   285,  뢠,  OS\2 
     짮⥫      p,  p訬
 p襭  㤥  㤠  p  hiew.exe  p  ᫥
 hiew.mz
     H  ᨬ    ⮣  ᤥ        , p㥬 
 hiew.exe  pp.    p pﬨ hiew ,  p
 ⮬  pp  p    ᪠,  뫠    ⢨  䠩 
  p.
      pᨨ  6.03  p  ⮥  ⥬  樨  䠩 
 ⠫,  p  ⨢p  直  p,   hiew ᪠ 
   㪠 䠩   p. 筮 뫮  p, 
     p  p   ᪨  (pp hiew.exe *.exe). H p
 ᫨  砥.  p  ⮬ hiew p  p 訩 䠩,  ᫨
 ⠪    ,   p ᮮ "File(s) not found"  
 p. 砫쭮, .
    H p  p.

     D:\KPNC\HIEWͻ
      ..          >UP--DIR<Attr---Date-----Time-- 
      PROHACK     >SUB-DIR<....15-03-199914:06:06 
      CRACKME.EXE    182455.a..15-03-199921:07:18 
      DEXEM.EXE       11408.a..22-10-199811:32:26 
                                                      
     *ͼ
                              ^
      ᪠ ⮡p. 䠩 

 1Help  2Hidden 3Name  4Exten 5Time  6Size  7Unsort 8Revers 9FilHis10Filter

       p  祭    Hp⥭ p  饭  
 p  맢    .  H  直 砩     祭
  p:

     Alt-F1  (Drive)  :  ᬥ  ⥪饣  ᪮.   hiew 
 pp⭮  p뢠  ᯨ᮪   p. , pp, 
   pp㦨 'B',   'B' p  뫮. ⪠ ⥭  
 p    pp樨    'A',  p諮   饭  p
 WINDOWS.

     F2  (Hidden):  ⮡p p  ⥬ 䠩.  
  pp.

     F3 (Name) : pp   䠩.

     F4 (Exten) : pp  pp.

     F5 (Time) : pp  p ᮧ.

     F6 (Size) : pp  pp.

     F7  (Unsort):  pᯮ  䠩    ⮬  p浪,     室
 FindNextFile

     F8   (Revers):p  ᫮  pp.  ..    㬮砭  (
 ᪫祭  )  p  pp    p⠭  pp. p
 p  pp  뢠.   pp.

     F10   (Filter)  :    ⮡p  䠩.    ᮦ  
         ᪨,      맢  㤮⢠.
 쪨   - ᫨ 㤠 ,  hiew   ⠭  㬮砭.
   ⮣  室  㤥      '*.*',  筮  pp,
 p 㤮.

     p  ⮬      p ᪠ 室 䠩.
 HIEW p  ᥡ  訥 p襭  DN  NC  p 祭 娫
  p⮣ p p .
     H⨥    ᨬ쭮    p      ᮫쭮
 p,      p        䠩.  (p  ⮬  pp 㤥
 p     ᯨ  ᨭp    ).
           ᪠       
 ,  p  ᫮,  ᫥ 筮 p 䠩. ,
     p    ⨥,  ⮬     pp.
 ⨬,   㦭  䠩 crackme.exe ᫨  ⥪饩 pp  'c'
   ⮫쪮   䠩,  筮,    筮  p
  ᥣ  㪢.  'c'   <tab>. Hiew, 뢠,
     ⨬  p  crackme.exe  뢮      (  p稬 
 pp).      㤥  ᫨     䠩 crackme1  crackme2?
   hiew p ᪭,  ⮫쪮 'crackme'  ⠭, 
 筥 -     䠩  p p.
      -                     㤮,  ⮣  
 ᯮ짮  '*'  -  p⢥    Ctrl-Enter  DN  NC -
 ᫥⥫쭮 pp 室 䠩.
       祭 業 㬥p   ᯨ᪠ 
 p  ᪮.  Hpp, [cr,h]ack.exe   crack  hack. ᫨
   ,    hiew  㤥  ppp ⮪  [c,r,h]. ..
 *.[ch]        䠩  c,cpp,h    p.   祭   
 㭨쭠    䢮p  MS-DOS  ,  p    
  p㣮 筮 pp.
     ,   筮,            襩    
 p묨   -  hiew        䠩  窠      ᥣ
 pp㥬  䠩  p⥭      p,    ⮩
 p窥,   ⠢襩    p  pᨩ. (   㬠, ᫨  p
 pᬮp          Hp,  ,  
 p  p  ,  ᯮ짮     , p ᮡ
 뫠  㤮  "ᯠ⥫" ᪥).
      ᫨  hiew  襭     饣 䠩,   p
 ᮧ  . p⨢ p⮬   <Ins>  Hp.
 ᫥    p  ,      䠩 p室
 ᮧ    p뢠  p⢥   p p.  pp, 
 p   ᤥ  p  ⪨    室  p,  ᪮p
 p       䠩    p  ⮬      p    ,  ᪠,
 pp.   (⬥⨬,  p  맢    p
 襩 F9).
      Ctrl - '\' ᯥ稢 p p室  p pp ⥪饣
 ᪠,    F10  p  pp (,  p  饭 hiew).
 p  ⮬        p  p祭  
 p  p쭮  p묨 ppﬨ.  ⮣  
 Ctrl-F1,  Ctrl-F3,  Ctrl-F5,Ctrl-F7  p  ⥪ pp 
 Ctrl-F2,  Ctrl-F4,  Ctrl-F6,Ctrl-F8   p  ᮮ⢥⢥ p室 
 ᠭ.   p ⮬   p ⥪饣 ﭨ  䠩
     ᫥饣  ᯮ짮      ᥠ.  p祬, ᫥
 p    ᠬ  訬  p.  H   p
 ﭨ  p⢥   p, ⮬ p室 p뢠 䠩
 ⮫쪮  ⮣,       'Ctrl-F10' - 'SaveSatus'.
   ᫥     p,   ⬥⨬, ⠪ p ᮡ,
   p pᬠp 䠩 (F9)

  Mode  Offset  Nameͻ
   Hex 0000163CD:\KPNC\HIEW\HIEWR.602                             
   Text00000452D:\KPNC\HIEW\DEXEM.EXE                             
  ͼ

     p  ⮬  p  ᮡ⥭    p  ⥪騩  p  
 pp  (  ᮡ  p⭮). ᫥  ᯮ짮 hiew 
 ⥭   ⥪⢮  䠩 (⮭ , 㬥樨). p ⮬
     p        ᫥ p 室
 p  室.  (祬,         묨 ⬥⨬,  
   p  ᥣ p᪨ ᥬ ᮢp p - qview
 by AGC, UniversalViewer  MessageViewer by KPNC    p㣨).  
  ᥡ ⬥,   ⮬ UniversalViewer  p㣨.  
 hiew    qview  p뢠     䠩, UV -   㬬  
 p᭮⥩  ⥪饩  樨  pp.    䠩  p ⮬ pp.
 ᫥ 뢠  䫨⮢,    p⠥.
     p   ⥯p     pᬮp    ⮪.  設᢮  
    p , 祬 p p.
         p     䠩,  p ⮬ 㤥
 p ⮫쪮 p  ,  ⠫ 㯭  Ctrl-F9, , p祬,
 㤮,  ..  㬥蠥  p  p㧪. ᫨ ᯥ䨪 䠩  㤥
 ,    hiew    室騥 䠩      ᯨ᮪.
   㤮   筮. H ᯥ䨪  p  맮
 Hp ( 类 砥   筮 ).
     pp   /SAV      SAV-䠩,  p  ⮬᪨  㤥
 p㦥.    㬮砭  p  hiew.sav,    ᫥   
   hiew.ini:

 ; StartUp
 Savefile           = "hiew.sav"

 sav-䠩    p  ⥪饥  ﭨ  hiew-,   ⥪
 ,        .. 筮 ⮡ ᯮ짮 sav - 䠩,
 㦭    hiew  p⮢. ⨬,  'hiew.exe MyFile.exe' 
 p   p. H㤮, 筮,  p室 p. 
   ⠥  - 宧鶴 (SEN) - p.
     p᭠ ᮡ - 䨣p樮 䠩  ⠪  㪠뢠 
  p ᫥  /INI.  ᮡ 㤮  "pp⨢"
 ᯮ짮  hiew  p  ᪮쪨 쬨.  - p  ᢮
 .
     ᫨    p   ᮤp  pp,  
 ᯮ짮    /S   㪠   ᪨. p ⮬ hiew /s C:\*.* 
 让  p⭮  ᫥ p⥫쭮 p蠭 ᪮ p ᢮
 p  ᮮ饭:

 "No free memory"

       㤥   ⢠     ᪥ 䠩. ᫨
   ⭮⥫쭮 ,   蠭,  hiew    㤥
 p  p訩 䠩,  Ctrl-F9.
       p諥  ⠪     p㬠 ⠪ , 
 p      뫠   .  ᥣ   
 p㪮 ⮥ 䠩 Hp!
     ᫥  롮p  䠩  hiew  ⮬᪨  뢠    ⥪⮢
 p.  H  ᫨誮  㤠  롮p    堪p, ⮬ ᫥ 筮
 p  pp ᫥ p hiew.ini

 StartMode          = Text          ; Text  | Hex     | Code

     p祬,  ᫨  hiew p   pᬮp ⥪⮢ ᮮ饭 
 祣  p    . , ,   㭪樨 "⮤⥪", ⥬
   p ᫥ ᮢᥬ  p㤭.


 HH H:

                    R      NE 0000007B a16 --------     823  Hiew 6.03 (c)SEN
 ^     ^           ^^       ^        ^  ^   ^            ^
                                                 
      Ĩ 䠩         ⨯                     Ĥ 䠩 (dec)
                                       
     p  ﭨ           
                                      
 ī|%    ⥪饥 ᬥ饭 (hex)   p 16/32 pp來

        p     ᨬ  p,  
     맢  -  p    .  ᬮp p
 p :
     p        p   ⢨⥫쭮 
 祭 㤮. ⮬ p pᬮp  p ᫥ 
   짮⥫,          ⪫  .  ⮣ 室
 pp  hiew.ini  ᫨ p  䠩  筮,
  p   "HH HIEW" 饣 p㪮⢠.
     Hp  ᪠  (pאַ    p⭮)  襩 Alt - 7 
       p⢥  p 맮  ᪠ 襩 F2.
 p  ⮬  p  p  㤥    ⮫쪮 ᫥ p襭
 ᪠. H p  ᫥. H   p p  F2 
 ALt-F7     p ⮬  p. H  㤥 p  p - 
     ⮫쪮    pᨨ  6.03 , 筮,    
 ⫠.

     ﭨ 䠩   ᫥騬:

      (R)ead   - p  ⥭
      (W)rite  - p  
      (U)pdate - 

     p  ⮬ ᫥ p p뢠 pp⭮.  ᨬ 
 ⮣        , p  p p pp
 (F9)       (  !)  ᥣ  ⠢  䫠  .
 p祬,       ,            p⭮,        뫠
 p   p.
     p   맮 pp (F3) p  ⮬᪮ pp
 䠩   p  㯠 (⥭  ).  p p 
 ᫥  室    pp.  .. ⮬᪮ pp "쪮 
 ⥭"  p室.  .  p p .  p,
 ᪠,  㬠    p.  ? -...
     Hiew  ⮬᪨  pᯮ  ᫥騥 ⨯ 䠩 DOS EXE, NE, PE,
 LE,LX,NLM    p  ⮬  ⮡p  p  ⮫쪮  ᫥
    .   DOS-EXE  hiew ⮣ p __ p (  ᪫祭
 ). , ᮡ⥭, ⠬  p ᮡ 祣. , 筮,
 p쭮   p   pp   DS,         뫮      ᫨誮  
 ⭠p筮   pp  -      hiew  砫쭮      
 p    ᥬp.  p祬, ᫨   p 
  p   p 짮⥫ﬨ   
     pᨨ.   ⭮   ⠭p p 䠩,
 pp,  p륬  BIOS-    .
         16/32  p  ⮬᪨    p  ⨯
 䠩.    ⫨砥      qview,    p p室 p
 p,  p⨢  砥  ᥬp p쭮,  
 p    砫뭬  p⠬.     p 'text',  ⨥ 16\32
 pp     ⠪    p p ᠬ 
 ⮡p ,   .
      祭    p㬠  p  . p祬, 㤮  
   p筮.  p  Borlan  ⠭  ⠤p  -䠪:  Ctrk-K-n
   ﭨ, Atl-Q-n ⠭ .  窠 p  뫠
 p  SEN   ⢮ ᮢᥬ p㣨 "p稥" . Grey-'+'
   ⥪饥  ﭨ.    䠪  p  p.
 p '-'   p浪 p  (  ?!
 ).   p   ⮬   hiew            쬨 . 襣
 筮   p㡥.
     ⠭  ⥪    (p  p ⬥砥 '.') 
   Gray-'-'.  p  p   Alt-'1-8'. p ⮬
 ᫥   ⮬᪨  砥    ⥪.  ᫨    p
 㤠,       Alt-'-'.  'Alt-0' - 㤠 p  
  pp.    p  ⮩ 樥!
        p   pp   '<Editor>'      ᮦ  ⠭
 㯭    p稭  ⮣,    ᫥ p祭 ᥣ  .
 ⥫쭮,      ⮪  p   hiew-,  p 
 p    ⮩  p.   p᭮,   
   p㤭  뢠 p  ᫥...  ,  
 ⢨⥫쭮  ⪮  p祭, p ᮡ   ᥡ  p
 pp      䠩.  ⫬        
 ᪮    ᫨,   p    qview,   ⠪
 p祭.  ⠥  ⮫쪮  ,    p    ᪮
 ⢥    (!  堪p!)      p  ᪮쪮  pᨩ
 p ,  p   p.
        䠩   ⮡p   ᪫⥫쭮    p    堪p
 筮  ᫥.    㯥  ⭠p筮 ᬥ饭  ᮡ
 p⭮.  H宩    㬠        p室    
 ⭠p  p    decode  p  ᮮ⢥⢥ -  
 ⥪⮢.  p  ⮬  뫮    ⤥ 窮  p , 
 蠥  ⠡쭮    ᫥.        p  p 
 ᫥  p    ,      ,      室,
 室    p 室 (p p ⮬ ᫮, ᫨ SEN-   
     p ᢮ ⢮p  ᠬ  㣮 p, 
  p諮  p, Cup-, InSight-... , ᮡ⥭  
 p-.  - ᠫ   ᢮ ⨫,   ᥩ 1$
 p  p  p    p  ⭨ p  - 
 ⨫,  p   뫠 ᠭ   p稭  ⮣ ᠬ
 p.  ,  pᨩ᪨  짮⥫  p몫,  訥 pp
 p    p  "p  ⠪"      ᮡ⥭  㤮)


                                 

                                        "⢮ p 襭 p⨧,
                                        H  ⥡   ⠭,
                                        ᫨ ,  pp뢠,ᠬ ᥡ
                                        p".

                                        .pp ""

    p    p⢥  ᠭ  ᥩ  hiew-.    
     "p㪮⢮    砬"  "ᠭ ᥩ".
   -殢  롮p  ⠫   ᫥.   㡮 㡥
 ᠭ    p  p,  㦭 ⥬ 짮⥫, p 
   p㪮⢮.  HIEW    堪p᪨ p. " 祬 堪p 奫?" -
 론  ᫨.  H  , p p  쪨 ᥪp
   p⠭    訬  㤮⢨.     ⮣ 稭騥
 pp   p "     ⨪ p,
   hiew-     ",
     p   ᥬp            饩.  ,
 pp, 訥 䠩 㤮  p  hiew-,   짮
 MASM\TASM-, p   p冷  p. p ⮬ ᫥ 
     p⮢, ⠪ pp,   p  p
   ᥬp  ᬥ ⭠  p- pp來  
 ⢮    Pentuim Pro.  p hiew-   ᮡ⥭ p祪
   ᬮ  ⮣  ᤥ.
     p  ⮣,     p 뢠   hex-,   ᫥
 pp\ᥬp\\ᥬp,  (p p 
 ⠭p묨  p⢠),    p뢠  ᢮  ᯥpp 
 p    訡. , pp,   TASM ⥭쪮  p 
 pp  USE32 祬- ⠢  㦭  㦭 p䨪 
 (    )  ᪠    楫 ⯨樨 p⠢ . 
 pp? p 㪠 p䨪 DS  . TASM  ppp (
 p,     ᪠  楬    p).    ⥯p p⢠,  
 ᠬp     p䨪, p  饭.
          ⮥ ᥬp, ᫨   pp 㦭
   p  7x  EB,   ⮪-p㣮 p  ( ⠪
 砥 筮 ).
       ᮦ  p ᥬp ᮤp  p祭,  p
 㤥  p᪠  . p ᥣ ᠬ ,   ⮬ p hiew
    p  ᬥ饭   ᫥ ᮢ p室
 p p.   㤨     ᫥ . 
 ᠬ     祭 p, 筮  p pp㬮 䠩.
     pp,  p  ᠬ pp⠭ PE-p 䠩,
 p  p  Win32  (   p㪮⢮  hiew,   
 ).    ⮣ ᭠砫 pᬮp,  p室 p㧪 PE 䠩.
 MicroSoft    ⨬p  p  PE 楫 pp 
 ,    DOS-ᥪ. p ⮬  ᥫp 뤥   
 .      砥,    p      ᬥ饭
 ⢫  p    p  p㧪,  p  
 㧭    PE 䠩. ᪮ hiew ⮡p ᫥  㤮
 ⠥  ,    p頥   - 筮 
     Image  base.   設 砥 ⠬ ᮤp p㣫 筨,
 pp  0x400000,0x010000.  H  ᫮  믮  ᫥   㬥,
 ,    祬  p?    ⠪    襫  ᪠ p  
 pᨨ  hiew  p p,     蠥   ᯥ宬
 ᯮ짮.  p    砫  䠩     Ctrl-F5, ᫥ 祣
  祭 Image base (  砥 400000). ᬮ  稫;

                   ᥬp                 ᥬp
  p: .0040119A: call .000401298    0000119A:  call 000001298
   p: .0040119A: call .000401298    0040119A:  call 000401298

         㤮⢮p ⬥, p p訫 p 
       p p  ⮪ (   p
    p⥫ ).
     祭  㤮,   hiew p ᥬp  ⠥ ⨬p
     . Hpp, ᫨  㪠 p p DS.  p
   ᮮ⢥騩 p䨪 0x3E. p:

 00000000: 3EA16606                     mov       ax,ds:[00666]
           ^^
 00000004: A16606                       mov       ax,[00666]

       p㣮  p  ᥬp (tasm, masm) 뤠  
 p,      맢    p.     hiew,  
 譮  ,   p.
       ᥬp  p  쭮  ⢮p᪨.       
 ᪠  p     ᥬp -p.  
 ᯥ䨪  p⥪p    80x86  ppp   Intel. p
 p  pp  pp뢠        p,  
 p室    ⮬ p Intel p⨫   ⠪
       pp  pp  ᫮  㫨p  pp⢥
 祭   訬   0x100.   p   ⮬   p騩    p , ..
 ⥮p᪨      㦠      ,   ⮬ ᠬ  
 p        饬      p   (᭮,      p
 p⢥  p          ).    p 
 p      . ⠪, ⠪    
 ᯮᮡ:

 00000007: 83C266                       add       dx,066 ;"f"
 0000000A: 81C26600                     add       dx,00066 ;" f"

     p   ⮬   hiew   ᥣ   롨p  p      (..  ⠥
 ⨬p ). ᫥ p  堪p  뢠,   
 ᮮ⢥  p.
     p쭮   p⨢     p  p樨  p室.  
 㬮砭   hiew   ᥣ  p    (near)  p室  0xE9.  ᫨
 室      p室,  ⠢ hiew  ᤥ 
   jmps  (jmp  short    筮).    ᥡ  
 p⨪  p       ᥣ pp  ᫮
 p室    ᫮.  p ⮬ jmp near p p . ,
 .
     p  p⨪  ⨬,    ᥬp  ⠪        
 p  ᨬ ,  ᮢᥬ - ᮢᥬ  p. 祭 ⥫
     ᫥  p   業 p p᫥ 
 p⢮.
       ⠫쭮    ᥬp   ᥡ pp⭮  筮. p ⮬
   p  p.  ..   pp᭮ pp p樨
 ⨯  mov ax,[66+11]   mov ax,[-77]. ᫥ p   p.
 (      -  !) p⥫ ᫠ p ᥣ 
    ᫮.  p  ⮬    32-pp來  p    룫廊  ⪠
 ᥬp 'jmp -1'

 00000003: E9F7FFFFFF                   jmp
                                             ^^^^^^
     ⨬,  ᫥ ⮫쪮 p饭楬 p   짮,
        p砥!  p⠥ ᫥騬 p - 
 pp,  :

  00000000: E9FAFFFFFF                   jmp -1
  00000005: 90                           nop
  00000006: 90                           nop

 p ⮬ jmp ᬥ頥 㪠⥫     :

  00000000: FF9090909090                 call      d,[eax][090909090]

     ,  ⨬        祢     쭮 
 p.  祢,    ᥬ  p室      jmp  p룠 
 p   ᢮  p椠.      ᥬp  p⥫
 p室    hiew     让 ,  .  类 砥  
 p ⠪,   .
     p祬,           p  p⮢ 
 p.
         ⪮  p室騬       㯮p 
 hiew-a  'pp'  pp <ptr>, ⮬ p

     mov Word ptr CS: [077],66

        p⠭  ᨭ⠪᪨  p.  p室 
 ᮪p 

     mov Word CS:[077],66

     ᭮  㤮    ᢮ p窨,    - p室.
 ᫥    筮    p訢    p⭮      ᮪p
 byte/word/dword/pword/qword/tbyte  b/w/d/p/q/t,   :

  Pentium(R) Pro Assembler ͻ
  mov       w,[0077],0022 
 ͼ

       ᫠  ⭠p묨  㬮砭,    㤥
 p⨢  㪮  'h'.        'x'  p         
 ⥫쭮  p㣠.  ᫥  룫廊  ᮡ  p   䮭
 p,   p   ⠪       p-⠪  ,    
 pp    ᢮  p  'h'.
           hiew, ⥬    ᪫뢠 ⫥,
   ᠫ  p 祫. p祬, ᫥    ⪠,
 祬  p.  ,    蠫      p,      p
 p  p冷,   p p 뢠 쬠 ᪮p⭮.
     p  訡    p p饭,     뢠
 -  p, p,  hiew   p稭   , 祩
 p    (᫥  p)  - ᥬp  筮    
  祬 ""  ᥬp.

 
     ᥬp   hiew  . ᪨  ᭮ p p
 堪p.  H     p  ᥬp  㬥 hex-,
 ( ⥭쪮 p室 p p  p p  DN ᪠), 
 ᥬpᨪ  ⨭    p筥   p ⮣  ⢮
 ⥫ ⥩ (⠪   ᥬp᪨   ᪥)
 p ⭮ ᪮p  pp.
       ᮦ  (  p    襬    㤨) p 
 ⠥  hiew ᥬp     p   
 ᪨ ᮮp. H  , 㤥  p 몠,  
     㤥   ,  p    p. 
 类    ᢮  .   ⮬,  p᪠ p  p 
     㬥p API (-  p㤭)  
  砥.
     H    ,    p  宧鶴 - p, ⥬ ,  hiew 
      㤮⢨  ᫥    室     ᪨
 ᮮp.      p 㤥   ᢮ p  ,
 ⮣    ᯮ        㤥,     ⠥ ⮫쪮
     ᠤ      ᮡ⢥  Xview. ᫥, ,
   ⨢          ᪫祭. p祬,  UniversalViever
 室   쬠 p襭 ﭨ,  ᫨ - 㤥 祭,
 ...     p  p뭪 hex-pp.  ᫮ ᪠
 UV  砫쭮  p⠭    -pp  p   㤥 祭
 㤮 p  p p㠫 pp.
     H        㤥  (  㤥    ),    hiew 㦥  
 p  p樨   Pentium Pro.  筥 P6-kernel, p
 ᯮ  ⮫쪮  ⮬ ᫥   Celeron-.
       ᥬp ⥪ ᫥騩:

 .00401207: 50                           push      eax
 .00401208: 52                           push      edx
 .00401209: E8D2FEFFFF                   call     .0004010E0   -------- (1)
 .0040120E: 83C404                       add       esp,004 ;"."
 .00401211: 50                           push      eax
 .00401212: E8A9FEFFFF                   call     .0004010C0   -------- (2)
 .00401217: 83C408                       add       esp,008 ;"
 .0040121A: 663DF801                     cmp       ax,001F8 ;"."
 .0040121E: 7404                         je       .000401224   -------- (3)
 .00401220: 6A03                         push      003
 .00401222: EB02                         jmps     .000401226   -------- (4)
 .00401224: 6A04                         push      004


     Hiew   "⢮"  䠩, 室  p楤p  믮
 ᫮\᫮  p室.    ⮣  㦭    p,  p
       p㣫  ᪮  ᫥.  ᬥ  ᪠  ᢮  (
 p⮥ )  ᫥  IDA p ᪮쪮 . p室
 ⢫    p,    p  室 pp.  ⢨⥫쭮
 㤮,  ..    ""   ᬥ饭, p p ⥪
  pp. Hpp:

 .004012B9: 6840314000                   push      000403140 ;" @1@"
 .004012BE: 6844314000                   push      000403144 ;" @1D"
 .004012C3: FF74240C                     push      d,[esp][0000C]
 .004012C7: E834010000                   call     .000401400   -------- (2)

     hiew    pᯮ  ᬥ饭  000403140   000403144. 筮, 
 p      p  (F5),        祭  p⭮.  H , 
 ⬥砫,    ,祬    筮 , p   ᮢ 
  p.
     p  ⮬  p  p  ⪠,  p   㬮砭
 室  '0' (   p᪠  ᠭ 䠩 hiew.ini). 
 ᮦ  p  ⪠  楢,   뢠 p. ..  
 p   砫   p   㡨  (
   쬠  p筮).  뫮   p  ᫨  p p
 ⥪ hiew 頫  ...
         ᯮ塞 䠩  p筮.   
    p룭   p ,  F5. p ⮬ ᫨ p p
 㤥  ppp  , ᫨ p  室 ᨬ '.' 
 p⨢  砥  ᥣ  ⢫  p室   쭮 ᬥ饭
 p 䠩.
     p  ⮬  hiew  pp⭮  p뢠  ⭮⥫  p室. ..
 pp    +77  -66  pp p  77h  p
   0x66    ⭮⥫쭮 ⥪饩 樨. 砫쭮,  p ⮬ ⪠
 .  p  뫠   襩   뢠騩
  騩 p pp. , ...  祫 ⮣ p.   襪
   ⮣,  p       p⠢.
     筮   ᪮ pp 뫮. ⮬᪨ ⪠  
 pᬮp.    p㣮  p ᫥ ⮫쪮 㭨쭠  
 ,      p㪠       -  p  p⨪  .
 p樮    ᪠  pp  뫮 ᯮ짮 ida  sourcer
 (p   ⮬   p   p⮢). , p
 ᥬp  祭  ⥫      p⮫.    
 䠩    墠    ⮫쪮  p  堪p,     p  ᪮
 pp⢠.
     ⮬  롮p    ⠭   hiew-.     
     ⮬᪨  p筮      p, 祬
 p㧪  䠩    IDA.  ⮬   設⢥ 砥 뫪  ᥣ
   PE-䠩 (pp,  , 뢮饣 p 'key not fond')
     p㦨  "p" ᪮  ᬥ饭 ( ⮬
 p⭮ p浪 ⮢   ᫮).
     ,   ⭮⥫ ᬥ饭 ⠪ p  㦥 .
    p㣮  p,  p㥬    ᬥ饭    "p  ⥪⮬"  
 ᥬp  ⨭.  ⠥   p᪠p ᫥. H
   㤥p,       ᪮쪮 筠  ⮬ 砥 IDA,
 p   p   ""      ⮩      ⥪
 ᥬp.  ⢨쭮 ,    100% . hiew 
 p ᥬp     蠣    (  ) 
 p    p⥭    p    ⥪騬  ᬥ饭,  p  ⮬
 ᢥ   pᠭ   pp    祭  ᥣ  pp  
 ᫥.⮬  p  p⠥ ⠪  ⮫쪮  ᥣ
  .   p㣨   p (뫪  
    p).
     ᫥,  p祬,  p        pp⪨  ᥩ
 p⥪p  hiew-,      稬 p  ⫨騩 ᪮p 
 p⮣  ᥬp.      p ᥣ p
 win32  PE        p    ᥣ, ⮬  ᫥
 ᥣ pp  㦭 .
       㬮砭  p  ᥬp hiew p ⥪  蠣 
   ,   p⭮ ᪮p p,   ⭮筮 .
 p ᫥騩 pp.

     retn
     DB 0x66
     call      0x0666

       com  -  䠩   筮 ⨯ 砩.   㬠 
 ᥬ   hiew?   㬥  ᫥    ,    '0x66'
 p  뤠 ᫥騩 p:

  00000000: C3                           retn
  00000001: 66E86106                     call      000000668
                                                   ^^^^^^^^^
     p  ,    ⥯p  p室  ᫥  p쭮  
   pp      p.  ᫨ p 㤥 p  (
  ᥣ  뢠)  p  ᫥騩 p:

  00000000: C3                           retn
  00000001: 00E8                         add       al,ch
            ^^^^
  00000003: 61                           popa
  00000004: 06                           push      es

       p室 ⮬,  hiew  p쭮 p p ,
   p 祣  ᬮ  p쭮 ᥬp. H   砥
   ⮨    ᫥ ""  ⪮.  ᫥⢨ ᠬ
 楯樨  p  ᥬp.  IDA  p  ⮩ 樥
 業    p  p     pp.  䠩   ⭨
   ᫥    뢠 p  ᮢp p
 pp,   魮 Pentuim-a II  Clerion-a 稭  墠,
              ⪨  ( p稬,
 ⨯ pp ᥣ襭 ᯮ塞 䠩  windows).
          ᯠ  p    p뢠    p  
 祫.    p pp ᭮,   ᫥ ret  ᮡ⢥
 p   pp  .  ⠪  ᯥ宬   
 .      ᭨ 室  뫪    .
 ⠭  p    p  ,  p砥 ( 直 砩) 蠣
 ᪠p      (alt-F6)      F6.  ⨬, hiew 襫
 ᫥騩 :

      MOV AL,[01]

     (p祬,    䠪,   p 6.03  ,   p 㤥
 ,   hiew   ⥭ ⮣  㦥 稫 p 
 ⠪ p) ᭮,  0x01  p pp  . 砥 
 (p讬    , .. hiew    p p) 
 p室    祩 0x2.   f6  砥 , 㫨p騩 
 ⨬ pᮬ.   룫廊 ᫥騬 p:

   00000000: C3                           retn
   00000001: 00E8                         add       al,ch
   00000003: 61                           popa
   00000004: 06                           push      es
   00000005: A00100                       mov       al,[00001]
   00000008: E8F7FF                       call      000000002   -------- (1)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
         p   㤮-⠥ ﭨ 筮 p 
 p  0x2,    祣    '1' (p室  뫪)   <F5>
 "02".

   00000002: E86106                       call      000000666
   00000005: A00100                       mov       al,[00001]
   00000008: E8F7FF                       call      000000002   -------- (1)

     筮,  pp   㬠,  ⥬   孨 p 
 p⨢묨   ᥬp      pp   .  ,  
 "p⨢  ᥬp"      ᪮p,  ᮮ⢥騩 
 pp,     p     믮    ⮫쪮   p   p権,
 p뢠  ⠫쭮   짮⥫.
     ᫨  p pp ⢨⥫쭮  com - 䠩,  ᪮p
 ᥣ  hiew    ᬮ  p쭮    뫪,  ⮬   p쭮
 ᫨  p.      㤨⥫쭮,  ᫨  ᯮ,    com  䠩
 p㦠          ᬥ饭  0x100    ⥪饬  ᥣ.  
 p 䠩 룫拉 ⠪:

     0x100: A10401                       mov       ax,[00104h] Ŀ
     0x103: C3                           retn                   
     0x104: 1234                         DB 3412h           <

  hiew  ᥬp  :

   00000000: A10401                       mov       ax,[00104] Ŀ
   00000003: C3                           retn                   
   00000004: 1234                         adc       dh,[si]      
   ........                                                      
   00000104: xxxx                                            <

         ⮬,    뫪  p 砥 㪠뢠 " ᬮ", 
     p  0x4.  p      㪠  hiew-  p
 砫쭮  ᬥ饭  䠩.   㦥  ⠫  ⨬ p  PE
 䠩.  p SEN-  뢠 p    
      ,  (    ⮫쪮   p㧪    p㣨
 ᥬp).
     H  Ctrl-F5     ᫮ 0x100. p  룫廊 ᫥騬
 p:

  00000100: A10401                       mov       ax,[00104]  Ŀ
  00000103: C3                           retn                       
  00000104: 1234                         adc       dh,[si]     <
  00000106: 0100                         add       [bx][si],ax
  00000108: E8F7FF                       call      000000102   -------- (1)

         뫪  p  ⮬  p p쭮. ⨬,  p
         맮  p楤p  p室, ᪮  p⥪p
 pp intel  ⭮⥫.
     ᬮp    ᫮  pp,   p    p饭 
 p  ᥣ.  hiew  祣        ᫥  ⮬ p
     뫪.  ᬮp  pp    pp  ᪠,
 p㧨   hiew  p   室 (F8,F4   ⮬  ).

 000000CE: 2E9A00007100                 call      00071:00000 -------- (1)
 000000D4: 9A0D000F00                   call      0000F:0000D -------- (2)
 000000D9: 55                           push      bp

 ᪮  ᫥  p㧪  䠩  pp  DS 㪠뢠  ᥣ PSP, 
 p        p      ᠬ⥫쭮.      pp,
 p  turbo-pascal   p室  㫥 SYSTEM (ᠬ p
 맮). 室  , ⨥ '1'  砥 ᫥騩 :

 000007A0: BA0D01                       mov       dx,0010D ;"."
 000007A3: 8EDA                         mov       ds,dx

      ⠪ 0x10D?  ᬥ饭  , p ⫨砥  ᬥ饭 
 䠩  ⮫쪮    .    ᠬ     ⫨砥  PE 䠩,
 p稪  DOS-EXE  p᪠ , ⥬ ᠬ   .
     㧭  ᫮,  (祭    Paragraphs  in  header
 㬭      0x10).   㯨   祭 DS. ⮣ 0x10D0+
 0x90 == 0x1160 ᬥ饭 ᥣ   䠩.
     p   :

 000007A0: BA0D01                       mov       dx,0010D ;"."
 000007A3: 8EDA                         mov       ds,dx
 000007A5: 8C063800                     mov       [00038],es

         㧭    祩 뫠 [0x038]    ᫥
   0x1160.  H p  ⮬⥫쭮? 뫮  p , ᫨ 
 hiew  믮  ⠪  p  ⮬᪨.  p㥬    ⮩  楫
 ᯮ짮   p.   ⠭   p     p 0x1160  
 Alt-F5.  p    ,    ⥪饥 ᬥ饭 p﫮  .
 祢    ⮣  室    p, p  , 
 p⨢    .  ..  '-0x1160'.  ,  hiew p 
 ⭮⥫  ᬥ饭, ⬥祭 p䨪ᮬ '*'.  ⢨⥫쭮 㤮
      譨 ⥬᪨ ᫥. p ⮬ Ctrl-F5,Ctrl-F5
  筮 '*0'.
       ,    ᬥ饭  ᥣ  稭  , ...
  쪮,  p⭮ "" - ﭨ  ᥣ :

  FFFFEF6F: 2E9A00007100                 call      00071:00000 -------- (2)
  FFFFEF75: 9A0D000F00                   call      0000F:0000D -------- (3)
  FFFFEF7A: 55                           push      bp
  FFFFEF7B: 89E5                         mov       bp,sp
  FFFFEF7D: 31C0                         xor       ax,ax

     砫쭮,    p  ?  p祬,    ⠪ 㠫쭮, ᪮ 
   ᥣ  設⢮  ᬥ饭  ⭮⥫    p쭮
 㭪樮p ᨬ  p.
     -    ⠪,   p-᪠  p p pᯮ
 p    ᥣ - ﭨ:

 FFFFEF31:  10 82 A2 A5-A4 A8 E2 A5-20 AF A0 70-AE AB EC 3A  . p:
 FFFFEF41:  20 04 59 75-4B 69 12 8F-A0 70 AE AB-EC 20 AD A5   .YuKi.p 

       p饭  ⮩ p:

     FFFFEF88: BF6602                       mov       di,00266 ;"f"
     FFFFEF8B: 1E                           push      ds
     FFFFEF8C: 57                           push      di
     FFFFEF8D: BF0000                       mov       di,00000 ;"  "
                                            ^^^^^^^^^^^^^^^^^^
     FFFFEF90: 0E                           push      cs
     FFFFEF91: 57                           push      di
     FFFFEF92: 31C0                         xor       ax,ax
     FFFFEF94: 50                           push      ax
     FFFFEF95: 9A70067100                   call      00071:00670 --------(5)

     H    㬠,    ᥣ  p pᯮ
     㫥   ᬥ饭!  ,    ⢨⥫쭮  ⠪,    祬  
 㡥: F5,90\Ctrl-F5,Ctrl-F5:

 00000000:  10 82 A2 A5-A4 A8 E2 A5-20 AF A0 70-AE AB EC 3A  . p:
 00000010:  20 04 59 75-4B 69 12 8F-A0 70 AE AB-EC 20 AD A5   .YuKi.p 

     H ⥯p "㯮"  ᬥ饭  ᥣ .  ⥯p 室
 p  p    p饭    ᫥  p      .  -
 p⭮  砥.    ⮬    p⭮,    뫮 -
 p    ᫥  p. p hiew- 砫쭮 p뢠 
 p  ⮫쪮    ᥣ.  p  ,   DOS 䠩 室 
 p諮,  p祭 廊 㦥  ⠪ ⢥.


                                   

                                         㭥 p...
                                       - , ⮡  㢨;
                                       p᭠ , 㬥p筮 ,
                                       p ᬥp -  .
                                       ᨬ  㭥:  p㣫...
                                        ᥣ 㤥  ,
                                       ⮬,   諨 ,  ᪠,
                                        p  ⢥p .

                                       . pp. "".

     HIEW      p   p⢮  ᪠,    p  
 .    ᪠    楫  ,  ⠪    宦. 
 ⢥  ᪨ ᯮ ᨬ '?' 騬  ᫥⥫쭮
 ᨬ,      .      p,      
 dos-ᨬ  '*'.
         ᪠          ⠭  ᥬp᪮
 ⥪.  魮   ⮣ 堭     p
 륭,   p p㡥 ⨫.  IDA  p⢠ ⠪
 p.
     SEN    p  p pp ᢮ ᯮᮡ  ⠢ 
 p⮢   . ⨬,    p  
  pᨨ 4.0,  p⥫ 室   筮 ﭨ.
      ⭮, p  堪p   堭
       ᯮ塞  .      ⠪-  p  
     p    (p  ᫮,     pp
 p   p     p  p㤮p    ᥬp  
 祭).
     ⮬  騪 ᯮ pp p, p   
 뫨     p,         ᢮    ⮫쪮           -   
 㭨쭮 ᫥⥫쭮 , p p⥫쭮 pᢥ 
 ⭮  堭. Hpp, ⨯筮 㤥 p

      if !IsValidUser() abort();

 
      if IsValidUser()
      {
       ; // p쭮 믮 pp
      }
      else
        abort();

 筮  p⮢,  p ? p  pp 뫮 p
 ⮬⥫쭮.  ᯮ㥬   蠡.  ⮣  p ᥬp
  p  F7   ᫥ ᫥⥫쭮:

  [Forward /Full ]ͻ
   ASCII:                                         
                                                                      
     Hex: 

     Pentium(R) Pro Assembler ͻ
     call ?;or ax,ax;j? 
    ͼ

 hiew  p⥫쭮 ᫥騩 :

 .0001140C: 9A3E172114                   call      001:0173E   -------- (4)
 .00011411: 0BC0                         or        ax,ax
 .00011413: 7405                         je       .00001141A   -------- (5)

     㬥,  ,    call  001:0173E    ᠬ     
  ⭮襭   (p⭥ ,  ⠪ ᪮p ᥣ  㤥),
   ⥬   ,   pp  ⠪   襯p
 権,      㦠 .
     ,    䠩        ⠪    
 맢        롪.  ,  hiew    ᪮쪮  ⥭
 室 p⮢  祬   p  p  p
 p    pp   p. H  㤥 ᯥ (  
 堪p⢮     p  p pp ᯥ祭)
     㦭 ᮡp 㯭 p    p쭮 
    ᪠.  ⨬,      ,     砥 㤠 
 뢮  ᮮ饭    ᬥ饭, p,  0x406666. 
     ᫥ :

  [Forward /Full ]ͻ
   ASCII:                                         
                                                                      
     Hex: 

     Pentium(R) Pro Assembler ͻ
     call ?;or eax,eax;j?;;? 66664000 
    ͼ

     p ⮬ ';;' ppp   ⢮ p ,
   ⮥. p ⮬ 蠭,   p   ⥬
   堭,  p   饬, 祭 p訥.  ᫨  ,  
 砨,  p   p.
     祭 pﭮ,  hiew p    ⥪饩 樨 pp, 
   ᫥  宦.    p 쭮
  p頭  䠩.
     FindNext  p뢠  p  p饭  pp    砫  䠩  
 Ctrl-Home,  (      Ctrl-End).   p㬥 FindFirst (F7) 
 ᮢp襭    ⭮  㤠  饣  Goto  (F5).  ᫥  
 㦤    p "⢨"  䠩 " p" (p  Page
 Down).
     p  ⮬  ᪠        ᥬ  䠩  ( 㬮砭), ⠪  
 뤥  .  ᫥     p⢠   楫  
 㦭.  p祬,       pp. 筮,   ,
  p  p⮬ 䠩, pp,  ⭮ p楤p.
       ᮦ,    p  ᪠   ᪨ p樨
 ⨯  'AND'.  'OR'    p㣨.   ⥬   祭   
 ᫥ p p  p묨 ⥬.



                           H  

                                            " ⢠  ,
                                             ᮥ     p
                                              稭        ⮣
                                             ⢠ ⮨⢠,   p
                                              ⭮ᨬ  ᢮ ᬥp?"

                                             . pp ""

         p㫨  hiew- p  뤥 p⮬
 ⥪ (). ᬮp ⥯p  p.  ⮣   뤥
 p 室 p⭮  Gray-'*'. p p饭  䠩
 蠬  p  pp    p    뤥 p 
       㬮砭  p  梥⮬.  p  ⨥ Gary-'*'
 pp頥 뤥  ⨢p  p .
       \⥭      䠩,    ⠪       p
 祭. ᬮp  :

      Write block to file ͻ
       Block: 000001FF-000002EF  length:000000F1/241                 
        File:  
      Offset: ........ ( Hexadecimal )                               
       Table: As Is    Select table ͻ                  
     ͺ As Is                     ͼ
                        Windows-1251              
                        Koi-8                     
                       ͼ

     p⭮ ᮡ     䠩  p
 ᬥ饭.    ⥫쭮,  魠  p   ⥫.
 ,   p訫  p  䠩   - 楫  
    pp ( ⨯  ᪠ p). p ⮬ 
 p    p.  ,      p,  ""    ᫥
   㪢쭮      p  楢 p p.
 H 뢠 pp 䠩 hiew.hlt, p   .
    ⥫쭮,   ᬥ饭    p ⭠p묨
 p.       -p   㤮    p筮    p,  ᪮
 p⮬ 堪p 筠 ⥬ p 㤠 .
      ᠬ     ⥭ . ﭨ:

      Read block from file ͻ
       Block: 000001FF-000002EF  length:000000F1/241                 
        File:  
      Offset: ........ ( Hexadecimal )                               
       Table: As Is                                                  
     ͼ

     p㧪   p p .    pp .  
 ᮧ⥫     -  p   ᯮ짮. H 
           - ⥫,   ⢨⥫쭮  
 p㬠  ,   p   뫠  , ⮬
  㤥   ⠭,  p p  "":

   ͻ
    ASCII:                                         
                                                                       
      Hex: 
   ͼ

         뢥    Alt-F3   ᫥騬 p. H p
 p      맢     .  ⨬ ⮫쪮,   p樨 
     p⨬묨      ᥬ  p 㬠, 祬  
 . p       ᤥ.

  LE/PE/NE/LX/NLM 

                                           ⨥ pp 㦨 
                                           堭, ⣮p騬  
                                           㦠ᮢ 饣.

                                           .pp ""

     -   ⭠p   pp   ᪨     
 ⢮p-ᨬ.       ᥬp SEN p訫 
 p,  p易  ᫥      80x86  pp p Intel.
 ,       p  hiew      ⠢  p-p,
   p  p    ᥬ  p⠬  䠩  
 p樮  ⥬.  筥  ,  p p,    p,
 ᪮  p  pᨨ    ⫨砫 ppp 䠩  p
 p.
     ⮪      ᮡ  p  뫮    祣.   p
 ᯮ⢮  com   exe 䠩.   﫨 p p, 
 p  p p pp, p ⭮ᨫ ᪮p  p㧪
 䠩        뫠 pp筠  p  ᫥ "".  
  ⠡ p頥 ⮢.
       p㣮  p,  ᥣ⠬    p﫮 ᠬ p
 p⢥.      ⠢ p p .  
     ⮬      p  ᥪp ᪠.
 (-    p頫 p㧪.  ᥣ  맢 p  
 롪).
     H㤨⥫쭮,    p DOS-EXE ᢥ  p⮬ ⮡p
   㤮 ⠥ .

                      [ MZ-header ]ͻ
                       Signature               4D5A 
                       Bytes on last page      01C0 
                       Pages in file           0009 
                       Relocations             001D 
                       Paragraphs in header    0009 
                       Minimum memory          0436 
                       Maximum memory          A436 
                       SS:SP              0149:4000 
                       Checksum                0000 
                       CS:IP              0000:003F 
                       Relocation table adress 001C 
                       Overlay number          0000 
                       Overlay length      00000B1F 
                       NewExe offset       00000000 
                       >Entry point        000000CF 
                      ͼ

       祭    ᫠ -  p  pᯨᠭ
   p㪮⢥  pp    MS-DOS.    ᫥ 
    pp   ,         ⮬      ⠪
 室.   hiew    ᤥ      p⮬,    
 p  p⨭  ᫥.  ,  pp  F2 ⮬᪨ 
 祭    Pages  in file  Bytes on last page ( 뢠 室
 p  樨    pp  䠩,    ᥣ "p" ⮣ p,
 p  ⠪  ⠢   p pᯠ騪). p ⮬ hiew
     뢠  祭    Overlay  length,    p 
 p  p     ᠤ , p p   p
 p   p (p⭥ ᥣ ⮬,    짮⥫
 hiew  ⮣    ⨫.  ᫨   ⨫, ⠪   p, 
    ⮬ ᮮ).
     p㣨 p pᮬ   p p室  
 室 (F5)   砫  ᥣ (F4). ⨬  直 砩, 
     -塞   p exe-䠩 稭 믮 
 .
        F2   p p  砫 p.  , ,
       ᪠ p p old-dos p⮢. p p
 p  ⨯祭    ᮢp  hex-pp  ᪮p p᪨
 ᥬ p⠬.
     p쭮  p⨢ ⮨   p PE - 䠩. 
  㦥 p⭮ ⠫  ⨬,  ᥩ pᬮp p:

   [ PE-header ]ͻ
    Count of sections              4  Machine(014C)          intel386 
    Symbol table  00000000[00000000]  TimeStamp              36CC1C56 
    Size of optional header     00E0  Magic optional header      010B 
    Linker version              6.00  OS version                 4.00 
    Image version               0.00  Subsystem version          4.00 
    Entrypoint RVA          00001390  Size of code           00001000 
    Size of init data       00003000  Size of uninit data    00000000 
    Size of image           00005000  Size of headers        00001000 
    Base of code            00001000  Base of data           00002000 
    Image base              00400000  Subsystem(0003)    Windows char 
    Section alignment       00001000  File alignment         00001000 
    Stack          00100000/00001000  Heap          00100000/00001000 
    Checksum                00000000  Number of directories        16 
   ͼ

     ⨬,  ᪮쪮  ᫮  .  p᭮,   
 ᮡ  p 㬥p p MicroSoft (   ⭮,  
   p pp p樮 ⥬  祬  p  
   ⥬ ).
       ᢥ, 뢠 㬥樥 稭 墠, 堪p
 筮  p    winnt.h  - 饩 ᮪p魨,   pp
    p,     - pᯨᠭ.
     Hp   ⮬   㤥   ⢨     pp
  p⢥  ⮣ p.   SEN ⠫,  p
 堪p    㦭,   p  ( ...)  ᫨  
 ⮣ ,  p p㦨 SDK  MSDN p㤮  hex-pp
 p.    ᢮ ᮡ⢭ ⨫, ᪮ ⠪ 室
  筮 .
     筮  㯫  p        䫠  (f2). p 
 ᪮쪮 㣮,  pp . 砫쭮.

     ͻ
          Characteristics    010F         DLL flag            0000     
       0: Relocations stripped   :Yes  0: Process initialization  :No  
       1: Executable image       :Yes  1: Process termination     :No  
       2: Line numbers stripped  :Yes  2: Thread initialization   :No  
       3: Local symbols stripped :Yes  3: Thread termination      :No  
       4: reserved               :No                                   
       5: reserved               :No      Loader flag     00000000     
       6: 16 bit machine         :No   0: Break on load           :No  
       7: Bytes reversed lo      :No   1: Debug on load           :No  
       8: 32 bit machine         :Yes                                  
       9: Debug stripped         :No                                   
      10: Patch                  :No                                   
      11: reserved               :No                                   
      12: System file            :No                                   
      13: File is DLL            :No                                   
      14: reserved               :No                                   
      15: Bytes reversed hi      :No                                   
     ͼ

     H  䮭    쭮  ⢥  p    ᥪ
 PE-䠩  (F6)    p hiew ⠡ ꥪ⮢. p ⮬ 뤠
 ⥫쭠  p      ᥪ樨.  p  ⮬   ᮦ
 ᢥ  pp   䫠    p, 
   ⭠p歮  . ᫥ 㦤 믮  p  㬥.
 ⢨⥫쭮,      p     ᥪ  .text?  060000020 
 p    0x20+0x40000000+0x20000000,  (᫨  ⥫   㤠
 﫨  p,   p  0x60000020  筮 p⢠,
   㤥  p  00000110000000000000000000100000b.  p  㦥 p㤭
 ᫨,  0100000b == 0x20; 010000000000000000000000000b == 0x20000000
    0100000000000000000000000000b  ==  040000000.  筮  p
 ᫥, p  堪p ⠥  㬥    p).
 ,    ᥪ  .text    ᫥騥  p -  Code | Can be
 discarded  | Not cachable. 뫮  㤠 來, 筮, p⠢ 
   p  p  㤮-⠥ . H, p p,  
     p,        ⮫쪮  p㤭    ᫥
 믮    㬥,      ᫥  p⥫쭮  堥   p 
 㬠   ⮬᪨ p.
     p㣮  p,    ⮬⥫쭮  뫮    p  㬥  祭
 䫠  (  p⭮        p  p?). 
   p  pᬮp  ᫥    稫    ⥪p  
 ᮮ⢥騩 㭪, p  㢨  p㭪, p :

 [ PE-header ]ͻ
                                                                     
   Number  Name   VirtSize   RVA    PhysSize  Offset    Flagͻ   
        1 .text    000004FA 00001000 00001000 00001000 60000020    
        2 .rdata   0000051A 00002000 00001000 00002000 40000040    
        3 .data    00000168 00003000 00001000 00003000 C0000040    
        4 .rsrc    000000F0 00004000 00001000 00004000 40000040    
      [PE Object flags]ͻ
         Flag for object   
     C  0x00000004       Used for 16-bit offset code.                   
          0x00000020       Code.                                          
          0x00000040       Initialized data.                              

       p ⮡p ᥪ権 hiew  㬥  IMAGE_DATA_DIRECTORY 
 p⠢      㤮-⠡쭮  .   ⢨⥫쭮, 
       pp  PE-䠩    室    ᪠  ⠡
 ᯮp\p    ppp.  ⠢  p    p ᫥ 
 p⨬      ⠡  pp㥬  㭪権. ᪨ 祭
    p   稭      .    㭪樨  뢠
 pp?  p㦠 DLL? ⠢   ⠭  GetWindowTextA
   GetDlgItemTextA?  H      p    ⢥, pᬮp
 ᯨ᮪ pp㥬 㭪権.
       筮,    p  祭  DLL  p  p p 㤥
 pᮢ  ᯮp    ᮮ⢥    ᥪ.  筮,  
 p,       ⮣    ᯥ樠  pp  
 dumpbin,  p      p    ,  pp 㤮-⠥
 ᯨ᮪,      hiew-     ᥪ樨  p  p.  
 ᮢᥬ           pp  pp,  p  p
 鸞      ᬥp  pp    .    ⮬   
   㠫  pp  ppᮢ  p Borland
 ReourceWorkShop.
       -      ⠪,     ⮫쪮    p  .  "p  
 "  pp 뢠 ᯮᮡ묨 p  
 Win98  (pp,  p)    p  p ⮬ p⨬ p pp
 (ᮡ  ⭮  p᪮ pp,   襩 ⥯  
 p㣨).
       ⭮⥫쭮         ⠡    ᯮp\p    p    
 "ppp"  ⨭    ""  p⢠ AS IS  ⠪  
 . ⢨⥫쭮, ﭨ  p㭮. H 㦭 让 ᭮p, 
     p       㭪 MSVCRT. p祬, 
 "p"  ᫨  稫   ᪮쪮 ᯥ樠 pp *dump,
 騬  ⠫쭮 ᫥ p 䠩.

                        Name       RVA      Size  ͻ
                     Export       00000000 00000000 
                     Import       000020E0 00000064 
                     Resource     00004000 00000010 
                     Exception    00000000 00000000 
                     Security     00000000 00000000 
                     Fixups       00000000 00000000 
                     Debug        00000000 00000000 
                     Description  00000000 00000000 
                     GlobalPtr    00000000 00000000 
                     TLS          00000000 00000000 
                     Load config  00000000 00000000 
.004029F0:  00 00 00 (reserved)   00000000 00000000 49 00      MFC42.DLL I
.00402A00:  5F 5F 43 (reserved)   00002000 000000A4 6C 65  __CxxFrameHandle
.00402A10:  72 00 B2 (reserved)   00000000 00000000 5F 5F  r sprintf U __
.00402A20:  64 6C 6C (reserved)   00000000 00000000 6E 65  dllonexit ._one
.00402A30:  78 69 74 (reserved)   00000000 00000000 00 00  xit MSVCRT.dll
.00402A40:  D3 00 5Fͼ74 46   _exit H _XcptF

     ,  ᫨    hiew  ⮫쪮      ,    ⮡p p
 pp  PE 䠩,     ᪮p ᥣ ⠫  ⠪ 
  砭  䮭 ⠪ p⮢,  dumpbin, 騬, , 
 ⥫쭮  hiew-.
     H  ᠬ      㭨쭮  ᫥ 砥  p㣮 - 
   pᬠ⨢  p⢥    뢠  㭪権 (
 p, ᫨  DLL  ᨬ쭠 p)   ᥬp.
 (   ᮦ,   p   ᥬp          p  ⮩
 ).
          ᪮쪮  㤮 㦭 p  hiew-  
 p  ᮢ.  p  qview    hiew.  H  p-  p  ⥫쭮
 p⨢    p  p筥    p.       p
 ᮢp襭   ⥭  祭.  ᫨ p  ᢥ p,
  p ⠬  祣  㢨,  ᮤp ⮩ ᥪ樨  p
  p㧪 䠩.
       ,    p  ⨫  ᪮쪮  ᠤ  饭,
 p    㦥    p  - p (      
 ⨫?!). HIEW   뢠 ᢥ p樨, p ⠪ ""
 ᯮ짮    p,    ᮡ  ⨬p騥 p 
 MicroSoft.
       p -p  뢠 㭪樨 ⠥ . 
   p室 㬥p ᮡ,   ⮬, 
 ᥪ pᮢ    ᮢ  ᥪ樥 . H ᬮp  ,
      砥 㤥 p p稪,    
 p    ᢥ  맮  p    㭪樨.   ᤥ
 p p᪠뢠 p㣨 ,    ᮢ p  RVA
 p, (᫨   p ). Hpp  襬 砥  p 002B56 
   p  pᯮ  p  'AppendMenuA',  ⠪ p mov ebx,
 [0004021E8]  ᫥   mov ebx,AppendMenuA. ᫨  ᥪ pᮢ
   (  ⠬ ᮤp p),  室 ᫨  
     砫    p    ᥪ樨      p  ᪮p  
 ᠬ⥫쭮  p p.  㦥 ⬥砫  ᮤ p筮 
   p  pp  ᥬp.

 Qview:
  00001730: FF250C214000                 jmp       d,[00040210C]
  000019AE: FF25D8214000                 jmp       d,[0004021D8]
  00001372: 8B1DE8214000                 mov       ebx,[0004021E8]

 Hiew:
 .00401730: FF250C214000                 jmp       MFC42.4673
 .004019AE: FF25D8214000                 jmp       __CxxFrameHandler ;MSVCRT.dll
 .00401372: 8B1DE8214000                 mov       ebx,[0004021E8]
                                                       ^^^^^^^^^^^
    p  pp⠭ ᫥ -䠩,  LE p, p
 p  ᯮ  VxD 䠩. HIEW  ⢫  
 p      pp,    ⠪    ᯥ稢  㤮-⠡쭮
 p⠢ p  .
    ⨬,      ᥬp p LE-p 䠩,
    p    p 㦠᭮  p. ⮬ hiew
  ⮬ 䮭 룫廊 쬠 ppᨢ  p⠢塞  ⥩
   墠    p쥧  p   pp p㠫 p.
 H  p⠢  ᥡ   ,  ᯮ ᮡ⢥
 vxd,  ᮡ    p           p 祬
 pp,    祢  ᪥⮩  ( p  㤨   p
  pp稪,  p⠢訥  ⨬ p⪮ p諮).
    ,  vxd     ⮫쪮  ᮡ⢥ pp p. ,
 p饭    ,  p⠥    㫥     p᪨ 
 p祭.      p뢠   p  p  䠭⠧  pp稪.
 ⢨⥫쭮,  p㤭  p⠢  ᥡ  -᪨  p쥧 
 堭,  室騩  p p쥣 .
    p祬,   vxd 䠩   ᫮  p㣮  祣 
 ⮬  ⠨⢥    筮 . 筮   SDK,  
      p   p⮬ 䠩  㦥  稭 
 ᫥ p맠 ᥬp. Hiew-, pp.
         p㭪, LE-  ᫮ ᢮ PE ᮡp
    맢 ᮡ p㤭⥩. H祭 設⢠  ⭮
       ⮫쪮 ᪮쪮 ⮢  p 筥 
 SDK.    p稬, MicroSoft  祭- p p⠢ ᥩ p
   ⢥  pp.  ᠭ  쭮  㤭    p뢮.
 H᪮쪮  ⥩    ⮬      MSDN  ⮫쪮  㦤  
 p ⢮,    p .
     ᪨    p  p室  믮  ⥫
 ᠬ⥫쭮.       ⮬  ⥫        hiew  
 p      pp  ledumd.  H   ᫥   p, 
  hiew- 襬 pאַ ᥩ:

  [ LE-header ]ͻ
   Object table count             2  Page count                      4 
   Starting EIP   00000000:00000000  Page size                00001000 
   Starting ESP   00000000:00000000  Bytes in last page       00000490 
   Fixup section size      000002D8  Loader section size      00000053 
   Object table   000000C4/00000144  Object page     000000F4/00000174 
   Object iterat  00000000/00000000  Resident name   00000104/00000184 
   Resource       00000000/00000000  Number of resource              0 
   Directives     00000000/00000000  Number of directive             0 
   Fixup page     00000117/00000197  Fixup records   0000012B/000001AB 
   Import module  000003EF/0000046F  Number of module                0 
   Import proc    000003EF/0000046F  Entry table     0000010D/0000018D 
   Data pages offset       00000600  Number preload pages            3 
   Non-resident name       00003A90  Bytes in non-resident          51 
   Instance in preload     00000000  Instance in demand       00000000 
   Auto data               00000000  Heap/Stack      00000000/00000000 
   Debug info     00000000/00000000  Debug length             00000000 
  ͼ

         ,    p  p  樨.
   p室   LE , 窥 室, ⠡樥 ꥪ⮢  p,
 DDB  ᥪ樨,  ⠡  p    ppᮢ,  p  ⮣  p  
 p ,  ᥣ   p᫨!
     H  砫쭮,  筮,   Hiew 뢠  襯p᫥
 "AS   IS"           ⮪   ⠡쭮. ,
 筮,  ᯮ짮    ⮩  楫 ᮮ⢥騬 ⨫⠬,  
 筮  MS-DOS  p 㤮.   ᬨp  ⥬,   
 pp    pp  p,  ,     p -
      p  ᢮  ⠬  p 騩 p ( 
        p p   p    p  
  p  ⮬ p 㬠稢).
     ⥬, hiew   ⮡p  p p 䫠 ,  
 㦥  .  类 砥 㦥  p   ⮢ , 
 ᪮p p.
        hiew p쭮 ᥬp  맮 VMM,   p稬
     ⠪      p쭮 祩. Qview, pp  
 ᮢp襭 p쭮, 祬   짮⥫  㦤.
    p  ᥬp hiew  qview     p. ,
    pp    qview-, p      ᬮp  
 ,      p,        pp뢠 hiew-  ⮬
 p  p-  襥 p     p.

 Hiew:
 .000002E3: CD208D000100              VMMcall   Save_Client_State
 .000002E9: 5F                        pop       edi

 Qview:
  000046E3: CD20                      int    20
  000046E5: 8D00                      lea    eax,dword ptr [eax]
  000046E7: 0100                      add    dword ptr [eax],eax
  000046E9: 5F                        pop    edi

      ᮦ,  SEN  ⨫  ᠤ  訡 (   pp⮬
 ⮣  砥!)   ⢮p ᯮ몠 p ⪥ ᥬp
 VMM-맮.  ﭨ   p,   -  來 p
   ᫮.  hiew  "ꥤ"  p㬥    ⪠뢠 p 
 㭭 p.  ᨬ, ⠪  p.

    Pentium(R) Pro Assembler ͻ
    VMMcall 
   ͼ

     砫쭮,  筮,   p   , 祬  pp 訡,
 p  p⭮,  㤥  ⠭      p.   ⮣ 
 稫   ᥬp   p   "p".      ⮣  p
   p⮬ 맮 VMM.
     ﭥ  MSDN, ⠬  ⮬  ᮤp   ⥩ 
 p樨. H  砫 p⨬    㭪 VMMCall:

   VMMCall Service, Parameters

   ᥬp ᫥騬 p:

   INT 0x20
   DW  Parameters
   DW  Service

     ᬮp      pp  .  ⮫쪮 p, 
   p  맢    .  ᫨    祣-  , 
 p      MSDN.    ⢮  pp,  p  p
 ᪠.

   .00002665: CD2066661234                 VxDcall   3412.6666
                  ^^^^""""                           """" ^^^^
     㣠   p   hiew     ⮬,    ᫥  p⠢    
 㤮-⠥  .  㤠     p ᨬ p?  
  p  ᮤp  䠩! p,  ᮤp, ⮬- p
  ᮧ 䠩 hiew.vxd p⥫쭮 ᫥饣 ᮤp:

    [048B.VCACHE]
     ^^^^
    Get_Version
    Register
    GetSize

     p    祢      p  ᮡ  p, 筮
   pᯮ  p:

.00002665: CD2000008B04                 VxDcall   VCACHE.Get_Version
                   ^^^^
     㬥,    䠩     㣮 pp  ᢮  
 p.  ⭮,  p  vxd, ᯮ㥬, ᪠
 ⮩,  ᠭ .
     p  ⮬  vxd    p  p  0x01      뢠  (
 p p⥪p win32 - VMM "Virtual-Memory Manager"). H ᠬ 
      vxd  맮  p室 筮:

.00012161: CD2001000100                 VMMcall   Get_Cur_VM_Handle
           ^^^^
.00002665: CD2000008B04                 VxDcall   VCACHE.Get_Version
           ^^^^
      ⥫⢮ ⮣ 㦨 ᫥ ⮪  hiew.vmm "[0001.VMM]".
 -      䠩,  p  宦  ⨫    ᠤ
 訡,   ᡨ  ⮫.     'hiew.vmm',  'hiew.vxd'.
 H,   ᫥ p  㤥 p.
            㯮㫨    ⠪  ⨨,    VxDjmp. H ᠬ 
 뢠  筮,  쪨 ᪫祭 - pp訩  pp
   砥 p ,   . , ﭨ ᠬ:

.00005040: CD201C801700                 VxDjmp    SHELL.Update_User_Activity
                 ^
.00005048: CD2048810100                 VMMjmp    RegOpenKey
                 ^
       hiew p쭮 ppp 祭 ⮣ ,  p⨢ 砥
   p ᥬp  맮   ᬮ  p 㭪. 
   p  p,  p p  p   訡 
 p     p. ⭮,   ⮣  ᪫
 㯮p   ,  p㤭 뫮  ᭨ 祬  pp
   6.03 pᨨ. ᨢ  p ⠫, ...
      H  ⮬  ᠭ p LE-p  稢. ᫨ - 
   , , p  ᮮ⢥饩 㬥樨.
 ᫥  p p諥  p訫  뢠 ⠫ p,  
  p. H 㬠,   ⠬ 뫮 - ᮡ p᭮.


                                
                                              "p, p  頥,
                                                ᥫ  ⥡ 㦠".

                                               .pp ""

      H室  p  p ᥣ ᮬ    
 뢠.  p  p쪮   p室   p묨 ⥬
 ᫥, ⮢묨 ᪠, ⭮⥫묨 p室,   ᥣ ⮣
   p㣮, ᫨ p p ᫥  㬥.
      p  業  p  ᪮쪮     
 qview-,    p  p⮢.    ᢮  p   㦨
 p稭 ⪠  hiew-,  p ⠩ p  ⭮⥫쭮
  ,  ᮦ, ᨫ쭮 pp뢠騩 qview-᪮.
      p   ⭠  p  ⮬ p. 祬  
 ᫨    p,     p  p⮢?  , 
 ᭮ p稥 -p  ⮨  ⢨ p ⮢ ⥬
 ᫥.  ..  p ⮣, p 祣 p  設⢥ 砥
   㦥.  ⮢  p樨    ᭮  p室  믮 p pp
 p 䫠  p⮢.
            ᥬ ⠫쭮 p hiew-   祬  㯠
 ᢮  ᮡp    p    ⨯ ᪨  ⥬᪨
 p樨 p p  ᠭ :

               Calculator ͻ
               (0xFF ^ 0x80 | 128) > 0 
                 Signed: 1                                
               Unsigned: 1               .       .        
                 Binary: 00000000000000000000000000000001 
                    Hex: 00000001  "   ."                 
              ͼ

      :  hiew  p  p㣫  ᪮.  ᫨    ⠢, 
 p樨   믮   p浪 p設⢠ p権. ,  
     p  ,          ⠢ 
 ᪮. H     蠫.

      '-'  ⠭,    ⠪  p⥫쭮 ᫮. p ⮬  ᫮
     .    ᮦ p p p p
   .  p p  ⥪ p.

      '+'  ,    ⠪    ⥫쭮  ᫮.  ,    hiew
 pp  ⠪  p樨    '+-+-++'   . p ⮬ '-'
   祭  ,  p  楯窥  p⨢.
 ⥬᪨  p,  業 ⮣ ᮬ⥫쭠.

                Calculator ͻ
                +1++2+-+-3----4 
                  Signed: 10                               

      '*'  .  p  ᫠. p樨 ⨯ '**' 
 p  ᨭ⠪᪨  p.  (  ⥯,  -
 ).

      '/' ᫥ .

      '%'  ⨥  ⪠.  HH!  HIEW  p 让  祭-祭
                             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 p   - p 'X % 0' p  p p襭  室
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  DOS  p p p.
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

      '^' ⮢ p XOR (.. -᪫騥-)

      '&' ⮢ p AND (.. )

      '|' ⮢ p OR (.. )

      '!' 祩᪮ ( ⮢) p栭.  !0 == 1  !X == 0,    X!=0
   ⭮  祣  p  _᪮_   ⮢ p栭.
 H  p  ᯮ  p,  ⮬   ᪠ NOT,
   ⥣p᪨  p.

      '>>'  横᪨  ᤢ p.  ᠬ 訩 pp, ⮬
 0xFF>>1+1  ==  0x3F  == 0xFF>>2. H 뢠 p⠢ ᪮.
 0xFF>>(⨬,
   A  >>  -x  ==  0,          ,  騬  pp 
 ⥬⨪).

      '<<' ᪨ ᤢ .

      '>' ᪮ "". A > B == 1 ᫨ A > B  A > B == 0, ᫨ 
 ᫮  .  Hpp  (1>2)+3 == 3: (10>0)+1==2;  1>2+3==0 p
     ᫥  .     㦨 筨 p㤭 㫮
 訡,  , ᫨ ⭮  p

      '<' ᪮ "".

        ᫠  㬮砭 . ⭠p 뢠 
 0xABCD.  p ⮬  p㣮   p ᫥ hiew 㯮p 
   ,    ⮬  ᫥   饯p⮩ 0ABCDh. 뢠 p
 㤮⢠,   㤥 p  ᫥ p.
       p   p p窠 p  . 쭮
  ,  ᫥ p뢠 ᮡ p  室 
    p樥. p  p-  pאַ p 
 . H    㤮,  p⭮.



                               -

                                          "H ⠩ 祫 p, 
                                            㢨  ⥫.  ⮣
                                            訡".

                                          . pp. ""

     쭮 hiew- p ᥣ  ⮬,  SEN   p p
    㤮 ppp㥬 p-⥬.  ⮣ ⠪ -p 
 뫮.  ᫨  p  pp 䠩   p,  室
 뫮    ᮡ⢥  pp    ᥬp   p㣮 몥
 ᮪ p.
         hiew    .  ⠫    pp뢠
 pp  "  "  p뢠  . p ⮬ p pp
     pp        p       ⮡p    p.
 p᪮  p  p-⥬    pᬮp⨬  ᫥  
 ⥬ .
     譥  p p pp p⮢  . 筮, 
   p  p   pp,  筨 ( ⮣,
 p   ZX-SPECTRUM-48),  짮  筮 㤮.  ⮬
  ⨯ p  ᥣ ᪮쪮 p, p p ⥣pp
  hiew p pp 뫮  p⥫⢮.


    000A0:  65 77 20   [Byte/Forward ]ͻ  29  ew release V
    000B0:  53 45 4E     1>mov   bx,77      AX=0000   39  SEN, Kemerovo
    000C0:  39 31 2D     2 rol   al,1       BX=0000   00  91-1999.
    000D0:  00 00 00     3 xor   al,bl      CX=0000   00
    000E0:  00 00 00     4 rol   al,7       DX=0000   00
    000F0:  00 00 00     5                  SI=0000   00
    00100:  00 00 00     6                  DI=0000   00

      Pentium(R) Pro Assembler ͻ
      loop 2 
     ͼ

    00160:  00 00 00    12                            00
    00170:  00 00 00    13                            00
    00180:  00 00 00    14                            00
    00190:  00 00 00    15                            00
    001A0:  00 00 00    16                            00
    001B0:  00 00 00    17                            00
    001C0:  00 00 00   ͼ  00
    001D0:  00 00 00                                     00

           p  p p 'Pentium Pro Assembler'
 hiew    ⮫쪮  p祭 p , p   p뢠
 8086.  뫮       ᫨    p        
 짮⥫  㦤.
      祭  訬 p祭  ⢨ p  . 
 ⮣  ᫥,    ᪮-  p쥧  p   㤠.
 ,   㯭 堪p  32     pp EAX,EBX,ECX,
 EDX,EBP,ESI,EDI,ESP.   ,      ᫥  砥      p  -  
 p⥬  hiew  pp  esp - "饣" 祭    蠥
 ᯮ짮   ᢮ 㦤.
      p  ⮬   ᪮p  , 祬 p⭮ ᬮp ⢨ ᫮
 p室.    Pentium   Pro   Assembler?   H-...       p㣮   p
 ppp    ⠪  "⪨"  p  ᠬ    ᥡ  p⢠
 㢫⥫쭥      ⢨⥫쭮     "訩
 ⠦".   32        -  pp  ⮫쪮  뫮  뫮    p
 ppp㥬  pp.  H    ⠬ 뫨 ⮢ p室 
 pﬠ  p  . p祬, p,  ,  ᫮묨 p室 
   뫮    p  室   p樯 ⭮  
 ᥣ      NOR    OR.  H    hiew-     p室! H
 pp-㪠⥫ !
      砫쭮    , p ⮬,   qview- ⠪ p祭 -p
 .  p p 業 ᥬp᪮ pp, p
           p㤨.  ,  pp뢠 
 p⨢.    , 筮, p室 .     
 p⨢, ⮬  롨p hiew.  ,   p鸞 砥 
   墠⠥.
      ⠪ p ᫥騥 :

 Hp pp:

 AL,AH,AX,EAX,BL,BH,BX,EBX.CL,CH,CX,ECX,DL,DH,DX,EDX,SI,ESI,DI,EDI,BP,EBP,
 SP,ESP

  p뫪:

 MOV pp, pp
 MOV pp, p⢥ p

 p䬨᪨ :

 AND, NOT, NEG, OR, XOR, SUB, ADD, ROL, ROR. MUL, DIV.

 SHL  SHR  p.

 p pp:

 H 室 AX
 H 夥 AX

        ,  p  p権  ⨭  "ᯠp⠭᪨".  ,  
 設⢠        墠. ⨬,   ᥣ 設⢮
 pp稪  ᯮ  p  XOR,  ⮬   hiew-  뤥 
 ⤥ p稪.
         p᭮,        ᫥    p⠥       ⮫쪮   
 ⠬\᫮\묨 ᫮,    ⮪   (筥  20
 ᨬ).     xor-᪨ 㦭  Ctrl-F8,  ⠪   
 뢠  p ⨨ F8, ᫨ ᪠  .

     Enter XOR mask ͻ
     ASCII:                                         
                                                                        
       Hex: 
    ͼ

    祭     ppp ᯮ p p, ᢮騩 
 p      ⮪,  ⨬  'KPNC++'.  (p   
     ,  饭  p⮣p䨨).  p騥 pᨨ hiew 
   ⠪       p p. ,   p
  ( ᫮).
     ᮦ, ⠫    p   p  p,
     ᨫ쭮  p砥. H p, ᮡ⥭  ppp p⮢.
 ᬮp  p⥩訩 pp.  맮 pp  Ctrl-F7  
 ᫥ ᫥⥫쭮 :

                      [Byte/Forward ]ͻ
                        1>xor   ax,1234    AX=0000 
                        2 loop  1          BX=0000 

    ,        pp뢠  ⥪  xor word,01234.
 ,     p. hiew ⮬᪨   p pp
 p    ⮬    㬮砭  p⠥  ⮫쪮  ⠬ ( p
     ).  p ⮬  p訩  pp AX ⢨⥫쭮
 㤥  pp⥭,   p   㤥 p ,   ,
  ᫥     饩.
          蠣,  室   F2, p ⮬  p 
 'Byte'  ᬥ    'Word'.         p (..
   p    p,   祣 㦨  F3,   襬
 pp  ⮣   㤥).
      'loop'    ᠬ    'loop',  ᠬ 'jmp', p祬
 p  ⮫쪮  . ᫨  ⠥ ᤥ p "", 
 p p⥫쭮 ᫥騥:

                      [Byte/Forward ]ͻ
                        1 xor   ax,1234    AX=1263 
                        2>                 BX=0000 
                        3 xor   bl,al      CX=0000 
             Pentium(R) Pro Assembler ͻ
             loop  3Hiewͻ
            ͺ            Jump out of range             
                            ͼ

     H        hiew    ⠪ p権. p祬, ⠪ 
   .    'loop'  ᫥    p    祭 -
 横  pp.  p  ⨨  F7 (Crypt) hiew p ᫮\ 
 p⨢  'loop'  ⠭,   ᫥饣  F7, ᫥ 祣
 p室  㪠 .
     p    'looo  1'   . 筮 ⠪  㯠. H 
 室   믮   ⮫쪮    p   樫樮 , 
 pp,   . p ⮬ p '1' 믮  ⮫쪮 p, 
  ⠫쭮 p hiew p  樫 2-4.

                      [Byte/Forward ]ͻ
                        1>mov   bl,66      AX=0000 
                        2 xor   al,bl      BX=0000 
                        3 sub   bl,7       CX=0000 
                        4 loop  2          DX=0000 

       ⨬,        p   p   祭   p   p
 pᮯ⥫    pp稪 , ⮬ p   p
 쭮  .  p  ⮬    p  p ⥪饥
 祭  pp      믮  p ᭠砫. ⢥쭮,
 p  ᯥ譮 pp  p  﫨 뫮  p㣮,
  ,   稭 pp pp⭮. 㬥, ⠪
     .    pp ⠫ p  p襣 믮 
 p  ⠥  p  pp,  祣  ,  㦭 
 ᭠砫.
          p室      짮⥫   p,    Ctrl-F7
 (Crypt-Set),  F5  (ClearReg).  p  ⮬  ᯫ뢠      p -
 "⥭"  pp  㪠⥫    㤥 ⠪  p襭,  "㠫"
 㪠⥫   '>'   ⠭        짮⥫    p
 㦤    ᪠        p ᫥. H  ,
 筮  p⭮    F5,     '>' p ⠩ 
 p .
       ᯮ짮  Crypt      p  쭮  
 p,  騩  堪p     p騩   訡.  
 砥,       ᫥ ⠪  砥 易  p㥬
 䩠.  p  ⮬ ⮬⥫쭮 p 室 祭  p
 ( 訡 p   p浪 ᫥ p   ), 
 p    㪠  hiew-  ᫥  pp.    p p
 室    ᫨ p   ᠬ 祭 pp AX  室
 p,  p   "pp筮", ..  騩 祭 
 pp.
     ⨬,   室 p 祭  p p
         㯠 .  p p  ⢮ 
             p.    p     㤥
 ⮬⥫쭮      㤮.   p   ⮣  ᪮  ᫥    
 p뢠  ᫥  p ,    . ⮬
 p    쭮  p⭮  p. H   㧭 祭
 p?   祭   p,   ᪮  祭  pp  p,
 筮  맢  SetCrypt    﫭  . p祬,   
  嫮⭮, 祬    祭  p. ⮬ pᬮp
 ⢨⥫쭮    pp.  ⨬,  室 㧭 -㬬
 p  p  (pp    ⮣   p CRC ᫥ p
 p    ). 쬥  pp p⥩訩 p 㬬p 
 (p 祭 pp⠭).

                      [Byte/Forward ]ͻ
                        1>add   bx,ax      AX=0000 

     "p塞"  pp騪    p  p,  ⥯p  뢠
 pp  ᬮp  祭 pp BX:

                      [Byte/Forward ]ͻ
                        1>add   bx,ax      AX=0121 
                        2                  BX=7534 

       㤥 ᪮ -㬬 襣 p. ,  p-? 
 ᮦ,  㤮-    㤮      ᥣ.  訥  p ⠪
 p뢠  p  ⮬⥫쭮.  H室 㤥 "p" p⨢
 p   pp     ᥬ  ,    p  pp稢  p 
 p    p襥  .    訡 㤥 ⠫쭮  ᤥ
 ⪠  (..    祭   BX)  p⢠  ⥪ p
 .   㤥  砫쭮,  p  稭 ᭠砫.
        ⠪  楫        室  qview. HIEW-  㤮
 p뢠  ᫮  p⥬    p  ⥭  , p 
 p⥫쭮 p⮬ p.
      ,    ᬮp    ᪠ p ppp hiew-
   p    ⥭ᨢ ᯮ.   ⮬,  
   p,   ⮬  ᤥ  .   砥  㦥. 
 祭  讥  ⢮  맢  ⢨  p    6.0 pᨨ. 
 , p p 㬠    p   .
      ,   筮,        p  ⢮  hiew-  p
 ppp  訥  .    p   
 p⮢    譨  䠩  (F10).  筮, 㤮,  p᪨ ⨬
 p .  祬? 筮 p   ᪮쪨 p  
 ⠪   p㤭   "" p.
      p  ⮬  ᠭ  䠩  p   ᮢ pp. p
 뤥p    䠩  p_  "H   ..   p   p  p
 p室       p   p  ⮨  
 p  p  䠩,    祬 ..." H ᠬ  䠩  
 p  p      ⥩.   p᫨p    p
 p⢠.  p  ⮬      p頥 pp   p
 pp     p  "p p⢠" .
 㬥,  ᫨  pp    "⥪⮢"  p,    
 䥪      . p祬, 祬 pp ᠭ 䠩
  묨 p⢠ ⮣  ⢨⥫쭮    .


                          H  HIEW.INI

                                         - p  -   ⢮
                                          祫, p 㤥 .
                                         . pp. "".

     HIEW    p  p    ini 䠩, p  
   windows-䠩.      pp  p   pp
 筮  p      㦤    ᠭ. ,    p訫
 p  p᪠  ᫥.  ,  p  
  ⥫.
     p  p  p       [HiewIni 5.03] ᨬ 
 ⥪騥   pᨨ.   H⭮,   祬   ⠪?   ᫨     ᮢ⨬
 "p-",    祬   p  ᪠ p 'HiewIni'?  ,
   ini    p  pᨩ   ᮡ  ᮢ⨬, .. p ⥭쪮
 㤠     p㣨.
       p  p, 騥  ';' pp. ᫥ 
 p㤭  p祭  p.
     hiew.ini      易⥫  䠩. p  ⢨ 
 p  pp    㬮砭,  p  ᮢ    ᮤp騬  
 "p⨢" p.
     ; p⮢ p

     [StartMode]     p  ᫥騥  祭  Text,  Hex,  Code.
 p  祭  㤥  ⮬᪨  ⠭  p p⨨ 䠩.
  ⠭ 'Hex',  p祬,  .

     [Beep]  \몫  (on\off)  㪮  ᨣ  p 訡 
   .  㬮砭 祭     ᫠  
 祭.

     [Bar]      p㣨  ᫮  p  pp.   㬮砭
 pᯮ    ᫥   (Left),  ᬮp    ,    짮⥫ p祭
 p䥩ᮬ Windows    p (Right). p祬,  ⥪⮢
 p ⪨ p - 宦 ᥣ 㤠  ⮬  
       室騬    ᫮  p⢠    p業
 (Percent).  p    ⮬    ᢮    ,   ᮡ
 㠫쭮    pp  ⥪⮢  㬥⮢,  pp   80
 ᨬ  ⮪.

     [Wrap]  p  p.  p 祭 'on'  'off',
    㤮 ⮬᪨ (Auto) p, ⠭ 
 ᪠    㬮砭.  p  ⮬     䠩 ᥣ 믮
 p p,   ⥪⢮ .

     [Tab]   p  ⠡樨.  ᫨  ⠭ 祭 'On',  hiew
 pp⭮  p뢠  ᨬ ⠡樨, p⨢訥  pᬠp
 ⥪.   ᫨      ⠭   'Off',      ᨬ  ⠡樨  
 ppp.    筮    㯮⮬   [warp]      
 ⮬᪨  p,  p  ⠭    㬮砭    
  祭 㤮.

    [StepCtrlRigh]    ᫮  ⮫殢,   p ᬥ頥 ⥪ p
 ⨨  Ctrl-Left  \  Ctrl-Right.    㬮砭  p  20. 祭 㤮
    pᬮp ⥪⮢ 䠩, pp , 祬 
 80  ᨬ    p   p祬 ⠪,  p p  p⢠
 .  Hpp, p pᬮp ⠡, p  ..  p
 祭  1  128.  p㣨 ᫮ signed byte.

   [DisableMouse]      p\ p 設 pp. 
  ᨬ  ⠭ 祭 pp  p  ⮡p.

   [JumpTable]    ⠡  p室    call/jmp  ᥬp. 
 㬮砭                룫廊        ᫥騬       p       :
 "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ". p ⮬ p ᨬ -  
 ⪠,  ..  p饭  .  .㫥殢  襫 쭮 p쭮
 (    ᫨誮 祢) p襭 p⢠  p  
 "0123456789QWERTYUIOPASDFGHJKLZXCVBNM"  㤮⢠ p  p. 
     ⠪  墠⠥     p ᨬ. ⨬, ᫨  p
   뫮,  ⠫ p   ⮡p.

  [Linefeed]    ⥪ 䠩  ᨬ p p. - ⮣
     p  ⥬  p   p p  
 pp樥.   設⢮   pᬮp騪   ⮬᪨  p
 ᯮ㥬  p.  筮  ⠪   㯠  hiew (Auto). , ᫨
 㦭,      p     p筮 p p.  
 ᫥騥  祭  - LF (0xA), CR (0xD), CRLF (0xD0xA),   ᮦ 
 p쭮   ppp   (0xA   0xD)    (0xA  0xA).  p祬,  ᫥
 筮  p  p砥,   맢 - p. ⬥⨬,
    p  ⮫쪮  pᨨ 5.10

     [AutoCodeSize]  ⮬᪨  p pp來  (16\32)  LX
 䠩.   (p䨪   'a'      p     p,    ⨢p
 ⮬᪨  p  p).  H   p稭 몫 
 ,    ᫥ p  -    
 pᬮp.

     [KbdFlush]  p  ⪮  p p p . 
 㬮筨  祭.    p⨢    砥        p樨
 ⥭쪮    p p ⨩ . ⮬   
   pᢠ  ᥡ  樨    p    뫮  . 
 ⪫    p  p ᯥp.

; ᪠   ᬥ饭 p ᪥  蠡  ᪥ 뫮
 RunningOffsetMask       = 0xFF          ; 0 - 0xFFFFFFFF               v5.53


    [XlatTableIndex]      ⠡ pp  䠩 hiew.xlt
 롨p    㬮砭.  p  ⮬  '0' p  ⢨ ⠡
 pp,   p hiew- 'AS IS'.

     [FlistSort]      pp   pp  䠩    Hp  
 㬮砭.

     [FlistSortReverse] pp pp pp. ..  㬮砭
         p⠭  pp  pp.  ᫨    
 㤮,  p   p.

     [FlistShowHidden]  뢠      p 䠩  Hp. 
 㬮砭   ⠪   䠩    ⮡p.  p,  .  
 ⠭  pp  'On'.

     [NextFileSaveState]  p ⥪饥 ﭨ p p祭 
 䠩.    㬮砭  몫祭,      ⥣p᪨   p.
   ⨢p  ᥩ  堭 -  ᡥp   p 
 p.

     [SaveFileAtExit]  뢠  ﭨ  䠩   室.  㬮砭
 몫祭  (?!)   ᮫⭮ ⭮. -  䮭 ⮣,  室
 p室    类  pp  짮⥫   Esc  F10  
 ⮣      p㣨 㭪権, ⠪    p室
 쭮 . Hp 室   堭.

     [ScanStep] 蠣  㬮砭 p ᪥ 뫪 (F6 Reference)  
 (F7,F7).   㬮砭  祭 'Command'     pp 
 ᪮p,   祬       (  뫮  ᪠  )    p
 ⠭ 蠣 ᪠   ('Byte').


    [Savefile]                䠩  p ﭨ. 
 㬮筨  hiew  ᮧ 䠩 'hiew.sav'  ⥪饩 pp,   
 .    뢠  ,  pp,    ⥪騩  
  (祢 ᪥, 饭  , CD-ROM)...


 
     H-  hiew  ⠫  p  梥⮢ p᪫! p 
   p    ᢮ . , ⨬, 让  "
  p"   ᯮ㥬 pp p  ⠪.
     p  뢠  p 梥⮬ 梥 ,  p쭠.  ⮬
     p 㤮  ᯥ樠쭮 ⨫⮩, (pp, 宦 
 qview) 祬   p.
     pp ⮩ ᥪ樨 hiew.ini ᭠  p p:

                                   
 ColorMain               = 0x1B               ; ᭮ 梥
 ColorCurrent            = 0x71               ; ⥪騩 
                                   

 HIEW.XLT
      䠩  㦨    pp  ᨬ.   ᮤp  15
 p,      ppp塞  p p ᮤp ⮫쪮  -
 Win1251      KOI8R.      쭮   ⥢  pp      
 ᮧ\pᬮp\pp    蠥    p ⨫.
 p  ᮯ饩 㬥樨 뢠 pp :


 typedef  struct{
  BYTE  sign[ 9 ],             // "HiewXlat",0
        unused[ 5 ],
        versionMajor,          // 0x05
        versionMinor;          // 0x40
  }XLAT_HEADER;

 typedef  struct{
  BYTE  title[ 16 ],           // 
        tableOut[ 256 ],       //  뢮
        tableIn[ 256 ],        //  
        tableUpper[ 256 ];     //  pp pp  ᪥
  }XLAT;


     H  㬠,      맮 - p. pp 
 ⭠    㤮    p饭.  ⨬,    \뢮 p, 
 p⭮.  筮   p pp. 㬥 hiew   
  pᯮ ᨬ  p쭮 p, ⮬ pp ⮬⮬
  p.
       ⮫쪮,       hiew-   ⨫  p 
 ⨬  䠩.  H  ⪮p  ,  ppp,  
 p...      樨   p    ᯥ樠
 pp.   ⨬,   ᫨     p    p  ISO,  
 p㡥 ᭠砫 p 騩 䠩,  p 
 p .
     ⨬,  hiew.hlt  ⢮.   砥 p
 ⢥ p  㬮砭 DOS   p hiew- 'AS IS'.

