Last update: 2 April 2008

Russian (windows-1251)


[Hiew]   [HEM]   [Recordman]   [Calculator]   [Dexem]   [Edump](new)   [Ldump]


Hiew

The information for illegal users: You use 'cracked' versions of the Hiew on your own risk.


Features of release VII:

  • view and edit files of any length in text, hex, and decode modes
  • x86-64 disassembler & assembler
  • physical & logical drive view & edit
  • support for NE, LE, LX, PE/PE32+ and little-endian ELF executable formats
  • support for Netware Loadable Modules like NLM, DSK, LAN,...
  • following direct call/jmp instructions in any executable file with one touch
  • pattern search in disassembler
  • built-in simple 64bit decrypt/crypt system
  • built-in powerful 64bit calculator
  • block operations: read, write, fill, copy, move, insert, delete, crypt
  • multifile search and replace
  • keyboard macros
  • unicode support
  • Hiew Extrenal Module (HEM) support

Limitations of DEMO version:

  • file size is limited to 150000 bytes
  • no 64bit dis/assembler
  • no ini-file processing
  • no ordinal names
  • no loading/storing keyboard macros in file
  • no loading/storing crypt scripts in file
  • crypt 32bit
  • no progress bar
  • no unicode support
  • no HEM (Hiew External Module) support

Download DEMO version:

  • Hiew32 Demo (~160Kb Win32)
  • Download latest version (for registered users only!):

  • Hiew 7.50 (~125Kb, No personal exefile inside !)
  • Download CahUnlock:

  • CahUnlock 3.10(~13Kb)
  • Download HEM SDK:

  • HEM SDK 0.42(~81Kb)
  • - added: HIEWGATE_NAMES

  • Registration:

    (Share-It! supports payment throught PayPal)

  • $64 - Free 1-year updates:     Share-It!     BMT Micro
  • $199 - Free lifetime updates: Share-It!     BMT Micro
  • Note for new customers:
    After obtaining the license key you will receive full functional pre latest version. In two months you will start receiving program updates and get latest version. Sorry for inconvenience. This period is necessary for full identification of credit cards and not include in 1-year period.


    Hiew history:

    7.50 ( 29 Jan 2008 )
    - name (ShiftF12/F12) for address in hex-, decode modes
    - comment (;/F12) for address in hex-, decode modes
    - HEM SDK 0.42
    - "NamesAutosave = On/Off" in ini-file
    - "DllNameInComment = On/Off" in ini-file
    - show negative offset for basing
    - FIX: input string history has reset for empty string adding
    - FIX: PE image size calculation has incorrect for last section virtsize = 0
    - FIX: PE overlay calculation more accurate
    7.47 ( 26 Sep 2007 )
    - FIX: crash if hiew7.ini is empty or only-comment lines
    - FIX: crash if print into existed file and press esc
    - Code lighting
    - HEM 0.40
    - "SignImmediate = On/Off" in ini-file
    - "SignDisplacement = On/Off" in ini-file
    - OpcodeShowBytes up to 15
    7.45 ( 26 Jul 2007 )
    - HEM SDK 0.35: SetErrorMsg(), GetStringDual()
    - HemKeys.ini
    - FIX: crash if the file 'hiew.key' is encrypted
    - relative jump under cursor (hex mode/Shift-F11)
    - CryptBlock in code mode too (Alt-F3)
    7.41 ( 26 Apr 2007 )
    - FIX(7.40): lose name show after edit
    - FIX(7.40) PE: show invalid target va for some call/jmp
    - import pattern use name from hiew7.ord
    - deadloop for invalid/incorrect mz-fixups preparation in 'wild' PE
    - PE: allfile autosizeing if PE-header active
    7.40 ( 22 Feb 2007 )
    - 64bit dis/assembler x86-64
    - 64bit crypt
    - Crypt trace (F11)
    - Pe32+ support for machine 8664h
    - TLS callback for PE/PE32+ (F8-F11)
    - fast search by pattern for assembler
    - choice of the command under ambiguous assemblering (F4)
    - hexedit: dword/qword edit under cursor (AltF3/AltF4)
    - find next start from find length (was: next byte)
    - remove XOR-string (was: F8 for edit)
    7.28 ( 26 Sep 2006 )
    - FIX: PE overlay calculate from last physical section
    - FIX: assembling 'rep strings'
    - FIX(7.27): '%' in calculator as syntax error
    - FIX: PE with section locate trick
    - PE: show forwarded export
    - Export: Stay cursor after sort/filter
    - Type of StringCollections offset store depend on global/local
    - "StringsShowOffset=" in ini-file
    - "ColorCodeRet=" in ini-file
    - HEM: SEH for load/call
    - HEM FIX: memory leak
    - HEM FIX: return current choise from Hiew_Menu() for Fn-press:


    Recordman

    It is not a one more hex viewer, it is my C++/MFC training only.
    Current beta-version have no any editing feature.

    (Invisible) Features:

    Recordman010.zip (~60Kb, Win32, need standart mfc42.dll)

    SEN's Calculator

    SenCalc is integer arithmetic calculator with brackets and operations priority.

    senclac105.zip (~20Kb, Win32)

    DualEXE Manipulator

    Dexem is a command-line utility for split or join dual-executable files.

    dexem153.zip (~20Kb, Win32)

    Executable files dumper

    Edump is a command-line utility for detail dump of executable files.
    Support: NE, LX/LE, PE/PE32+, ELF/ELF64 (little-endian)

    edump162.zip (~50Kb, Win32)

    Version 1.62
    - ELF64 support
    Version 1.52
    - PE32+: Fixup #10
    - PE/PE32+: Load config directory
    - PE32+: TLS
    - PE32+ support


    Library files dumper

    Ldump is a command-line utility for detail dump of library/object files.
    Support: Coff and Omf

    ldump111.zip (~35Kb, Win32)

    Version 1.11
    - Coff: no check machine value
    - Coff: added short import library format


    Eugene Suslikov (sen@kemtel.ru)