💾 Archived View for gemini.spam.works › mirrors › textfiles › computers › DOCUMENTATION › proview.tx… captured on 2022-06-12 at 06:36:57.

View Raw

More Information

-=-=-=-=-=-=-















     PROVIEW (tm) Integrated System Analyzer and Viewer
       Copyright (C) 1992 - 1993 by McAfee Associates
                    All rights reserved

                        Version 1.2




























McAfee Associates            (408) 988-3832 office
3350 Scott Blvd, Bldg. 14    (408) 970-9727 fax
Santa Clara, CA  95054       (408) 988-4004 BBS (25 lines)
U.S.A.                       USR HST/v.32/v.42bis/MNP1-5
                             CompuServe        GO MCAFEE
                             InterNet support@mcafee.COM



Overview

     PROVIEW is a menu driven program used to analyze, view
     and edit the basic components of a system, including the
     system memory, system interrupts, device drivers, and
     installed disk drive sectors and file contents.  PROVIEW 
     will allow you to view system elements in HEX, ASCII or 
     disassembled code format.  Full searching and editing 
     functions are included.

     PROVIEW displays data in real time.  For example, if you are
     viewing a memory location that is being updated by
     the system (the clock interrupt, for example), PROVIEW
     will display the changes as they occur.

     PROVIEW provides an extensive on-line context sensitive
     help function.  At any point in the program you may press
     the <F1> key to display help text for the process you are
     currently engaged in.  NOTE: The PV.HLP file must be
     in the same directory as the PV.EXE file.

     PROVIEW is Novell Network aware.  You may view any network
     file and edit any network file that is not locked.

Using The Menus

     After you have entered the PROVIEW menu system (type
     PV at the DOS prompt), you will be able to move
     about the PROVIEW menus to access all of the system
     functions. To pull down one of the available menus,
     press the ALT key and the highlighted letter of the
     menu you want or use the mouse to select the pulldown
     list. For example, to access the Memory menu, press
     ALT-M. To access the functions within the pulldown
     list, you can either use the arrow keys to move the
     highlight to the option you want and press ENTER,
     select the option with the mouse, or press the letter
     that is highlighted in that option. For example, in the
     Memory menu to access the list of interrupt vectors,
     press I.

     The PROVIEW menu system allows you to open more than
     one window at a time to view the system parameters.

Using the PROVIEW Windows

     The Window menu contains commands to close, move and
     perform other window-management commands. Most of the
     windows in this program have all the standard window
     elements, including scroll bars, a close box, and zoom
     icons.

     Size/Move  (Ctrl-F5)

          When you choose Size/Move, the active window moves
          in response to the arrow keys. Once you've moved
          the window to where you want it, press Enter.

          If you press Shift while you use the arrow keys,
          you can change the size of the active window. Once
          you've adjusted its size or position, press Enter.

          You can also move a window by dragging its title
          bar with the mouse. If a window has a Resize
          corner, you can drag that corner with the mouse to
          resize the window.

     Zoom  (F5)

          Choose Zoom to resize the active window to the
          maximum size. If the window is already zoomed, you
          can choose this command to restore it to its
          previous size.

          You can also double-click anywhere on the window's
          title bar (except where an icon appears) to zoom
          or unzoom the window.

     Next  (Ctrl-F6)

          Choose Next to cycle forwards through the windows
          on the desktop.

     Close  (Ctrl-F4)

          Choose Close to close the active window.

          You can also click the Close box in the upper
          right corner to close a window.

     Cascade

          Choose Cascade to stack all file viewers on the
          desktop.

           ???????????????????????????1??
           ???????????????????????????2??
           ???????????????????????????3??
           ???????????????????????????4??
           ????                         ?
           ????                         ?
           ????                         ?
           ????                         ?
           ????                         ?
           ??????????????????????????????
                  Cascaded Windows


    Tile

          Choose Tile to tile all file viewers on the
          desktop.

           ??????????????????????????????????????
           ? ?????????????1????????????????2??? ?
           ? ?               ??               ? ?
           ? ?               ??               ? ?
           ? ?               ??               ? ?
           ? ?               ??               ? ?
           ? ?????????????????????????????????? ?
           ? ?????????????3????????????????4??? ?
           ? ?               ??               ? ?
           ? ?               ??               ? ?
           ? ?               ??               ? ?
           ? ?               ??               ? ?
           ? ?????????????????????????????????? ?
           ??????????????????????????????????????
                       Tiled Windows

Using the Edit Functions

     The Edit menu contains all the commands you need to
     edit or change the system elements that are accessed with
     the Memory and Disk menus.

     Undo  (Backspace)

          To undo any change that you have made. Note that
          any values that have been changed are highlighted.

     Set Mask/Value  (F3)

          The mask/value may be set to any hex byte value for
          XOR/Negate or Add/Subtract operations. 

     XOR/Negate  (F7/Shift-F7)

          XOR/Negate the selected byte using the mask value.

     Add/Subtract (F8/Shift-F8)

          Add/subtract the Mask/Value to the highlighted field.

     Rotate Left/Right  (F9/Shift-F9)

          Rotate selected byte left or right.


The FILE Menu

     The file menu has three options:

     Save Edited Object

          Permits saving any changes you have made without
          having to exit the current edit in process.

     Read only   (Default = No)

          This options allows you to enable or disable the
          Read Only function. When enabled (ON), you will
          not be able to change or edit any system data with
          the PROVIEW program. To make changes, and be able
          to save them, toggle this option to read NO.

     Exit to DOS

          Returns you to the DOS prompt. Be sure to save any
          changes that you have made before exiting.

The MEMORY Menu

          System memory may be viewed and edited by PROVIEW.  
          Memory may be viewed in HEX, ASCII or disassembled
          code format.  If viewing in assembler format, you
          may follow the control of the program by selecting
          the numbers in parenthesis to the right of each 
          branch instruction that is displayed on the screen.
          to reverse the flow of control, press (0) to return 
          to the previous branch instruction.

          The following options are available in the Memory Menu:

     DOS System Area

          View/Edit the DOS System Area, starting at 0K and
          continuing as much as space as necessary for all
          the information loaded. Information stored here
          includes the BIOS DATA Area, DOS Communication
          Area, IO and DOS code, System File Tables, FCB
          Tables, Disk Buffers, System STACKS (CODE and
          DATA), as well as devices loaded with the
          CONFIG.SYS file (e.g., HIMEM.SYS, SETVER driver,
          MOUSE driver).

     Program Area

          View/Edit the Program Area of memory, starting 
          at the end of the DOS System Area and including 
          all used and unused space up to 640K. Information 
          stored here includes the COMMAND.COM code, as well 
          as any TSR programs loaded by the system (e.g., MOUSE,
          DOSKEY).

     Upper Memory Area

          View/Edit the Upper Memory Area, starting at 640K
          and including all the used and unused space up
          to 1MB. Information stored here includes the
          Graphic and Text Video RAM, Video ROM BIOS, and
          System ROM BIOS.

     Interrupts

          View/Edit the System Interrupt Vectors.  Proview 
          indicates which ones are currently in use, their
          memory addresses, owners and interrupt chains. 
          You may display/edit the actual interrupt code in 
          hex or ASM format.

          NOTE: Do not use the "Display Interrupt Chain" 
          sub-function of this feature if you are running 
          any background multi-programming operating environment 
          such as DESQview.  Your system may hang under some  
          circumstances if it is attempted.

     Drivers

          View/Edit installed system device Drivers.  PROVIEW
          displays the list of installed drivers and their
          attributes.  Individual drivers may be selected for
          viewing or editing.

     Absolute Memory View

          View/Edit a user selectable memory address range
          within the system absolute memory.


                          WARNING!!

          Changes made to system memory can cause system crashes
          or data loss.  Make sure that you understand any change
          that you wish to make to any memory location.


DISK Menu

     File View

          View/Edit files on the default hard disk drive.
          You can view the file in either HEX, ASM or ASCII
          format.  Files may be selected from hard disk, floppy
          diskette or network drives.

     Sector View

          View/Edit logical sectors on any installed disk
          drive, hard or floppy.  This option may not be used
          on network drives.

     Physical Sector View

          View/Edit physical sectors on any disk drive.  This 
          option may not be used on network drives.

     Boot Record

          View/Edit the boot record on any installed drive.  This
          option may not be used on network drives.

     Master Boot Record

          View Edit the Master Boot record on any drive.

                       WARNING!!

          Changes made to the Boot sector, Master Boot Record or
          File allocation table area of the hard disk or floppy disk
          can cause system crashes and/or loss of data.  Make sure
          that you understand any changes made to these areas.




HELP Function

     Comprehensive context sensitive help is provided with
     PROVIEW.  At any point in the program press <F1> to
     display help instructions for the function you are
     engaged in.

     In the Help Menu is also a section on Help On Help. 
     If you are having trouble finding anything in Help, 
     or using Help, Press Alt-H to access the Help Menu list, 
     the press H to access the Help On Help. When you are 
     finished with Help, press Enter or select OK with the 
     Mouse to return to the PROVIEW menu.





AUTHENTICITY

               Before using PROVIEW for the first time, verify that it has
          not been tampered with or infected by a virus by using the
          the enclosed VALIDATE program.  For instructions on using
          VALIDATE, please read the VALIDATE.DOC file.

               The validation results for Version 1.2 should be:

                        FILE NAME: PV.EXE
                             SIZE: 87,885
                             DATE: 03-05-1993
              FILE AUTHENTICATION
                   Check Method 1: 4C16
                   Check Method 2: 0048

          If your copy of PROVIEW differs, it may have been damaged.

          Always obtain your copy of PROVIEW from a known source.  The latest
          version of PROVIEW and validation data for PV.EXE can be
          obtained from McAfee Associates' bulletin board system at
          (408) 988-4004 or from the McAfee Virus Help Forum on
          CompuServe (GO MCAFEE), or the mcafee.COM anonymous ftp site on
          the Internet.

               PROVIEW series are archived with PKWare's PKZIP Authentic File
          Verification.  If you do not see an "-AV" after every file is
          unzipped and receive the "Authentic Files Verified! # NWN405
          Zip Source: McAFEE ASSOCIATES" message when you unzip the files
          then do not use them.  If your version of PKUNZIP does not have
          verification ability, then this message may not be displayed.
          Please contact us if you believe tampering has occurred to the
          .ZIP file.