emS-St1ks

ollydb very great settings

Jun 14th, 2012
167
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.82 KB | None | 0 0
  1. [Settings]
  2. Check DLL versions=0
  3. Topmost window=0
  4. Show main menu items that don't apply=0
  5. Show popup items that don't apply=0
  6. Show toolbar=1
  7. Use system colours in toolbar=0
  8. Status in toolbar=0
  9. Flash duration=1
  10. Autoupdate interval=4
  11. Mode of main window=0
  12. Restore windows=1
  13. Restore window positions=1
  14. Restore width of columns=0
  15. Restore sorting criterium=1
  16. Highlight sorted column=1
  17. Right click selects=1
  18. Index of default font=1
  19. Index of default UNICODE font=3
  20. Index of default colours=0
  21. Code highlighting=0
  22. Horizontal scroll=0
  23. Snow-free drawing=1
  24. Append arguments=1
  25. Allow diacritical symbols=0
  26. Decode pascal strings=1
  27. Use IsTextUnicode=0
  28. String decoding=0
  29. File graph mode=1
  30. Dialog font mode=0
  31. Font in dialogs=0
  32. Align dialogs=1
  33. Global search=1
  34. Aligned search=0
  35. Ignore case=0
  36. Search direction=1
  37. Floating search with margin=0
  38. Allow extra commands in sequence=1
  39. Allow jumps into the sequence=0
  40. Keep size of hex edit selection=0
  41. Sorting mode of error list=0
  42. Modify FPU tag=1
  43. MMX display mode=2
  44. Show tooltips in dialog windows=1
  45. X options coordinate=-1
  46. Y options coordinate=-1
  47. Last selected options pane=0
  48. Last edited font in options=0
  49. Last edited scheme in options=0
  50. Last edited colour index in options=0
  51. Last edited highlighting in options=1
  52. Last edited highlighting index in options=0
  53. Warnmode when not administrator=1
  54. Warnmode for packed code in Analyzer=0
  55. Warnmode when process is still running=0
  56. Warnmode when INT3 breakpoint is corrupt=0
  57. Warnmode when INT3 set on non-command=0
  58. Warnmode when clipboard size too large=0
  59. Warnmode when all threads are suspended=0
  60. Warnmode when thread is changed=0
  61. Warnmode when unable to close process=0
  62. Warnmode when executable differs from udd=0
  63. Warnmode when INT3 in udd has different cmd=0
  64. Warnmode when fixups are modified=0
  65. Warnmode when memory breakpoint on stack=0
  66. Warnmode when modified debug registers=0
  67. Only ASCII printable in dump=0
  68. Underline fixups=1
  69. Show jump direction=1
  70. Show jump path=1
  71. Show grayed path if jump is not taken=1
  72. Fill rest of command with NOPs=1
  73. Action on letter key in Disassembler=1
  74. Wide characters in UNICODE dumps=1
  75. Automatically backup user code=0
  76. IDEAL disassembling mode=0
  77. Disassemble in lowercase=0
  78. Separate arguments with TAB=0
  79. Extra space between arguments=0
  80. Show default segments=1
  81. Always show memory size=1
  82. NEAR jump modifiers=0
  83. Use short form of string commands=0
  84. Use RET instead of RETN=0
  85. SSE size decoding mode=0
  86. Jump hint decoding mode=0
  87. Size sensitive mnemonics=1
  88. Top of FPU stack=1
  89. Show symbolic addresses=1
  90. Show local module names=0
  91. Demangle symbolic names=0
  92. First pause=3
  93. Pause on attach=1
  94. Assume flat selectors=0
  95. Ignore access violations in KERNEL32=1
  96. Ignore INT3=0
  97. Ignore TRAP=0
  98. Ignore access violations=0
  99. Ignore division by 0=0
  100. Ignore illegal instructions=0
  101. Ignore all FPU exceptions=0
  102. Ignore custom exception ranges=0
  103. Call UnhandledExceptionFilter=0
  104. Report ignored exceptions to log=1
  105. Autoreturn=0
  106. Use DebugBreakProcess=0
  107. Use ExitProcess=1
  108. Warn when frequent breaks=1
  109. Allow command emulation=0
  110. Debug child processes=0
  111. Animation delay index=0
  112. Stop on new DLL=0
  113. Stop on DLL unload=0
  114. Stop on debug string=0
  115. Stop on new thread=0
  116. Stop on thread end=0
  117. Run trace protocolling options=0
  118. Run trace buffer size index=2
  119. Trace over system DLLs=1
  120. Trace over string commands=1
  121. Save traced commands=0
  122. Save accessed memory to trace=0
  123. Save FPU registers to trace=0
  124. Synchronize CPU and Run trace=1
  125. Set breakpoints on callbacks in hit trace=0
  126. Hit trace mode for indirect jumps=0
  127. Stop hit trace if not command=0
  128. Hit trace outside the code section=2
  129. Show symbolic names in protocol range list=0
  130. Use predictions in search=1
  131. References include indirect jumps=1
  132. Add origin to search results=0
  133. Default resource language=9
  134. Gray inactive windows=1
  135. Gray register names=0
  136. Center FOLLOWed command=1
  137. Decode registers for any IP=0
  138. Remove code hilite on register hilite=1
  139. Automatically select register type=0
  140. Enable SSE registers=1
  141. Label display mode=0
  142. Highlight symbolic labels=0
  143. Log buffer size index=2
  144. Tabulate columns in log file=0
  145. Append data to existing log file=0
  146. Auto analysis=1
  147. No predicted registers in system DLLs=0
  148. Fuzzy analysis=1
  149. Report problems during analysis=0
  150. Decode tricks=1
  151. Mark tricks=0
  152. Decode ifs as switches=0
  153. Functions preserve registers=1
  154. Ignore braces in udd path=1
  155. Guess number of arguments=1
  156. Guess arguments from mangled names=0
  157. Guess meaning of guessed arguments=1
  158. Show uncertain arguments=1
  159. Rename value dependent arguments=0
  160. Show predicted values=1
  161. Show ARG and LOCAL in disassembly=1
  162. Use symbolic names for ARG and LOCAL=0
  163. Show ARG and LOCAL in comments=1
  164. Show loops=1
  165. Accept far calls and returns=0
  166. Accept direct segment modifications=0
  167. Accept privileged commands=0
  168. Accept I/O commands=0
  169. Accept NOPs=1
  170. Accept shifts out of range=0
  171. Accept superfluous prefixes=0
  172. Accept default prefixes=1
  173. Accept valid LOCK prefixes=1
  174. Accept unaligned stack operations=1
  175. Accept suspicious ESP operations=0
  176. Accept non-standard command forms=1
  177. Accept access to nonexisting memory=0
  178. Accept interrupt commands=0
  179. [History]
  180. Executable[0]=H:\Documents and Settings\Nowiccy Haha co za\Pulpit\XYZ_KeygenMe20110505\XYZ_KeygenMe20110505_Dev.exe
  181. Arguments[0]=
  182. Executable[1]=H:\Documents and Settings\Nowiccy Haha co za\Pulpit\OC\OopsCrasher.exe
  183. Arguments[1]=
  184. Executable[2]=H:\Documents and Settings\Nowiccy Haha co za\Pulpit\[S]Crack[B]Me[D].exe
  185. Arguments[2]=
  186. Executable[3]=H:\Documents and Settings\Nowiccy Haha co za\Pulpit\odbg\trojan.exe
  187. Arguments[3]=
  188. Executable[4]=
  189. Arguments[4]=
  190. Executable[5]=
  191. Arguments[5]=
  192. Log file=log.txt
  193. Trace save file=trace.txt
  194. Data directory=.
  195. API help file=
  196. Last viewed file=
  197. Previous JIT=
  198. [OllyDbg]
  199. Placement=219,74,640,480,1
  200. [CPU]
  201. Placement=0,0,392,315,3
  202. Offset[0]=0
  203. Offset[1]=0
  204. Offset[2]=0
  205. Offset[3]=0
  206. [CPU Disasm]
  207. Appearance=1,0,0,0,0
  208. Columns=54,102,240,1536
  209. [CPU Info]
  210. Appearance=1,0,0,0,0
  211. [CPU registers]
  212. Appearance=1,0,1,0,0
  213. Local=0,66816
  214. [CPU Dump]
  215. Appearance=1,0,1,0,0
  216. Columns=54,288,102
  217. Local=00011001
  218. [CPU Stack]
  219. Appearance=1,0,0,0,0
  220. Columns=54,60,30,1536
  221. Local=000A0104
  222. [Search]
  223. Placement=44,44,618,175,1
  224. Appearance=1,0,1,0,0
  225. [Namelist]
  226. Appearance=1,0,1,0,0
  227. [Attach]
  228. Appearance=1,0,1,0,0
  229. Columns=54,72,168,1536
  230. Sort=0
  231. [Modules]
  232. Placement=22,22,654,175,1
  233. Appearance=1,0,1,0,0
  234. Columns=54,54,54,72,96,1536
  235. Sort=0
  236. [Colour schemes]
  237. Scheme name[0]=Black on white
  238. Foreground_1[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  239. Foreground_2[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  240. Background_1[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  241. Background_2[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  242. Operands[0]=0
  243. Modified commands[0]=0
  244. Scheme name[1]=Yellow on blue
  245. Foreground_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  246. Foreground_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  247. Background_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  248. Background_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  249. Operands[1]=0
  250. Modified commands[1]=0
  251. Scheme name[2]=Marine
  252. Foreground_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  253. Foreground_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  254. Background_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  255. Background_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  256. Operands[2]=0
  257. Modified commands[2]=0
  258. Scheme name[3]=Mostly black
  259. Foreground_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  260. Foreground_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  261. Background_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  262. Background_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  263. Operands[3]=0
  264. Modified commands[3]=0
  265. Scheme name[4]=Scheme 4
  266. Foreground_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  267. Foreground_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  268. Background_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  269. Background_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  270. Operands[4]=0
  271. Modified commands[4]=0
  272. Scheme name[5]=Scheme 5
  273. Foreground_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  274. Foreground_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  275. Background_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  276. Background_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  277. Operands[5]=0
  278. Modified commands[5]=0
  279. Scheme name[6]=Scheme 6
  280. Foreground_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  281. Foreground_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  282. Background_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  283. Background_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  284. Operands[6]=0
  285. Modified commands[6]=0
  286. Scheme name[7]=Scheme 7
  287. Foreground_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  288. Foreground_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  289. Background_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  290. Background_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  291. Operands[7]=0
  292. Modified commands[7]=0
  293. [Highlighting schemes]
  294. Scheme name[1]=Christmas tree
  295. Foreground_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  296. Foreground_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  297. Background_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  298. Background_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  299. Operands[1]=1
  300. Modified commands[1]=1
  301. Scheme name[2]=Jumps and calls
  302. Foreground_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  303. Foreground_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  304. Background_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  305. Background_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  306. Operands[2]=0
  307. Modified commands[2]=0
  308. Scheme name[3]=Memory access
  309. Foreground_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  310. Foreground_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  311. Background_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  312. Background_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  313. Operands[3]=1
  314. Modified commands[3]=1
  315. Scheme name[4]=Hilite 4
  316. Foreground_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  317. Foreground_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  318. Background_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  319. Background_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  320. Operands[4]=0
  321. Modified commands[4]=0
  322. Scheme name[5]=Hilite 5
  323. Foreground_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  324. Foreground_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  325. Background_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  326. Background_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  327. Operands[5]=0
  328. Modified commands[5]=0
  329. Scheme name[6]=Hilite 6
  330. Foreground_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  331. Foreground_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  332. Background_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  333. Background_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  334. Operands[6]=0
  335. Modified commands[6]=0
  336. Scheme name[7]=Hilite 7
  337. Foreground_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  338. Foreground_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  339. Background_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  340. Background_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
  341. Operands[7]=0
  342. Modified commands[7]=0
  343. [Fonts]
  344. Font name[0]=OEM fixed font
  345. Font[0]=0,0,0,0,0,0,0,0,0,0,10
  346. Face name[0]=
  347. Font name[1]=Terminal 6
  348. Font[1]=9,6,700,0,0,0,255,0,1,1,0
  349. Face name[1]=Terminal
  350. Font name[2]=System fixed font
  351. Font[2]=0,0,0,0,0,0,0,0,0,0,16
  352. Face name[2]=
  353. Font name[3]=Courier (UNICODE)
  354. Font[3]=14,0,400,0,0,0,1,2,5,-2,0
  355. Face name[3]=Courier New
  356. Font name[4]=Lucida (UNICODE)
  357. Font[4]=10,6,400,0,0,0,1,2,5,0,0
  358. Face name[4]=Lucida Console
  359. Font name[5]=Font 5
  360. Font[5]=9,6,700,0,0,0,255,0,1,1,0
  361. Face name[5]=Terminal
  362. Font name[6]=Font 6
  363. Font[6]=0,0,0,0,0,0,0,0,0,0,16
  364. Face name[6]=
  365. Font name[7]=Font 7
  366. Font[7]=14,0,400,0,0,0,1,2,5,-2,0
  367. Face name[7]=Courier New
Advertisement
Add Comment
Please, Sign In to add comment