Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [Settings]
- Check DLL versions=0
- Topmost window=0
- Show main menu items that don't apply=0
- Show popup items that don't apply=0
- Show toolbar=1
- Use system colours in toolbar=0
- Status in toolbar=0
- Flash duration=1
- Autoupdate interval=4
- Mode of main window=0
- Restore windows=1
- Restore window positions=1
- Restore width of columns=0
- Restore sorting criterium=1
- Highlight sorted column=1
- Right click selects=1
- Index of default font=1
- Index of default UNICODE font=3
- Index of default colours=0
- Code highlighting=0
- Horizontal scroll=0
- Snow-free drawing=1
- Append arguments=1
- Allow diacritical symbols=0
- Decode pascal strings=1
- Use IsTextUnicode=0
- String decoding=0
- File graph mode=1
- Dialog font mode=0
- Font in dialogs=0
- Align dialogs=1
- Global search=1
- Aligned search=0
- Ignore case=0
- Search direction=1
- Floating search with margin=0
- Allow extra commands in sequence=1
- Allow jumps into the sequence=0
- Keep size of hex edit selection=0
- Sorting mode of error list=0
- Modify FPU tag=1
- MMX display mode=2
- Show tooltips in dialog windows=1
- X options coordinate=-1
- Y options coordinate=-1
- Last selected options pane=0
- Last edited font in options=0
- Last edited scheme in options=0
- Last edited colour index in options=0
- Last edited highlighting in options=1
- Last edited highlighting index in options=0
- Warnmode when not administrator=1
- Warnmode for packed code in Analyzer=0
- Warnmode when process is still running=0
- Warnmode when INT3 breakpoint is corrupt=0
- Warnmode when INT3 set on non-command=0
- Warnmode when clipboard size too large=0
- Warnmode when all threads are suspended=0
- Warnmode when thread is changed=0
- Warnmode when unable to close process=0
- Warnmode when executable differs from udd=0
- Warnmode when INT3 in udd has different cmd=0
- Warnmode when fixups are modified=0
- Warnmode when memory breakpoint on stack=0
- Warnmode when modified debug registers=0
- Only ASCII printable in dump=0
- Underline fixups=1
- Show jump direction=1
- Show jump path=1
- Show grayed path if jump is not taken=1
- Fill rest of command with NOPs=1
- Action on letter key in Disassembler=1
- Wide characters in UNICODE dumps=1
- Automatically backup user code=0
- IDEAL disassembling mode=0
- Disassemble in lowercase=0
- Separate arguments with TAB=0
- Extra space between arguments=0
- Show default segments=1
- Always show memory size=1
- NEAR jump modifiers=0
- Use short form of string commands=0
- Use RET instead of RETN=0
- SSE size decoding mode=0
- Jump hint decoding mode=0
- Size sensitive mnemonics=1
- Top of FPU stack=1
- Show symbolic addresses=1
- Show local module names=0
- Demangle symbolic names=0
- First pause=3
- Pause on attach=1
- Assume flat selectors=0
- Ignore access violations in KERNEL32=1
- Ignore INT3=0
- Ignore TRAP=0
- Ignore access violations=0
- Ignore division by 0=0
- Ignore illegal instructions=0
- Ignore all FPU exceptions=0
- Ignore custom exception ranges=0
- Call UnhandledExceptionFilter=0
- Report ignored exceptions to log=1
- Autoreturn=0
- Use DebugBreakProcess=0
- Use ExitProcess=1
- Warn when frequent breaks=1
- Allow command emulation=0
- Debug child processes=0
- Animation delay index=0
- Stop on new DLL=0
- Stop on DLL unload=0
- Stop on debug string=0
- Stop on new thread=0
- Stop on thread end=0
- Run trace protocolling options=0
- Run trace buffer size index=2
- Trace over system DLLs=1
- Trace over string commands=1
- Save traced commands=0
- Save accessed memory to trace=0
- Save FPU registers to trace=0
- Synchronize CPU and Run trace=1
- Set breakpoints on callbacks in hit trace=0
- Hit trace mode for indirect jumps=0
- Stop hit trace if not command=0
- Hit trace outside the code section=2
- Show symbolic names in protocol range list=0
- Use predictions in search=1
- References include indirect jumps=1
- Add origin to search results=0
- Default resource language=9
- Gray inactive windows=1
- Gray register names=0
- Center FOLLOWed command=1
- Decode registers for any IP=0
- Remove code hilite on register hilite=1
- Automatically select register type=0
- Enable SSE registers=1
- Label display mode=0
- Highlight symbolic labels=0
- Log buffer size index=2
- Tabulate columns in log file=0
- Append data to existing log file=0
- Auto analysis=1
- No predicted registers in system DLLs=0
- Fuzzy analysis=1
- Report problems during analysis=0
- Decode tricks=1
- Mark tricks=0
- Decode ifs as switches=0
- Functions preserve registers=1
- Ignore braces in udd path=1
- Guess number of arguments=1
- Guess arguments from mangled names=0
- Guess meaning of guessed arguments=1
- Show uncertain arguments=1
- Rename value dependent arguments=0
- Show predicted values=1
- Show ARG and LOCAL in disassembly=1
- Use symbolic names for ARG and LOCAL=0
- Show ARG and LOCAL in comments=1
- Show loops=1
- Accept far calls and returns=0
- Accept direct segment modifications=0
- Accept privileged commands=0
- Accept I/O commands=0
- Accept NOPs=1
- Accept shifts out of range=0
- Accept superfluous prefixes=0
- Accept default prefixes=1
- Accept valid LOCK prefixes=1
- Accept unaligned stack operations=1
- Accept suspicious ESP operations=0
- Accept non-standard command forms=1
- Accept access to nonexisting memory=0
- Accept interrupt commands=0
- [History]
- Executable[0]=H:\Documents and Settings\Nowiccy Haha co za\Pulpit\XYZ_KeygenMe20110505\XYZ_KeygenMe20110505_Dev.exe
- Arguments[0]=
- Executable[1]=H:\Documents and Settings\Nowiccy Haha co za\Pulpit\OC\OopsCrasher.exe
- Arguments[1]=
- Executable[2]=H:\Documents and Settings\Nowiccy Haha co za\Pulpit\[S]Crack[B]Me[D].exe
- Arguments[2]=
- Executable[3]=H:\Documents and Settings\Nowiccy Haha co za\Pulpit\odbg\trojan.exe
- Arguments[3]=
- Executable[4]=
- Arguments[4]=
- Executable[5]=
- Arguments[5]=
- Log file=log.txt
- Trace save file=trace.txt
- Data directory=.
- API help file=
- Last viewed file=
- Previous JIT=
- [OllyDbg]
- Placement=219,74,640,480,1
- [CPU]
- Placement=0,0,392,315,3
- Offset[0]=0
- Offset[1]=0
- Offset[2]=0
- Offset[3]=0
- [CPU Disasm]
- Appearance=1,0,0,0,0
- Columns=54,102,240,1536
- [CPU Info]
- Appearance=1,0,0,0,0
- [CPU registers]
- Appearance=1,0,1,0,0
- Local=0,66816
- [CPU Dump]
- Appearance=1,0,1,0,0
- Columns=54,288,102
- Local=00011001
- [CPU Stack]
- Appearance=1,0,0,0,0
- Columns=54,60,30,1536
- Local=000A0104
- [Search]
- Placement=44,44,618,175,1
- Appearance=1,0,1,0,0
- [Namelist]
- Appearance=1,0,1,0,0
- [Attach]
- Appearance=1,0,1,0,0
- Columns=54,72,168,1536
- Sort=0
- [Modules]
- Placement=22,22,654,175,1
- Appearance=1,0,1,0,0
- Columns=54,54,54,72,96,1536
- Sort=0
- [Colour schemes]
- Scheme name[0]=Black on white
- Foreground_1[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[0]=0
- Modified commands[0]=0
- Scheme name[1]=Yellow on blue
- Foreground_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[1]=0
- Modified commands[1]=0
- Scheme name[2]=Marine
- Foreground_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[2]=0
- Modified commands[2]=0
- Scheme name[3]=Mostly black
- Foreground_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[3]=0
- Modified commands[3]=0
- Scheme name[4]=Scheme 4
- Foreground_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[4]=0
- Modified commands[4]=0
- Scheme name[5]=Scheme 5
- Foreground_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[5]=0
- Modified commands[5]=0
- Scheme name[6]=Scheme 6
- Foreground_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[6]=0
- Modified commands[6]=0
- Scheme name[7]=Scheme 7
- Foreground_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[7]=0
- Modified commands[7]=0
- [Highlighting schemes]
- Scheme name[1]=Christmas tree
- Foreground_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[1]=1
- Modified commands[1]=1
- Scheme name[2]=Jumps and calls
- Foreground_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[2]=0
- Modified commands[2]=0
- Scheme name[3]=Memory access
- Foreground_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[3]=1
- Modified commands[3]=1
- Scheme name[4]=Hilite 4
- Foreground_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[4]=0
- Modified commands[4]=0
- Scheme name[5]=Hilite 5
- Foreground_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[5]=0
- Modified commands[5]=0
- Scheme name[6]=Hilite 6
- Foreground_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[6]=0
- Modified commands[6]=0
- Scheme name[7]=Hilite 7
- Foreground_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Foreground_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Background_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
- Operands[7]=0
- Modified commands[7]=0
- [Fonts]
- Font name[0]=OEM fixed font
- Font[0]=0,0,0,0,0,0,0,0,0,0,10
- Face name[0]=
- Font name[1]=Terminal 6
- Font[1]=9,6,700,0,0,0,255,0,1,1,0
- Face name[1]=Terminal
- Font name[2]=System fixed font
- Font[2]=0,0,0,0,0,0,0,0,0,0,16
- Face name[2]=
- Font name[3]=Courier (UNICODE)
- Font[3]=14,0,400,0,0,0,1,2,5,-2,0
- Face name[3]=Courier New
- Font name[4]=Lucida (UNICODE)
- Font[4]=10,6,400,0,0,0,1,2,5,0,0
- Face name[4]=Lucida Console
- Font name[5]=Font 5
- Font[5]=9,6,700,0,0,0,255,0,1,1,0
- Face name[5]=Terminal
- Font name[6]=Font 6
- Font[6]=0,0,0,0,0,0,0,0,0,0,16
- Face name[6]=
- Font name[7]=Font 7
- Font[7]=14,0,400,0,0,0,1,2,5,-2,0
- Face name[7]=Courier New
Advertisement
Add Comment
Please, Sign In to add comment