Advertisement
krot

ollydbg theme

May 13th, 2018
255
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. [Settings]
  2. Check DLL versions=0
  3. Show toolbar=1
  4. Status in toolbar=0
  5. Use hardware breakpoints to step=0
  6. Restore windows=9
  7. Scroll MDI=0
  8. Horizontal scroll=0
  9. Topmost window=0
  10. Index of default font=1
  11. Index of default colours=0
  12. Index of default syntax highlighting=1
  13. Log buffer size index=0
  14. Run trace buffer size index=1
  15. Group adjacent commands in profile=1
  16. Highlighted trace register=-1
  17. IDEAL disassembling mode=0
  18. Disassemble in lowercase=0
  19. Separate arguments with TAB=0
  20. Extra space between arguments=0
  21. Show default segments=1
  22. NEAR jump modifiers=0
  23. Use short form of string commands=0
  24. Use RET instead of RETN=0
  25. Size sensitive mnemonics=1
  26. SSE size decoding mode=0
  27. Top of FPU stack=1
  28. Always show memory size=1
  29. Decode registers for any IP=0
  30. Show symbolic addresses=1
  31. Show local module names=1
  32. Gray data used as filling=1
  33. Show jump direction=1
  34. Show jump path=1
  35. Show jumpfrom path=1
  36. Show path if jump is not taken=1
  37. Underline fixups=1
  38. Center FOLLOWed command=0
  39. Show stack frames=1
  40. Show local names in stack=1
  41. Extended stack trace=0
  42. Synchronize source with CPU=0
  43. Include SFX extractor in code=0
  44. SFX trace mode=0
  45. Use real SFX entry from previous run=1
  46. Ignore SFX exceptions=0
  47. First pause=2
  48. Stop on new DLL=0
  49. Stop on DLL unload=0
  50. Stop on new thread=0
  51. Stop on thread end=0
  52. Stop on debug string=0
  53. Decode SSE registers=0
  54. Enable last error=1
  55. Ignore access violations in KERNEL32=1
  56. Ignore INT3=0
  57. Ignore TRAP=0
  58. Ignore access violations=0
  59. Step in unknown commands=0
  60. Ignore division by 0=0
  61. Ignore illegal instructions=0
  62. Ignore all FPU exceptions=0
  63. Warn when frequent breaks=0
  64. Warn when break not in code=0
  65. Autoreturn=0
  66. Save original command in trace=0
  67. Show traced ESP=0
  68. Show traced flags=0
  69. Animate over system DLLs=0
  70. Trace over string commands=0
  71. Synchronize CPU and Run trace=0
  72. Ignore custom exceptions=0
  73. Smart update=1
  74. Set high priority=1
  75. Append arguments=1
  76. Use ExitProcess=1
  77. Allow injection to get WinProc=0
  78. Sort WM_XXX by name=0
  79. Type of last WinProc breakpoint=0
  80. Snow-free drawing=0
  81. Demangle symbolic names=0
  82. Keep ordinal in name=1
  83. Only ASCII printable in dump=0
  84. Allow diacritical symbols=0
  85. String decoding=0
  86. Warn if not administrator=0
  87. Warn when terminating process=0
  88. Align dialogs=1
  89. Use font of calling window=0
  90. Specified dialog font=0
  91. Number of lines that follow EIP=0
  92. Restore window positions=1
  93. Restore width of columns=0
  94. Highlight sorted column=0
  95. Compress analysis data=1
  96. Backup UDD files=1
  97. Fill rest of command with NOPs=1
  98. Reference search mode=0
  99. Global search=1
  100. Aligned search=0
  101. Allow error margin=0
  102. Keep size of hex edit selection=1
  103. Modify tag of FPU register=1
  104. Hex inspector limits=1
  105. MMX display mode=0
  106. Last selected options card=7
  107. Last selected appearance card=6
  108. Ignore case in text search=1
  109. Letter key in Disassembler=1
  110. Looseness of code analysis=1
  111. Decode pascal strings=1
  112. Guess number of arguments=1
  113. Accept far calls and returns=0
  114. Accept direct segment modifications=0
  115. Decode VxD calls=0
  116. Accept privileged commands=0
  117. Accept I/O commands=0
  118. Accept NOPs=1
  119. Accept shifts out of range=0
  120. Accept superfluous prefixes=0
  121. Accept LOCK prefixes=0
  122. Accept unaligned stack operations=1
  123. Accept non-standard command forms=1
  124. Show ARG and LOCAL in procedures=0
  125. Save analysis to file=1
  126. Analyse main module automatically=1
  127. Analyse code structure=1
  128. Decode ifs as switches=0
  129. Save trace to file=0
  130. Trace contents of registers=1
  131. Functions preserve registers=0
  132. Decode tricks=0
  133. Automatically select register type=0
  134. Show decoded arguments=1
  135. Show decoded arguments in stack=1
  136. Show arguments in call stack=1
  137. Show induced calls=1
  138. Label display mode=0
  139. Label includes module name=0
  140. Highlight symbolic labels=0
  141. Highlight RETURNs in stack=1
  142. Ignore path in user data file=0
  143. Ignore timestamp in user data file=1
  144. Ignore CRC in user data file=0
  145. Default sort mode in Names=1
  146. Save out-of-module user data=0
  147. Tabulate columns in log file=0
  148. Append data to existing log file=0
  149. Flush gathered data to log file=0
  150. Skip spaces in source comments=1
  151. Hide non-existing source files=0
  152. Tab stops=8
  153. File graph mode=2
  154. Show internal handle names=0
  155. Hide irrelevant handles=0
  156. [Plugin Command line]
  157. Command line window X=0
  158. Command line window Y=0
  159. Restore command line window=0
  160. [Plugin Bookmarks]
  161. Restore bookmarks window=0
  162. [Placement]
  163. OllyTest=678,51,640,480,1
  164. CPU=0,0,526,373,3
  165. CPU subwindows=465,932,459,932,423,733,385,910
  166. Call stack=449,135,608,285,3
  167. Executable modules=112,112,748,285,1
  168. Threads=168,168,580,210,1
  169. Breakpoints=440,243,587,296,1
  170. Memory map=255,148,461,285,1
  171. Run trace=84,84,510,285,1
  172. Log data=140,140,447,360,1
  173. Windows=112,112,727,285,1
  174. [History]
  175. View file=
  176. View text file=
  177. Object file=
  178. Import library=
  179. Log file=log.txt
  180. Run trace file=rtrace.txt
  181. API help file=
  182. Text save file=
  183. Symbolic data path=
  184. UDD path=udd
  185. Plugin path=plg
  186. Executable[1]=
  187. Executable[2]=
  188. Executable[3]=
  189. Executable[4]=
  190. Executable[5]=
  191. Executable[0]=
  192. [Colours]
  193. Scheme[0]=0,12,8,18,7,19,14,13
  194. Scheme name[0]=Black on white
  195. Scheme[1]=14,12,7,1,3,7,3,13
  196. Scheme name[1]=Yellow on blue
  197. Scheme[2]=1,12,3,11,14,2,7,13
  198. Scheme name[2]=Marine
  199. Scheme[3]=15,12,7,0,8,11,7,13
  200. Scheme name[3]=Mostly black
  201. Scheme[4]=0,12,8,18,7,8,7,13
  202. Scheme name[4]=Scheme 4
  203. Scheme[5]=14,12,7,1,3,7,3,13
  204. Scheme name[5]=Scheme 5
  205. Scheme[6]=1,12,3,11,14,2,7,13
  206. Scheme name[6]=Scheme 6
  207. Scheme[7]=15,12,7,0,8,11,7,13
  208. Scheme name[7]=Scheme 7
  209. [Fonts]
  210. Font[0]=12,8,400,0,0,0,255,2,49,0
  211. Face name[0]=Terminal
  212. Font name[0]=OEM fixed font
  213. Font[1]=-13,0,700,0,0,0,204,1,49,0
  214. Face name[1]=Consolas
  215. Font name[1]=Terminal 6
  216. Font[2]=16,8,400,0,0,0,204,2,33,0
  217. Face name[2]=Fixedsys
  218. Font name[2]=System fixed font
  219. Font[3]=14,0,400,0,0,0,1,2,5,0
  220. Face name[3]=Courier New
  221. Font name[3]=Courier (UNICODE)
  222. Font[4]=10,6,400,0,0,0,1,2,5,0
  223. Face name[4]=Lucida Console
  224. Font name[4]=Lucida (UNICODE)
  225. Font[5]=9,6,700,0,0,0,255,0,48,0
  226. Face name[5]=Terminal
  227. Font name[5]=Font 5
  228. Font[6]=16,8,400,0,0,0,204,2,33,0
  229. Face name[6]=Fixedsys
  230. Font name[6]=Font 6
  231. Font[7]=14,0,400,0,0,0,1,2,5,0
  232. Face name[7]=Courier New
  233. Font name[7]=Font 7
  234. [Syntax]
  235. Commands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
  236. Operands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
  237. Scheme name[0]=No highlighting
  238. Commands[1]=32,4,124,112,80,64,68,13,111,8,12,0,0,0
  239. Operands[1]=1,4,4,13,81,113,0,12,0,0,0,0,0,0
  240. Scheme name[1]=Christmas tree
  241. Commands[2]=0,0,124,112,0,64,64,0,96,0,0,0,0,0
  242. Operands[2]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
  243. Scheme name[2]=Jumps'n'calls
  244. Commands[3]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
  245. Operands[3]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
  246. Scheme name[3]=Hilite 3
  247. Commands[4]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
  248. Operands[4]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
  249. Scheme name[4]=Hilite 4
  250. [Arguments]
  251. Executable[1]=
  252. Executable[2]=
  253. Executable[3]=
  254. Executable[4]=
  255. Executable[5]=
  256. Executable[0]=
  257. [System]
  258. Options position=538,198
  259. [Appearance]
  260. CPU scheme=0
  261. CPU Disassembler=1,0,0,0,1
  262. CPU Dump=1,0,1,0,8705,0
  263. CPU Stack=1,0,0,0
  264. CPU Info=1,0,0,0
  265. CPU Registers=1,0,1,0
  266. Call stack=1,0,1,0,0
  267. Executable modules=1,0,1,0,0
  268. Threads=1,0,1,0,0
  269. Breakpoints=1,0,1,0,0
  270. Memory map=1,0,1,0,0
  271. Run trace=1,0,1,0,0
  272. Log data=1,0,1,0,0
  273. Windows=1,0,1,0,0
  274. [Columns]
  275. CPU Disassembler=63,119,280,1792
  276. CPU Dump=63,231
  277. CPU Stack=63,70,1792
  278. Call stack=63,63,252,196,63
  279. Executable modules=63,63,63,63,112,1792
  280. Threads=63,63,77,126,70,63,84,84
  281. Breakpoints=63,63,175,252,1792
  282. Memory map=63,63,63,63,84,35,56,56,1792
  283. Run trace=63,63,63,63,224,1792
  284. Log data=63,1792
  285. Windows=91,224,63,63,63,63,63,63,63,1792
  286. [Plugin Olly Advanced]
  287. lasttab=1
  288. varbps=0
  289. showalljumpsfix=0
  290. TerminateProcess=0
  291. HideDebugBit=0
  292. NtGlobalFlag=0
  293. Antihwbp=0
  294. HeapFlags=0
  295. ForceFlags=0
  296. maxolly=0
  297. Writememory=0
  298. Readmemory=0
  299. Process32Next=0
  300. UnhandledExceptionFilter=0
  301. Module32Next=0
  302. CheckRemoteDebuggerPresent=0
  303. ZwSetInformationThread=0
  304. GetTickCount=0
  305. GetTickCountCounter=1
  306. ZwQuerySystemInformation=0
  307. ZwOpenProcess=0
  308. FindWindow=0
  309. Anti-RDTSCenabled=0
  310. Anti-RDTSC=0
  311. Anti-RDTSC2=0
  312. ZwQueryInformationProcess=0
  313. codebasefix=0
  314. ignoreexporttable=0
  315. ZwQueryObject=0
  316. scrambleexporttable=0
  317. maxallollywindows=0
  318. x64compat=1
  319. SuspendThread=0
  320. BlockInput=0
  321. viewfilefix=0
  322. copytoexecutable=0
  323. usetoolhelp=0
  324. pausedex=0
  325. pluginexpand=0
  326. keepalteredcrc=0
  327. ignorechangedbp=0
  328. advancedctrlg=0
  329. numofrva=0
  330. followindisassembler=0
  331. analysisbug=0
  332. Entrypointwarning=0
  333. antiattachkill=0
  334. winupack=0
  335. BreakOnTls=0
  336. killps=0
  337. alwaysenableshowalljumpsandcalls=0
  338. fixc08bug=0
  339. fixtermination=0
  340. toomanypatches=0
  341. compressedcode=0
  342. dllloading=0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement