[Settings]
Check DLL versions=0
Show toolbar=1
Status in toolbar=1
Use hardware breakpoints to step=1
Restore windows=69791
Scroll MDI=0
Horizontal scroll=0
Topmost window=0
Index of default font=1
Index of default colours=0
Index of default syntax highlighting=0
Log buffer size index=7
Run trace buffer size index=7
Group adjacent commands in profile=1
Highlighted trace register=-1
IDEAL disassembling mode=0
Disassemble in lowercase=0
Separate arguments with TAB=0
Extra space between arguments=0
Show default segments=1
NEAR jump modifiers=0
Use short form of string commands=1
Use RET instead of RETN=0
Size sensitive mnemonics=1
SSE size decoding mode=0
Top of FPU stack=1
Always show memory size=1
Decode registers for any IP=1
Show symbolic addresses=1
Show local module names=1
Gray data used as filling=1
Show jump direction=1
Show jump path=1
Show jumpfrom path=1
Show path if jump is not taken=1
Underline fixups=1
Center FOLLOWed command=0
Show stack frames=1
Show local names in stack=1
Extended stack trace=1
Synchronize source with CPU=0
Include SFX extractor in code=0
SFX trace mode=0
Use real SFX entry from previous run=1
Ignore SFX exceptions=0
First pause=1
Stop on new DLL=0
Stop on DLL unload=0
Stop on new thread=0
Stop on thread end=0
Stop on debug string=0
Decode SSE registers=0
Enable last error=1
Ignore access violations in KERNEL32=0
Ignore INT3=0
Ignore TRAP=0
Ignore access violations=0
Step in unknown commands=0
Ignore division by 0=0
Ignore illegal instructions=0
Ignore all FPU exceptions=0
Warn when frequent breaks=0
Warn when break not in code=0
Autoreturn=0
Save original command in trace=0
Show traced ESP=0
Show traced flags=0
Animate over system DLLs=0
Trace over string commands=0
Synchronize CPU and Run trace=0
Ignore custom exceptions=0
Smart update=1
Set high priority=1
Append arguments=1
Use ExitProcess=1
Allow injection to get WinProc=0
Sort WM_XXX by name=0
Type of last WinProc breakpoint=0
Snow-free drawing=0
Demangle symbolic names=1
Keep ordinal in name=1
Only ASCII printable in dump=0
Allow diacritical symbols=0
String decoding=0
Warn if not administrator=1
Warn when terminating process=0
Align dialogs=1
Use font of calling window=0
Specified dialog font=0
Number of lines that follow EIP=4
Restore window positions=1
Restore width of columns=1
Highlight sorted column=0
Compress analysis data=1
Backup UDD files=1
Fill rest of command with NOPs=1
Reference search mode=0
Global search=1
Aligned search=0
Allow error margin=0
Keep size of hex edit selection=0
Modify tag of FPU register=1
Hex inspector limits=1
MMX display mode=0
Last selected options card=10
Last selected appearance card=3
Ignore case in text search=1
Letter key in Disassembler=1
Looseness of code analysis=1
Decode pascal strings=1
Guess number of arguments=1
Accept far calls and returns=0
Accept direct segment modifications=0
Decode VxD calls=1
Accept privileged commands=0
Accept I/O commands=0
Accept NOPs=1
Accept shifts out of range=0
Accept superfluous prefixes=0
Accept LOCK prefixes=0
Accept unaligned stack operations=1
Accept non-standard command forms=1
Show ARG and LOCAL in procedures=1
Save analysis to file=1
Analyse main module automatically=1
Analyse code structure=1
Decode ifs as switches=1
Save trace to file=0
Trace contents of registers=1
Functions preserve registers=0
Decode tricks=1
Automatically select register type=0
Show decoded arguments=1
Show decoded arguments in stack=1
Show arguments in call stack=1
Show induced calls=1
Label display mode=0
Label includes module name=1
Highlight symbolic labels=1
Highlight RETURNs in stack=1
Ignore path in user data file=0
Ignore timestamp in user data file=1
Ignore CRC in user data file=0
Default sort mode in Names=1
Save out-of-module user data=0
Tabulate columns in log file=0
Append data to existing log file=0
Flush gathered data to log file=0
Skip spaces in source comments=1
Hide non-existing source files=0
Tab stops=8
File graph mode=2
Show internal handle names=0
Hide irrelevant handles=0
[History]
Executable[1]=Viber.exe
Executable[2]=Skype.exe
Executable[3]=C:\IDA68\idaq.exe
Executable[4]=D:\!my\labeless\test\scrash.exe
Executable[5]=C:\IDA68\smartdec.exe
Executable[0]=C:\Windows\System32\calc.exe
View file=
View text file=
Object file=
Import library=
Log file=log.txt
Run trace file=rtrace.txt
API help file=C:\Program Files\OLY\WIN32.HLP
Text save file=C:\sysmenuappend.txt
Symbolic data path=C:\
UDD path=m:\!re\labeless_olly2\test\UDD
Plugin path=m:\!re\labeless_olly2\test\plugins
[Arguments]
Executable[1]=
Executable[2]=
Executable[3]=
Executable[4]=
Executable[5]=
Executable[0]=
Argument[0]=-z
Argument[1]=__.dll
Argument[2]=glext.dll
Argument[3]=/d
Argument[4]=---* not.exe
Argument[5]=auto
[Plugin Command line]
Restore command line window=0
[Plugin Bookmarks]
Restore bookmarks window=0
[Placement]
OllyTest=359,42,1344,884,0
CPU=3,1,1023,779,1
CPU subwindows=502,812,464,512,469,908,431,601
Log data=460,7,867,420,1
Executable modules=82,261,1193,322,1
Breakpoints=296,108,493,178,1
SEH chain=88,88,269,175,1
Threads=378,18,617,741,1
Windows=549,0,614,185,1
Patches=504,147,626,182,1
Call stack=617,12,512,508,1
Run trace=378,179,432,182,1
Memory map=993,184,626,512,1
Handles=154,203,797,214,1
References=391,4,623,353,1
Source=286,93,372,214,1
Script Window=128,53,678,182,1
Script Execution=345,60,558,182,1
/SafeSEH Module Scanner=10,130,1152,298,1
[Appearance]
CPU scheme=3
CPU Disassembler=1,3,0,0,1
CPU Dump=1,3,0,0,32788,0
CPU Stack=1,3,0,0
CPU Info=1,3,0,0
CPU Registers=1,3,1,0
Log data=4,3,1,0,0
Executable modules=1,3,1,0,0
Breakpoints=1,3,1,0,0
SEH chain=1,0,1,0,0
Threads=1,0,1,0,0
Windows=1,0,1,0,0
Patches=1,3,1,0,0
Call stack=1,3,1,0,0
Run trace=1,0,1,0,0
Memory map=1,3,1,0,0
Handles=1,3,1,0,0
References=4,3,1,0,0
Source=1,0,0,0,0
Script Window=1,3,1,0,0
Script Execution=1,3,1,0,0
/SafeSEH Module Scanner=1,0,1,0,0
ADUMP=1,3,0,0,0
ANAME=1,3,1,0,0
[Columns]
CPU Disassembler=225,117,467,1536
CPU Dump=256,54,1536
CPU Stack=54,60,1536
Log data=54,1536
Executable modules=54,54,54,120,96,1536
Breakpoints=54,54,150,216,1536
SEH chain=54,192
Threads=54,54,66,108,60,54,72,72
Windows=78,192,54,54,54,54,54,54,54,1536
Patches=54,30,48,192,192,1536
Call stack=54,54,280,168,54
Run trace=54,54,54,54,192,1536
Memory map=54,54,58,54,72,35,78,48,1536
Handles=54,90,36,54,18,72,1536
References=54,240,1536
Source=48,1536
Script Window=54,600
Script Execution=30,240,90,54,120,480
/SafeSEH Module Scanner=90,72,72,192,1560
ADUMP=54,390
ANAME=54,54,54,228,1536
[Colours]
Scheme[0]=0,12,8,18,7,8,7,13
Scheme name[0]=Black on white
Scheme[1]=14,12,7,1,3,7,3,13
Scheme name[1]=Yellow on blue
Scheme[2]=1,12,3,11,14,2,7,13
Scheme name[2]=Marine
Scheme[3]=15,12,7,0,8,11,7,13
Scheme name[3]=Mostly black
Scheme[4]=0,12,8,18,7,8,7,13
Scheme name[4]=Scheme 4
Scheme[5]=14,12,7,1,3,7,3,13
Scheme name[5]=Scheme 5
Scheme[6]=1,12,3,11,14,2,7,13
Scheme name[6]=Scheme 6
Scheme[7]=15,12,7,0,8,11,7,13
Scheme name[7]=Scheme 7
[Fonts]
Font[0]=12,8,400,0,0,0,255,2,49,0
Face name[0]=Terminal
Font name[0]=OEM fixed font
Font[1]=9,6,700,0,0,0,255,0,48,1
Face name[1]=Terminal
Font name[1]=Terminal 6
Font[2]=16,8,400,0,0,0,204,2,33,0
Face name[2]=Fixedsys
Font name[2]=System fixed font
Font[3]=14,0,400,0,0,0,1,2,5,0
Face name[3]=Courier New
Font name[3]=Courier (UNICODE)
Font[4]=10,6,400,0,0,0,1,2,5,0
Face name[4]=Lucida Console
Font name[4]=Lucida (UNICODE)
Font[5]=9,6,700,0,0,0,255,0,48,0
Face name[5]=Terminal
Font name[5]=Font 5
Font[6]=16,8,400,0,0,0,204,2,33,0
Face name[6]=Fixedsys
Font name[6]=Font 6
Font[7]=14,0,400,0,0,0,1,2,5,0
Face name[7]=Courier New
Font name[7]=Font 7
[Syntax]
Commands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[0]=No highlighting
Commands[1]=15,4,124,112,9,64,64,13,111,8,12,0,0,0
Operands[1]=1,13,4,13,65,10,112,10,0,0,0,0,0,0
Scheme name[1]=Christmas tree
Commands[2]=0,0,124,112,0,64,64,0,96,0,0,0,0,0
Operands[2]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[2]=Jumps'n'calls
Commands[3]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[3]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[3]=Hilite 3
Commands[4]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[4]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[4]=Hilite 4
[System]
Options position=790,291
[Plugin OllyScript]
ScriptDir=C:\Program Files\OLY\script\
[AeDebug]
Debugger="C:\Windows\system32\vsjitdebugger.exe" -p %ld -e %ld
[Plugin Olly Invisible]
HookMedthod=2
PatchDebug=0
HiddenHook=1
[Plugin Stay on top]
restore window=0
window pos=0,0,123,171
windows=0
[Plugin Ultra String Reference]
Restore UStrRef Window=0
[Plugin ODbgScript]
MRU1=C:\Program Files\OLY\DeFixed_Edition\Scripts\ASProtect 2.0x OEP Finder + Stolen Code Finder + Fix IAT Jumps.txt
MRU2=C:\Program Files\OLY\DeFixed_Edition\Scripts\ASProtect 2.xx Virtual Machine Rebuilder.txt
MRU3=C:\Program Files\OLY\DeFixed_Edition\Scripts\ASProtect 2.3 Build 04.26 OEP Finder v1.01.txt
MRU4=C:\Program Files\OLY\script\Aspr2.XX_unpacker_v1.0E.osc
MRU5=C:\Program Files\OLY\script\ASProtect 2.x Fix IAT with Import Elimination #3.txt
Restore Script window=0
Restore Script Log=0
ScriptDir=C:\Program Files\OLY\DeFixed_Edition\Scripts\ASProtect 2.0x OEP Finder + Stolen Code Finder + Fix IAT Jumps.txt
[Plugin Olly Advanced]
varbps=1
viewfilefix=0
copytoexecutable=0
usetoolhelp=1
pausedex=0
pluginexpand=1
keepalteredcrc=0
ignorechangedbp=1
advancedctrlg=1
numofrva=1
followindisassembler=1
analysisbug=1
Entrypointwarning=1
antiattachkill=0
winupack=1
antiattachkill2=0
killps=1
toomanypatches=1
patchtype=1
compressedcode=1
compressedcodehandling=2
dllloading=1
dllloadmethod=1
ctrlgstate=1
showalljumpsfix=0
TerminateProcess=0
HideDebugBit=0
NtGlobalFlag=0
Antihwbp=0
HeapFlags=0
ForceFlags=0
maxolly=0
Writememory=1
Readmemory=1
Process32Next=0
UnhandledExceptionFilter=0
Module32Next=0
CheckRemoteDebuggerPresent=0
ZwSetInformationThread=0
GetTickCount=0
GetTickCountCounter=1
ZwQuerySystemInformation=0
ZwOpenProcess=0
FindWindow=0
Anti-RDTSCenabled=0
Anti-RDTSC=0
Anti-RDTSC2=0
ZwQueryInformationProcess=0
codebasefix=1
ignoreexporttable=1
ZwQueryObject=0
scrambleexporttable=0
maxallollywindows=0
x64compat=1
SuspendThread=0
BlockInput=0
BreakOnTls=0
alwaysenableshowalljumpsandcalls=0
fixc08bug=1
fixtermination=1
lasttab=4
allocatedmemorysize=4096
[Plugin PhantOm]
PEB=0
GETCOUNT=0
DRX=0
SETCONTEXT=0
DEBSTRING=1
WINVER=0
GETTIMES=0
REMOVEEP=0
HANDLE=0
WINDOWS=0
DRIVER=0
RDTSC=0
VERSION=154
CAPTION=0
DELTARDTSC=34816
BLOCK=0
HIDENAME=extrem
RDTSCNAME=rdtsc
CAPTEXT=PhantOm
PRETEXT=o_O
SINGLE=0
[Plugin AlexWMF]
PEB=0
GETCOUNT=0
DRX=0
SETCONTEXT=0
DEBSTRING=0
WINVER=0
GETTIMES=0
REMOVEEP=0
HANDLE=0
WINDOWS=0
DRIVER=0
CAPTION=1
RDTSC=0
VERSION=120
DELTARDTSC=34816
BLOCK=0
[OllySkin]
Enable=1
Skin file=C:\Program Files\OLY\plugins\skins\Crystal dlb 2.msstyles
[Plugin Olly <- IDA label synchronizer]
port=3852
filer_ip=
[Plugin StrongOD]
CreateProcessMode=0
HidePEB=1
IsPatchFloat=1
IsAdvGoto=1
KernelMode=0
KillPEBug=1
SuperEnumMod=1
AdvAttach=0
SkipExpection=1
OrdFirst=0
BreakOnLdr=0
BreakOnTls=0
RemoveEpOneShot=0
ShowBar=17
LoadSym=1
AutoUpdate=1
HideWindow=1
HideProcess=1
ProtectProcess=1
DriverKey=-82693034
DriverName=fengyue0
UpdateURL=http://www.cracklife.com/sod/update.txt
[Plugin HideOD]
HideNtDebugBit=1
UnhandledExceptionFilter=1
ZwSetInformationThread=1
OutDebugStringA=1
CheckRemoteDebuggerPresent=1
SetDebugPrivilege=1
Process32Next=1
AutoRun=1
ZwQueryInformationProcess=1
ClearHeadpmagic=1
[Plugin Labeless]
port=3852
[Exceptions]
Custom[0]=00000000,FFFFFFFF
