[Settings]
Check DLL versions=0
Show toolbar=1
Status in toolbar=1
Use hardware breakpoints to step=1
Restore windows=244735
Scroll MDI=0
Horizontal scroll=0
Topmost window=0
Index of default font=1
Index of default colours=0
Index of default syntax highlighting=0
Log buffer size index=0
Run trace buffer size index=7
Group adjacent commands in profile=1
Highlighted trace register=-1
IDEAL disassembling mode=0
Disassemble in lowercase=1
Separate arguments with TAB=0
Extra space between arguments=0
Show default segments=1
NEAR jump modifiers=0
Use short form of string commands=0
Use RET instead of RETN=0
Size sensitive mnemonics=1
SSE size decoding mode=0
Top of FPU stack=1
Always show memory size=1
Decode registers for any IP=0
Show symbolic addresses=1
Show local module names=1
Gray data used as filling=1
Show jump direction=1
Show jump path=1
Show jumpfrom path=1
Show path if jump is not taken=1
Underline fixups=1
Center FOLLOWed command=1
Show stack frames=1
Show local names in stack=1
Extended stack trace=1
Synchronize source with CPU=1
Include SFX extractor in code=0
SFX trace mode=0
Use real SFX entry from previous run=1
Ignore SFX exceptions=1
First pause=1
Stop on new DLL=0
Stop on DLL unload=0
Stop on new thread=0
Stop on thread end=0
Stop on debug string=0
Decode SSE registers=0
Enable last error=1
Ignore access violations in KERNEL32=1
Ignore INT3=1
Ignore TRAP=1
Ignore access violations=1
Step in unknown commands=1
Ignore division by 0=1
Ignore illegal instructions=1
Ignore all FPU exceptions=1
Warn when frequent breaks=0
Warn when break not in code=0
Autoreturn=0
Save original command in trace=1
Show traced ESP=1
Show traced flags=1
Animate over system DLLs=1
Trace over string commands=1
Synchronize CPU and Run trace=1
Ignore custom exceptions=1
Smart update=1
Set high priority=1
Append arguments=1
Use ExitProcess=1
Allow injection to get WinProc=0
Sort WM_XXX by name=0
Type of last WinProc breakpoint=0
Snow-free drawing=0
Demangle symbolic names=1
Keep ordinal in name=1
Only ASCII printable in dump=0
Allow diacritical symbols=0
String decoding=0
Warn if not administrator=0
Warn when terminating process=0
Align dialogs=1
Use font of calling window=0
Specified dialog font=0
Number of lines that follow EIP=0
Restore window positions=1
Restore width of columns=0
Highlight sorted column=0
Compress analysis data=1
Backup UDD files=1
Fill rest of command with NOPs=1
Reference search mode=0
Global search=1
Aligned search=1
Allow error margin=0
Keep size of hex edit selection=0
Modify tag of FPU register=1
Hex inspector limits=1
MMX display mode=0
Last selected options card=10
Last selected appearance card=6
Ignore case in text search=1
Letter key in Disassembler=1
Looseness of code analysis=1
Decode pascal strings=1
Guess number of arguments=1
Accept far calls and returns=1
Accept direct segment modifications=1
Decode VxD calls=1
Accept privileged commands=1
Accept I/O commands=1
Accept NOPs=1
Accept shifts out of range=1
Accept superfluous prefixes=1
Accept LOCK prefixes=1
Accept unaligned stack operations=1
Accept non-standard command forms=1
Show ARG and LOCAL in procedures=1
Save analysis to file=1
Analyse main module automatically=1
Analyse code structure=1
Decode ifs as switches=1
Save trace to file=0
Trace contents of registers=1
Functions preserve registers=1
Decode tricks=1
Automatically select register type=1
Show decoded arguments=1
Show decoded arguments in stack=1
Show arguments in call stack=1
Show induced calls=0
Label display mode=0
Label includes module name=1
Highlight symbolic labels=1
Highlight RETURNs in stack=1
Ignore path in user data file=1
Ignore timestamp in user data file=1
Ignore CRC in user data file=1
Default sort mode in Names=1
Save out-of-module user data=1
Tabulate columns in log file=0
Append data to existing log file=0
Flush gathered data to log file=0
Skip spaces in source comments=1
Hide non-existing source files=0
Tab stops=8
File graph mode=2
Show internal handle names=1
Hide irrelevant handles=0
Use hardware Breakp0ints to step=0
[System]
Options position=628,443
[Placement]
OllyTest=689,159,320,200,1
CPU=266,35,204,185,3
CPU subwindows=490,732,484,732,480,790,474,790
CPU subwindows 1=374,767,336,658,450,960,388,853
CPU subwindows 2=40,79,889,20,723,362,889,520
CPU subwindows 3=374,767,336,658,450,960,388,853
CPU subwindows 4=374,767,336,658,450,960,388,853
中文搜索引擎=830,535,480,234,1
Threads=266,35,173,64,1
Breakpoints=778,88,506,234,1
Executable modules=100,100,644,234,1
References=266,35,173,64,1
Memory map=266,34,173,64,1
Executable m0dules=266,35,173,64,1
Log data=266,35,173,64,1
Script Execution=50,50,1041,234,1
Handles=173,0,173,64,1
Source files=266,0,173,64,1
Breakp0ints=266,0,173,64,1
SEH chain=0,35,173,64,1
Patches=0,35,173,64,1
Call stack=173,35,173,64,1
Watch expressions=266,35,173,64,1
Windows=173,35,173,64,1
中文查找=266,35,173,64,1
Source=154,35,312,64,1
Run trace=132,35,312,64,1
Call tree=266,35,312,64,1
[Colours]
Scheme[0]=13,12,18,0,5,2,13,13
Scheme name[0]=Dave's black
Scheme[1]=1,5,0,18,7,18,4,12
Scheme name[1]=Fancy Nico
Scheme[2]=7,12,7,10,11,7,3,13
Scheme name[2]=Kostya's blue
Scheme[3]=7,12,19,0,5,2,3,13
Scheme name[3]=Dami's black
Scheme[4]=0,12,8,18,7,8,7,13
Scheme name[4]=Scheme 4
Scheme[5]=14,12,7,1,3,7,3,13
Scheme name[5]=Scheme 5
Scheme[6]=1,12,3,11,14,2,7,13
Scheme name[6]=Scheme 6
Scheme[7]=15,12,7,0,8,11,7,13
Scheme name[7]=Scheme 7
[Fonts]
Font[0]=16,8,400,0,0,0,134,2,49,0
Face name[0]=Terminal
Font name[0]=OEM 等宽字体
Font[1]=-12,0,400,0,0,0,134,1,49,0
Face name[1]=新宋体
Font name[1]=Terminal 6
Font[2]=16,8,400,0,0,0,134,2,49,0
Face name[2]=Fixedsys
Font name[2]=系统等宽字体
Font[3]=14,0,400,0,0,0,1,2,5,0
Face name[3]=Courier New
Font name[3]=Courier (UNICODE)
Font[4]=10,6,400,0,0,0,1,2,5,0
Face name[4]=Lucida Console
Font name[4]=Lucida (UNICODE)
Font[5]=9,6,700,0,0,0,255,0,48,0
Face name[5]=Terminal
Font name[5]=字体 5
Font[6]=16,8,400,0,0,0,134,2,49,0
Face name[6]=Fixedsys
Font name[6]=字体 6
Font[7]=-16,0,700,0,0,0,0,1,49,0
Face name[7]=ProFontWindows
Font name[7]=漂亮字体
字体 name[0]=OEM 等宽字体
字体 name[1]=Terminal 6
字体 name[2]=系统等宽字体
字体 name[3]=Courier (UNICODE)
字体 name[4]=Lucida (UNICODE)
字体 name[5]=字体 5
字体 name[6]=字体 6
字体 name[7]=字体 7
[Syntax]
Commands[1]=9,7,12,12,14,12,12,13,96,7,14,0,0,0
Operands[1]=1,7,7,7,13,14,10,11,0,0,0,0,0,0
Scheme name[1]=Dave
Commands[2]=1,1,1,1,1,1,1,4,109,12,12,0,0,0
Operands[2]=1,1,2,4,12,2,2,5,0,0,0,0,0,0
Scheme name[2]=Fancy Nico
Commands[3]=14,4,124,124,9,110,64,13,111,8,12,0,0,0
Operands[3]=1,10,4,13,11,13,15,6,0,0,0,0,0,0
Scheme name[3]=Kostya's xmas tree
Commands[4]=7,7,2,12,6,12,10,13,96,7,14,0,0,0
Operands[4]=1,7,7,7,13,7,10,11,0,0,0,0,0,0
Scheme name[4]=Dami
Commands[5]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[5]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[5]=No highlighting
Commands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[0]=No highlighting
[History]
UDD path=F:\olly4st\UDD
Plugin path=F:\olly4st\plugin
Executable[1]=C:\Documents and Settings\Administrator\桌面\Very_good CM.exe
Executable[2]=F:\olly4st\5201314XYF,XYH.exe
Executable[3]=E:\7fgame\7FGame.exe
Executable[4]=C:\Documents and Settings\Administrator\桌面\简单.exe
Executable[5]=E:\7fgame\game\core\7fsanguo.exe
Executable[0]=C:\Documents and Settings\Administrator\桌面\V.exe
View file=
View text file=
Object file=
Import library=\LIB\WSock32.Lib
Log file=C:\Users\Administrator\Desktop\123.txt
Run trace file=rtrace.txt
API help file=
Text save file=
Symbolic data path=F:\破解工具箱\动态调试\OllyDBG\OllyDBG\OllyDBG1.x\OllyDBG修改版\UnPacKcN OllyDBG修改版II\olly4st\LIB




[Arguments]
Executable[1]=
Executable[2]=
Executable[3]=
Executable[4]=
Executable[5]=
Executable[0]=
Argument[0]= -OpenRelease 2268/0/6/32
Argument[1]=-FromLauncher
Argument[2]=-LOOP
Argument[3]=-loop
[Appearance]
CPU scheme=3
CPU Disassembler=2,3,0,0,3
CPU Dump=2,3,1,0,9217,3
CPU Stack=2,3,0,0
CPU Info=2,3,0,0
CPU Registers=2,3,1,0
中文搜索引擎=2,0,1,0,0
Threads=1,0,1,0,0
Breakpoints=1,0,1,0,0
Executable modules=1,0,1,0,0
References=1,0,1,0,0
Memory map=1,0,1,0,0
Executable m0dules=1,0,1,0,0
Log data=1,0,1,0,0
Script Execution=1,0,1,0,0
Handles=1,0,1,0,0
Source files=1,0,1,0,0
Breakp0ints=2,0,1,0,0
SEH chain=1,0,1,0,0
Patches=1,0,1,0,0
Call stack=1,0,1,0,0
Watch expressions=1,0,1,0,0
ADUMP=2,0,0,0,0
Windows=1,0,1,0,0
中文查找=1,0,1,0,0
Source=1,0,0,0,0
Run trace=1,0,1,0,0
Call tree=1,0,1,0,0
[Columns]
CPU Disassembler=72,136,320,2048
CPU Dump=72,520,
CPU Stack=72,80,2048,
中文搜索引擎=72,320,2048
Threads=54,54,66,108,60,54,72,72
Breakpoints=54,54,150,216,1536
Executable modules=54,54,54,54,96,1536
References=54,240,1536
Memory map=54,54,54,54,72,30,48,48,1536
Executable m0dules=54,54,54,54,96,1536
Log data=54,1536
Script Execution=30,240,90,54,600
Handles=54,90,36,54,18,72,1536
Source files=54,96,1536
Breakp0ints=72,72,200,288,2048
SEH chain=54,192
Patches=54,30,48,192,192,1536
Call stack=54,54,216,168,54
Watch expressions=216,1536
ADUMP=72,384,136
Windows=78,192,54,54,54,54,54,54,54,1536
中文查找=54,240,1536
Source=48,1536
Run trace=54,54,54,54,192,1536
Call tree=192,192,192,192




















[Plugin IDAFicator]
PATH_RADASM=plugin\pack
PATH_HELP=
SETTINGS_MSEC=500
DIA_CUSTOMIZE_SCHEME=0,8388608,32768,8421376,128,8388736,32896,12632256,8421504,16711680,65280,16776960,255,16711935,65535,16777215,12639424,15780004,15793151,10789024
SETTINGS_MAIN=1,1,1,0,0
SETTINGS_DUMP=
SETTINGS_DISASM=0,0,0
SETTINGS_STACK=
SETTINGS_HWBP=0,0,0
SETTINGS_ROTE=
LAYOUT_ID=0
LAYOUT_SWAP_DUMP_STACK=0



[Plugin PhantOm]
PEB=1
GETCOUNT=1
DRX=0
SETCONTEXT=0
DEBSTRING=1
WINVER=0
GETTIMES=0
REMOVEEP=1
HANDLE=1
WINDOWS=0
DRIVER=0
CAPTION=1
RDTSC=0
VERSION=185
DELTARDTSC=33000
HIDENAME=extremhide
RDTSCNAME=rdtsc
BLOCK=1
CAPTEXT=Phant0m
PRETEXT=yOo
BUG=1
COMP64=0
NEWBREAK=1
ZWQIP=1


[Plugin 中文搜索引擎]
Restore UStrRef Window=1



[Plugin SODolly4]
CreateProcessMode=0
HidePEB=1
IsPatchFloat=0
IsAdvGoto=0
KernelMode=1
KillPEBug=0
SuperEnumMod=0
AdvAttach=1
SkipExpection=1
OrdFirst=0
BreakOnLdr=0
BreakOnTls=0
RemoveEpOneShot=1
ShowBar=16
LoadSym=0
AutoUpdate=0
HideWindow=1
HideProcess=1
ProtectProcess=1
DriverKey=-153442902
DriverName=JmpOep.c
UpdateURL=


[Plugin Multiline Ultimate Assembler]
font_name=Lucida Console
font_size=9
tabs_path=.\multiasm
pos_x=711
pos_y=343
pos_w=498
pos_h=353
[Plugin Vic Plug-In]
Maximize ollydbg window=0
Maximize current MDI window=0
Transparent ollydbg window=255
Show toolbar on ollydbg title=2
[Import libraries]
Implib[0]=\LIB\Atl.lib
Implib[1]=\LIB\MFC42.Lib
Implib[2]=\LIB\mfc71.Lib
Implib[3]=\LIB\mfc71u.lib
Implib[4]=\LIB\mfc80.lib
Implib[5]=\LIB\mfc90u.lib
Implib[6]=\LIB\OLLYDBG.LIB
Implib[7]=\LIB\WS2_32.Lib
Implib[8]=\LIB\WSock32.Lib
[Plugin Olly Advanced]
lasttab=0
varbps=0
showalljumpsfix=0
TerminateProcess=0
HideDebugBit=0
NtGlobalFlag=0
HeapFlags=0
ForceFlags=0
maxolly=0
Writememory=0
Readmemory=0
Process32Next=0
UnhandledExceptionFilter=0
Module32Next=0
CheckRemoteDebuggerPresent=0
ZwSetInformationThread=0
GetTickCount=0
ZwQuerySystemInformation=0
FindWindow=0
Anti-RDTSCenabled=0
Anti-RDTSC=0
Anti-RDTSC2=0
ZwQueryInformationProcess=0
codebasefix=0
ignoreexporttable=0
ZwQueryObject=0
scrambleexporttable=0
maxallollywindows=0
SuspendThread=0
BlockInput=0
viewfilefix=0
copytoexecutable=0
usetoolhelp=0
pausedex=0
pluginexpand=0
keepalteredcrc=0
ignorechangedbp=0
advancedctrlg=0
numofrva=0
followindisassembler=0
analysisbug=0
Entrypointwarning=0
antiattachkill=0
winupack=0
BreakOnTls=0
killps=0
alwaysenableshowalljumpsandcalls=0
fixc08bug=0
fixtermination=0
toomanypatches=0
compressedcode=0
dllloading=0
[Plugin 中文查找]
Restore UStrRef Window=1
[E
