Релиз OllyDbg 2.01 прошел незаметно и не был освещен на Хабре. Вместе с 2 версией автор выпустил дизассемблер по лицензии GPL v3. В конце октября была анонсирована будущая поддержка х64.
Заявленный список изменений в финальной версии:
- Помощь на 77 страницах.
- Поддержка языковых файлов для интерфейса.
- Поддержка AVX инструкций (отсутствует AVX2 и старшие 16 байт YMM регистров не отображаются)
- Окно стека вызовов (как в версии 1.10)
- Окно хэндлов (как в версии 1.10)
- Отображение SEH VEH обработчиков. Чтобы декодировать адреса VEH обработчиков, OllyDbg модифицирует NTDLL.RtlAddVectoredExceptionHandler(), поэтому процесс должен быть запущен из OllyDbg.
- Поддержка мультибайтовой кодировки в окне дампа.
- .udl библиотеки, замена объектов с версии 1.10.
- Поиск целых и плавающих чисел в окне дампа.
- Поиск процедур (точки входа)
- Лимитированная поддержка для NTFS потоков.
- Дамп диска.
- Точки останова которые используют INT1, HLT, CLI, STI или INSB вместо INT3.
- Несколько просмотров в одной линии, поддержка повторений.
- Дамп массивов структур.
- Микро-анализаторы.
- Ускоренный поиск.
- Ассемблирование заявленных данных (DB xx и т.д)
- Подсветка в «run trace».
- До 2х ординалов на адрес.
- Лимитированная поддержка для Win95 через Microsoft Layer для Юникода.
- Анализ более сложных последовательностей кода.
- Показать свободную память.
- Множество исправлений.
В архиве с OllyDbg 2 так же идет тестовое приложение, для показа новых возможностей, демонстрация исправлений багов 1 версии.
Список плагинов для второй версии на которые стоит обратить внимание:
- OD2-ExPlug — Добавляет много полезных вещей, которые упрощают использование OllyDbg.
- LuaJIT — Lua скриптинг в OllyDbg.
- OllyDbg2-python — Python скриптинг в OllyDbg.
- OllyExt — Anti-AntiDebug.
- OllyDumpEx — Отличный дампер процессов.
- OllyMigrate — Миграция между отладчиками.
- Swordfish — Быстрая установка точек останова через меню.
- RenameOD — Позволяет переименовывать ollydbg и правит плагины, для того чтобы они работали.
- Multiline Ultimate Assembler — Удобный внутренний ассемблер, для вставки/копирования кода.
- CleanUpEx — Очистка каталога OllyDbg.
- uberstealth — Anti-AntiDebug основанный на коде IdaStealth.
Для быстрой настройки OllyDbg выкладываю ini файл. После замены необходимо будет настроить директории (Options->Options->Directories)
Выглядеть будет так:
ollydbg.ini
[Settings]
Check DLL versions=0
Topmost window=0
Show main menu items that don't apply=0
Show popup items that don't apply=0
Show toolbar=1
Use system colours in toolbar=0
Status in toolbar=0
Flash duration=1
Autoupdate interval=4
Mode of main window=0
Restore windows=236799
Restore window positions=1
Restore width of columns=0
Restore sorting criterium=1
Highlight sorted column=1
Right click selects=1
Index of default font=1
Index of default colours=0
Code highlighting=0
Horizontal scroll=0
Snow-free drawing=1
Append arguments=1
Allow diacritical symbols=0
Decode pascal strings=1
Use IsTextUnicode=0
String decoding=0
File graph mode=1
Dialog font mode=0
Font in dialogs=0
Align dialogs=1
Global search=1
Aligned search=0
Ignore case=0
Search direction=1
Floating search with margin=0
Allow extra commands in sequence=1
Allow jumps into the sequence=0
Keep size of hex edit selection=0
Sorting mode of error list=0
Modify FPU tag=0
MMX display mode=0
Show tooltips in dialog windows=1
X options coordinate=460
Y options coordinate=377
Last selected options pane=13
Last edited font in options=3
Last edited scheme in options=0
Last edited colour index in options=6
Last edited highlighting in options=1
Last edited highlighting index in options=16
Warnmode when not administrator=0
Warnmode for packed code in Analyzer=0
Warnmode when process is still running=6
Warnmode when INT3 breakpoint is corrupt=1
Warnmode when INT3 set on non-command=0
Warnmode when clipboard size too large=0
Warnmode when all threads are suspended=0
Warnmode when thread is changed=0
Warnmode when executable differs from udd=7
Warnmode when INT3 in udd has different cmd=0
Warnmode when fixups are modified=0
Warnmode when memory breakpoint on stack=0
Warnmode when modified debug registers=0
Only ASCII printable in dump=1
Underline fixups=1
Show jump direction=1
Show jump path=1
Show path if jump is not taken=1
Fill rest of command with NOPs=0
Action on letter key in Disassembler=2
Wide characters in UNICODE dumps=1
Automatically backup user code=0
IDEAL disassembling mode=0
Disassemble in lowercase=0
Separate arguments with TAB=0
Extra space between arguments=0
Show default segments=0
Always show memory size=1
NEAR jump modifiers=0
Use short form of string commands=0
Use RET instead of RETN=1
SSE size decoding mode=0
Jump hint decoding mode=0
Size sensitive mnemonics=1
Top of FPU stack=1
Show symbolic addresses=1
Show local module names=1
Demangle symbolic names=0
First pause=1
Pause on attach=1
Assume flat selectors=0
Ignore access violations in KERNEL32=1
Ignore INT3=1
Ignore TRAP=1
Ignore access violations=0
Ignore division by 0=1
Ignore illegal instructions=1
Ignore all FPU exceptions=1
Ignore custom exception ranges=1
Call UnhandledExceptionFilter=1
Report ignored exceptions to log=1
Autoreturn=0
Use DebugBreakProcess=0
Use ExitProcess=0
Warn when frequent breaks=1
Allow command emulation=0
Debug child processes=0
Animation delay index=0
Stop on new DLL=0
Stop on DLL unload=0
Stop on debug string=0
Stop on new thread=0
Stop on thread end=0
Run trace protocolling options=0
Run trace buffer size index=2
Trace over system DLLs=1
Trace over string commands=1
Save traced commands=0
Save accessed memory to trace=0
Save FPU registers to trace=0
Synchronize CPU and Run trace=1
Set breakpoints on callbacks in hit trace=0
Hit trace mode for indirect jumps=0
Stop hit trace if not command=0
Hit trace outside the code section=2
Show symbolic names in protocol range list=0
Use predictions in search=1
References include indirect jumps=1
Add origin to search results=0
Default resource language=9
Gray inactive windows=1
Gray register names=0
Center FOLLOWed command=1
Decode registers for any IP=0
Automatically select register type=0
Enable SSE registers=1
Label display mode=2
Highlight symbolic labels=0
Log buffer size index=2
Tabulate columns in log file=0
Append data to existing log file=0
Auto analysis=0
No predicted registers in system DLLs=0
Fuzzy analysis=1
Report problems during analysis=0
Decode tricks=1
Mark tricks=0
Decode ifs as switches=0
Functions preserve registers=1
Guess number of arguments=1
Guess arguments from mangled names=0
Guess meaning of guessed arguments=1
Show uncertain arguments=1
Rename value dependent arguments=0
Show predicted values=1
Show ARG and LOCAL in disassembly=1
Use symbolic names for ARG and LOCAL=1
Show ARG and LOCAL in comments=1
Show loops=1
Accept far calls and returns=0
Accept direct segment modifications=0
Accept privileged commands=0
Accept I/O commands=0
Accept NOPs=1
Accept shifts out of range=0
Accept superfluous prefixes=0
Accept default prefixes=1
Accept valid LOCK prefixes=1
Accept unaligned stack operations=1
Accept suspicious ESP operations=0
Accept non-standard command forms=1
Accept access to nonexisting memory=1
Accept interrupt commands=1
Index of default UNICODE font=1
Warnmode when unable to close process=0
Show grayed path if jump is not taken=1
Remove code hilite on register hilite=1
Ignore braces in udd path=1
List sorting mode=0
Warnmode when launching loaddll=6
Visible lines when scrolling disasm=1
Pause on Loaddll=1
Stop only on selected modules=0
Enable use of debugging data=1
Use dbghelp to walk stack=0
Use Microsoft Symbol Server=0
Hide missing source files=1
Hide internal compiler names=1
Skip leading spaces from source=1
Hide Call DLL window on call=0
Pause after call to DLL is finished=1
Mark only important operands=0
Block external WM_CLOSE=1
Activate speech=0
Translate commands and registers=1
Skip leading zeros in hex numbers=1
Bring OllyDbg to top on pause=1
Put ASCII text to clipboard=0
Warnmode when breakpoint set on non-command=6
Warnmode when EIP set on non-command=0
Warnmode when active when closing OllyDbg=6
Warnmode when copy of executable file changed=1
Warnmode when EIP inside the patch=0
Code page for ASCII dumps=1252
Use hardware breakpoints for stepping=0
Ignore all service exceptions=1
Allow .NET debugging=0
Scan registry for GUIDs on starup=0
Allow automatic SFX extraction=0
SFX extraction mode=0
Use real SFX entry from previous run=1
Ignore SFX exceptions=1
Monitor internal memory allocation=0
Alternative forms of conditional commands=1
Permanent breakpoints on system code=0
Ignore INT3 in MSCORWKS=1
Keep hit trace between sessions=1
GUI language=0
Search accuracy=0
Warnmode when IAT is copied back to exe=0
Warnmode when IAT is autocopied back to exe=0
Code page for multibyte dumps=65001
Disable GDI scripting support=0
Show call arguments=0
Type of break command=4
Hide unimportant handles=1
Show original handle names=0
Hide current registers warning=0
Search for library functions=1
[OllyDbg]
Placement=449,140,1157,767,1
[History]
Data directory=\udd
Plugin directory=\plugin
Standard library directory=\udl
API help file=
Executable[0]=
Arguments[0]=
Current dir[0]=
Log file=log.txt
Trace save file=trace.txt
Last viewed file=
Last keyboard shortcuts file=shortcuts.ini
Previous JIT=
Debug data directory[0]=
Debug data directory[1]=
Debug data directory[2]=
Alternative initialization file=
Last object or library file=
Last image library file=
[CPU]
Placement=0,0,1005,610,3
Offset[0]=0
Offset[1]=-263
Offset[2]=1
Offset[3]=24
[CPU Disasm]
Appearance=3,6,1,0,6
Columns=63,119,280,1792
[CPU Info]
Appearance=7,6,0,0,0
[CPU registers]
Appearance=3,6,0,0,0
Local=2,72448
[CPU Dump]
Appearance=3,6,1,0,0
Columns=63,336,119
Local=00011001
[CPU Stack]
Appearance=3,6,0,0,0
Columns=63,70,35,1792
Local=000A0104
[Attach]
Appearance=7,6,1,0,0
Columns=63,84,196,1792
Sort=1
[Custom colours]
Custom colour[0]=97,178,48
Custom colour[1]=175,175,175
Custom colour[2]=255,4,4
Custom colour[3]=12,16,33
Custom colour[4]=12,16,33
Custom colour[8]=12,16,33
Custom colour[3]=255,57,57
Custom colour[5]=63,116,31
Custom colour[9]=45,50,67
Custom colour[12]=65,121,197
Custom colour[7]=63,116,31
Custom colour[6]=171,224,139
Custom colour[10]=171,224,139
Custom colour[11]=65,121,197
Custom colour[13]=251,222,45
Custom colour[14]=174,156,235
[Log data]
Placement=69,98,872,481,1
Appearance=3,6,1,0,0
Columns=63,1792
Sort=0
[Hardware breakpoints]
Placement=64,162,823,239,1
Appearance=7,3,1,0,0
Columns=35,63,63,63,84,280,1792
Sort=0
[Memory breakpoints]
Placement=3,310,883,239,1
Appearance=7,5,1,0,0
Columns=63,63,63,35,84,1792
Sort=0
[INT3 breakpoints]
Placement=67,86,881,486,1
Appearance=7,0,1,0,0
Columns=63,63,84,280,1792
Sort=0
[Threads]
Placement=78,23,632,239,1
Appearance=7,6,1,0,0
Columns=42,63,126,126,63,63,63,84,84,84
Sort=0
[Run trace data]
Placement=154,154,632,239,1
Appearance=7,6,1,0,0
Columns=63,56,63,63,280,168,1792
Sort=0
[Modules]
Placement=3,51,941,382,1
Appearance=7,6,1,0,0
Columns=63,63,63,112,84,112,280,1792
Sort=0
[Memory]
Placement=55,99,773,239,1
Appearance=7,6,1,0,0
Columns=63,63,112,70,168,35,56,56,1792
Sort=0
[Dump]
Appearance=7,6,1,0,0
Placement=43,43,902,417,1
[Filedump]
Appearance=7,6,1,0,0
[Search]
Placement=176,34,717,506,1
Appearance=7,6,1,0,0
[Watches]
Placement=91,102,584,223,1
Appearance=7,6,1,0,0
Columns=280,280
Sort=0
[Namelist]
Appearance=7,6,1,0,0
Sort=0
Placement=300,300,922,234,1
Columns=63,63,77,56,280,1792
[Command help]
Placement=250,250,333,173,1
Appearance=1,6,0,0,0
[Window Maximizer]
Plugin is active=1
[Vic Plug-In 2]
Maximize ollydbg window=1
Maximize current MDI window=1
Transparent ollydbg window=255
Show toolbar on ollydbg title=2
Hide the PEB=0
[OllyExt]
IsDebuggerPresent=1
NtGlobalFlag=0
HeapFlags=1
ForceFlags=1
CheckRemoteDebuggerPresent=1
OutputDebugString=1
CloseHandle=1
SeDebugPrivilege=1
BlockInput=1
ProcessDebugFlags=1
ProcessDebugObjectHandle=1
TerminateProcess=1
NtSetInformationThread=1
NtQueryObject=1
FindWindow=1
NtOpenProcess=1
Process32Next=1
ParentProcess=1
Caption=1
KillAntiAttach=1
GetTickCount=0
TimeGetTime=1
QueryPerformanceCounter=1
ZwGetContextThread=1
NtSetContextThread=1
Process32First=1
KdDebuggerNotPresent=1
KdDebuggerEnabled=1
NtSetDebugFilterState=1
ProtectDRX=1
HideDRX=1
DbgPrompt=1
RDTSC=0
RDTSC_DRV=0
CodeRipperSyntax=0
DataRipperSyntax=0
CreateThread=1
[Windows]
Placement=14,78,793,182,1
Appearance=1,6,1,0,0
Columns=78,192,54,54,54,48,54,54,54,54,72
Sort=0
[Search tab]
Appearance[3]=1,6,1,0,0
Columns[3]=54,240,1536
Sort[3]=0
Appearance=1,6,1,0,0
Columns=63,56,63,63,280,168,1792
Sort=0
Appearance[1]=1,0,1,0,0
Columns[1]=54,240,1536
Sort[1]=0
Appearance[8]=1,6,1,0,0
Columns[8]=54,240,54,210,1536
Sort[8]=3
[Bookmarks]
Restore window=0
Show bookmarks in Disassembler=1
[Call Stack]
Placement=99,84,668,182,1
Appearance=1,6,1,0,0
Columns=54,54,270,168,54
Sort=0
[Dialog placement]
Enter string=2385,39
Select range of exception codes=1923,67
Assemble=2385,74
Set breakpoint=2697,169
Command search=2385,96
Search for data=3339,178
Edit register=3422,104
Known jumps and calls=667,75
Edit data=1069,368
Enter search string=3380,112
Shortcut editor=4,50
Enter new command line arguments=0,46
Create standard function library=163,79
Drive extent=0,46
Select structure=2441,429
[Goto]
Appearance=1,0,0,0,0
[Multiline Ultimate Assembler]
tabs_path=.\multiasm
pos_x=283
pos_y=61
pos_w=490
pos_h=349
[OllySEH]
Placement=154,203,595,182,1
Appearance=1,0,1,0,0
Columns=90,90,90,1536
Sort=0
[AAHWBP]
AntiAntiHWBPOn=1
[Vic Plug-In 2]
Maximize ollydbg window=1
Maximize current MDI window=0
Transparent ollydbg window=255
Show toolbar on ollydbg title=1
Hide the PEB=0
[Shortcut editor]
Appearance=1,0,1,0,0
[OllySkin2]
skinPath=.\Skin\kupo2o.msstyles
Enable=0
[Trace API]
Restore window=0
[List of libraries]
Appearance=1,0,1,0,0
Columns=300,1536
Sort=0
[Patches]
Placement=22,29,895,182,1
Appearance=1,0,1,0,0
Columns=54,54,30,48,192,192,1536
Sort=0
[Arguments]
Current dir[0]=
Current dir[1]=
Current dir[2]=
Current dir[3]=
Current dir[4]=
Current dir[5]=
Current dir[6]=
Current dir[7]=
Current dir[8]=
Current dir[9]=
Current dir[10]=
Current dir[11]=
Current dir[12]=
Current dir[13]=
Current dir[14]=
Current dir[15]=
[Handles]
Placement=260,260,1932,187,1
Appearance=1,6,1,0,0
Columns=54,90,36,54,24,120,1530
Sort=0
[Hit Trace Difference]
Placement=300,300,567,186,1
Appearance=1,0,1,0,0
Columns=54,480
Sort=0
[Dump[2]]
Placement=25,25,471,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=0,0,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[9]]
Placement=275,275,477,186,1
[Dump[9]]
Appearance=1,0,1,0,0
[Dump[8]]
Placement=250,250,477,186,1
[Dump[8]]
Appearance=1,0,1,0,0
[Dump[7]]
Placement=1284,319,477,186,1
[Dump[7]]
Appearance=1,0,1,0,0
[Dump[6]]
Placement=-16,609,477,186,1
[Dump[6]]
Appearance=1,0,1,0,0
[Dump[4]]
Placement=442,682,477,186,1
[Dump[4]]
Appearance=1,0,1,0,0
[Dump[5]]
Placement=175,175,477,186,1
[Dump[5]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=1252,132,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=1030,577,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=0,0,471,186,1
[Dump[1]]
Appearance=1,6,1,0,6
[Registers]
Placement=801,114,429,476,1
Appearance=1,6,1,0,0
Local=0,0
[SEH chain]
Placement=300,300,297,186,1
Appearance=1,0,1,0,0
Columns=36,54,54,120
Sort=0
[Dump[4]]
Placement=75,75,477,186,1
[Dump[4]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=50,50,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=25,25,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=0,0,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[9]]
Placement=275,275,477,186,1
[Dump[9]]
Appearance=1,0,1,0,0
[Dump[8]]
Placement=250,250,477,186,1
[Dump[8]]
Appearance=1,0,1,0,0
[Dump[7]]
Placement=225,225,477,186,1
[Dump[7]]
Appearance=1,0,1,0,0
[Dump[6]]
Placement=200,200,477,186,1
[Dump[6]]
Appearance=1,0,1,0,0
[Dump[5]]
Placement=175,175,477,186,1
[Dump[5]]
Appearance=1,0,1,0,0
[Dump[4]]
Placement=150,150,477,186,1
[Dump[4]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=125,125,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=100,100,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=75,75,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[5]]
Placement=125,125,477,186,1
[Dump[5]]
Appearance=1,0,1,0,0
[Dump[4]]
Placement=100,100,477,186,1
[Dump[4]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=75,75,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=50,50,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=25,25,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[9]]
Placement=250,250,477,186,1
[Dump[9]]
Appearance=1,0,1,0,0
[Dump[8]]
Placement=225,225,477,186,1
[Dump[8]]
Appearance=1,0,1,0,0
[Dump[7]]
Placement=939,605,477,186,1
[Dump[7]]
Appearance=1,0,1,0,0
[Dump[6]]
Placement=339,477,477,186,1
[Dump[6]]
Appearance=1,0,1,0,0
[Dump[5]]
Placement=853,320,477,186,1
[Dump[5]]
Appearance=1,0,1,0,0
[Dump[4]]
Placement=125,125,477,186,1
[Dump[4]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=710,555,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=295,497,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=830,473,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=25,25,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=125,125,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=150,150,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=808,413,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=75,75,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=25,25,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[6]]
Placement=718,489,477,186,1
[Dump[6]]
Appearance=1,0,1,0,0
[Dump[5]]
Placement=217,450,477,186,1
[Dump[5]]
Appearance=1,0,1,0,0
[Dump[4]]
Placement=150,150,477,186,1
[Dump[4]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=125,125,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=100,100,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=75,75,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=75,75,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[4]]
Placement=407,374,477,186,1
[Dump[4]]
Appearance=1,0,1,0,0
[Dump[3]]
Placement=125,125,477,186,1
[Dump[3]]
Appearance=1,0,1,0,0
[Dump[2]]
Placement=100,100,477,186,1
[Dump[2]]
Appearance=1,0,1,0,0
[Dump[1]]
Placement=50,50,477,186,1
[Dump[1]]
Appearance=1,0,1,0,0
[Ignored exceptions]
Range[0]=0 e06d7363
[Colour schemes]
Scheme name[0]=Black on white
Foreground_1[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[0]=0
Modified commands[0]=0
Scheme name[1]=Yellow on blue
Foreground_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[1]=0
Modified commands[1]=0
Scheme name[2]=Marine
Foreground_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[2]=0
Modified commands[2]=0
Scheme name[3]=Mostly black
Foreground_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[3]=0
Modified commands[3]=0
Scheme name[4]=Scheme 4
Foreground_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[4]=0
Modified commands[4]=0
Scheme name[5]=Scheme 5
Foreground_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[5]=0
Modified commands[5]=0
Scheme name[6]=Blackboard
Foreground_1[6]=F0F0F0,F0FBFF,AFAFAF,404FF,F0FBFF,F0FBFF,F0FBFF,F0FBFF,FFFFFF,F0FBFF,*,*,*,*,*,*
Foreground_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[6]=21100C,21100C,21100C,21100C,3939FF,C57941,EB9CAE,C57941,21100C,43322D,*,*,*,*,*,*
Background_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[6]=0
Modified commands[6]=0
Scheme name[7]=Scheme 7
Foreground_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[7]=0
Modified commands[7]=0
[Highlighting schemes]
Scheme name[1]=Christmas tree
Foreground_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,0,0,*,*
Foreground_2[1]=0,0,*,FF00FF,*,FF,*,*,0,*,*,800000,800000,*,808080,*
Background_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,FFFFFF,*,*,*
Background_2[1]=FFFF00,FFFF00,*,A4A0A0,C0C0C0,808080,*,*,F0FBFF,*,*,*,F0FBFF,*,F0FBFF,*
Operands[1]=1
Modified commands[1]=1
Scheme name[2]=Jumps and calls
Foreground_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[2]=0
Modified commands[2]=0
Scheme name[3]=Memory access
Foreground_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[3]=1
Modified commands[3]=1
Scheme name[4]=Hilite 4
Foreground_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[4]=0
Modified commands[4]=0
Scheme name[5]=Hilite 5
Foreground_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Foreground_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[5]=0
Modified commands[5]=0
Scheme name[6]=Blackboard
Foreground_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,FFF,3939FF,3939FF,FFFF
Foreground_2[6]=3939FF,3939FF,*,*,*,*,*,*,C57941,C57941,*,8BE0AB,30B261,8BE0AB,30B261,*
Background_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_2[6]=*,*,*,3939FF,*,*,*,*,*,*,*,*,*,*,*,*
Operands[6]=1
Modified commands[6]=1
Scheme name[7]=Hilite 7
Foreground_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,FF0000,30B261,*
Foreground_2[7]=404FF,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Background_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,21100C,21100C,*
Background_2[7]=21100C,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*
Operands[7]=1
Modified commands[7]=1
[Fonts]
Font name[0]=OEM fixed font
Font data[0]=0,0,0,0,0,0,0,0,0,0,0,10
Face name[0]=
Font name[1]=Terminal 6
Font data[1]=9,6,700,0,0,0,255,0,1,1,0,0
Face name[1]=Terminal
Font name[2]=System fixed font
Font data[2]=0,0,0,0,0,0,0,0,0,0,0,16
Face name[2]=
Font name[3]=Courier (UNICODE)
Font data[3]=14,0,400,0,0,0,1,2,5,-2,0,0
Face name[3]=Courier New
Font name[4]=Lucida (UNICODE)
Font data[4]=10,6,400,0,0,0,1,2,5,0,0,0
Face name[4]=Lucida Console
Font name[5]=Font 5
Font data[5]=9,6,700,0,0,0,255,0,1,1,0,0
Face name[5]=Terminal
Font name[6]=Font 6
Font data[6]=-12,0,400,0,0,0,255,1,49,0,0,0
Face name[6]=Terminal
Font name[7]=Font 7
Font data[7]=14,0,400,0,0,0,1,2,5,-2,0,0
Face name[7]=Courier New
[Shortcuts]
Go to previous history location=01002D (Minus (-))
Go to next history location=01003D ('=')
Set register to 1=040061 (Ctrl+Numeric 1)
List jumps and calls to command=08004A (Alt+J)
Удачных исследований!
