[Settings] Check DLL versions=0 Topmost window=0 Show main menu items that don't apply=1 Show popup items that don't apply=0 Show toolbar=1 Use system colours in toolbar=0 Status in toolbar=0 Flash duration=1 Autoupdate interval=4 Mode of main window=0 Restore windows=1 Restore window positions=1 Restore width of columns=0 Restore sorting criterium=1 Highlight sorted column=1 Right click selects=1 Index of default font=1 Index of default colours=0 Code highlighting=0 Horizontal scroll=0 Snow-free drawing=1 Append arguments=1 Allow diacritical symbols=0 Decode pascal strings=1 Use IsTextUnicode=0 String decoding=0 File graph mode=1 Dialog font mode=0 Font in dialogs=0 Align dialogs=1 Global search=1 Aligned search=0 Ignore case=0 Search direction=1 Floating search with margin=0 Allow extra commands in sequence=1 Allow jumps into the sequence=0 Keep size of hex edit selection=1 Sorting mode of error list=0 Modify FPU tag=0 MMX display mode=0 Show tooltips in dialog windows=1 X options coordinate=-1 Y options coordinate=-1 Last selected options pane=0 Last edited font in options=0 Last edited scheme in options=0 Last edited colour index in options=0 Last edited highlighting in options=1 Last edited highlighting index in options=0 Warnmode when not administrator=0 Warnmode for packed code in Analyzer=0 Warnmode when process is still running=0 Warnmode when INT3 breakpoint is corrupt=0 Warnmode when INT3 set on non-command=0 Warnmode when clipboard size too large=0 Warnmode when all threads are suspended=0 Warnmode when thread is changed=0 Warnmode when executable differs from udd=0 Warnmode when INT3 in udd has different cmd=0 Warnmode when fixups are modified=0 Only ASCII printable in dump=0 Underline fixups=1 Show jump direction=1 Show jump path=1 Show path if jump is not taken=1 Fill rest of command with NOPs=1 Action on letter key in Disassembler=1 Wide characters in UNICODE dumps=1 Automatically backup user code=0 IDEAL disassembling mode=0 Disassemble in lowercase=0 Separate arguments with TAB=0 Extra space between arguments=0 Show default segments=1 Always show memory size=1 NEAR jump modifiers=0 Use short form of string commands=0 Use RET instead of RETN=0 SSE size decoding mode=0 Jump hint decoding mode=0 Size sensitive mnemonics=1 Top of FPU stack=1 Show symbolic addresses=1 Show local module names=0 Demangle symbolic names=0 First pause=3 Pause on attach=1 Assume flat selectors=0 Ignore access violations in KERNEL32=1 Ignore INT3=0 Ignore TRAP=0 Ignore access violations=0 Ignore division by 0=0 Ignore illegal instructions=0 Ignore all FPU exceptions=0 Ignore custom exception ranges=0 Call UnhandledExceptionFilter=0 Report ignored exceptions to log=1 Autoreturn=0 Use DebugBreakProcess=0 Use ExitProcess=1 Warn when frequent breaks=1 Allow command emulation=0 Animation delay index=0 Stop on new DLL=0 Stop on DLL unload=0 Stop on debug string=0 Stop on new thread=0 Stop on thread end=0 Run trace protocolling options=0 Run trace buffer size index=2 Trace over system DLLs=1 Trace over string commands=1 Save traced commands=0 Save accessed memory to trace=0 Save FPU registers to trace=0 Synchronize CPU and Run trace=1 Hit trace mode for indirect jumps=0 Stop hit trace if not command=0 Hit trace outside the code section=2 Show symbolic names in protocol range list=0 Use predictions in search=1 References include indirect jumps=1 Add origin to search results=0 Default resource language=9 Gray inactive windows=1 Gray register names=0 Center FOLLOWed command=1 Decode registers for any IP=0 Automatically select register type=0 Enable SSE registers=1 Label display mode=0 Highlight symbolic labels=0 Log buffer size index=2 Tabulate columns in log file=0 Append data to existing log file=0 Auto analysis=1 No predicted registers in system DLLs=0 Fuzzy analysis=1 Report problems during analysis=0 Decode tricks=1 Decode ifs as switches=0 Functions preserve registers=1 Guess number of arguments=1 Guess arguments from mangled names=0 Guess meaning of guessed arguments=1 Show uncertain arguments=1 Rename value dependent arguments=0 Show predicted values=1 Show ARG and LOCAL in disassembly=1 Use symbolic names for ARG and LOCAL=0 Show ARG and LOCAL in comments=1 Show loops=1 Accept far calls and returns=0 Accept direct segment modifications=0 Accept privileged commands=0 Accept I/O commands=0 Accept NOPs=1 Accept shifts out of range=0 Accept superfluous prefixes=0 Accept default prefixes=1 Accept valid LOCK prefixes=1 Accept unaligned stack operations=1 Accept suspicious ESP operations=0 Accept non-standard command forms=1 Accept access to nonexisting memory=0 Accept interrupt commands=0 [OllyDbg] Placement=192,32,640,480,0 [History] Log file=log.txt Trace save file=trace.txt Data directory=. API help file= Last viewed file= Previous JIT= Executable[0]=C:\Users\Артем\Desktop\td\3452135.exe Arguments[0]= Executable[1]=C:\Users\Артем\Desktop\ok.exe Arguments[1]= Executable[2]=C:\2.exe Arguments[2]= Executable[3]= Arguments[3]= Executable[4]= Arguments[4]= Executable[5]= Arguments[5]= [CPU] Placement=0,0,962,515,1 Offset[0]=0 Offset[1]=0 Offset[2]=0 Offset[3]=0 [CPU Disasm] Appearance=1,0,0,0,0 Columns=54,102,240,1536 [CPU Info] Appearance=1,0,0,0,0 [CPU registers] Appearance=1,0,1,0,0 Local=0,0 [CPU Dump] Appearance=1,0,1,0,0 Columns=54,288,102 Local=00011001 [CPU Stack] Appearance=1,0,0,0,0 Columns=54,60,30,1536 Local=000A0104 [Colour schemes] Scheme name[0]=Black on white Foreground_1[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[0]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[0]=0 Modified commands[0]=0 Scheme name[1]=Yellow on blue Foreground_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[1]=0 Modified commands[1]=0 Scheme name[2]=Marine Foreground_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[2]=0 Modified commands[2]=0 Scheme name[3]=Mostly black Foreground_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[3]=0 Modified commands[3]=0 Scheme name[4]=Scheme 4 Foreground_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[4]=0 Modified commands[4]=0 Scheme name[5]=Scheme 5 Foreground_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[5]=0 Modified commands[5]=0 Scheme name[6]=Scheme 6 Foreground_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[6]=0 Modified commands[6]=0 Scheme name[7]=Scheme 7 Foreground_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[7]=0 Modified commands[7]=0 [Highlighting schemes] Scheme name[1]=Christmas tree Foreground_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[1]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[1]=1 Modified commands[1]=1 Scheme name[2]=Jumps and calls Foreground_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[2]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[2]=0 Modified commands[2]=0 Scheme name[3]=Memory access Foreground_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[3]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[3]=1 Modified commands[3]=1 Scheme name[4]=Hilite 4 Foreground_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[4]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[4]=0 Modified commands[4]=0 Scheme name[5]=Hilite 5 Foreground_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[5]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[5]=0 Modified commands[5]=0 Scheme name[6]=Hilite 6 Foreground_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[6]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[6]=0 Modified commands[6]=0 Scheme name[7]=Hilite 7 Foreground_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Foreground_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_1[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Background_2[7]=*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,* Operands[7]=0 Modified commands[7]=0 [Fonts] Font name[0]=OEM fixed font Font[0]=0,0,0,0,0,0,0,0,0,0,10 Face name[0]= Font name[1]=Terminal 6 Font[1]=9,6,700,0,0,0,255,0,1,1,0 Face name[1]=Terminal Font name[2]=System fixed font Font[2]=0,0,0,0,0,0,0,0,0,0,16 Face name[2]= Font name[3]=Courier (UNICODE) Font[3]=14,0,400,0,0,0,1,2,5,-2,0 Face name[3]=Courier New Font name[4]=Lucida (UNICODE) Font[4]=10,6,400,0,0,0,1,2,5,0,0 Face name[4]=Lucida Console Font name[5]=Font 5 Font[5]=9,6,700,0,0,0,255,0,1,1,0 Face name[5]=Terminal Font name[6]=Font 6 Font[6]=0,0,0,0,0,0,0,0,0,0,16 Face name[6]= Font name[7]=Font 7 Font[7]=14,0,400,0,0,0,1,2,5,-2,0 Face name[7]=Courier New