这个比较难找吧 呵呵,od可以自己修改背景和字体啊

设置起来很麻烦的

感觉楼主说的不是很详细呀，黑色背景好像OD右键菜单中就有吧？

用OD这么久了，背景我一般都少改，觉得没什么，如果要改，自己找

我就记得是黑色背景了，
它把CALL JMP什么的 命令全变颜色了，很实用的 以前好像在这里面看到过

使用PEID 0.94直接检测
是：ASProtect V2.X Registered -> Alexey Solodovnikov *
插件VerA 0.15检测
是：ASProtect 2.3 SKE build 05.14 Beta [2]!

麻烦各位哥哥，大侠，帮帮小弟~~~试了N种办法都不行啊。。。。

本人QQ： 4133623

我找到了

[Settings]
Check DLL versions=0
Show toolbar=1
Status in toolbar=1
Use hardware breakpoints to step=1
Restore windows=1
Scroll MDI=1
Horizontal scroll=0
Topmost window=0
Index of default font=2
Index of default colours=3
Index of default syntax highlighting=1
Log buffer size index=7
Run trace buffer size index=7
Group adjacent commands in profile=1
Highlighted trace register=-1
IDEAL disassembling mode=0
Disassemble in lowercase=1
Separate arguments with TAB=0
Extra space between arguments=0
Show default segments=1
NEAR jump modifiers=0
Use short form of string commands=0
Use RET instead of RETN=0
Size sensitive mnemonics=1
SSE size decoding mode=0
Top of FPU stack=1
Always show memory size=1
Decode registers for any IP=0
Show symbolic addresses=1
Show local module names=1
Gray data used as filling=1
Show jump direction=1
Show jump path=1
Show jumpfrom path=1
Show path if jump is not taken=1
Underline fixups=1
Center FOLLOWed command=1
Show stack frames=1
Show local names in stack=1
Extended stack trace=1
Synchronize source with CPU=1
Include SFX extractor in code=0
SFX trace mode=0
Use real SFX entry from previous run=1
Ignore SFX exceptions=1
First pause=2
Stop on new DLL=0
Stop on DLL unload=0
Stop on new thread=0
Stop on thread end=0
Stop on debug string=0
Decode SSE registers=0
Enable last error=1
Ignore access violations in KERNEL32=1
Ignore INT3=1
Ignore TRAP=1
Ignore access violations=0
Step in unknown commands=1
Ignore division by 0=1
Ignore illegal instructions=1
Ignore all FPU exceptions=1
Warn when frequent breaks=0
Warn when break not in code=0
Autoreturn=0
Save original command in trace=1
Show traced ESP=1
Show traced flags=1
Animate over system DLLs=1
Trace over string commands=0
Synchronize CPU and Run trace=1
Ignore custom exceptions=0
Smart update=1
Set high priority=1
Append arguments=1
Use ExitProcess=1
Allow injection to get WinProc=1
Sort WM_XXX by name=0
Type of last WinProc breakpoint=0
Snow-free drawing=0
Demangle symbolic names=1
Keep ordinal in name=1
Only ASCII printable in dump=0
Allow diacritical symbols=0
String decoding=0
Warn if not administrator=0
Warn when terminating process=0
Align dialogs=1
Use font of calling window=2
Specified dialog font=2
Number of lines that follow EIP=0
Restore window positions=1
Restore width of columns=1
Highlight sorted column=1
Compress analysis data=1
Backup UDD files=0
Fill rest of command with NOPs=1
Reference search mode=0
Global search=0
Aligned search=0
Allow error margin=0
Keep size of hex edit selection=1
Modify tag of FPU register=1
Hex inspector limits=1
MMX display mode=0
Last selected options card=3
Last selected appearance card=6
Ignore case in text search=1
Letter key in Disassembler=1
Looseness of code analysis=1
Decode pascal strings=1
Guess number of arguments=1
Accept far calls and returns=1
Accept direct segment modifications=1
Decode VxD calls=1
Accept privileged commands=1
Accept I/O commands=1
Accept NOPs=1
Accept shifts out of range=1
Accept superfluous prefixes=1
Accept LOCK prefixes=1
Accept unaligned stack operations=1
Accept non-standard command forms=1
Show ARG and LOCAL in procedures=0
Save analysis to file=1
Analyse main module automatically=0
Analyse code structure=1
Decode ifs as switches=1
Save trace to file=0
Trace contents of registers=1
Functions preserve registers=1
Decode tricks=1
Automatically select register type=1
Show decoded arguments=1
Show decoded arguments in stack=1
Show arguments in call stack=1
Show induced calls=1
Label display mode=0
Label includes module name=1
Highlight symbolic labels=1
Highlight RETURNs in stack=1
Ignore path in user data file=1
Ignore timestamp in user data file=1
Ignore CRC in user data file=1
Default sort mode in Names=1
Save out-of-module user data=0
Tabulate columns in log file=0
Append data to existing log file=0
Flush gathered data to log file=0
Skip spaces in source comments=1
Hide non-existing source files=1
Tab stops=8
File graph mode=2
Show internal handle names=0
Hide irrelevant handles=0
[System]
Options position=509,160
[Plugin Command line]
Restore command line window=0
[Plugin Bookmarks]
Restore bookmarks window=0
[Placement]
OllyTest=121,58,799,558,1
CPU=-2,227,514,366,3
CPU subwindows=333,500,327,500,411,756,360,604
操作文件列表=22,29,875,182,1
线程=110,145,492,137,1
断点=22,29,498,141,1
可执行模块=66,87,500,141,1
调用树=85,139,500,141,1
调用堆栈=132,174,500,141,1
源码=0,0,372,141,1
运行跟踪=22,29,432,141,1
参考=154,203,500,137,1
补丁=110,145,500,141,1
句柄=88,116,500,141,1
Windows=88,116,500,141,1
记录数据=66,87,378,141,1
内存映射=44,58,390,141,1
源码文件=44,58,474,141,1
Patches=110,145,500,141,1
Handles=88,116,500,141,1
Call tree=66,87,500,141,1
Call stack=44,58,500,141,1
Run trace=0,0,432,141,1
Source files=154,203,474,141,1
Source=132,174,372,141,1
References=110,145,500,137,1
Breakpoints=88,116,498,141,1
Threads=66,87,492,137,1
Memory map=44,58,390,141,1
Executable modules=22,29,500,141,1
Log data=0,0,378,141,1
Block=154,203,660,182,1
Ultra String Reference=0,0,618,182,1
书签=22,29,624,182,1
操作使用文件列表=21,100,876,182,1
Session File List=51,128,876,182,1
[History]
查看文件=
View text file=
Object file=
Import library=
Log file=log.txt
Run trace file=rtrace.txt
API 帮助文件=F:\破解工具\flyODBG\Ollydbg.hlp
Text save file=
Symbolic data path=E:\UnPack\flyODBG
UDD path=F:\破解工具\flyODBG\UDD
Plugin path=F:\破解工具\flyODBG\Plugin
Executable[1]=
Executable[2]=
Executable[3]=
Executable[4]=
Executable[5]=
Executable[0]=F:\破解工具\flyODBG\loaddll.exe
View file=
API help file=
[Colours]
Scheme[0]=0,12,8,15,14,9,9,13
Scheme name[0]=白底黑字
Scheme[1]=14,12,7,1,3,7,3,13
Scheme name[1]=蓝底黄字
Scheme[2]=1,12,3,11,14,2,7,13
Scheme name[2]=粉蓝
Scheme[3]=11,12,7,0,8,11,7,13
Scheme name[3]=黑底白字
Scheme[4]=9,12,3,11,14,12,12,12
Scheme name[4]=方案 4
Scheme[5]=14,12,7,1,3,7,3,13
Scheme name[5]=方案 5
Scheme[6]=1,12,3,15,14,9,9,12
Scheme name[6]=fly的方案
Scheme[7]=15,12,7,0,8,11,7,13
Scheme name[7]=方案 7
[Fonts]
Font[0]=16,8,400,0,0,0,134,2,49,0
Face name[0]=Terminal
Font name[0]=OEM 等宽字体
Font[1]=9,6,700,0,0,0,255,0,48,1
Face name[1]=Terminal
Font name[1]=Terminal 6
Font[2]=16,8,400,0,0,0,134,2,49,0
Face name[2]=Fixedsys
Font name[2]=系统等宽字体
Font[3]=14,0,400,0,0,0,1,2,5,0
Face name[3]=Courier New
Font name[3]=Courier (UNICODE)
Font[4]=10,6,400,0,0,0,1,2,5,0
Face name[4]=Lucida Console
Font name[4]=Lucida (UNICODE)
Font[5]=-12,0,400,0,0,0,134,1,49,1
Face name[5]=SongTi_GB2312
Font name[5]=宋体
Font[6]=16,8,400,0,0,0,134,2,49,0
Face name[6]=Fixedsys
Font name[6]=字体 6
Font[7]=14,0,400,0,0,0,1,2,5,0
Face name[7]=Courier New
Font name[7]=字体 7

[Syntax]
Commands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[0]=禁止突出显示
Commands[1]=15,4,12,12,10,60,66,13,127,8,12,0,0,0
Operands[1]=1,15,4,13,69,3,112,6,0,0,0,0,0,0
Scheme name[1]=圣诞树
Commands[2]=0,0,124,124,0,64,92,0,96,0,12,0,0,0
Operands[2]=1,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[2]=跳转和调用
Commands[3]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[3]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[3]=Hilite 3
Commands[4]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[4]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Scheme name[4]=Hilite 4
[Arguments]
Executable[1]=
Executable[2]=
Executable[3]=
Executable[4]=
Executable[5]=
Executable[0]=
[Plugin 书签]
恢复书签窗口=0
[Plugin 命令行]
恢复命令行窗口=0
命令行窗口 X=0
命令行窗口 Y=0
[Plugin 置顶显示]
restore window=0
window pos=0,0,123,100
windows=0
[Plugin Ultra String Reference]
Restore UStrRef Window=0
[Appearance]
CPU scheme=3
CPU Disassembler=2,3,1,0,1
CPU Dump=2,3,1,0,4353,2
CPU Stack=2,3,1,0
CPU Info=2,3,0,0
CPU Registers=2,3,1,0
操作文件列表=2,0,1,0,0
线程=2,0,1,0,0
断点=2,6,1,0,0
可执行模块=2,0,1,0,0
调用树=2,0,1,0,0
调用堆栈=2,0,1,0,0
源码=2,0,0,0,0
运行跟踪=2,0,1,0,0
参考=2,0,1,0,0
补丁=2,6,1,0,0
句柄=2,0,1,0,0
Windows=2,0,1,0,0
记录数据=2,0,1,0,0
内存映射=2,0,1,0,0
源码文件=1,0,1,0,0
Patches=1,0,1,0,0
Handles=1,0,1,0,0
Call tree=1,0,1,0,0
Call stack=1,0,1,0,0
Run trace=1,0,1,0,0
Source files=1,0,1,0,0
Source=1,0,0,0,0
References=1,0,1,0,0
Breakpoints=1,0,1,0,0
Threads=1,0,1,0,0
Memory map=1,0,1,0,0
Executable modules=1,0,1,0,0
Log data=1,0,1,0,0
ANAME=2,0,1,0,0
Block=1,0,1,0,0
Ultra String Reference=1,0,1,0,0
书签=1,0,1,0,0
操作使用文件列表=1,0,1,0,0
Session File List=1,0,1,0,0
ADUMP=2,6,0,0,1
[Columns]
CPU Disassembler=72,136,339,2048
CPU Dump=72,384,136
CPU Stack=72,80,2048
操作文件列表=240,640,256
线程=72,72,88,144,80,72,96,96
断点=72,72,200,355,2048
可执行模块=72,72,72,72,220,2048
调用树=256,256,256,256
调用堆栈=72,72,288,224,72
源码=64,2048
运行跟踪=72,72,72,72,256,2048
参考=72,372,2048
补丁=72,40,64,256,256,2048
句柄=72,120,48,72,24,96,2048
Windows=104,256,72,72,72,72,72,72,72,2048
记录数据=72,2048
内存映射=72,72,72,72,96,40,64,64,2048
源码文件=54,96,1536
Patches=54,30,48,192,192,1536
Handles=54,90,36,54,18,72,1536
Call tree=192,192,192,192
Call stack=54,54,216,168,54
Run trace=54,54,54,54,192,1536
Source files=54,96,1536
Source=48,1536
References=54,240,1536
Breakpoints=54,54,150,216,1536
Threads=54,54,66,108,60,54,72,72
Memory map=54,54,54,54,72,30,48,48,1536
Executable modules=54,54,54,54,96,1536
Log data=54,1536
ANAME=72,72,72,304,2048
Block=54,90,192,1536
Ultra String Reference=54,240,1536
书签=54,54,192,1536
操作使用文件列表=180,480,192
Session File List=180,480,192
ADUMP=72,384,136
[Plugin IsDebugPresent]
idb_Sleeptime=1000
idb_Autoload=1
[Plugin OllyHelper]
AutoClearDebugBit=1
LogDebugString=0
AutoBreakDLLs=
[Plugin OllyScript]
ScriptDir=E:\UnPack\flyODBG\Script\
[设置]
检查 DLL 版本=0
显示工具栏=1
工具栏中显示状态=0
使用硬件断点进行步进=0
恢复窗口=0
滚动 MDI=0
水平滚动=0
窗口置顶=0
索引默认字体=1
索引默认配色=0
索引默认语法突出显示方案=0
记录的缓存大小索引=0
运行跟踪的缓存大小索引=1
配置中组群相邻的命令=1
突出显示跟踪寄存器=-1
IDEAL 反汇编模式=0
反汇编指令使用小写字母=0
参数之间使用制表符 TAB 分隔=0
参数之间使用额外的空格=0
显示默认区段=1
近距离跳转修正=0
字符命令的表单使用短格式=0
使用 RET 代替 RETN=0
寄存区分大小写字母=1
SSE 大小解码模式=0
FPU 堆栈置顶=1
永远显示内存大小=1
对任意 IP 解码寄存器=0
显示符号地址=1
显示本地模块名称=1
灰色数据使用为填充=1
显示跳转方向=1
显示跳转的路径=0
显示跳转来源路径=0
跳转没有实现则显示路径=0
下划线修正=1
跟随命令居中=0
显示堆栈框架=1
堆栈中显示局部名称=1
扩展堆栈跟踪=0
在 CPU 中同步源码=0
代码中包含 SFX 解包器=0
SFX 跟踪模式=0
使用上次运行时的真实 SFX 入口=1
忽略 SFX 异常=0
首先暂停=2
停止在新的 DLL=0
停止在 DLL 卸载=0
停止在新线程=0
停止在线程结束=0
停止在调试字符=0
解码 SSE 寄存器=0
允许最后错误=1
忽略 KERNEL32 中的访问违反=1
忽略 INT3=0
忽略 TRAP=0
忽略访问违反=0
步入未知命令=0
访问被零除=0
忽略非法指令=0
忽略全部 FPU 异常=0
频繁中断时警告=0
断点不在代码中时警告=1
自动返回=0
保存原始命令在跟踪中=0
显示已跟踪 ESP=0
显示已跟踪的标志=0
动态步过系统 DLL=0
跟踪步过字符串命令=0
同步 CPU 并且运行跟踪=0
忽略指定的异常=0
增强型更新=1
设置高优先级=1
附加参数=1
使用 ExitProces=1
允许注入以获取 WinProc=0
依据名称排列 WM_XXX=0
最后 WinProc 断点的类型=0
雪花绘图模式=0
不损坏符号的名称=0
保留名称序数=1
只在转存中显示可打印 ASCII=0
允许字符串中存在区别符号=0
字符串解码=0
无管理员权限时进行警告=1
进程终止时警告=1
排列对话框=1
调用窗口使用的字体=0
指定的对话框字体=0
需要跟随 EIP 的行数=0
恢复窗口位置=1
恢复列的宽度=0
突出显示排序后的列=0
压缩分析数据=1
备份 UDD 文件=1
使用 NOP 填充命令剩余部分=1
参考搜索模式=0
全局搜索=1
排列搜索=0
允许错误范围=0
保留十六进制编辑部分的大小=1
修改 FPU 寄存器标志=1
十六进制校验限制=1
MMX 显示模式=0
最后选定的选项卡=0
最后选定的显示卡=0
文本搜索时忽略大小写=1
字母键位于反汇编中=1
宽松式代码分析=1
解码 Pascal 字符串=1
推测参数号码=1
接受远距离调用和返回=0
接受直接段位修正=0
解码 VxD 调用=0
接受特权级命令=0
接受 I/O 命令=0
接受 NOP=1
接受超出范围=0
接受 superfluous 前缀=0
接受 LOCK 前缀=0
接受未经排列的堆栈操作=1
接受非标准的命令表单=1
在进程中显示 ARG 和 LOCAL=0
保存分析结果到文件=1
自动分析主要模块=1
分析代码结构=1
解码 If 为 Switche=0
保存跟踪到文件=0
跟踪寄存器的内容=1
函数保护寄存器=0
解码技巧=0
自动选择寄存器类型=0
显示解码后的参数=1
在堆栈中显示解码后的参数=1
在呼叫堆栈中显示参数=1
显示包含的呼叫=1
卷标显示模式=0
标记包含的模块名称=0
突出显示符号卷标=0
在堆栈突出显示返回=1
用户数据文件中忽略路径=0
用户数据文件中忽略时间标志=1
用户数据文件中忽略 CRC=0
默认排列模式在 Name 中=1
保存模块外的用户数据=0
在记录文件中使用表格形式的列=0
附加数据到已存在的记录文件中=0
转储清除收集的数据到记录文件中=0
在源码注释中跳过空格=1
隐藏不存在的源码文件=0
制表符宽=8
文件图形模式=2
显示内部句柄名称=0
隐藏不恰当的句柄=0
[定位]
OllyTest=192,32,640,480,1
[历史]
查看文件=
查看文本文件=
项目文件=
导入库=
记录文件=log.txt
运行跟踪文件=rtrace.txt
API 帮助文件=
文本保存文件=
符号数据路径=E:\UnPack\flyODBG
UDD 路径=E:\UnPack\flyODBG
插件路径=E:\UnPack\flyODBG
[颜色]
方案[0]=0,12,8,18,7,8,7,13
方案名称[0]=白底黑字
方案[1]=14,12,7,1,3,7,3,13
方案名称[1]=蓝底黄字
方案[2]=1,12,3,11,14,2,7,13
方案名称[2]=Marine
方案[3]=15,12,7,0,8,11,7,13
方案名称[3]=Mostly black
方案[4]=0,12,8,18,7,8,7,13
方案名称[4]=方案 4
方案[5]=14,12,7,1,3,7,3,13
方案名称[5]=方案 5
方案[6]=1,12,3,11,14,2,7,13
方案名称[6]=方案 6
方案[7]=15,12,7,0,8,11,7,13
方案名称[7]=方案 7
[字体]
Font[0]=16,8,400,0,0,0,134,2,49,0
Face name[0]=Terminal
Font name[0]=OEM 等宽字体
Font[1]=9,6,700,0,0,0,255,0,48,1
Face name[1]=Terminal
Font name[1]=Terminal 6
Font[2]=16,8,400,0,0,0,134,2,49,0
Face name[2]=Fixedsys
Font name[2]=系统等宽字体
Font[3]=14,0,400,0,0,0,1,2,5,0
Face name[3]=Courier New
Font name[3]=Courier (UNICODE)
Font[4]=10,6,400,0,0,0,1,2,5,0
Face name[4]=Lucida Console
Font name[4]=Lucida (UNICODE)
Font[5]=9,6,700,0,0,0,255,0,48,0
Face name[5]=Terminal
Font name[5]=字体 5
Font[6]=16,8,400,0,0,0,134,2,49,0
Face name[6]=Fixedsys
Font name[6]=字体 6
Font[7]=14,0,400,0,0,0,1,2,5,0
Face name[7]=Courier New
Font name[7]=字体 7
[语法]
Commands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[0]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
方案名称[0]=禁止突出显示
Commands[1]=0,4,124,112,9,64,64,13,111,8,12,0,0,0
Operands[1]=1,0,4,13,65,1,112,6,0,0,0,0,0,0
方案名称[1]=Christmas tree
Commands[2]=0,0,124,112,0,64,64,0,96,0,0,0,0,0
Operands[2]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
方案名称[2]=Jumps'n'calls
Commands[3]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[3]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
方案名称[3]=Hilite 3
Commands[4]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
Operands[4]=0,0,0,0,0,0,0,0,0,0,0,0,0,0
方案名称[4]=Hilite 4
[Import libraries]
Implib[0]=E:\UnPack\flyODBG\Lib\mfc71.Lib
Implib[1]=E:\UnPack\flyODBG\Lib\MFC42.Lib
[Exceptions]
Custom[0]=00000001,FEEDFADE