Windows Registry Editor Version 5.00 ; ---------------------------------------------------------------------------- ; ; IDA Pro Color Scheme ; ; A dark background scheme for IDA that highlights the key elements ; in a disassembly in a consistent manner. ; ; Eugene Ching ; Copyright (c) 2012 - * | Eugene ching ; ; ---------------------------------------------------------------------------- [HKEY_CURRENT_USER\Software\Hex-Rays\IDA] "DisplayWelcome"=dword:00000000 "uiConfig"=hex:ff,ff,ff,ff,00,00,00,00,00,00,00,00,02,00,00,00,04,00,00,00,00,\ 00,00,00,ff,ff,ff,ff,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,01,00,00,00,56,0f,00,00,10,00,01,05,00,00,00,00 "SearchText"="" "SearchBin"="" "SupportExpiredDisplayed_1.3.0.100707"=dword:4d9d7e09 "TabulationSpaces"=dword:00000002 "AutoHighlight"=dword:00000001 "AutoHighlightColorQ"=dword:00006ea5 "AutoScroll"=dword:00000004 "HintLines"=dword:0000000a "HintDelay"=dword:00000064 "HintWheel"=dword:00000001 "HintIfDebuggerActive"=dword:00000001 "NavigationStackLines"=dword:0000000a "UseGraphView"=dword:00000001 "AnimateGraph"=dword:00000001 "DrawGraphShadows"=dword:00000001 "AutoFitWindow"=dword:00000000 "FitMax100"=dword:00000001 "RelayoutOnOverlap"=dword:00000001 "RelayoutOnRefresh"=dword:00000001 "TruncateNodes"=dword:00000000 "LockGraph"=dword:00000000 "MaxGraphNodes"=dword:00002710 "LazyJumps"=dword:00000001 "AutoUndefine"=dword:ffffffff "HideUnhideJumps"=dword:00000001 "Editor"="C:\\WINDOWS\\notepad.exe" "BandRefreshRate"=dword:000000c8 "IDBExtension"=dword:00000001 "FormsAutoappend"=dword:00000001 "WelcomeTemplates"=dword:00000001 "DefaultDebuggers"="windbg_user" "SplashWindow"=dword:00000000 "uiConfig64"=hex:ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff,00,00,01,00,ff,\ ff,ff,ff,ff,ff,ff,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,4d,00,01,05,00,00,00,\ 00 "InformedAboutUpdates"=dword:00000001 "AutoCheckUpdates"=dword:00000001 "LastUpdateCheck"=dword:503eb2ff "QStateDbg"=hex:40,00,42,00,79,00,74,00,65,00,41,00,72,00,72,00,61,00,79,00,28,\ 00,00,00,00,00,00,00,ff,00,00,00,00,00,00,00,01,00,fd,00,00,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,02,00,00,00,00,00,06,00,90,00,00,00,00,00,00,00,1f,\ 00,fc,00,01,00,00,00,00,00,00,00,01,00,fb,00,00,00,00,00,00,00,12,00,00,00,\ 4e,00,00,00,61,00,00,00,76,00,00,00,69,00,00,00,67,00,00,00,61,00,00,00,74,\ 00,00,00,6f,00,00,00,72,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,06,00,\ 90,00,00,00,00,00,00,00,46,00,00,00,ff,00,ff,00,ff,00,00,00,00,00,06,00,90,\ 00,00,00,00,00,03,00,85,00,00,00,00,00,00,00,04,00,00,00,00,00,00,00,04,00,\ 00,00,00,00,00,00,08,00,00,00,00,00,00,00,08,00,fc,00,00,00,00,00,00,00,01,\ 00,00,00,00,00,00,00,02,00,00,00,00,00,00,00,19,00,00,00,00,00,00,00,16,00,\ 00,00,46,00,00,00,69,00,00,00,6c,00,00,00,65,00,00,00,54,00,00,00,6f,00,00,\ 00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,00,00,00,00,00,\ 00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,16,00,00,00,4a,00,00,00,75,00,00,00,6d,00,00,00,\ 70,00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,\ 00,00,00,72,00,00,00,00,00,00,00,00,00,3a,00,ff,00,ff,00,ff,00,ff,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,53,\ 00,00,00,65,00,00,00,61,00,00,00,72,00,00,00,63,00,00,00,68,00,00,00,54,00,\ 00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,\ 00,00,00,00,00,00,00,8c,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,1e,00,00,00,41,00,00,00,6e,00,00,\ 00,61,00,00,00,6c,00,00,00,79,00,00,00,73,00,00,00,69,00,00,00,73,00,00,00,\ 54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,\ 00,00,00,00,00,00,00,01,00,34,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,16,00,00,00,45,00,00,00,64,\ 00,00,00,69,00,00,00,74,00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,\ 00,00,42,00,00,00,61,00,00,00,72,00,00,00,00,00,00,00,01,00,6e,00,ff,00,ff,\ 00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,18,00,00,00,44,00,00,00,65,00,00,00,62,00,00,00,75,00,00,00,67,00,00,\ 00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,\ 72,00,01,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,24,00,00,00,42,00,00,00,\ 72,00,00,00,65,00,00,00,61,00,00,00,6b,00,00,00,70,00,00,00,6f,00,00,00,69,\ 00,00,00,6e,00,00,00,74,00,00,00,73,00,00,00,54,00,00,00,6f,00,00,00,6f,00,\ 00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,01,00,00,00,00,00,00,00,e2,\ 00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,1e,00,00,00,53,00,00,00,65,00,00,00,67,00,00,00,6d,00,00,\ 00,65,00,00,00,6e,00,00,00,74,00,00,00,73,00,00,00,54,00,00,00,6f,00,00,00,\ 6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,00,00,00,00,00,00,\ 00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,20,00,00,00,47,00,00,00,72,00,00,00,61,00,00,00,70,\ 00,00,00,68,00,00,00,56,00,00,00,69,00,00,00,65,00,00,00,77,00,00,00,54,00,\ 00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,\ 00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,22,00,00,00,53,00,00,00,74,00,00,\ 00,72,00,00,00,75,00,00,00,63,00,00,00,74,00,00,00,75,00,00,00,72,00,00,00,\ 65,00,00,00,73,00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,\ 00,00,00,61,00,00,00,72,00,00,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,\ ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,26,\ 00,00,00,45,00,00,00,6e,00,00,00,75,00,00,00,6d,00,00,00,65,00,00,00,72,00,\ 00,00,61,00,00,00,74,00,00,00,69,00,00,00,6f,00,00,00,6e,00,00,00,73,00,00,\ 00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,\ 72,00,00,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,24,00,00,00,4f,00,00,00,\ 70,00,00,00,65,00,00,00,72,00,00,00,61,00,00,00,6e,00,00,00,64,00,00,00,54,\ 00,00,00,79,00,00,00,70,00,00,00,65,00,00,00,54,00,00,00,6f,00,00,00,6f,00,\ 00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,00,00,00,00,00,00,00,00,\ 00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,20,00,00,00,46,00,00,00,75,00,00,00,6e,00,00,00,63,00,00,\ 00,74,00,00,00,69,00,00,00,6f,00,00,00,6e,00,00,00,73,00,00,00,54,00,00,00,\ 6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,00,00,\ 00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,1c,00,00,00,54,00,00,00,72,00,00,00,61,\ 00,00,00,63,00,00,00,69,00,00,00,6e,00,00,00,67,00,00,00,54,00,00,00,6f,00,\ 00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,01,00,00,00,00,\ 00,01,00,33,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,18,00,00,00,4c,00,00,00,69,00,00,00,73,00,00,\ 00,74,00,00,00,73,00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,\ 42,00,00,00,61,00,00,00,72,00,00,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,\ 00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 1a,00,00,00,47,00,00,00,72,00,00,00,61,00,00,00,70,00,00,00,68,00,00,00,73,\ 00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,\ 00,00,72,00,00,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,24,00,00,00,44,00,\ 00,00,62,00,00,00,67,00,00,00,43,00,00,00,6f,00,00,00,6d,00,00,00,6d,00,00,\ 00,61,00,00,00,6e,00,00,00,64,00,00,00,73,00,00,00,54,00,00,00,6f,00,00,00,\ 6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,01,00,00,00,00,00,01,\ 00,a7,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,2c,00,00,00,43,00,00,00,72,00,00,00,6f,00,00,00,73,\ 00,00,00,73,00,00,00,52,00,00,00,65,00,00,00,66,00,00,00,65,00,00,00,72,00,\ 00,00,65,00,00,00,6e,00,00,00,63,00,00,00,65,00,00,00,73,00,00,00,54,00,00,\ 00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,00,\ 00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,20,00,00,00,55,00,00,00,74,00,00,00,\ 69,00,00,00,6c,00,00,00,69,00,00,00,74,00,00,00,69,00,00,00,65,00,00,00,73,\ 00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,\ 00,00,72,00,00,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,20,00,00,00,53,00,\ 00,00,69,00,00,00,67,00,00,00,6e,00,00,00,54,00,00,00,79,00,00,00,70,00,00,\ 00,65,00,00,00,73,00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,\ 42,00,00,00,61,00,00,00,72,00,00,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,\ 00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 1c,00,00,00,57,00,00,00,61,00,00,00,74,00,00,00,63,00,00,00,68,00,00,00,65,\ 00,00,00,73,00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,\ 00,00,61,00,00,00,72,00,01,00,00,00,00,00,02,00,43,00,ff,00,ff,00,ff,00,ff,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,16,00,\ 00,00,48,00,00,00,69,00,00,00,64,00,00,00,65,00,00,00,54,00,00,00,6f,00,00,\ 00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,00,00,00,00,00,\ 00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,22,00,00,00,53,00,00,00,74,00,00,00,72,00,00,00,\ 75,00,00,00,63,00,00,00,74,00,00,00,45,00,00,00,6e,00,00,00,75,00,00,00,6d,\ 00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,\ 00,00,72,00,00,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1e,00,00,00,43,00,\ 00,00,6f,00,00,00,6d,00,00,00,6d,00,00,00,65,00,00,00,6e,00,00,00,74,00,00,\ 00,73,00,00,00,54,00,00,00,6f,00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,\ 61,00,00,00,72,00,00,00,00,00,00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,18,00,00,00,\ 56,00,00,00,69,00,00,00,65,00,00,00,77,00,00,00,73,00,00,00,54,00,00,00,6f,\ 00,00,00,6f,00,00,00,6c,00,00,00,42,00,00,00,61,00,00,00,72,00,00,00,00,00,\ 00,00,00,00,00,00,ff,00,ff,00,ff,00,ff,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,29,00 "AdvancedUI"=dword:00000000 "GraphPalette"=hex:b2,b2,b2,00,b2,b2,b2,00,f5,f5,f5,00,e2,e2,e2,00,5e,58,54,00,\ ff,ff,00,00,24,24,24,00,00,39,00,00,6d,00,00,00,ff,00,00,00,00,43,cb,00,00,\ 91,00,00,bc,00,00,00,aa,aa,ff,00,c6,8e,00,00 "Palette"=hex:49,44,41,43,4c,52,01,00,03,00,00,00,00,00,00,00,aa,ff,00,00,c0,\ c0,c0,00,80,80,80,00,80,80,80,00,c0,c0,c0,00,ff,aa,7f,00,ff,aa,00,00,ff,aa,\ ff,00,aa,aa,7f,00,00,80,00,00,00,ff,00,00,aa,ff,7f,00,c0,c0,c0,00,00,80,00,\ 00,80,80,ff,00,ff,00,00,00,80,80,00,00,01,01,01,00,c0,c0,c0,00,aa,aa,aa,00,\ 55,aa,7f,00,ff,55,7f,00,80,80,80,00,80,80,ff,00,ff,aa,7f,00,ff,aa,ff,00,ff,\ aa,ff,00,aa,55,00,00,aa,ff,7f,00,00,80,00,00,c6,55,09,00,ff,ff,ff,00,c0,c0,\ c0,00,ff,00,ff,00,80,80,00,00,ff,aa,7f,00,ff,aa,00,00,ff,aa,7f,00,aa,55,7f,\ 00,00,00,00,00,00,00,62,00,c0,c0,c0,00,00,ff,ff,00,e7,e7,e7,00,7e,3f,00,00,\ 80,80,80,00,b7,ff,9d,00,ff,00,ff,00,00,00,00,00,ff,aa,00,00,00,00,00,00,00,\ 00,00,00,46,46,46,00,84,58,41,00,c0,c0,c0,00,5a,5a,5a,00,31,31,31,00,76,76,\ 76,00,00,aa,00,00,5b,5b,5b,00,75,75,75,00,00,ff,00,00,00,ff,00,00,00,8f,8f,\ 00,ff,00,00,00,00,99,00,00,00,a7,a7,00,ff,00,00,00,80,80,00,00,01,01,01,00,\ c0,c0,c0,00,55,aa,00,00,ff,55,7f,00,ff,ff,ff,00,63,63,63,00,00,88,88,00,aa,\ 55,00,00,43,43,43,00,55,55,7f,00,80,00,80,00,00,55,00,00,00,ff,00,00,00,86,\ 86,00,68,68,68,00,5e,5e,5e,00,ff,00,ff,00,ff,aa,00,00,6f,6f,6f,00,aa,00,00,\ 00,aa,aa,00,00,55,aa,00,00,00,00,00,00,ff,ff,ff,00,c0,c0,c0,00,00,ff,ff,00,\ ac,ac,ac,00,80,00,00,00,87,87,87,00,80,80,00,00,ff,00,ff,00,00,00,00,00,ff,\ aa,00,00,00,00,00,00,00,00,00,00,2d,2d,2d,00,6b,6b,6b,00,80,80,80,00,80,80,\ 80,00,2d,2d,2d,00,00,00,80,00,2d,2d,2d,00,2d,2d,2d,00,00,00,80,00,00,80,00,\ 00,00,ff,00,00,00,80,00,00,8d,46,00,00,00,80,00,00,80,80,ff,00,ff,00,00,00,\ 80,80,00,00,01,01,01,00,c0,c0,c0,00,87,87,87,00,00,00,00,00,00,00,ff,00,80,\ 80,80,00,80,80,ff,00,00,80,00,00,00,00,80,00,55,00,00,00,86,59,00,00,00,80,\ 00,00,00,80,00,00,00,80,40,00,00,00,80,00,2d,2d,2d,00,ff,00,ff,00,2d,2d,2d,\ 00,00,00,80,00,2d,2d,2d,00,2d,2d,2d,00,55,00,00,00,00,00,00,00,ff,ff,ff,00,\ c0,c0,c0,00,00,ff,ff,00,9f,9f,9f,00,80,00,00,00,80,80,80,00,80,80,00,00,00,\ 55,00,00,00,00,00,00,00,00,ff,00,00,00,00,00,00,00,00,00,aa,aa,aa,00,ff,c5,\ f3,00,82,60,7e,00,66,66,66,00,ff,ff,ff,00,eb,eb,b9,00,eb,eb,b9,00,ff,ec,bb,\ 00,c0,c0,c0,00,69,d2,00,00,00,ff,00,00,d2,50,32,00,ff,46,46,00,ff,aa,7f,00,\ 7c,7c,61,00,d2,50,32,00,80,80,00,00,ff,34,37,00,c0,c0,c0,00,59,59,59,00,ff,\ c5,f3,00,ff,aa,ff,00,ff,d2,00,00,00,ff,ff,00,ff,80,00,00,ff,d2,00,00,9d,d6,\ 00,00,df,07,7e,00,69,d2,00,00,79,f3,00,00,d2,50,32,00,ab,ab,ab,00,73,ad,ad,\ 00,ff,5a,fd,00,ff,ff,7f,00,aa,ff,00,00,ff,d2,00,00,ff,aa,ff,00,ff,ff,00,00,\ 00,00,00,00,2d,2d,2d,00,e1,ad,32,00,00,ff,ff,00,66,66,66,00,aa,00,00,00,7c,\ 7c,61,00,9d,9d,00,00,ff,55,ff,00,00,00,00,00,ff,aa,00,00,00,00,00,00 "NavPalette"=hex:00,aa,ff,00,ff,aa,00,00,80,00,00,00,eb,eb,b9,00,78,78,00,00,\ ff,00,ff,00,ca,00,00,00,4a,4a,4a,00,80,ff,00,00 "DebuggerPalette"=hex:60,d0,ff,00,a0,a0,ff,00,20,80,40,00,cc,ff,ff,00,ff,00,00,\ 00,00,ff,00,00,80,40,00,00,ff,80,00,00,00,00,00,00,00,00,ff,00,80,00,80,00 "ArrowsPalette"=hex:6c,46,34,00,00,e2,e2,00,ff,aa,00,00,00,80,00,00,40,40,ff,\ 00 "MiscPalette"=hex:21,21,21,00,d4,d4,d4,00,80,40,40,00,ff,80,00,00 "HintColor"=dword:00660200 "AutoHighlightColor"=dword:00ff0000 "DisplayNosigBox"=dword:00000001 "NavPaletteExtended"=hex:ff,80,00,00 "ComboVisible"=dword:00000001 "OutputDirectory"="H:/" "FlowChartLabels"=dword:00000000 "HintColorQ"=dword:005a5a5a "SupportExpiringDisplayed_1.5.0.110408"=dword:4e8e5f06 "SupportExpiringDisplayed_1.6.0.111005"=dword:4e9d4c09 "InformedAboutUpdates2"=dword:00000001 "AutoRequestUpdates"=dword:00000001 "SupportExpiredDisplayed_1.6.0.111005"=dword:4f02b84c "BandLegend"=dword:00000001 "UIFilterColor"=dword:00e3ebb3 "UIFilterFlags"=dword:00000000 "DefaultCLI"="Python" [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop] [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default] [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows] "GraphInstructionsIndention"=dword:00000000 "GraphLinePrefixes"=dword:00000000 "GraphOpcodeBytes"=dword:00000000 "InstructionsIndention"=dword:00000010 "LastActiveForm"="IDA View-A" "OpcodeBytes"=dword:00000000 "StackPointer"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Enums] "FormStyle"=dword:00000000 "Height"=dword:0000033d "Left"=dword:00000000 "Top"=dword:00000000 "Visible"=dword:00000001 "Width"=dword:00000780 "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Exports] "FormStyle"=dword:00000000 "Height"=dword:0000033d "Left"=dword:00000000 "Top"=dword:00000000 "Visible"=dword:00000001 "Width"=dword:00000780 "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Function calls] "FormStyle"=dword:00000000 "Height"=dword:000000d3 "Left"=dword:00000000 "Top"=dword:00000000 "Visible"=dword:00000000 "Width"=dword:0000014c "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Functions] "FormStyle"=dword:00000000 "Height"=dword:ffffffff "Left"=dword:00000000 "Top"=dword:00000016 "Visible"=dword:00000000 "Width"=dword:ffffffff "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Hex View-A] "DK"=dword:00000001 "EC"=dword:fffffffe "FormStyle"=dword:00000000 "Height"=dword:0000033d "IS"=dword:00000001 "Left"=dword:00000000 "NC"=dword:00000010 "ST"=dword:00000001 "Top"=dword:00000000 "Visible"=dword:00000001 "Width"=dword:00000780 "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\IDA View-A] "ArrowsWidth"=dword:0000004b "FormStyle"=dword:00000000 "GraphView"=dword:00000000 "Height"=dword:0000033d "Left"=dword:00000000 "Top"=dword:00000000 "Visible"=dword:00000001 "Width"=dword:00000780 "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Imports] "FormStyle"=dword:00000000 "Height"=dword:0000033d "Left"=dword:00000000 "Top"=dword:00000000 "Visible"=dword:00000001 "Width"=dword:00000780 "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Names] "FormStyle"=dword:00000000 "Height"=dword:0000033d "Left"=dword:00000000 "Top"=dword:00000000 "Visible"=dword:00000001 "Width"=dword:00000780 "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Notepad] "FormStyle"=dword:00000000 "Height"=dword:00000173 "Left"=dword:00000000 "Top"=dword:00000000 "Visible"=dword:00000000 "Width"=dword:0000017f "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Search results] "FormStyle"=dword:00000000 "Height"=dword:0000033d "Left"=dword:00000000 "Top"=dword:00000000 "Visible"=dword:00000000 "Width"=dword:00000780 "WindowState"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Desktop\Default\Database Windows\Stack frame] "FormStyle"=dword:00000000 "Height"=dword:ffffffff "Left"=dword:00000000 "Top"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Font] "Name"="Consolas" "Size"=dword:00000009 "Bold"="true" "Italic"="false" [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\Hidden Messages] "A custom layout for the current graph exists Do you want to delete it and redo the layout "=dword:00000001 "Do you really want to delete the marked position "=dword:00000001 "IDA Pro has determined that the input file was linked with debug information Do you want to look fo"=dword:00000001 "IDA has detected that you want to find a label in the program While the text search can find labels"=dword:00000001 "The technical support period of the Hex Rays decompiler will expire soon Please update your license"=dword:00000000 "IDA View has now a new mode proximity view This mode allows you to browse the interrelations betwe"=dword:00000001 "IDA failed to display the program in graph mode Only instructions belonging to functions can be dis"=dword:00000001 "IDA has determined that the input file was linked with debug information Do you want to look for th"=dword:00000001 "The format of the database is obsolete d IDA will now upgrade it into format d Continue "=dword:00000001 "One of your plugins continues to use native operating system windows By default IDA uses Qt windows"=dword:00000001 "The decompiler assumes that the segment s is read only because of its s All data references to "=dword:00000001 "The map variable command allows you to replace all occurrences of a variable by another variable o"=dword:00000001 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\QDesktop] [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\QDesktop\Default] [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\QDesktop\Default\Database Windows] "Forms"="@ByteArray(Output window Graph overview IDA View-A Exports Imports Functions window Strings window Structures Enums)" "GraphDisplayOverview"=dword:00000001 "GraphInstructionsIndention"=dword:00000000 "GraphLinePrefixes"=dword:00000001 "GraphOpcodeBytes"=dword:00000000 "InstructionsIndention"=dword:00000010 "LastActiveForm"="" "OpcodeBytes"=dword:00000000 "StackPointer"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\QDesktop\Default\Database Windows\Hex View-A] "DK"=dword:00000001 "EC"=dword:fffffffe "IS"=dword:00000001 "NC"=dword:00000010 "ST"=dword:00000001 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\QDesktop\Default\Database Windows\IDA View-A] "ArrowsWidth"=dword:0000009e "GraphView"=dword:00000001 "ProximityView"=dword:00000000 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\QDesktop\Default\Main Windows] "ScreenHeight"=dword:0000041a "ScreenWidth"=dword:000013b0 [HKEY_CURRENT_USER\Software\Hex-Rays\IDA\QDesktop\Default\Main Windows\Main window] "Geometry"=hex:40,00,42,00,79,00,74,00,65,00,41,00,72,00,72,00,61,00,79,00,28,\ 00,01,00,d9,00,d0,00,cb,00,00,00,01,00,00,00,00,00,00,00,00,00,06,00,88,00,\ ff,00,ff,00,ff,00,f8,00,00,00,00,00,0d,00,27,00,00,00,00,00,03,00,f9,00,00,\ 00,00,00,06,00,98,00,00,00,00,00,00,00,1b,00,00,00,00,00,0d,00,17,00,00,00,\ 00,00,03,00,e9,00,00,00,00,00,00,00,00,00,02,00,00,00,29,00 "Maximized"=dword:00000001