IDC:函数列表
- IDA为IDC脚本提供了大量的内建支持函数,用来和IDA进行交流沟通,大大提升了IDA的威力,下面我们介绍一下IDA支持的函数列表。
- 为了描述方便,我们规定几个简称
-
- 'ea' - 代表一个线性地址
- 'success' - 0代表失败,1代表成功
- 'void' - 表示函数没有返回有意义的值( 可以认为返回的值为0 )
- 'anyvalue' - 表示函数的返回值可能是任意一种类型的
- 函数列表
AddAutoStkPnt2
AddUserStkPnt
AddBptEx
AddBpt
AddCodeXref
AddConstEx
AddEntryPoint
AddEnum
AddHotkey
AddSegEx
AddSourceFile
AddStrucEx
AddStrucMember
AltOp
Analysis
AnalyzeArea
Appcall
AppendFchunk
ApplySig
ApplyType
AskAddr
AskFile
AskIdent
AskSeg
AskSelector
AskStr
AskYN
AttachProcess
AutoMark2
AutoMark
AutoShow
Batch
BeginEA
BeginTypeUpdating
Byte
CanExceptionContinue
ChangeConfig
CheckBpt
CheckTraceFile
DiffTraceFile
ChooseFunction
CleanupAppcall
ClearTraceFile
CmtIndent
CommentEx
Comments
Compile
CompileEx
CreateArray
DalvikGetArrayElem
DalvikGetArraySize
DalvikGetInstanceFld
DalvikGetLocal
DalvikGetLocalTyped
DbgByte
DbgWord
DbgDword
DbgQword
DbgRead
DbgWrite
DelArrayElement
DelBpt
DelCodeXref
DelConstEx
DelEnum
DelExtLnA
DelExtLnB
DelFixup
DelFunction
DelHashElement
DelHiddenArea
DefineException
DelHotkey
DelLineNumber
DelSeg
DelSelector
DelSourceFile
DelStkpnt
DelStrucMember
DelStruc
DelUserInfo
DeleteAll
DeleteArray
Demangle
DetachProcess
DfirstB
Dfirst
DnextB
Dnext
Dword
EnableBpt
EnableTracing
EndTypeUpdating
Eval
Exec
Exit
ExpandStruc
ExtLinA
ExtLinB
Fatal
FindBinary
FindCode
FindData
FindExplored
FindFuncEnd
FindImmediate
FindSelector
FindText
FindUnexplored
FindVoid
FirstFuncFchunk
FirstSeg
ForgetException
GenCallGdl
GenFuncGdl
GenerateFile
GetArrayElement
GetArrayId
GetBmaskCmt
GetBmaskName
GetMinSpd
GetBptAttr
GetBptEA
GetBptQty
GetBptTevEa
GetCharPrm
GetColor
GetConstBmask
GetConstByName
GetConstCmt
GetConstEnum
GetConstEx
GetConstName
GetConstValue
GetCurrentLine
GetCurrentThreadId
GetCustomDataType
GetCustomDataFormat
GetDebuggerEvent
GetDisasm
GetDisasmEx
GetEntryName
GetEntryOrdinal
GetEntryPointQty
GetEntryPoint
GetEnum
GetEnumCmt
GetEnumFlag
GetEnumIdx
GetEnumName
GetEnumQty
GetEnumSize
GetEnumWidth
GetEventBptHardwareEa
GetEventEa
GetEventExceptionCode
GetEventExceptionEa
GetEventExceptionInfo
GetEventExitCode
GetEventId
GetEventInfo
GetEventModuleBase
GetEventModuleName
GetEventModuleSize
GetEventPid
GetEventTid
GetExceptionCode
GetExceptionFlags
GetExceptionName
GetExceptionQty
GetFchunkAttr
GetFirstBmask
GetFirstConst
GetFirstHashKey
GetFirstIndex
GetFirstMember
GetFirstModule
GetFirstStrucIdx
GetFixupTgtDispl
GetFixupTgtOff
GetFixupTgtSel
GetFixupTgtType
GetFlags
GetFrameArgsSize
GetFrameLvarSize
GetFrameRegsSize
GetFrameSize
GetFrame
GetFuncOffset
GetFunctionAttr
GetFunctionCmt
GetFunctionFlags
GetFunctionName
GetHashLong
GetHashString
GetIdaDirectory
GetIdbPath
GetInputFilePath
GetInputFile
GetInputMD5
GetLastBmask
GetLastConst
GetLastHashKey
GetLastIndex
GetLastMember
GetLastStrucIdx
GetLineNumber
GetLocalTinfo
GetLocalTypeName
GetLongPrm
GetManyBytes
GetManualInsn
GetMarkComment
GetMarkedPos
GetMaxLocalType
GetMaxTev
GetMemberComment
GetMemberFlag
GetMemberId
GetMemberName
GetMemberOffset
GetMemberQty
GetMemberSize
GetMemberStrId
GetMnem
GetModuleName
GetModuleSize
GetNextBmask
GetNextConst
GetNextFixupEA
GetNextHashKey
GetNextIndex
GetNextModule
GetNextStrucIdx
GetOpType
GetOperandValue
GetOpnd
DecodeInstruction
GetOriginalByte
GetPrevBmask
GetPrevConst
GetPrevFixupEA
GetPrevHashKey
GetPrevIndex
GetPrevStrucIdx
GetProcessName
GetProcessPid
GetProcessQty
GetProcessState
GetRegValue
GetReg
GetSegmentAttr
GetStepTraceOptions
GetShortPrm
GetSourceFile
GetSpDiff
GetSpd
GetStringType
GetString
GetStrucComment
GetStrucIdByName
GetStrucId
GetStrucIdx
GetStrucName
GetStrucNextOff
GetStrucPrevOff
GetStrucQty
GetStrucSize
GetTevCallee
GetTevEa
GetTevRegVal
GetTevRegMemQty
GetTevRegMemEa
GetTevRegMem
GetTevReturn
GetTevTid
GetTevType
GetThreadId
GetThreadQty
GetTinfo
GetTraceDesc
GetTrueName
GetType
GetnEnum
GuessType
FormatCData
HideArea
HighVoids
IdbByte
Indent
IsBitfield
IsEventHandled
IsFloat
IsFunc
IsInt64
IsLong
IsObject
IsPvoid
IsString
IsUnion
ItemEnd
ItemHead
ItemSize
Jump
LineA
LineB
LoadDebugger
LoadTil
LoadTraceFile
LocByName
LowVoids
MK_FP
MakeAlign
MakeArray
MakeByte
MakeCode
MakeComm
MakeCustomData
MakeData
MakeDouble
MakeDword
MakeFloat
MakeFrame
MakeFunction
MakeLocal
MakeName
MakeNameEx
MakeOword
MakePackReal
MakeQword
MakeRptCmt
MakeStr
MakeStructEx
MakeTbyte
MakeUnkn
MakeUnknown
MakeVar
MakeWord
MakeYword
MarkPosition
MaxEA
Message
MinEA
MoveSegm
Name
NextAddr
NextFchunk
NextFuncFchunk
NextFunction
NextHead
NextNotTail
NextSeg
OpAlt
OpBinary
OpChr
OpDecimal
OpEnumEx
OpFloat
OpHex
OpHigh
OpNot
OpNumber
OpOctal
OpOffEx
OpOff
OpSeg
OpSign
OpStkvar
OpStroffEx
ParseTypes
PrintLocalTypes
PatchByte
PatchDbgByte
PatchDword
PatchWord
PauseProcess
PrevAddr
PrevFchunk
PrevFunction
PrevHead
PrevNotTail
ProcessUiAction
Qword
ReadMsr
RebaseProgram
RefreshDebuggerMemory
RefreshLists
Refresh
RemoveFchunk
RenameArray
RenameEntryPoint
RenameSeg
ResumeThread
Rfirst0
RfirstB0
RfirstB
Rfirst
Rnext0
RnextB0
RnextB
Rnext
RunPlugin
RunTo
SaveBase
SaveTraceFile
ScreenEA
SegAlign
SegByBase
SegByName
SegComb
SegEnd
SegName
SegStart
SelEnd
SelStart
SelectThread
SendDbgCommand
SetArrayFormat
SetArrayLong
SetArrayString
SetBmaskCmt
SetBmaskName
SetBptAttr
SetBptCnd
SetBptCndEx
SetCharPrm
SetColor
SetConstCmt
SetConstName
SetDebuggerOptions
SetEnumBf
SetEnumCmt
SetEnumFlag
SetEnumIdx
SetEnumName
SetEnumWidth
SetFchunkAttr
SetFchunkOwner
SetFixup
SetFlags
SetFunctionAttr
SetFunctionCmt
SetFunctionEnd
SetFunctionFlags
SetHashLong
SetHashString
SetHiddenArea
SetInputFilePath
SetLineNumber
SetLocalType
SetLongPrm
SetManualInsn
SetMemberComment
SetMemberName
SetMemberType
SetProcessorType
SetRegValue
SetReg
SetRegEx
SetRemoteDebugger
SetSegAddressing
SetSegBounds
SetSegClass
SetSegDefReg
SetSegmentAttr
SetSegmentType
SetSelector
SetShortPrm
RecalcSpd
SetSpDiff
SetStatus
SetStepTraceOptions
SetStorageType
SetStrucComment
SetStrucIdx
SetStrucName
SetTargetAssembler
SetTraceDesc
Sleep
StartDebugger
StepInto
StepOver
StepUntilRet
StopDebugger
StringStp
SuspendThread
Tabs
TailDepth
Til2Idb
Voids
Wait
Warning
Word
WriteMsr
XrefShow
XrefType
add_dref
atoa
atol
byteValue
delattr
del_dref
fclose
fgetc
filelength
firstattr
fopen
fprintf
fputc
fseek
ftell
get_field_ea
getattr
hasName
hasValue
hasattr
isBin0
isBin1
isChar0
isChar1
isCode
isData
isDec0
isDec1
isDefArg0
isDefArg1
isEnum0
isEnum1
isExtra
isFlow
isFop0
isFop1
isHead
isHex0
isHex1
isLoaded
isOct0
isOct1
isOff0
isOff1
isRef
isSeg0
isSeg1
isStkvar0
isStkvar1
isStroff0
isStroff1
isTail
isUnknown
isVar
lastattr
loader_input.close
loader_input.getc
loader_input.gets
loader_input.getz
loader_input.read
loader_input.readbytes
loader_input.seek
loader_input.size
loader_input.tell
loadfile
ltoa
mkdir
nextattr
open_loader_input
ord
prevattr
print
readlong
readshort
readstr
rename
rotate_left
savefile
setattr
set_start_cs
set_start_ip
sizeof
sprintf
strlen
strfill
strstr
substr
trim
unlink
writelong
writeshort
writestr
xtol
typeinfo.print
typeinfo.size