下面是函数描述信息中的约定:
‘ea‘ 线性地址 ‘success‘ 0表示函数失败;反之为1 ‘void‘表示函数返回的是没有意义的值(总是0)
AddBptEx AddBpt AddCodeXref AddConstEx AddEntryPoint AddEnum AddHotkey AddSourceFile AddStrucEx AddStrucMember AltOp Analysis AnalyzeArea AppendFchunk ApplySig AskAddr AskFile AskIdent AskSeg AskSelector AskStr AskYN AttachProcess AutoMark2 AutoMark AutoShow Batch BeginEA Byte CanExceptionContinue ChangeConfig CheckBpt ChooseFunction CmtIndent CommentEx Comments Compile CompileEx CreateArray DelArrayElement DelBpt DelCodeXref DelConstEx DelEnum DelExtLnA DelExtLnB DelFixup DelFunction DelHashElement DelHiddenArea DefineException DelHotkey DelLineNumber DelSelector DelSourceFile DelStrucMember DelStruc DelXML DeleteAll DeleteArray Demangle DetachProcess DfirstB Dfirst DnextB Dnext Dword EnableBpt EnableTracing Eval Exec Exit ExtLinA ExtLinB Fatal FindBinary FindCode FindData FindExplored FindFuncEnd FindImmediate FindSelector FindText FindUnexplored FindVoid FirstFuncFchunk FirstSeg ForgetException GenCallGdl GenFuncGdl GenerateFile GetArrayElement GetArrayId GetBmaskCmt GetBmaskName GetBptAttr GetBptEA GetBptQty GetCharPrm GetColor GetConstBmask GetConstByName GetConstCmt GetConstEnum GetConstEx GetConstName GetConstValue GetCurrentLine GetCurrentThreadId GetDebuggerEvent GetDisasm GetEntryName GetEntryOrdinal GetEntryPointQty GetEntryPoint GetEnum GetEnumCmt GetEnumFlag GetEnumIdx GetEnumName GetEnumQty GetEnumSize GetEnumWidth GetEventBptHardwareEa GetEventEa GetEventExceptionCode GetEventExceptionEa GetEventExceptionInfo GetEventExitCode GetEventId GetEventInfo GetEventModuleBase GetEventModuleName GetEventModuleSize GetEventPid GetEventTid GetExceptionCode GetExceptionFlags GetExceptionName GetExceptionQty GetFchunkAttr GetFirstBmask GetFirstConst GetFirstHashKey GetFirstIndex GetFirstMember GetFirstModule GetFirstStrucIdx GetFixupTgtDispl GetFixupTgtOff GetFixupTgtSel GetFixupTgtType GetFlags GetFrameArgsSize GetFrameLvarSize GetFrameRegsSize GetFrameSize GetFrame GetFuncOffset GetFunctionAttr GetFunctionCmt GetFunctionFlags GetFunctionName GetHashLong GetHashString GetIdaDirectory GetIdbPath GetInputFilePath GetInputFile GetInputMD5 GetLastBmask GetLastConst GetLastHashKey GetLastIndex GetLastMember GetLastStrucIdx GetLineNumber GetLocalType GetLocalTypeName GetLongPrm GetManualInsn GetMarkComment GetMarkedPos GetMaxLocalType GetMemberComment GetMemberFlag GetMemberName GetMemberOffset GetMemberQty GetMemberSize GetMemberStrId GetMnem GetModuleName GetModuleSize GetNextBmask GetNextConst GetNextFixupEA GetNextHashKey GetNextIndex GetNextModule GetNextStrucIdx GetOpType GetOperandValue GetOpnd GetOriginalByte GetPrevBmask GetPrevConst GetPrevFixupEA GetPrevHashKey GetPrevIndex GetPrevStrucIdx GetProcessName GetProcessPid GetProcessQty GetProcessState GetRegValue GetRegValue GetReg GetSegmentAttr GetShortPrm GetSourceFile GetSpDiff GetSpd GetStringType GetString GetStrucComment GetStrucIdByName GetStrucId GetStrucIdx GetStrucName GetStrucNextOff GetStrucPrevOff GetStrucQty GetStrucSize GetThreadId GetThreadQty GetTrueName GetType GetXML GetnEnum GuessType HideArea HighVoids IdbByte Indent IsBitfield IsEventHandled IsFloat IsLong IsString IsUnion ItemEnd ItemSize Jump LineA LineB LoadDebugger LoadTil LocByName LowVoids MK_FP MakeAlign MakeArray MakeByte MakeCode MakeComm MakeData MakeDouble MakeDword MakeFloat MakeFrame MakeFunction MakeLocal MakeName MakeNameEx MakeOword MakePackReal MakeQword MakeRptCmt MakeStr MakeStructEx MakeTbyte MakeUnkn MakeUnknown MakeVar MakeWord MarkPosition MaxEA Message MinEA Name NextAddr NextFchunk NextFuncFchunk NextFunction NextHead NextNotTail NextSeg OpAlt OpBinary OpChr OpDecimal OpEnumEx OpHex OpHigh OpNot OpNumber OpOctal OpOffEx OpOff OpSeg OpSign OpStkvar OpStroffEx ParseTypes PatchByte PatchDbgByte PatchDword PatchWord PauseProcess PopXML PrevAddr PrevFchunk PrevFunction PrevHead PrevNotTail PushXML Qword RefreshDebuggerMemory RefreshLists Refresh RemoveFchunk RenameArray RenameEntryPoint ResumeThread Rfirst0 RfirstB0 RfirstB Rfirst Rnext0 RnextB0 RnextB Rnext RunPlugin RunTo SaveBase ScreenEA SegAddrng SegAlign SegBounds SegByBase SegByName SegClass SegComb SegCreate SegDefReg SegDelete SegEnd SegName SegRename SegStart SelEnd SelStart SelectThread SetArrayFormat SetArrayLong SetArrayString SetBmaskCmt SetBmaskName SetBptAttr SetBptCnd SetCharPrm SetColor SetConstCmt SetConstName SetDebuggerOptions SetEnumBf SetEnumCmt SetEnumFlag SetEnumIdx SetEnumName SetEnumWidth SetFchunkAttr SetFchunkOwner SetFixup SetFlags SetFunctionAttr SetFunctionCmt SetFunctionEnd SetFunctionFlags SetHashLong SetHashString SetHiddenArea SetInputFilePath SetLineNumber SetLocalType SetLongPrm SetManualInsn SetMemberComment SetMemberName SetMemberType SetProcessorType SetRegValue SetRegValue SetReg SetRegEx SetRemoteDebugger SetSegmentAttr SetSegmentType SetSelector SetShortPrm SetSpDiff SetStatus SetStrucComment SetStrucIdx SetStrucName SetType SetXML Sleep StartDebugger StepInto StepOver StepUntilRet StopDebugger StringStp SuspendThread Tabs TailDepth Til2Idb Voids Wait Warning Word XrefShow XrefType add_dref atoa atol byteValue del_dref fclose fgetc filelength fopen form fprintf fputc fseek ftell hasName hasValue isBin0 isBin1 isChar0 isChar1 isCode isData isDec0 isDec1 isDefArg0 isDefArg1 isEnum0 isEnum1 isExtra isFlow isFop0 isFop1 isHead isHex0 isHex1 isLoaded isOct0 isOct1 isOff0 isOff1 isRef isSeg0 isSeg1 isStkvar0 isStkvar1 isStroff0 isStroff1 isTail isUnknown isVar loadfile ltoa ord readlong readshort readstr rotate_left savefile set_start_cs set_start_ip strlen strstr substr writelong writeshort writestr xtol
原文:http://www.cnblogs.com/Y4ng/p/ida_fuction.html