能力值:
( LV12,RANK:370 )
|
-
-
2 楼
这个是我在plugin.inc中弄出来对照的的
l 结构
排列测试结构---t_aligntest
字符串搜索结构---t_hexstr
汇编命令搜索模块结构---t_asmmodel
扩展命令搜索模块结构---t_extmodel
颜色配置结构---t_scheme
可选择颜色配置结构---t_schemeopt
bar结构---t_bar
分类数据域header结构---t_sortheader
广义的分类表结构---t_sorted
使用分类数据和bar窗口结构---t_table
上下文(context)引用结构---t_reg
操作数结构---t_operand
汇编监控结构---t_disasm
表达式赋值的Result结构---t_result
活动线程信息结构---t_thread
内存描述块结构---t_memory
广义堆块结构---t_heap
指向字符串资源的结构---t_stringtable
关于固定或修正的结构---t_fixup
调试数据符号变量结构---t_symvar
跳转数据元素结构---t_jdest
可执行模块描述结构---t_module
当前或通用状况dump数据的结构---t_dump
参考描述结构---t_ref
INT3断点描述结构---t_bpoint
硬件断点结构---t_hardbpoint
注入代码描述结构---t_inject
资源排序描述符结构---t_sourceline
窗口描述结构---t_window
l 函数
1. 常规函数
添加到序列---Addtolist
更新序列---Updatelist
建立索引窗口--Createlistwindow-
错误---Error
消息---Message
信息线路---Infoline
前进---Progress
反射---Flash
2. 数据格式化函数
Decodeaddress proto C addr_:dword, base:dword, addrmode:dword, symb:ptr byte, nsymb:dword, comment_:ptr byte;
Decoderelativeoffset proto C addr_:dword, addrmode:dword, symb:ptr byte, nsymb:dword
Decodecharacter proto C s:ptr byte, c_:dword
Printfloat4 proto C s:ptr byte, f:real4
Printfloat8 proto C s:ptr byte, double_1:dword, double_2:dword
Printfloat10 proto C s:ptr byte, double_1:dword, double_2:dword
Print3dnow proto s:ptr byte, f:ptr byte
Printsse proto s:ptr byte, f:ptr byte
Followcall proto addr_:dword
IstextA proto C c_:byte
IstextW proto C w:word
Stringtotext proto C data:ptr byte, ndata:dword, text:ptr byte, ntext:dword
3. 数据输入函数
Getlong proto C title_:ptr byte, data:dword, datasize:dword, letter:byte, mode:dword
Getlongxy proto C title_:ptr byte, data:dword, datasize:dword, letter:byte, mode:dword, x:dword, y:dword
Getregxy proto C title_:ptr byte, data:dword, letter:byte, x:dword, y:dword
Getline proto C title_:ptr byte, data:dword
Getlinexy proto C title_:ptr byte, data:dword, x:dword, y:dword
Getfloat10 proto C title_:ptr byte, fdata:ptr real10, tag:ptr byte, letter:byte, mode:dword
Getfloat10xy proto C title_:ptr byte, fdata:ptr real10, tag:ptr byte, letter:byte, mode:dword, x:dword, y:dword
Getfloat proto C title_:ptr byte, fdata:dword, size_:dword, letter:byte, mode:dword
Getfloatxy proto C title_:ptr byte, fdata:dword, size_:dword, letter:byte, mode:dword, x:dword, y:dword
Getasmfindmodel proto C model_:ptr t_asmmodel, letter:byte, searchall:dword
Getasmfindmodelxy proto C model_:ptr t_asmmodel, letter:byte, searchall:dword, x:dword, y:dword
Gettext proto C title_:ptr byte, text:ptr byte, letter:byte, type_:dword, fontindex:dword
Gettextxy proto C title_:ptr byte, text:ptr byte, letter:byte, type_:dword, fontindex:dword, x:dword, y:dword
Gethexstring proto C title_:ptr byte, hs:ptr t_hexstr, mode:dword, fontindex:dword, letter:byte
Gethexstringxy proto C title_:ptr byte, hs:ptr t_hexstr, mode:dword, fontindex:dword, letter:byte, x:dword, y:dword
Getmmx proto C title_:ptr byte, data:byte, mode:dword
Getmmxxy proto C title_:ptr byte, data:byte, mode:dword, x:dword, y:dword
Get3dnow proto C title_:ptr byte, data:byte, mode:dword
Get3dnowxy proto C title_:ptr byte, data:byte, mode:dword, x:dword, y:dword
Browsefilename proto C title_:ptr byte, name_:ptr byte, defext:ptr byte, getarguments:dword
OpenEXEfile proto C path:ptr byte, dropped:dword
Animate proto C animation:dword
4. 绘制或绘制过程函数
SORTFUNC typedef proto :ptr t_sortheader, :ptr t_sortheader, :dword
PSORTFUNC typedef ptr SORTFUNC
DRAWFUNC typedef proto :ptr byte, :ptr byte, :ptr dword, :ptr t_sortheader, :dword
PDRAWFUNC typedef ptr DRAWFUNC
DESTFUNC typedef proto :ptr t_sortheader
PDESTFUNC typedef ptr DESTFUNC
Createsorteddata proto C sd:ptr t_sorted, name_:ptr byte, itemsize:dword, nmax:dword, sortfunc:PSORTFUNC, destfunc:PDESTFUNC
Destroysorteddata proto C sd:ptr t_sorted
Addsorteddata proto C sd:ptr t_sorted, item:dword
Deletesorteddata proto C sd:ptr t_sorted, addr_:dword
Deletesorteddatarange proto C sd:ptr t_sorted, addr0:dword, addr1:dword
Deletenonconfirmedsorteddata proto C sd:ptr t_sorted
Findsorteddata proto C sd:ptr t_sorted, addr_:dword
Findsorteddatarange proto C sd:ptr t_sorted, addr0:dword, addr1:dword
Findsorteddataindex proto C sd:ptr t_sorted, addr0:dword, addr1:dword
Sortsorteddata proto C sd:ptr t_sorted, sort:dword
Getsortedbyselection proto C sd:ptr t_sorted, index:dword
Defaultbar proto C pb:ptr t_bar
Tablefunction proto C pt:ptr t_table, hw:HWND, msg:UINT, wp:WPARAM, lp:LPARAM
Painttable proto C hw:HWND, pt:ptr t_table, getline:DRAWFUNC
Gettableselectionxy proto C pt:ptr t_table, column:dword, px:ptr dword, py:ptr dword
Selectandscroll proto C pt:ptr t_table, index:dword, mode:dword
5. name函数
Insertname proto C addr_:dword, type_:dword, name_:ptr byte
Quickinsertname proto C addr_:dword, type_:dword, name_:ptr byte
Mergequicknames proto C
Discardquicknames proto C
Findname proto C addr_:dword, type_:dword, name_:ptr byte
Decodename proto C addr_:dword, type_:dword, name_:ptr byte
Findnextname proto C name_:ptr byte
Findlabel proto C addr_:dword, name_:ptr byte
Deletenamerange proto C addr0:dword, addr1:dword, type_:dword
Findlabelbyname proto C name_:ptr byte, addr_:ptr dword, addr0:dword, addr1:dword
Findimportbyname proto C name_:ptr byte, addr0:dword, addr1:dword
Demanglename proto C name_:ptr byte, type_:dword, undecorated:ptr byte
Findsymbolicname proto C addr_:dword, fname:ptr byte
6. 解构函数
Disasm proto C src:ptr byte, srcsize:dword, srcip:dword, srcdec:ptr byte, disasm:ptr t_disasm, disasmmode:dword, threadid:dword
Disassembleback proto C block:ptr byte, base:dword, size_:dword, ip:dword, n:dword, usedec:dword
Disassembleforward proto C block:ptr byte, base:dword, size_:dword, ip:dword, n:dword, usedec:dword
Issuspicious proto C cmd:ptr byte, size_:dword, ip:dword, threadid:dword, preg:ptr t_reg, s:ptr byte
Isfilling proto C offset_:dword, data:ptr byte, size_:dword, align_:dword
7. 汇编函数
Expression proto C result:ptr t_result, expression:ptr byte, a:dword, b:dword, data:ptr byte, database:dword, datasize:dword, threadid:dword
8. 线程函数
Createthreadwindow proto C
Findthread proto threadid:dword
Decodethreadname proto C s:dword, threadid:dword, mode_:dword
Getcputhreadid proto C
Runsinglethread proto C threadid:dword
Restoreallthreads proto C
9. 内存函数
Findmemory proto C
Guardmemory proto C base:dword, size_:dword, guard:dword
Havecopyofmemory proto C copy:ptr byte, base:dword, size_:dword
Readmemory proto C buf:dword, addr_:dword, size_:dword, mode:dword
Writememory proto C buf:dword, addr_:dword, size_:dword, mode:dword
Readcommand proto C ip:dword, cmd:ptr byte
10. 模块函数
Findmodule proto C addr_:dword
Findfixup proto C pmod:ptr t_module, addr_:dword
Finddecode proto C addr_:dword, psize:ptr dword
Findfileoffset proto C pmod:ptr t_module, addr_:dword
Decoderange proto C addr_:dword, size_:dword, s:ptr byte
Analysecode proto C pm:ptr t_module
11. dump函数
SPECFUNC typedef proto :ptr byte, :dword, :dword, :dword, :ptr t_disasm, :dword
PSPECFUNC typedef ptr SPECFUNC
12. 窗口函数
Registerotclass proto C classname:ptr byte, iconname:ptr byte, classproc:dword
Newtablewindow proto C pt:ptr t_table, nlines:dword, maxcolumns:dword, winclass:ptr byte, wintitle:ptr byte
Quicktablewindow proto C pt:ptr t_table, nlines:dword, maxcolumns:dword, winclass:ptr byte, wintitle:ptr byte
Createdumpwindow proto C name_:ptr byte, base:dword, size_:dword, addr_:dword, type_:dword, specdump:PSPECFUNC
Setdumptype proto C pd:ptr t_dump, dumptype:dword
Dumpbackup proto pd:ptr t_dump, action:dword
Broadcast proto C msg:UINT, wp:WPARAM, lp:LPARAM
13. 数据转换函数
Compress proto C bufin:ptr byte, nbufin:dword, bufout:ptr byte, nbufout:dword
Getoriginaldatasize proto C bufin:ptr byte, nbufin:dword
Decompress proto C bufin:ptr byte, nbufin:dword, bufout:ptr byte, nbufout:dword
Calculatecrc proto C copy:ptr byte, base:dword, size_:dword, pmod:ptr t_module, fixupoffset:dword
14. 参考和搜索函数
Findreferences proto C base:dword, size_:dword, addr0:dword, addr1:dword, origin:dword, recurseonjump:dword, title_:ptr byte
Findstrings proto C base:dword, size_:dword, origin:dword, title_:ptr byte
Findalldllcalls proto C pd:ptr t_dump, origin:dword, title_:ptr byte
Findallcommands proto C pd:ptr t_dump, model_:ptr t_asmmodel, origin:dword, title_:ptr byte
Findallsequences proto C pd:ptr t_dump, model_:ptr t_extmodel, origin:dword, title_:ptr byte
Walkreference proto C dir:dword
Walkreferenceex proto C dir:dword, size_:dword
15. 断点和追踪函数
Setbreakpoint proto C addr_:dword, type_:dword, cmd:byte
Manualbreakpoint proto C addr_:dword, key:dword, shiftkey:dword, nametype:dword, font:dword
Deletebreakpoints proto C addr0:dword, addr1:dword, silent:dword
Getbreakpointtype proto addr_:dword
Getnextbreakpoint proto C addr_:dword, type_:ptr dword, cmd:ptr dword
Tempbreakpoint proto C addr_:dword, mode:dword
Hardbreakpoints proto C closeondelete:dword
Sethardwarebreakpoint proto C addr_:dword, size_:dword, type_:dword
Deletehardwarebreakpoint proto C index:dword
Deletehardwarebreakbyaddr proto C addr_:dword
Setmembreakpoint proto C type_:dword, addr_:dword, size_:dword
Findhittrace proto C addr_:dword, ptracecopy:ptr LPBYTE, psize:ptr byte
Modifyhittrace proto C addr0:dword, addr1:dword, mode:dword
Isretaddr proto C retaddr:dword, procaddr:LPDWORD
Creatertracewindow proto C
Settracecondition proto C cond:ptr byte, onsuspicious:dword, in0:dword, in1:dword, out0:dword, out1:dword
Startruntrace proto C preg:ptr t_reg
Deleteruntrace proto C
Runtracesize proto C
Findprevruntraceip proto C ip:dword, startback:dword
Findnextruntraceip proto C ip:dword, startback:dword
Getruntraceregisters proto C nback:dword, preg:ptr t_reg, pold:ptr t_reg, cmd:ptr byte, comment_:ptr byte
Getruntraceprofile proto C addr_:dword, size_:dword, profile:LPDWORD
Scrollruntracewindow proto C back:dword
Createprofilewindow proto C base:dword, size_:dword
16. 代码注入函数
Injectcode proto C threadid:dword, inject:ptr t_inject, data:ptr byte, datasize:dword, parm1:dword, parm2:dword, answerfunc: PINJECTANSWER
17. CPU细节函数
Setcpu proto C threadid:dword, asmaddr:dword, dumpaddr:dword, stackaddr:dword, mode:dword
Setdisasm proto C asmaddr:dword, selsize:dword, mode:dword
Redrawdisassembler proto C
Getdisassemblerrange proto C pbase:LPDWORD, psize:LPDWORD
Findprocbegin proto C addr_:dword
Findprocend proto C addr_:dword
Findprevproc proto C addr_:dword
Findnextproc proto C addr_:dword
Getproclimits proto C addr_:dword, start:LPDWORD, end_:LPDWORD
Sendshortcut proto C where:dword, addr_:dword, msg_:dword, ctrl_:dword, shift_:dword, vkcode_:dword
18. 进程函数
Getstatus proto C
Go proto threadid:dword, tilladdr:dword, stepmode:dword, givechance:dword, backupregs:dword
Suspendprocess proto C processevents:dword
19. 解码和论据函数
Findknownfunction proto C addr_:dword, direct:dword, level:dword, fname:ptr byte
Decodeknownargument proto C addr_:dword, arg_:ptr byte, value:dword, valid:dword, s:ptr byte, mask_:ptr byte, pset:ptr byte
Findunknownfunction proto C ip:dword, code_:ptr byte, dec_:ptr byte, size_:dword, fname:ptr byte
Decodeascii proto C value:dword, s:ptr byte, len:dword, mode:dword
Decodeunicode proto C value:dword, s:ptr byte, len:dword
20. 源代码支持函数
Showsourcefromaddress proto C addr_:dword, show:dword
Getresourcestring proto C pm:ptr t_module, id:dword, s:ptr byte
Getlinefromaddress proto C addr_:dword
Getaddressfromline proto C addr0:dword, addr1:dword, path:ptr byte, line:dword
Getsourcefilelimits proto C nameaddr:dword, addr0:LPDWORD, addr1:LPDWORD
Decodefullvarname proto C pmod:ptr t_module, psym:ptr t_symvar, offset_:dword, name_:ptr byte
Getbprelname proto C pmod:ptr t_module, addr_:dword, offset_:dword, s:ptr byte, nsymb:dword
21. 监控支持函数
Createwatchwindow proto C
Deletewatch proto C indexone:dword
Insertwatch proto C indexone:dword, text:ptr byte
Getwatch proto C indexone:dword, text:ptr byte
22. 窗口细节函数
Createwinwindow proto C
23. PLUGIN细节函数
Registerpluginclass proto C classname:ptr byte, iconname:ptr byte, dllinst:HINSTANCE, classproc:dword
Unregisterpluginclass proto C classname:ptr byte
Pluginwriteinttoini proto C dllinst:HINSTANCE, key:ptr byte, value:dword
Pluginwritestringtoini proto dllinst:HINSTANCE, key:ptr byte, s:ptr byte
Pluginreadintfromini proto C dllinst:HINSTANCE, key:ptr byte, def:dword
Pluginreadstringfromini proto C dllinst:HINSTANCE, key:ptr byte, s:ptr byte, def:ptr byte
Pluginsaverecord proto C tag:dword, size_:dword, data:dword
Plugingetvalue proto C type_:dword
24. 输出PLUGIN回调函数
_ODBG_Plugindata proto C shortname:ptr byte
_ODBG_Plugininit proto C ollydbgversion:dword, hw:HWND, features:ptr dword
_ODBG_Pluginmainloop proto C debugevent:ptr DEBUG_EVENT
_ODBG_Pluginsaveudd proto C pmod:ptr t_module, ismainmodule:dword
_ODBG_Pluginuddrecord proto C pmod:ptr t_module, ismainmodule:dword, tag:dword, size_:dword, data:dword
_ODBG_Pluginmenu proto C origin:dword, data:ptr byte, item:dword
_ODBG_Pluginaction proto C origin:dword, action:dword, item:dword
_ODBG_Pluginshortcut proto C origin:dword, ctrl:dword, alt:dword, shift:dword, key:dword, item:dword
_ODBG_Pluginreset proto C
_ODBG_Pluginclose proto C
_ODBG_Plugindestroy proto C
有错请原谅
|