一个用于提取内存的IDA脚本

import struct
start = AskAddr(0x2D590 , "start address:")
print "start address:%08x"%(start)
length = AskLong(0x208 , "length:")
print "length:%d"%(length)
fn = AskStr("c:\\table.dump" ,"save as:" )
with open(fn,"wb+") as f:
    for addr in range(start , start+length):
        f.write(struct.pack("B" , Byte(addr)))
print "success to save as ",fn