ollygetsym.txt

IDA教程

var ea
var Ecount							
var oFile

ask "请输入IAT起始地址"
cmp $RESULT, 0
je ECancel
mov ea, $RESULT
ask "输出文件？"
cmp $RESULT, 0
je ECancel
mov oFile, $RESULT

TryGetSym:
GN [ea]								
cmp $RESULT,00000000		
je ETest
WRTA oFile,$RESULT_2 

mov Ecount,0
add ea,4
jmp TryGetSym

ECancel:
msg "无效输入"
ret

ETest:
cmp Ecount,1				
je Send				
add Ecount,1
add ea,4
jmp TryGetSym

SEnd:
Ret