转三文本检测IP(修改更新)

admin

1.增加一个命令
:0048A2DF E9BC330800JMP 0050D6A0
:0048A2E4 90NOP

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0048A2DF(U)
|
:0050D6A0 8D9558FFFFFFLEA EDX,DWORD PTR SS:[EBP-A8]
:0050D6A6 8B45F0MOV EAX,DWORD PTR SS:[EBP-10]
:0050D6A9 E8CAB5EFFFCALL 00408C78
:0050D6AE 8B8558FFFFFFMOV EAX,DWORD PTR SS:[EBP-A8]

* Possible StringData Ref from Code Obj ->"CHECKIP"
| dedecms.com
:0050D6B4 BAE8D65000MOV EDX,0050D6E8
:0050D6B9 E81E69EFFFCALL 00403FDC
:0050D6BE 7507JNZ SHORT 0050D6C7
:0050D6C0 C745E48A000000MOV DWORD PTR SS:[EBP-1C],8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0050D6BE(C)
|
:0050D6C7 8D9558FFFFFFLEA EDX,DWORD PTR SS:[EBP-A8]
:0050D6CD E913CCF7FFJMP 0048A2E5
:0050D6D2 90NOP

2.检测的地方。 织梦内容管理系统
:0049BDE1 E96A180700JMP 0050D650

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0049BDE1(U)
|
:0050D650 0589000000ADD EAX,89
:0050D655 3D8A000000CMP EAX,8A
:0050D65A 7537JNZ SHORT 0050D693
:0050D65C 8B4508MOV EAX,DWORD PTR SS:[EBP+8]
:0050D66F 8B40F0MOV EAX,DWORD PTR DS:[EAX-10]
:0050D662 8B9060050000MOV EDX,DWORD PTR DS:[EAX+560] 织梦内容管理系统
:0050D668 8D45BCLEA EAX,DWORD PTR SS:[EBP-44]
:0050D66B 8B4DD0MOV ECX,DWORD PTR SS:[EBP-30]
:0050D66E 8B4904MOV ECX,DWORD PTR DS:[ECX+4]
:0050D671 E8A268EFFFCALL 00403F18
:0050D676 8B55BCMOV EDX,DWORD PTR SS:[EBP-44]
:0050D679 8B4508MOV EAX,DWORD PTR SS:[EBP+8]
:0050D67C 8B40FCMOV EAX,DWORD PTR DS:[EAX-4] copyright dedecms
:0050D67F 8B8098050000MOV EAX,DWORD PTR DS:[EAX+598]
:0050D685 90NOP
:0050D686 E8F1DDF8FFCALL 0049B47C
:0050D68B 84C0TEST AL,AL
:0050D68D 7504JNZ SHORT 0050D693
:0050D68F C645FB00MOV BYTE PTR SS:[EBP-5],0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0050D65A(C), :0050D68D(C)
|
:0050D693 E9F7F0F8FFJMP 0049C78F 本文来自织梦

:0050D698 90NOP

UE修改方法!
第一处
绝对地址:0X0896DFH
查找:8D9558FFFFFF
替换:E9BC33080090

第二处
绝对地址:0X09B1E1H
查找:E9A9090000
替换:E96A180700

第三处
绝对地址:0X107A50H
查找:
000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000
替换:
05890000003D8A00000075378B45088B40F08B90600500008D45BC8B4DD08B4904E8A268EFFF8B
55BC8B45088B40FC8B809805000090E8F1DDF8FF84C07504C645FB00E9F7F0F8FF90

第四处
绝对地址:0X107AA0H
查找:
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
替换:
8D9558FFFFFF8B45F0E8CAB5EFFF8B8558FFFFFFBAE8D65000E81E69EFFF7507C745E48A000000
8D9558FFFFFFE913CCF7FF90

第五处
绝对地址:0X107AE0H copyright dedecms
查找:
00000000000000000000000000000000
替换:
FFFFFFFF07000000434845434B495000

测试脚本
[@main]
#IF
CHECKIP IP.txt
#SAY
你的IP在规定范围内！
#ELSESAY
您的IP没有在规定的地址里。


注:我测试的时候是在Mir200EnvirNpc_Def里的国王脚本测试的
顺便在Npc_Def里创建个IP.TXT文本
每个IP占用一行
如下:
192.168.0.1
192.168.0.2
192.168.0.3
不要这样设置:
192.168.0.1 192.168.0.2 192.168.0.3这样设置是错误的,切记!切记!
本人修改后完全正常,不报任何错!(原转三M2基础上修改)