转三文本检测IP(修改更新)
1.增加一个命令
:0048A2DF E9BC330800 JMP 0050D6A0
:0048A2E4 90 NOP
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0048A2DF(U)
|
:0050D6A0 8D9558FFFFFF LEA EDX,DWORD PTR SS:[EBP-A8]
:0050D6A6 8B45F0 MOV EAX,DWORD PTR SS:[EBP-10]
:0050D6A9 E8CAB5EFFF CALL 00408C78
:0050D6AE 8B8558FFFFFF MOV EAX,DWORD PTR SS:[EBP-A8]
* Possible StringData Ref from Code Obj ->"CHECKIP"
| dedecms.com
:0050D6B4 BAE8D65000 MOV EDX,0050D6E8
:0050D6B9 E81E69EFFF CALL 00403FDC
:0050D6BE 7507 JNZ SHORT 0050D6C7
:0050D6C0 C745E48A000000 MOV DWORD PTR SS:[EBP-1C],8A
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0050D6BE(C)
|
:0050D6C7 8D9558FFFFFF LEA EDX,DWORD PTR SS:[EBP-A8]
:0050D6CD E913CCF7FF JMP 0048A2E5
:0050D6D2 90 NOP
2.检测的地方。
:0049BDE1 E96A180700 JMP 0050D650
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0049BDE1(U)
|
:0050D650 0589000000 ADD EAX,89
:0050D655 3D8A000000 CMP EAX,8A
:0050D65A 7537 JNZ SHORT 0050D693
:0050D65C 8B4508 MOV EAX,DWORD PTR SS:[EBP+8]
:0050D66F 8B40F0 MOV EAX,DWORD PTR DS:[EAX-10]
:0050D662 8B9060050000 MOV EDX,DWORD PTR DS:[EAX+560]
:0050D668 8D45BC LEA EAX,DWORD PTR SS:[EBP-44]
:0050D66B 8B4DD0 MOV ECX,DWORD PTR SS:[EBP-30]
:0050D66E 8B4904 MOV ECX,DWORD PTR DS:[ECX+4]
:0050D671 E8A268EFFF CALL 00403F18
:0050D676 8B55BC MOV EDX,DWORD PTR SS:[EBP-44]
:0050D679 8B4508 MOV EAX,DWORD PTR SS:[EBP+8]
:0050D67C 8B40FC MOV EAX,DWORD PTR DS:[EAX-4]
:0050D67F 8B8098050000 MOV EAX,DWORD PTR DS:[EAX+598]
:0050D685 90 NOP
:0050D686 E8F1DDF8FF CALL 0049B47C
:0050D68B 84C0 TEST AL,AL
:0050D68D 7504 JNZ SHORT 0050D693
:0050D68F C645FB00 MOV BYTE PTR SS:[EBP-5],0
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0050D65A(C), :0050D68D(C)
|
:0050D693 E9F7F0F8FF JMP 0049C78F
:0050D698 90 NOP
UE修改方法!
第一处
绝对地址:0X0896DFH
查找:8D9558FFFFFF
替换:E9BC33080090
第二处
绝对地址:0X09B1E1H
查找:E9A9090000
替换:E96A180700
第三处
绝对地址:0X107A50H
查找:
000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000
替换:
05890000003D8A00000075378B45088B40F08B90600500008D45BC8B4DD08B4904E8A268EFFF8B
55BC8B45088B40FC8B809805000090E8F1DDF8FF84C07504C645FB00E9F7F0F8FF90
第四处
绝对地址:0X107AA0H
查找:
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
替换:
8D9558FFFFFF8B45F0E8CAB5EFFF8B8558FFFFFFBAE8D65000E81E69EFFF7507C745E48A000000
8D9558FFFFFFE913CCF7FF90
第五处
绝对地址:0X107AE0H
查找:
00000000000000000000000000000000
替换:
FFFFFFFF07000000434845434B495000
测试脚本
[@main]
#IF
CHECKIP IP.txt
#SAY
你的IP在规定范围内!
#ELSESAY
您的IP没有在规定的地址里。\
<离 开/@exit>
注:我测试的时候是在\Mir200\Envir\Npc_Def里的国王脚本测试的
顺便在\Npc_Def里创建个IP.TXT文本
每个IP占用一行
如下:
192.168.0.1
192.168.0.2
192.168.0.3
不要这样设置:
192.168.0.1 192.168.0.2 192.168.0.3这样设置是错误的,切记!切记!
本人修改后完全正常,不报任何错!(原转三M2基础上修改)
:0048A2DF E9BC330800 JMP 0050D6A0
:0048A2E4 90 NOP
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0048A2DF(U)
|
:0050D6A0 8D9558FFFFFF LEA EDX,DWORD PTR SS:[EBP-A8]
:0050D6A6 8B45F0 MOV EAX,DWORD PTR SS:[EBP-10]
:0050D6A9 E8CAB5EFFF CALL 00408C78
:0050D6AE 8B8558FFFFFF MOV EAX,DWORD PTR SS:[EBP-A8]
* Possible StringData Ref from Code Obj ->"CHECKIP"
| dedecms.com
:0050D6B4 BAE8D65000 MOV EDX,0050D6E8
:0050D6B9 E81E69EFFF CALL 00403FDC
:0050D6BE 7507 JNZ SHORT 0050D6C7
:0050D6C0 C745E48A000000 MOV DWORD PTR SS:[EBP-1C],8A
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0050D6BE(C)
|
:0050D6C7 8D9558FFFFFF LEA EDX,DWORD PTR SS:[EBP-A8]
:0050D6CD E913CCF7FF JMP 0048A2E5
:0050D6D2 90 NOP
2.检测的地方。
:0049BDE1 E96A180700 JMP 0050D650
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0049BDE1(U)
|
:0050D650 0589000000 ADD EAX,89
:0050D655 3D8A000000 CMP EAX,8A
:0050D65A 7537 JNZ SHORT 0050D693
:0050D65C 8B4508 MOV EAX,DWORD PTR SS:[EBP+8]
:0050D66F 8B40F0 MOV EAX,DWORD PTR DS:[EAX-10]
:0050D662 8B9060050000 MOV EDX,DWORD PTR DS:[EAX+560]
:0050D668 8D45BC LEA EAX,DWORD PTR SS:[EBP-44]
:0050D66B 8B4DD0 MOV ECX,DWORD PTR SS:[EBP-30]
:0050D66E 8B4904 MOV ECX,DWORD PTR DS:[ECX+4]
:0050D671 E8A268EFFF CALL 00403F18
:0050D676 8B55BC MOV EDX,DWORD PTR SS:[EBP-44]
:0050D679 8B4508 MOV EAX,DWORD PTR SS:[EBP+8]
:0050D67C 8B40FC MOV EAX,DWORD PTR DS:[EAX-4]
:0050D67F 8B8098050000 MOV EAX,DWORD PTR DS:[EAX+598]
:0050D685 90 NOP
:0050D686 E8F1DDF8FF CALL 0049B47C
:0050D68B 84C0 TEST AL,AL
:0050D68D 7504 JNZ SHORT 0050D693
:0050D68F C645FB00 MOV BYTE PTR SS:[EBP-5],0
* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0050D65A(C), :0050D68D(C)
|
:0050D693 E9F7F0F8FF JMP 0049C78F
:0050D698 90 NOP
UE修改方法!
第一处
绝对地址:0X0896DFH
查找:8D9558FFFFFF
替换:E9BC33080090
第二处
绝对地址:0X09B1E1H
查找:E9A9090000
替换:E96A180700
第三处
绝对地址:0X107A50H
查找:
000000000000000000000000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000000000000000000000000000000
替换:
05890000003D8A00000075378B45088B40F08B90600500008D45BC8B4DD08B4904E8A268EFFF8B
55BC8B45088B40FC8B809805000090E8F1DDF8FF84C07504C645FB00E9F7F0F8FF90
第四处
绝对地址:0X107AA0H
查找:
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
替换:
8D9558FFFFFF8B45F0E8CAB5EFFF8B8558FFFFFFBAE8D65000E81E69EFFF7507C745E48A000000
8D9558FFFFFFE913CCF7FF90
第五处
绝对地址:0X107AE0H
查找:
00000000000000000000000000000000
替换:
FFFFFFFF07000000434845434B495000
测试脚本
[@main]
#IF
CHECKIP IP.txt
#SAY
你的IP在规定范围内!
#ELSESAY
您的IP没有在规定的地址里。\
<离 开/@exit>
注:我测试的时候是在\Mir200\Envir\Npc_Def里的国王脚本测试的
顺便在\Npc_Def里创建个IP.TXT文本
每个IP占用一行
如下:
192.168.0.1
192.168.0.2
192.168.0.3
不要这样设置:
192.168.0.1 192.168.0.2 192.168.0.3这样设置是错误的,切记!切记!
本人修改后完全正常,不报任何错!(原转三M2基础上修改)
Tags:
作者:佚名评论内容只代表网友观点,与本站立场无关!
评论摘要(共 0 条,得分 0 分,平均 0 分)
查看完整评论