eyedefender modification

1. change the default lock time from 2 to 5
2. change the default lock type to visual training (value from 1 to 2)

0040430B /$ 53 push ebx
0040430C |. 56 push esi
0040430D |. 8BF0 mov esi, eax
0040430F |. 57 push edi
00404310 |. B8 10E04100 mov eax, EyeDefen.0041E010
00404315 |. 8946 14 mov dword ptr [esi+14], eax
00404318 |. 8946 20 mov dword ptr [esi+20], eax
0040431B |. 8946 24 mov dword ptr [esi+24], eax
0040431E |. 6A 05 push 5
00404320 |. 5B pop ebx
00404321 |. 8D4E 2C lea ecx, dword ptr [esi+2C]
00404324 |. 8901 mov dword ptr [ecx], eax
00404326 |. 8366 18 00 and dword ptr [esi+18], 0
0040432A |. 8366 28 00 and dword ptr [esi+28], 0
0040432E |. 33FF xor edi, edi
00404330 |. 47 inc edi
00404331 |. 68 26AF4100 push EyeDefen.0041AF26
00404336 |. 51 push ecx
00404337 |. 33C0 xor eax, eax //remove this
00404339 |. C706 2D000000 mov dword ptr [esi], 2D
0040433F |. C746 04 02000000 mov dword ptr [esi+4], 2 // change to 5
00404346 |. 895E 08 mov dword ptr [esi+8], ebx
00404349 |. 897E 0C mov dword ptr [esi+C], edi
0040434C |. 897E 10 mov dword ptr [esi+10], edi // insert ‘inc edi’ before this,and add ‘dec edi’ after this
0040434F |. 897E 1C mov dword ptr [esi+1C], edi
00404352 |. E8 25BC0000 call EyeDefen.0040FF7C // follow the function, change the first ‘mov edi,eax’ to ‘xor edi,edi’
00404357 |. 8366 30 00 and dword ptr [esi+30], 0
0040435B |. 8366 3C 00 and dword ptr [esi+3C], 0
0040435F |. 895E 34 mov dword ptr [esi+34], ebx
00404362 |. C746 38 03000000 mov dword ptr [esi+38], 3
00404369 |. 897E 40 mov dword ptr [esi+40], edi
0040436C |. 897E 44 mov dword ptr [esi+44], edi
0040436F |. E8 80000000 call EyeDefen.004043F4
00404374 |. 5F pop edi
00404375 |. 8BC6 mov eax, esi
00404377 |. 5E pop esi
00404378 |. 5B pop ebx
00404379 \. C3 retn

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s