沈阳电脑维修上门服务13889116605： SIObjectBrowser一款日本开发的oracle数据库软件，在对日外包界被广泛使用。目前在中文版已有贩卖。仅供研究其实我不懂oracle,朋友让帮忙的附件有点大，版本10.1....
SIObjectBrowser一款日本开发的oracle数据库软件，在对日外包界被广泛使用。目前在中文版已有贩卖。
仅供研究
其实我不懂oracle,朋友让帮忙的
附件有点大，版本10.1.0.0 可以自己去下载
代码:
0053CB52 |. 8D55E8 leaedx,[local.6]
0053CB55 |. 8B838C030000moveax,dwordptrds:[ebx+0x38C]
0053CB5B |. E8D090F2FF callob10.00465C30
0053CB60 |. 8B45E8 moveax,[local.6]
0053CB63 |. 5A popedx
0053CB64 |. E873361800 callob10.006C01DC
0053CB69 |. 84C0 testal,al
0053CB6B 0F845F020000jeob10.0053CDD0 ; //必须不能跳，跳就错误
0053CB71 |. 8D55E4 leaedx,[local.7]
0053CB74 |. 8B8388030000moveax,dwordptrds:[ebx+0x388]
0053CB7A |. E8B190F2FF callob10.00465C30
0053CB7F |. 8B45E4 moveax,[local.7]
0053CB82 |. BA94CF5300 movedx,ob10.0053CF94
0053CB87 |. E89086ECFF callob10.0040521C
0053CB8C |. 0F8559020000jnzob10.0053CDEB
0053CB92 |. 8D45E0 leaeax,[local.8]
0053CB95 |. E81E1E1800 callob10.006BE9B8
0053CB9A |. 8B45E0 moveax,[local.8]
0053CB9D |. 50 pusheax
0053CB9E |. 8D45FC leaeax,[local.1]
0053CBA1 |. E86682ECFF callob10.00404E0C ; //System::__linkproc__LStrClr(void*)
0053CBA6 |. 50 pusheax
0053CBA7 |. 8D55DC leaedx,[local.9]
0053CBAA |. 8B8390030000moveax,dwordptrds:[ebx+0x390]
0053CBB0 |. E87B90F2FF callob10.00465C30 ; //Controls::TControl::GetText(void)
0053CBB5 |. 8B45DC moveax,[local.9]
0053CBB8 |. 50 pusheax
0053CBB9 |. 8D55D8 leaedx,[local.10]
0053CBBC |. 8B83AC030000moveax,dwordptrds:[ebx+0x3AC]
0053CBC2 |. E86990F2FF callob10.00465C30 ; //Controls::TControl::GetText(void)
0053CBC7 |. 8B55D8 movedx,[local.10]
0053CBCA |. B801000000 moveax,0x1
0053CBCF |. 59 popecx
0053CBD0 |. E8EF221800 callob10.006BEEC4 ; //重要，进去看
0053CBD5 |. 84C0 testal,al
0053CBD7 0F84D6010000jeob10.0053CDB3 ; //跳就错，不能跳
0053CBDD |. 8D55D4 leaedx,[local.11]
0053CBE0 |. 8B8390030000moveax,dwordptrds:[ebx+0x390]
0053CBE6 |. E84590F2FF callob10.00465C30
0053CBEB |. 8B45D4 moveax,[local.11]
0053CBEE |. E895341800 callob10.006C0088
0053CBF3 |. 85C0 testeax,eax
0053CBF5 |. 0F84F2000000jeob10.0053CCED
0053CBFB |. 8D55D0 leaedx,[local.12]
0053CBFE |. 8B8390030000moveax,dwordptrds:[ebx+0x390]
0053CC04 |. E82790F2FF callob10.00465C30
0053CC09 |. 8B45D0 moveax,[local.12]
0053CC0C |. E8D7331800 callob10.006BFFE8
0053CC11 |. 8BF0 movesi,eax
0053CC13 |. 8D45CC leaeax,[local.13]
0053CC16 |. 50 pusheax
0053CC17 |. B908000000 movecx,0x8
0053CC1C |. BA07000000 movedx,0x7
0053CC21 |. 8B45FC moveax,[local.1]
0053CC24 |. E8B33F1600 callob10.006A0BDC
0053CC29 |. 8B45CC moveax,[local.13]
0053CC2C |. 33D2 xoredx,edx
0053CC2E |. E8E5DDECFF callob10.0040AA18
0053CC33 |. 50 pusheax
0053CC34 |. 8D45C8 leaeax,[local.14]
0053CC37 |. 50 pusheax
0053CC38 |. B906000000 movecx,0x6
0053CC3D |. BA05000000 movedx,0x5
0053CC42 |. 8B45FC moveax,[local.1]
0053CC45 |. E8923F1600 callob10.006A0BDC
0053CC4A |. 8B45C8 moveax,[local.14]
0053CC4D |. 33D2 xoredx,edx
0053CC4F |. E8C4DDECFF callob10.0040AA18
0053CC54 |. 50 pusheax
0053CC55 |. 8D45C4 leaeax,[local.15]
0053CC58 |. 50 pusheax
0053CC59 |. B904000000 movecx,0x4
0053CC5E |. BA01000000 movedx,0x1
0053CC63 |. 8B45FC moveax,[local.1]
0053CC66 |. E8713F1600 callob10.006A0BDC
0053CC6B |. 8B45C4 moveax,[local.15]
0053CC6E |. 33D2 xoredx,edx
0053CC70 |. E8A3DDECFF callob10.0040AA18
0053CC75 |. 5A popedx
0053CC76 |. 59 popecx
0053CC77 |. E82004EDFF callob10.0040D09C
0053CC7C |. DD5DF0 fstpqwordptrss:[ebp-0x10]
0053CC7F |. 9B wait
0053CC80 |. E8B706EDFF callob10.0040D33C
0053CC85 |. DC5DF0 fcompqwordptrss:[ebp-0x10]
0053CC88 |. 9B wait
0053CC89 |. DFE0 fstswax
0053CC8B |. 9E sahf
0053CC8C |. 761B jbeshortob10.0053CCA9
0053CC8E |. 66:BA4000 movdx,0x40
0053CC92 |. B8A4CF5300 moveax,ob10.0053CFA4
0053CC97 |. E8C87D1700 callob10.006B4A64
0053CC9C |. 33C0 xoreax,eax
0053CC9E |. 898394020000movdwordptrds:[ebx+0x294],eax
0053CCA4 |. E81F2DEDFF callob10.0040F9C8
0053CCA9 |> FF75F4 push[local.3]
0053CCAC |. FF75F0 push[local.4]
0053CCAF |. 8BC6 moveax,esi
0053CCB1 |. F7D8 negeax
0053CCB3 |. E8D406EDFF callob10.0040D38C
0053CCB8 |. D825C4CF5300fsubdwordptrds:[0x53CFC4]
0053CCBE |. DB7DB8 fstptbyteptrss:[ebp-0x48]
0053CCC1 |. 9B wait
0053CCC2 |. E87506EDFF callob10.0040D33C
0053CCC7 |. DB6DB8 fldtbyteptrss:[ebp-0x48]
0053CCCA |. DED9 fcompp
0053CCCC |. 9B wait
0053CCCD |. DFE0 fstswax
0053CCCF |. 9E sahf
0053CCD0 |. 761B jbeshortob10.0053CCED
0053CCD2 |. 66:BA4000 movdx,0x40
0053CCD6 |. B8D0CF5300 moveax,ob10.0053CFD0
0053CCDB |. E8847D1700 callob10.006B4A64
0053CCE0 |. 33C0 xoreax,eax
0053CCE2 |. 898394020000movdwordptrds:[ebx+0x294],eax
0053CCE8 |. E8DB2CEDFF callob10.0040F9C8
0053CCED |> 8D55B4 leaedx,[local.19]
0053CCF0 |. 8B8390030000moveax,dwordptrds:[ebx+0x390]
0053CCF6 |. E8358FF2FF callob10.00465C30 ; //Controls::TControl::GetText(void
0053CCFB |. 8B45B4 moveax,[local.19]
0053CCFE |. E885331800 callob10.006C0088
0053CD03 |. 83F801 cmpeax,0x1
0053CD06 |. 1BC0 sbbeax,eax
0053CD08 |. 40 inceax
0053CD09 |. 50 pusheax
0053CD0A |. 8D55B0 leaedx,[local.20]
0053CD0D |. 8B83AC030000moveax,dwordptrds:[ebx+0x3AC]
0053CD13 |. E8188FF2FF callob10.00465C30 ; //Controls::TControl::GetText(void
0053CD18 |. 8B45B0 moveax,[local.20]
0053CD1B |. 5A popedx
0053CD1C |. E897261800 callob10.006BF3B8 www.it165.net ; //进去看看
0053CD21 |. 84C0 testal,al
0053CD23 |. 741B jeshortob10.0053CD40 ; //必须跳
0053CD25 |. 66:BA4000 movdx,0x40
0053CD29 |. B810D05300 moveax,ob10.0053D010
0053CD2E |. E8317D1700 callob10.006B4A64
0053CD33 |. 33C0 xoreax,eax
上一篇:
逆向分析：常见程序入口点(OEP)特征总结
