Reverse Engineering for Beginners

(avery) #1

CHAPTER 81. ORACLE RDBMS CHAPTER 81. ORACLE RDBMS


mov eax, edx
mov esp, ebp
pop ebp
retn
_slgcs endp


It is just the result ofGetTickCount()^6 divided by 10 (41 on page 468).


Voilà! That’s why the win32 version and the Linux x86 version show different results, because they are generated by different
OSfunctions.


Drainapparently impliesconnectinga specific table column to a specific function.


We will add support of the tablekqfd_tab_registry_0to oracle tables^7 , now we can see how the table column’s
variables areconnectedto a specific functions:


[X$KSUTM] [kqfd_OPN_ksutm_c] [kqfd_tabl_fetch] [NULL] [NULL] [kqfd_DRN_ksutm_c]
[X$KSUSGIF] [kqfd_OPN_ksusg_c] [kqfd_tabl_fetch] [NULL] [NULL] [kqfd_DRN_ksusg_c]


OPN, apparently stands for,open, andDRN, apparently, fordrain.


(^6) MSDN
(^7) yurichev.com

Free download pdf