Reverse Engineering for Beginners

CHAPTER 81. ORACLE RDBMS CHAPTER 81. ORACLE RDBMS

push offset aXKqvvsnBuffer ; "x$kqvvsn buffer"

mov ecx, [ebp+arg_C] ; [EBP+14h]=0x8a172b4

xor edx, edx

mov esi, [ebp+var_14] ; [EBP-14h]=0xc98c938

push edx ; EDX=0

push edx ; EDX=0

push 50h

push ecx ; ECX=0x8a172b4

push dword ptr [esi+10494h] ; [ESI+10494h]=0xc98cd58

call _kghalf ; tracing nested maximum level (1) reached, skipping this⤦

ÇCALL

mov esi, ds:__imp__vsnnum ; [59771A8h]=0x61bc49e0

mov [ebp+Dest], eax ; EAX=0xce2ffb0

mov [ebx+8], eax ; EAX=0xce2ffb0

mov [ebx+4], eax ; EAX=0xce2ffb0

mov edi, [esi] ; [ESI]=0xb200100

mov esi, ds:__imp__vsnstr ; [597D6D4h]=0x65852148, "- Production"

push esi ; ESI=0x65852148, "- Production"

mov ebx, edi ; EDI=0xb200100

shr ebx, 18h ; EBX=0xb200100

mov ecx, edi ; EDI=0xb200100

shr ecx, 14h ; ECX=0xb200100

and ecx, 0Fh ; ECX=0xb2

mov edx, edi ; EDI=0xb200100

shr edx, 0Ch ; EDX=0xb200100

movzx edx, dl ; DL=0

mov eax, edi ; EDI=0xb200100

shr eax, 8 ; EAX=0xb200100

and eax, 0Fh ; EAX=0xb2001

and edi, 0FFh ; EDI=0xb200100

push edi ; EDI=0

mov edi, [ebp+arg_18] ; [EBP+20h]=0

push eax ; EAX=1

mov eax, ds:__imp__vsnban ; [597D6D8h]=0x65852100, "Oracle Database 11g ⤦

ÇEnterprise Edition Release %d.%d.%d.%d.%d %s"

push edx ; EDX=0

push ecx ; ECX=2

push ebx ; EBX=0xb

mov ebx, [ebp+arg_8] ; [EBP+10h]=0xcdfe554

push eax ; EAX=0x65852100, "Oracle Database 11g Enterprise Edition⤦

ÇRelease %d.%d.%d.%d.%d %s"

mov eax, [ebp+Dest] ; [EBP-10h]=0xce2ffb0

push eax ; EAX=0xce2ffb0

call ds:__imp__sprintf ; op1=MSVCR80.dll!sprintf tracing nested maximum level (1)⤦

Çreached, skipping this CALL

add esp, 38h

mov dword ptr [ebx], 1

loc_2CE1192: ; CODE XREF: kqvrow+FB
; kqvrow+128 ...
test edi, edi ; EDI=0
jnz VInfreqkqvrow
mov esi, [ebp+var_C] ; [EBP-0Ch]=0xcdfe248
mov edi, [ebp+var_4] ; [EBP-4]=0xc98c938
mov eax, ebx ; EBX=0xcdfe554
mov ebx, [ebp+var_8] ; [EBP-8]=0
lea eax, [eax+4] ; [EAX+4]=0xce2ffb0, "NLSRTL Version 11.2.0.1.0 - Production⤦
Ç", "Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production", "PL/SQL⤦
ÇRelease 11.2.0.1.0 - Production", "TNS for 32-bit Windows: Version 11.2.0.1.0 - ⤦
ÇProduction"

loc_2CE11A8: ; CODE XREF: kqvrow+29E00F6
mov esp, ebp
pop ebp
retn ; EAX=0xcdfe558

loc_2CE11AC: ; DATA XREF: .rdata:0628B0A0
mov edx, [ebx+8] ; [EBX+8]=0xce2ffb0, "Oracle Database 11g Enterprise Edition⤦
ÇRelease 11.2.0.1.0 - Production"
mov dword ptr [ebx], 2