delphic程序反编怎么修改日期排序为ORDER BY "FDate" desc

Question

请问在以下代码中修改哪里可以让日期ORDER BY "FDate" ASC 改为ORDER BY "FDate" desc 排序。// <DFM> TFRMG_Holi = class(TForm);object frmG_Holi: TfrmG_Holi Left = 125 Top = 70 BorderStyle = bsDialog Caption = '法定假日' ClientHeight = 403 ClientWidth = 378 Color = clBtnFace Font.Charset = GB2312_CHARSET Font.Color = clWindowText Font.Height = -13 Font.Name = '宋体' Font.Style = [] KeyPreview = True OldCreateOrder = False Position = poScreenCenter Scaled = False OnKeyPress = FormKeyPress PixelsPerInch = 96 TextHeight = 13 object Label1: TLabel Left = 16 Top = 16 Width = 47 Height = 13 Caption = '日期(&D)' FocusControl = DBEdit1 end object DBGrid1: TDBGrid Left = 8 Top = 96 Width = 241 Height = 297 DataSource = DataSource1 Options = [dgTitles, dgIndicator, dgColumnResize, dgColLines, dgRowLines, dgAlwaysShowSelection, dgConfirmDelete, dgCancelOnExit] ReadOnly = True TabOrder = 0 TitleFont.Charset = GB2312_CHARSET TitleFont.Color = clWindowText TitleFont.Height = -13 TitleFont.Name = '宋体' TitleFont.Style = [] Columns = < item Expanded = False FieldName = 'FDate' Visible = True end end object DBEdit1: TDBEdit Left = 90 Top = 13 Width = 160 Height = 21 DataField = 'FDate' DataSource = DataSource1 TabOrder = 1 end object DataSource1: TDataSource DataSet = tblEdit Left = 323 Top = 295 end object tblEdit: TObeyTable Active = True AfterInsert = tblEditAfterEdit AfterEdit = tblEditAfterEdit BeforePost = tblEditBeforePost AfterPost = tblEditAfterPost AfterCancel = tblEditAfterPost OnNewRecord = tblEditNewRecord OnPostError = tblEditPostError DatabaseName = 'HRKQ' IndexFieldNames = 'FDate' TableName = 'dbo.G_Holi' Left = 293 Top = 293 object tblEditFDate: TDateTimeField DisplayLabel = '日期' DisplayWidth = 10 FieldName = 'FDate' end object tblEditMemo: TStringField DisplayLabel = '说明' FieldName = 'Memo' Size = 10 end object tblEditJoJ: TStringField DisplayLabel = '节/假' FieldName = 'JoJ' FixedChar = True Size = 10 end endend
用过OD，但是找不到表或者升序改倒序的地方，请高手指点，谢谢

Answer 1

你打开的这些东西是DELPHI程序的Form结构
而你要修改的内容在可执行程序中属于常量区[PE结构中的Data段]
所以你需要做的工作是：
使用OD类的工具动态调试程序，找到程序中相关函数调用这个常量的地址A，然后在DATA段空白区域新建一个常量b，写入你要修改的内容，最后使用32位编辑工具把上述的地址A改为地址B。。。

追问

用OD找过，还是查不到，请高手指点下吧，谢谢

？？