How can we make our products safer from decompilation

New comment
 

Hey guys,

I sometimes see jobs in freelancing section, like decompile this or that EA. Example from recent jobs: [job request link redacted]

I thought that now it wasn't possible to decompile ex4 or ex5 files. But I see a lot of developers still applying for jobs like this. So I'm just curious if decompilation is still possible?

And if yes, how are the other developers protecting their products more thoroughly.

Also, wondering how jobs like this still get posted in mql5?

Because it's clearly against the terms (3.13 section). And so, won't it cause banning of posters and even developers who apply for it?

 

Abir Pathak: Hey guys,

I sometimes see jobs in freelancing section, like decompile this or that EA. Example from recent jobs: [job request link redacted]

I thought that now it wasn't possible to decompile ex4 or ex5 files. But I see a lot of developers still applying for jobs like this. So I'm just curious if decompilation is still possible?

And if yes, how are the other developers protecting their products more thoroughly.

Also, wondering how jobs like this still get posted in mql5?

Because it's clearly against the terms (3.13 section). And so, won't it cause banning of posters and even developers who apply for it?

Good question and a valid concern, Thank you.

Sometimes such jobs slip through the automated filters and remain visible for a short time until they’re manually reviewed and removed.

Best approach is simply to report it via the “Complain” button - will be handled quickly.

Regarding your question:

Technically, full decompilation of modern EX4/EX5 files is not possible anymore. The old tools that once worked on legacy builds stopped being effective years ago.

When you see developers "applying" to such jobs, it’s usually one of the following:

  • They didn’t read the description carefully and are just spamming bids.
  • They hope to get the original source code through other means (not actual decompilation).
  • Or, they simply don’t realize the job violates the site rules.

    Either way - genuine decompilation isn't feasible with current file protection.

     
    Abir Pathak: Hey guys,

    if either the user or developer is "caught", they will most likely be banned from the site -- maybe even permanently.

    besides there is 0 evidence that the modern compilations/encryption can be decompiled.

     
    Oleksandr Medviediev #: Good question and a valid concern, Thank you. Sometimes such jobs slip through the automated filters and remain visible for a short time until they’re manually reviewed and removed. Best approach is simply to report it via the “Complain” button - will be handled quickly.

    Thanks for your reply :)

    I didn't realize the complain button was there.

    [Deleted]  
    Abir Pathak: I thought that now it wasn't possible to decompile ex4 or ex5 files.

    Correct! It is not possible to decompile modern MetaTrader executables back into their original MQL source code. 

    Such job requests for decompilation still appear but are promptly deleted by the admin during office hours, but they are delusional requests by people that don't understand the technical aspects.

    However, it is plausible that sophisticated and capable hackers are able to bypass security features, allowing the executable to run without them, but this is true for ALL software, not just MetaTrader programmes. This is by no means easy and definitely not possible by normal users, nor even power users and many developers. It requires advanced techniques of which very few are capable.

     

    Thank you all. I got a bit worried because 8 developers had applied to that project.

    But your answers are very reassuring :)

    [Deleted]  
    Abir Pathak #: Thank you all. I got a bit worried because 8 developers had applied to that project. But your answers are very reassuring :)
    The 8 developers answering are being opportunistic and did not read the rules, because they too risk being banned as well just because they applied.
    New comment