Your Web3 Partner enabling innovation and rapid development

Download EX4 To MQ4 Decompiler v4.0.509.5

(SUPPORTS ALL OLD BUILD FILES)

This decompiler supports all old build files up to build 900. Download old build files from forex factory to test

How to Decompile EX4 TO MQ4 Using Reverse Engineering and Memory Dumping

In this tutorial, you will learn how to decompile ex4 to mq4 (up to build 600) using scyllahide plugin and x32dbg. 

In order to reach our target we need to accomplish the following points:

1 – You need to use the x32dbg or x64dbg debugger

2 – Install the scyllahide plugin

3 – Find the breakpoint of OnInit() or Start() method

4 – Bypass the ExpertRemove() and Init_Failed()

5 – Dump patch ex4 from allocated memory

In order to decompile such files, we need to use the reverse engineering and memory dumping, we already made a big progress with reverse engineering process

We are using the x32dbg debugger to attach the metatrader4 which already contain the ex4 that we need to crack.

The attached indicator is an ex4 build with 600+

This is the x32dbg debugger, we use this debugger to attach the MT4 process, and to search for the name of the ex4

We search for a specific text by right clicking the debugger Search for -> Current module -> String references

We search for the ex4 indicator name and we double click it

By that way, we caught the location of the indicator in the memory

Now we need to search ExpertRemove(). This function is jumping point, which is used by Metaquote to stop us from accessing the content of the indicator. So we should bypass this function.

We arrived to that point in our cracking and decompiling ex4 to mq4.

*This tutorial is for educational purposes only!

https://x64dbg.com

https://github.com/x64dbg/ScyllaHide