Delphi Decompiler Dede -
(also known as Dark Deeds or just DeDe ) is a decompiler for Delphi and C++ Builder executables. It extracts forms, events, and source code structure from compiled binary files ( .exe , .dll , .bpl ). It does not produce original Pascal source code perfectly, but it reconstructs:
Launch DeDe and click on the menu to open your target Delphi .exe .
DeDe analyzes the binary signatures to determine which version of Delphi or C++Builder was used to compile the file (e.g., Delphi 3 through Delphi 7).
DeDe was built during the peak of Delphi 3, 4, 5, 6, and 7. It struggles significantly with modern Delphi versions (such as Delphi XE or RAD Studio 11/12), which use updated VCL architectures, Unicode strings, and 64-bit architectures. delphi decompiler dede
Delphi Decompiler (DeDe) is a specialized reverse-engineering tool used to analyze executables compiled with older versions of Delphi (typically v2 through v7), C++Builder, and Kylix. Unlike standard decompilers that aim to recreate high-level source code, DeDe primarily recovers UI structures and provides a heavily commented disassembly of the program's logic.
Can create a partial Delphi project folder containing forms ( .dfm ), assembly code ( .pas ), and the project file ( .dpr ). How Dede Works
DeDe is a legacy reverse-engineering tool designed to analyze and decompile 32-bit executables created with older versions of Borland Delphi (specifically Delphi 2 through 7) and C++Builder (also known as Dark Deeds or just DeDe
It extracts published properties, methods, and class hierarchies, giving the researcher a "roadmap" of the application's logic. 2. Key Features of DeDe
Excellent for initial triage to determine exactly which version of the Delphi compiler was used and whether the file is packed. Conclusion
Delphi developers often hardcoded database passwords or registration keys in event handlers. DeDe’s string reference extraction can surface these instantly. DeDe analyzes the binary signatures to determine which
Once DeDe guides you to an event handler, its internal disassembler formats the x86 code. Because it understands Delphi's internal libraries (the VCL), it can automatically comment standard functions—such as recognizing SysUtils.CompareStr or memory management routines—saving reverse engineers hours of manual sorting. Step-by-Step: Using DeDe for Reverse Engineering
In a standard disassembler, finding the code that runs when a user clicks a "Register" button can take hours of tracing. DeDe automates this instantly. It maps the visual components found in the form files directly to the physical memory addresses of their corresponding event handlers (e.g., Button1Click ). 3. RTTI and Class Tree Extraction