deep-decompilation

Use Ghidra's analyzeHeadless command to import the DLL with the x86:LE:32 processor, then run a postScript like DumpDecompiled.java to decompile all functions to a text file. A 300-second analysis timeout handles DLLs under 200KB.

WMP visualization installers are MS CAB self-extracting archives, so run cabextract directly on the .exe file. Some installers embed the CAB at a non-standard offset; search for the MSCF magic bytes in a hex editor and extract that slice first.

Apply API call-site type inference: every Windows API call constrains its argument types, so a field passed to HeapFree must be a pointer and one passed as BITMAPINFO* reveals its struct type. Combine with allocation size analysis, init patterns, and per-pixel loop decomposition.

Yes, by collecting all virtual dispatch patterns like (**(code **)(*param_1 + 0xNN)) and sorting offsets numerically. Map them from known IUnknown entries (QueryInterface at 0x00, AddRef at 0x04, Release at 0x08) to identify interface methods like IWMPEffects Render.

DirectDraw rendering is deeply tied to Windows APIs and cannot be directly ported to HLSL or GLSL. COM interface boundaries remain opaque without original SDK headers, and color conversion functions are often inlined so they never appear as distinct functions.