Building a Bridge to a Legacy Application: How Hard Can That Be?
0 likes285 views
The document outlines a journey in developing a connector for a legacy application, focusing on reverse engineering its database as no official SDK was available. The process included several strategies such as finding undocumented SDKs, screen scraping, and utilizing hex editors for database file analysis. Ultimately, the team successfully demonstrated a working integration to the client, revealing that an SDK did exist, which led to further collaboration with the vendor.
Building a Bridge to a Legacy Application: How Hard Can That Be?
- 1. @mscottford BUILDING A BRIDGE TO @mscottford BY M. SCOTT FORD CO-FOUNDER & CHIEF CODE WHISPERER, CORGIBYTES HOW HARD COULD THAT BE? A LEGACY APPLICATION
- 4. @mscottford THIS IS A STORY
- 8. @mscottford WHAT DID WE KNOW? TARGET SYSTEM SERVICE ON PREMISES CLIENT UI DATABASE ADMIN UI • Target system ran on Windows 7 desktop • Data was stored in some form of database on the desktop
- 9. @mscottford OPTIONS TARGET SYSTEM SERVICE ON PREMISES CLIENT UI DATABASE ADMIN UI
- 10. @mscottford OPTIONS TARGET SYSTEM SERVICE ON PREMISES CLIENT UI DATABASE ADMIN UI • Find an undocumented SDK
- 11. @mscottford OPTIONS TARGET SYSTEM SERVICE ON PREMISES CLIENT UI DATABASE ADMIN UI • Find an undocumented SDK • Find libraries for communicating with DB
- 12. @mscottford OPTIONS TARGET SYSTEM SERVICE ON PREMISES CLIENT UI DATABASE ADMIN UI • Find an undocumented SDK • Find libraries for communicating with DB • Screen scrape the UI
- 13. @mscottford OPTIONS TARGET SYSTEM SERVICE ON PREMISES CLIENT UI DATABASE ADMIN UI • Find an undocumented SDK • Find libraries for communicating with DB • Screen scrape the UI • Reverse engineer DB file format
- 14. @mscottford OPTIONS TARGET SYSTEM SERVICE ON PREMISES CLIENT UI DATABASE ADMIN UI • Find an undocumented SDK • Find libraries for communicating with DB • Screen scrape the UI • Reverse engineer DB file format
- 15. @mscottford PLAN OF ATTACK Reverse engineer DB file format Find libraries for communicating with DB @mscottford
- 16. @mscottford PLAN OF ATTACK Reverse engineer DB file format Find libraries for communicating with DB Find an undocumented SDK @mscottford
- 17. @mscottford PLAN OF ATTACK Reverse engineer DB file format Find libraries for communicating with DB Find an undocumented SDK @mscottford
- 18. @mscottford PLAN OF ATTACK Reverse engineer DB file format Find libraries for communicating with DB Find an undocumented SDK @mscottford
- 19. @mscottford MAYBE THERE’S AN SDK
- 20. @mscottford THE HUNT FOR AN SDK @mscottford
- 21. @mscottford THE HUNT FOR AN SDK •Visually skimmed installation directory looking for anything obvious @mscottford
- 22. @mscottford THE HUNT FOR AN SDK •Visually skimmed installation directory looking for anything obvious •Found evidence of very old tooling - some .EXEs had default icon from old versions of Visual C++ @mscottford
- 23. @mscottford THE HUNT FOR AN SDK •Visually skimmed installation directory looking for anything obvious •Found evidence of very old tooling - some .EXEs had default icon from old versions of Visual C++ •Ran dumpbin on all DLLs for any callable functions @mscottford
- 24. @mscottford THE HUNT FOR AN SDK •Visually skimmed installation directory looking for anything obvious •Found evidence of very old tooling - some .EXEs had default icon from old versions of Visual C++ •Ran dumpbin on all DLLs for any callable functions •Nothing obvious found @mscottford
- 25. @mscottford MAYBE THE DB IS OFF THE SHELF
- 26. @mscottford FIND THE DB ACCESS DLL @mscottford
- 27. @mscottford FIND THE DB ACCESS DLL •Looked for evidence of commercially available database (you name it we looked) – found none @mscottford
- 28. @mscottford FIND THE DB ACCESS DLL •Looked for evidence of commercially available database (you name it we looked) – found none •Looked though dumpbin output for data access functions we could call @mscottford
- 29. @mscottford FIND THE DB ACCESS DLL •Looked for evidence of commercially available database (you name it we looked) – found none •Looked though dumpbin output for data access functions we could call •Decompiled a few .NET DLLs @mscottford
- 30. @mscottford FIND THE DB ACCESS DLL •Looked for evidence of commercially available database (you name it we looked) – found none •Looked though dumpbin output for data access functions we could call •Decompiled a few .NET DLLs •Nothing obvious found @mscottford
- 31. @mscottford YAY! REVERSE ENGINEERING TIME!
- 33. @mscottford REVERSE ENGINEERING DB •Find the files @mscottford
- 34. @mscottford REVERSE ENGINEERING DB •Find the files –Made a small change in the admin UI @mscottford
- 35. @mscottford REVERSE ENGINEERING DB •Find the files –Made a small change in the admin UI –Sorted files by date modified @mscottford
- 36. @mscottford REVERSE ENGINEERING DB •Find the files –Made a small change in the admin UI –Sorted files by date modified –Got lucky! Only one file, a .BIN @mscottford
- 37. @mscottford REVERSE ENGINEERING DB •Find the files –Made a small change in the admin UI –Sorted files by date modified –Got lucky! Only one file, a .BIN •Open our favorite hex editor Synalyze It! @mscottford
- 40. @mscottford REVERSE ENGINEERING DB •Search for strings –Found tables names – including “btree” @mscottford
- 41. @mscottford REVERSE ENGINEERING DB •Search for strings –Found tables names – including “btree” •Look for patterns in the file –Map them out in Synalyze It! @mscottford
- 42. @mscottford TIME FOR THE GRIND @mscottford
- 44. @mscottford THE GRIND •Make a change in the UI (mostly via client UI) @mscottford
- 45. @mscottford THE GRIND •Make a change in the UI (mostly via client UI) •Diff before and after @mscottford
- 46. @mscottford THE GRIND •Make a change in the UI (mostly via client UI) •Diff before and after •Mark location in Synalize It @mscottford
- 47. @mscottford THE GRIND •Make a change in the UI (mostly via client UI) •Diff before and after •Mark location in Synalize It •Repeat @mscottford
- 48. @mscottford THE GRIND •Make a change in the UI (mostly via client UI) •Diff before and after •Mark location in Synalize It •Repeat •Only focus on data that we need @mscottford
- 51. @mscottford BUILDING THE CONNECTOR •Only implement read commands @mscottford
- 52. @mscottford BUILDING THE CONNECTOR •Only implement read commands •Delay read/write until after demo @mscottford
- 53. @mscottford BUILDING THE CONNECTOR •Only implement read commands •Delay read/write until after demo •Come up with some ideas about how to avoid conflicts when write is implemented @mscottford
- 55. @mscottford TIME TO DEMO TO THE CLIENT @mscottford
- 57. @mscottford THE DEMO •CTO of vendor was present at the demo @mscottford
- 58. @mscottford THE DEMO •CTO of vendor was present at the demo •They were alarmed by the fact that it was working @mscottford
- 59. @mscottford THE DEMO •CTO of vendor was present at the demo •They were alarmed by the fact that it was working •Turns out there was an SDK after all @mscottford
- 60. @mscottford THE DEMO •CTO of vendor was present at the demo •They were alarmed by the fact that it was working •Turns out there was an SDK after all •When they found out we had plans for read/write support, their department handed it over @mscottford
- 63. @mscottford NOT SO FAST •We learned a lot @mscottford
- 64. @mscottford NOT SO FAST •We learned a lot •We had a ton of fun @mscottford
- 65. @mscottford NOT SO FAST •We learned a lot •We had a ton of fun •Our work led to the best possible solution being uncovered @mscottford
- 66. @mscottford NOT SO FAST •We learned a lot •We had a ton of fun •Our work led to the best possible solution being uncovered •A read/write implementation would have been risky @mscottford