Reverse Engineering

Questions tagged [mfc]

Ask Question

The tag has no usage guidance.

13 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
2 votes
0 answers
68 views

Is there an MFC Decompiler available?

I want to know if there is already an MFC Decompiler? So far, you have to decompile by hand - which is very tedious. I would like a tool like DeDe Decompiler. The C++ code itself is not important. It ...
rce
  • 449
2 votes
0 answers
411 views

IDA Free vs IDA Home (to have Lumina)

I use actually IDA Free and I want to know what do you think of IDA Home (particulary for the Lumina function). I don't found in Google a tool to know for exemple the functions recognized by the ...
Benoit POTIER
  • 21
0 votes
1 answer
77 views

Find out version of statically linked MFC from an exe

I have an exe with symbols stripped that I am trying to reverse engineer. I know the library is linked with MFC but I don't know which version. (Therefore, I can't use something like FLIRT signatures ...
H Bellamy
  • 113
0 votes
0 answers
108 views

x64dbg & Ghidra change combobox properties app in Visual C++ MFC

Hello in the program code the property combobox is changed from enable to disable I would like to change that the program does not change this property. I have found commands that assign new items to ...
Jorr1
  • 1
0 votes
1 answer
458 views

which is harder to reverse engineer? [closed]

I'm planning on writing a windows application, used everywhere in my home country. I will code it in C++, but my question is which would you consider better to use? win32api Visual C++ MFC I'm ...
aliberro
  • 103
1 vote
1 answer
421 views

mfc140 dll , what is the usage?

While I open exe file in ida I can see lot of calls to mfc140_6153 or mfc140_8718. What are those functions ? what they do ? thanks
joif doi
  • 21
1 vote
0 answers
1k views

Understand DLL function signature from ordinal

I'm trying with ghidra to reverse a 32-bit proprietary application that uses mfc42.dll and I'm obtaining mixed results with respect to imported functions. To my surprise the DLLs don't use names to ...
gipi
  • 111
3 votes
1 answer
2k views

Find MFC class memory layout automatically in IDA?

Background I was using IDA to reverse engineer an DLL which uses MFC100. I was reading Reversing an MFC application: How to find class memory layouts? and https://stackoverflow.com/questions/...
user202729
  • 655
0 votes
1 answer
606 views

Help me to understand disassembly MFC or Win32

I am trying to reverse engineer an application. I don't understand is this MFC framework. Should i learn MFC to understand the following code. or is it Win32 code developing. But how Win32 works with ...
ReverserT
  • 81
0 votes
2 answers
1k views

Help reversing code which uses ATL::CStringT

I'm attempting to learn reversing techniques using IDA on an exe built with VC/MFC, and could use a little initial help learning some patterns for simplifying the decompiled code. IDA found ...
Chris Olsen
  • 101
3 votes
2 answers
153 views

Finding code in MFC32 binary

I am trying to figure out where the code is that interacts with the Serial Port on an MFC Win32 binary - and am utterly out of ideas on how to find this code block. I have even tried, say, stopping ...
Farhan Yusufzai
  • 271
2 votes
0 answers
79 views

Inserting Win32 controls into MFC application [closed]

I was wondering if there's a way to insert native win32 controls(button, static, etc.) into a MFC application during runtime. I was abled to embed my dll but everytime I create a new control via ...
AcarX
  • 291
4 votes
3 answers
4k views

Reversing an MFC application: How to find class memory layouts?

I have an old computer game I want to reverse (Windows 95 "Hover!" to be exact), and I figured out that it uses the MFC. HexRays often decompiles pseudocode like this, which, for example, deals with ...
Ray
  • 1,043

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.