This video explores how name mangling appears in IDA Pro when analyzing C++ programs, focusing on the function ‘new’ and symbol demangling. The creator demonstrates how IDA’s FLIRT signatures help demangle names and the effects of toggling signature application options.
Keypoints :
- Understanding how name mangling affects C++ functions such as ‘new’ and ‘delete’ in IDA Pro.
- The importance of symbol tables in identifying mangled names from compiled binaries.
- IDA’s FLIRT signatures can automatically recognize and demangle C++ function names during disassembly.
- You can toggle IDA’s signature application in options to control name demangling behavior.
- The demangled names provided by FLIRT are not carried over from the linking process but are generated by IDA.
- Disabling FLIRT signatures requires manual navigation because IDA cannot recognize functions automatically.
- Exploring C++ name mangling provides insight into the linking process, symbol management, and IDA’s analysis capabilities.
- Youtube Video: https://www.youtube.com/watch?v=e9fdVf92khA
- Youtube Channel: https://www.youtube.com/channel/UCI8zwug_Lv4_-KPT62oeDUA
- Youtube Published: Thu, 08 May 2025 17:00:49 +0000