Skip to content

Large number of symbols in some Microsoft x86_64 PE files fail to get demangled #1605

@e1guapo

Description

@e1guapo

On some Windows binaries, there are a number of symbols that do not get properly demangled.

One example I see is "C:\Windows\ShellExperiences\ClockFlyoutExperience.dll."
The sample from Windows 10 (Version 10.0.18363) has 20,252 total symbols in bv.symbols. Of these, 7,796 are still mangled. Microsoft's undname.exe utility successfully demangles 6,394 of these.

Some example symbols:

?set@IsAttachable@XamlMember@InfoProvider@XamlTypeInfo@@UE$AAAX_N@Z

?get@?QIXamlType@Markup@Xaml@UI@Windows@@IsMarkupExtension@XamlUserType@InfoProvider@XamlTypeInfo@@UE$AAA_NXZ

?GetBindingConnector@?QIComponentConnector2@Markup@Xaml@UI@Windows@@MainPage@ClockFlyoutExperience@@UE$AAAPE$AAUIComponentConnector@2345@HPE$AAVObject@Platform@@@Z

Metadata

Metadata

Assignees

Labels

Component: DemanglerEffort: LowIssues require < 1 week of workImpact: LowIssue is a papercut or has a good, supported workaround

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions