I am reverse engineering a Windows application for which there is no PDB file available. When loading it in r2, I get the following imports (They are correct):
nth vaddr bind type lib name ――――――――――――――――――――――――――――――――――――――――――― 545 0x00012008 NONE FUNC COREDLL.dll Ordinal_545 557 0x0001200c NONE FUNC COREDLL.dll Ordinal_557
Stub functions are called in the disassembly, like this
and fcn.000111c8 essentially loads the address and calls the actual function
┌ 12: fcn.000111c8 (); │ 0x000111c8 ldr ip, sym.imp.COREDLL.dll_Ordinal_545 │ 0x000111cc ldr ip, [ip] └ 0x000111d0 bx ip
I have the COREDLL.dll file and it contains correct debug symbols. I would like to tell r2 to use them to get the function names for these plt entries, so that I see the real function names from the DLLs instead of generated names like "Ordinal_xxx".
How do I do that?