|
You are correct, pez.
The kernel32.ids file of IDA 4.5 is old. You can check it by use the zipids.exe with -u option to dump the kernel32.ids, and use dumpbin.exe /exports to dump the export functions in kernel32.dll. They will have many mismatch.
So, I think, you can backup the kernel32.ids and delete it. Decompile the .exe again, IDAPro will automatically find and apply the name of export/import functions in kernel32.dll. Or you can create the new kernel32.ids with dll2ids tool.
Regards,
TQN
|