I have a dumped PE that has calls like
now these are actually addresses of APIs in kernel32.dll
my problem is IDA doesn't know that these are kernel32 APIs and therefore in the decompiler all i see is stuff like
MEMORY[address](&v1, "explorer.exe %s", &v2);
which are API calls without names
so how can i sync these API calls with their actual names? is there any way i can tell IDA that for example kernel32.dll is loaded at address x so it can therefore load it there statically or dynamically and resolve these names ?