APIs in Olly

[RedBlkJck]

Sorry I may not be 'seeing' what you mean by the first question but is it possible that you just have an outdated udd and pdb for the system dlls? The call destination is correct just the labels are off? After one these last set of MS patch updates I had to clear the udd and do a refresh off the ms symbol files because the labeled analyzed addresses were off by a few bytes. I had several addresses that were NOP, PUSH EBP but they were labeled as API calls. May not be the same thing you are referring to... - jack