ordlookup returns incorrect names for wsock32 ordinals

erocarrera / pefile

pefile is a Python module to read and work with PE (Portable Executable) files

MIT License

1.88k stars 522 forks source link

ordlookup returns incorrect names for wsock32 ordinals #390

Open russdill opened 10 months ago

russdill commented 10 months ago

ordlookup contains a table of ordinals for ws2_32.dll which it reuses for wsock32.dll. The ordinals for the two DLLs are very similar, but are not the same a notable example is inet_addr/ioctlsocket.

j-t-1 commented 5 months ago

Thanks for highlighting this. Updated ws2_32.py (#404) and added wsock32.py (#405). Do they look okay?