ordlookup returns incorrect names for wsock32 ordinals

erocarrera / pefile

pefile is a Python module to read and work with PE (Portable Executable) files

MIT License

1.86k stars 519 forks source link

ordlookup returns incorrect names for wsock32 ordinals #390

Open russdill opened 8 months ago

russdill commented 8 months ago

ordlookup contains a table of ordinals for ws2_32.dll which it reuses for wsock32.dll. The ordinals for the two DLLs are very similar, but are not the same a notable example is inet_addr/ioctlsocket.

j-t-1 commented 4 months ago

Thanks for highlighting this. Updated ws2_32.py (#404) and added wsock32.py (#405). Do they look okay?