dmex wrote: ↑25 Aug 2021 10:24
The symbols don't have any type field?
This is how it's defined in ntldr.h
typedef struct _LDR_ENUM_RESOURCE_ENTRY
} LDR_ENUM_RESOURCE_ENTRY, *PLDR_ENUM_RESOURCE_ENTRY;
In that structure, the first field should be a "ULONG_PTR Type" which indicates the resource type (RT_ICON, RT_MENU, etc) followed by a union that is the NameOrId/Name and that union should be followed by "ULONG_PTR Language". The rest of the structure (Data, Size, etc) is as expected.
Another disconcerting thing about that definition is that there isn't an array of that union. There are 3 ULONG_PTR but only the second one is defined by the union shown in that definition. The first and third field aren't.