C language function:EnumDeviceDrivers sample codes

Search sample code in the internet.It is the result.


TITLE : GetMappedFileName function (Windows)
BOOL WINAPI EnumDeviceDrivers(.......
http://msdn.microsoft.com/en-us/library/windows/desktop/ms682617(v=vs.85).aspx


TITLE : GetMappedFileName function (Windows)
if( EnumDeviceDrivers(drivers, sizeof(drivers), &cbNeeded) && cbNeeded < sizeof(drivers)).......
http://msdn.microsoft.com/en-us/library/windows/desktop/ms682619(v=vs.85).aspx
TITLE : SensePost | Exploiting ms16-098 rgnobj integer overflow on windows 8.1 x64 bit by abusing gdi objects
if (EnumDeviceDrivers((LPVOID *)&Bases, sizeof(Bases), &needed)) {.......
http://sensepost.com/blog/2017/exploiting-ms16-098-rgnobj-integer-overflow-on-windows-8.1-x64-bit-by-abusing-gdi-objects/
TITLE : SensePost | Exploiting ms16-098 rgnobj integer overflow on windows 8.1 x64 bit by abusing gdi objects
The function PsInitalSystemProcess, will load the ntoskrnl.exe into memory, and user GetProcAddress to get the address of the exported PsInitialSystemProcess, then it will get the kernel base address by using the EnumDeviceDrivers() function. Subtracting the PsInitialSystemProcess from the loaded ntoskrnl.exe will result in the offset of PsInitalSystemProcess from kernel base, adding this offset to the retrieved Kernel base will return the kernel address of the PsInitialSystemProcess pointer........
http://sensepost.com/blog/2017/exploiting-ms16-098-rgnobj-integer-overflow-on-windows-8.1-x64-bit-by-abusing-gdi-objects/
TITLE : The Win32 API wrappers — WinAppDbg 1.6 documentation
ImageBaseList = EnumDeviceDrivers().......
http://winappdbg.readthedocs.io/en/latest/Win32APIWrappers.html
TITLE : Process viewer - CodeProject
EnumDeviceDrivers( lpvImageBases, nSize, &dwCount );.......
http://www.codeproject.com/Articles/18704/Process-viewer
TITLE : pinvoke.net: enumdevicedrivers (psapi)
private static extern bool EnumDeviceDrivers(.......
http://www.pinvoke.net/default.aspx/psapi.enumdevicedrivers
TITLE : pinvoke.net: enumdevicedrivers (psapi)
private static extern bool EnumDeviceDrivers(.......
http://www.pinvoke.net/default.aspx/psapi.enumdevicedrivers
TITLE : pinvoke.net: enumdevicedrivers (psapi)
success = EnumDeviceDrivers(null, 0, out bytesNeeded);.......
http://www.pinvoke.net/default.aspx/psapi.enumdevicedrivers
TITLE : pinvoke.net: enumdevicedrivers (psapi)
success = EnumDeviceDrivers(ddAddresses, arraySizeBytes, out bytesNeeded);.......
http://www.pinvoke.net/default.aspx/psapi.enumdevicedrivers
TITLE : Kernel Forensics and Rootkits
BOOL WINAPI EnumDeviceDrivers(.......
http://www.tophertimzen.com/resources/cs407/slides/week06_01-Rootkits.html
search Google

https://www.google.com/#q=EnumDeviceDrivers