I was using NtOpenDirectoryObject -> NtQueryDirectoryObject (retrieving multiple records) for "\Driver" & "\Device" but it (1) doesn't return all entries I can see in Winobj and (2) the entries it returns are inconsistent across versions? Anyone have any insights?

https://pastebin.com/t4gCGz5B that is how I do it, not production grade code, just what I myself currently use, maybe usefull for inspiration
-
-
Ty I'll have a look
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.