C / C++ / MFC

NDIS_802_11_BSSID_LIST* m_pBSSIDList;
m_pBSSIDList = (NDIS_802_11_BSSID_LIST *) VirtualAlloc (NULL,
                                                        sizeof (NDIS_802_11_BSSID_LIST) * NUMBEROF_BSSIDS,
                                                        MEM_RESERVE | MEM_COMMIT,
                                                        PAGE_READWRITE) ;


memset (m_pBSSIDList, 0, sizeof (NDIS_802_11_BSSID_LIST) * NUMBEROF_BSSIDS);

// Do Scan
oidcode = OID_802_11_BSSID_LIST_SCAN;
DeviceIoControl (m_handle,
		IOCTL_NDIS_QUERY_GLOBAL_STATS,
		&oidcode,
		sizeof(oidcode),
		(ULONG *) NULL,
		0,
		&bytesreturned,
		NULL);

Sleep (6100); // According to the documentation the result of the scan should be valid after 6 seconds.
// The original line was delay of 2000 mSec. find out why...
//Sleep (2000);

// Read scan results
oidcode = OID_802_11_BSSID_LIST;
if (DeviceIoControl(    m_handle,
			IOCTL_NDIS_QUERY_GLOBAL_STATS,
			&oidcode,
			sizeof(oidcode),
			(ULONG *) m_pBSSIDList,
			sizeof(NDIS_802_11_BSSID_LIST) * NUMBEROF_BSSIDS,
			&bytesreturned,
			NULL) == 0)
{
	// List failed
	return NULL;
}
else
{
	return m_pBSSIDList;
}