I have made a mistake in my previous articleabout WNF. It seems that WNF idenificators are not standard IID but pair of DWORDs, so struct my_wnf_item actually looks like:
Sample from windows 10 build 10586:
List of some WNF identifiers (sure is not completed):
// struct can be ripped from ntdll!RtlpCreateWnfNameSubscription
struct wnf_name
{
/* 0x0 */ DWORD tag; // 0x980912 under x64, 0x700912 under x86
/* 0x4 */ DWORD unk4;
/* 0x8 */ DWORD unk8;
/* 0xC */ DWORD unkC;
/* 0x10 */ DWORD id1;
/* 0x14 */ DWORD id2;
};
struct my_wnf_item
{
LIST_ENTRY List; // linked list of my_wnf_item
wnf_name *wnfId;
PBYTE notify;
};
Sample from windows 10 build 10586:
CheckProcess PID 420 (csrss.exe):
PEB.NtGlobalFlag: 0
PEB.Ldr: 00007FF946ED5200
PEB.GdiSharedHandleTable: 000001EFD8BC0000
WnfRoot: 000001EFD8A05BF0
Wnf[0] at 000001EFD8A08238: id1 A3BC4035 id2 96003D (WNF_PNPA_PORTS_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
Wnf[1] at 000001EFD8A080C8: id1 A3BC3875 id2 96003D (WNF_PNPA_PORTS_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
Wnf[2] at 000001EFD8A07F58: id1 A3BC3035 id2 96003D (WNF_PNPA_HARDWAREPROFILES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
Wnf[3] at 000001EFD8A07DE8: id1 A3BC2875 id2 96003D (WNF_PNPA_HARDWAREPROFILES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
Wnf[4] at 000001EFD8A07C78: id1 A3BC2035 id2 96003D (WNF_PNPA_VOLUMES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
Wnf[5] at 000001EFD8A07B08: id1 A3BC1875 id2 96003D (WNF_PNPA_VOLUMES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
Wnf[6] at 000001EFD8A04EF8: id1 A3BC1035 id2 96003D (WNF_PNPA_DEVNODES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
Wnf[7] at 000001EFD8A05058: id1 A3BC0875 id2 96003D (WNF_PNPA_DEVNODES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
List of some WNF identifiers (sure is not completed):
Id1 | Id2 | Name | Module |
---|---|---|---|
0xA3B95C75 | 0x41C6193F | WNF_RW_CA_ENABLED | wifinetworkmanager.dll |
0xA3BC0835 | 0xF810121 | WNF_LOGN_EOA_FLYOUT_POSITION | Windows.UI.Logon.dll |
0xA3BC0835 | 0xF840539 | WNF_TKBN_KEYBOARD_VISIBILITY | IMETIP.DLL |
0xA3BC0835 | 0xF950324 | WNF_IMSN_MONITORMODECHANGED | twinapi.dll |
0xA3BC0835 | 0x13810338 | WNF_UMGR_SIHOST_READY | fveskybackup.dll |
0xA3BC0835 | 0x41870A38 | WNF_UDA_STORE_CHANGED | PimIndexMaintenance.dll |
0xA3BC0835 | 0x41871D20 | WNF_MSA_ACCOUNTSTATECHANGE | wlidsvc.dll |
0xA3BC0835 | 0x418B0A38 | WNF_UDM_SERVICE_INITIALIZED | UserDataService.dll |
0xA3BC0835 | 0x418F1E3E | WNF_SPI_LOGICALDPIOVERRIDE | ApplicationFrame.dll |
0xA3BC0875 | 0x96003D | WNF_PNPA_DEVNODES_CHANGED | winsrv.dll |
0xA3BC0875 | 0x2831628 | WNF_EXEC_OSTASKCOMPLETION_REVOKED | modernexecserver.dll |
0xA3BC0875 | 0x28A182C | WNF_AVLC_DRIVER_REQUEST | audiosrv.dll |
0xA3BC0875 | 0x396003D | WNF_PNPB_AWAITING_RESPONSE | modernexecserver.dll |
0xA3BC0875 | 0x4960139 | WNF_TOPE_INP_POINTER_DEVICE_ACTIVITY | SensorCustomAdbAlgorithm.dll |
0xA3BC0875 | 0x5941822 | WNF_OVRD_OVERRIDESCALEUPDATED | ApplicationFrame.dll |
0xA3BC0875 | 0x6880F21 | WNF_LANG_FOD_INSTALLATION_STARTED | SettingsHandlers_nt.dll |
0xA3BC0875 | 0x7851E3F | WNF_RPCF_FWMAN_RUNNING | RpcEpMap.dll |
0xA3BC0875 | 0x880073A | WNF_WIFI_CONNECTION_STATUS | wificonnapi.dll |
0xA3BC0875 | 0x9920B39 | WNF_TETH_TETHERING_STATE | tetheringclient.dll |
0xA3BC0875 | 0xA811629 | WNF_DXGK_ADAPTER_TDR_NOTIFICATION | dcomp.dll |
0xA3BC0875 | 0xA840A2B | WNF_FDBK_QUESTION_NOTIFICATION | shell32.dll |
0xA3BC0875 | 0xC960C38 | WNF_UBPM_POWER_SOURCE | dab.dll |
0xA3BC0875 | 0xD83063E | WNF_SHEL_IMMERSIVE_SHELL_RUNNING | ProximityServicePal.dll |
0xA3BC0875 | 0xD891E2A | WNF_GPOL_SYSTEM_CHANGES | gpapi.dll |
0xA3BC0875 | 0xD8A0B2E | WNF_CELL_POWER_STATE_MODEM0 | wwansvc.dll |
0xA3BC0875 | 0xF850339 | WNF_TMCN_ISTABLETMODE | ApplicationFrame.dll |
0xA3BC0875 | 0xF87193A | WNF_WWAN_OBJECT_LIST | wwansvc.dll |
0xA3BC0875 | 0x118F022E | WNF_CLIP_CONTENT_CHANGED | ClipboardServer.dll |
0xA3BC0875 | 0x1192063A | WNF_WHTP_WINHTTP_PROXY_DISCOVERED | ncsi.dll |
0xA3BC0875 | 0x12821A3F | WNF_RTDS_RPC_INTERFACE_TRIGGER_CHANGED | dab.dll |
0xA3BC0875 | 0x1287083A | WNF_WFAS_FIREWALL_NETWORK_CHANGE_READY | MPSSVC.dll |
0xA3BC0875 | 0x128F0A23 | WNF_NDIS_ADAPTER_ARRIVAL | NetSetupSvc.dll |
0xA3BC0875 | 0x12960F2E | WNF_CAPS_CENTRAL_ACCESS_POLICIES_CHANGED | authz.dll |
0xA3BC0875 | 0x13891A3E | WNF_STOR_CONFIGURATION_DEVICE_INFO_UPDATED | wuaueng.dll |
0xA3BC0875 | 0x13920028 | WNF_ENTR_DEVICELOCK_POLICY_VALUE_CHANGED | NgcCtnrSvc.dll |
0xA3BC0875 | 0x1583002E | WNF_CNET_RADIO_ACTIVITY | wcmsvc.dll |
0xA3BC0875 | 0x159F022B | WNF_FLYT_IDS_CHANGED | diagtrack.dll |
0xA3BC0875 | 0x17891C3D | WNF_PROV_TURN_COMPLETE | umpo.dll |
0xA3BC0875 | 0x4182012B | WNF_FOD_STATE_CHANGE | SettingsHandlers_nt.dll |
0xA3BC0875 | 0x4183182B | WNF_FVE_DE_SUPPORT | shell32.dll |
0xA3BC0875 | 0x41840B3E | WNF_SEB_INTERNET_PRESENT | diagtrack.dll |
0xA3BC0875 | 0x41840D23 | WNF_NCB_APP_AVAILABLE | ncbservice.dll |
0xA3BC0875 | 0x41841D38 | WNF_USB_TYPE_C_PARTNER_STATE | UcmCx.dll |
0xA3BC0875 | 0x41850121 | WNF_LOC_DEVICE_BROKER_ACCESS_CHANGED | LocationPermissions.dll |
0xA3BC0875 | 0x41851C3E | WNF_SRC_SYSTEM_RADIO_CHANGED | authui.dll |
0xA3BC0875 | 0x41851D2E | WNF_CSC_SERVICE_START | cscsvc.dll |
0xA3BC0875 | 0x41851D3A | WNF_WSC_SECURITY_CENTER_USER_NOTIFICATION | wscapi.dll |
0xA3BC0875 | 0x41870223 | WNF_NLA_CAPABILITY_CHANGE | ncsi.dll |
0xA3BC0875 | 0x41870C29 | WNF_DBA_DEVICE_ACCESS_CHANGED | SensorService.dll |
0xA3BC0875 | 0x4187182C | WNF_AVA_SOUNDDETECTOR_PATTERN_MATCH | NUIVoiceWBSAdapters.dll |
0xA3BC0875 | 0x41880F3B | WNF_VAN_VANUI_STATUS | authui.dll |
0xA3BC0875 | 0x41891D38 | WNF_USO_STATE_CHANGE | MusUpdateHandlers.dll |
0xA3BC0875 | 0x418A063E | WNF_SHL_DEVICE_LOCK_STATE | modernexecserver.dll |
0xA3BC0875 | 0x418B0223 | WNF_NLM_VPN_RECONNECT_CHANGE | netprofmsvc.dll |
0xA3BC0875 | 0x418B0D3A | WNF_WCM_INTERFACE_LIST | shell32.dll |
0xA3BC0875 | 0x418B0D3E | WNF_SCM_AUTOSTART_STATE | umpo.dll |
0xA3BC0875 | 0x418B1E39 | WNF_TPM_OWNERSHIP_TAKEN | bdesvc.dll |
0xA3BC0875 | 0x41901D26 | WNF_KSV_STREAMSTATE | authui.dll |
0xA3BC0875 | 0x4192022B | WNF_FLT_RUNDOWN_WAIT | modernexecserver.dll |
0xA3BC0875 | 0x41921C3E | WNF_SRT_WINRE_CONFIGURATION_CHANGE | bdesvc.dll |
0xA3BC0875 | 0x41940B3A | WNF_WER_SERVICE_START | modernexecserver.dll |
0xA3BC0875 | 0x41941B20 | WNF_MUR_MEDIA_UI_REQUEST_WLAN | WlanMediaManager.dll |
0xA3BC0875 | 0x4195003A | WNF_WNS_CONNECTIVITY_STATUS | ncbservice.dll |
0xA3BC0875 | 0x4195083A | WNF_WFS_SETTINGS | wlidsvc.dll |
0xA3BC0875 | 0x4196032F | WNF_BMP_BG_PLAYSTATE_CHANGED | BackgroundMediaPolicy.dll |
0xA3BC0875 | 0x41C6013D | WNF_PO_SCENARIO_CHANGE | modernexecserver.dll |
0xA3BC0875 | 0x41C60320 | WNF_MM_BAD_MEMORY_PENDING_REMOVAL | KernelBase.dll |
0xA3BC0875 | 0x41C6072F | WNF_BI_BROKER_WAKEUP_CHANNEL | srumsvc.dll |
0xA3BC0875 | 0x41C60C39 | WNF_TB_SYSTEM_TIME_CHANGED | WPTaskScheduler.dll |
0xA3BC0875 | 0x41C61D3D | WNF_PS_WAKE_CHARGE_RESOURCE_POLICY | modernexecserver.dll |
0xA3BC08B5 | 0x2821B2C | WNF_AUDC_CPUSET_ID | RTWorkQ.dll |
0xA3BC08B5 | 0xD920D2E | WNF_CCTL_BUTTON_REQUESTS | CallButtons.dll |
0xA3BC08F5 | 0x13840539 | WNF_TKBR_CHANGE_SYSTEM | AzureSettingSyncProvider.dll |
0xA3BC08F5 | 0x41871B3A | WNF_WUA_NUM_PER_USER_UPDATES | WSShared.dll |
0xA3BC0C75 | 0x418B1D29 | WNF_DSM_DSMAPPINSTALLED | DeviceSetupManagerAPI.dll |
0xA3BC0C75 | 0x41960B29 | WNF_DEP_OOBE_COMPLETE | bdesvc.dll |
0xA3BC0C75 | 0x41C61629 | WNF_DX_STEREO_CONFIG | dxgi.dll |
0xA3BC1035 | 0x96003D | WNF_PNPA_DEVNODES_CHANGED_SESSION | winsrv.dll |
0xA3BC1035 | 0xF840539 | WNF_TKBN_RESTRICTED_KEYBOARD_VISIBILITY | IMETIP.DLL |
0xA3BC1035 | 0xF950324 | WNF_IMSN_LAUNCHERVISIBILITY | twinapi.dll |
0xA3BC1035 | 0x41870A38 | WNF_UDA_CALENDAR_FOLDER_ISHIDDEN_CHANGED | PimIndexMaintenance.dll |
0xA3BC1035 | 0x41C61629 | WNF_DX_MODE_CHANGE_NOTIFICATION | ApplicationFrame.dll |
0xA3BC1075 | 0x2821B2C | WNF_AUDC_PHONECALL_ACTIVE | sapi_onecore.dll |
0xA3BC1075 | 0x28A182C | WNF_AVLC_VOLUME_WARNING_ACCEPTED | audiosrv.dll |
0xA3BC1075 | 0x880073A | WNF_WIFI_CPL_STATUS | wifinetworkmanager.dll |
0xA3BC1075 | 0xD83063E | WNF_SHEL_NOTIFICATIONS | NotificationController.dll |
0xA3BC1075 | 0xD8A0B2E | WNF_CELL_SIGNAL_STRENGTH_BARS_CAN0 | wwansvc.dll |
0xA3BC1075 | 0xD941D2B | WNF_FSRL_OPLOCK_BREAK | modernexecserver.dll |
0xA3BC1075 | 0x128F0A23 | WNF_NDIS_CORRUPTED_STORE | NetSetupSvc.dll |
0xA3BC1075 | 0x12960F20 | WNF_MAPS_MAPLOADER_PROGRESS | SettingsHandlers_Maps.dll |
0xA3BC1075 | 0x13920028 | WNF_ENTR_WIFI_POLICY_VALUE_CHANGED | wifinetworkmanager.dll |
0xA3BC1075 | 0x1583002E | WNF_CNET_DPU_GLOBAL_STATE_OVER_LIMIT | wcmsvc.dll |
0xA3BC1075 | 0x1589012F | WNF_BOOT_INVALID_TIME_SOURCE | msoobeplugins.dll |
0xA3BC1075 | 0x4183182B | WNF_FVE_DE_MANAGED_VOLUMES_COUNT | shell32.dll |
0xA3BC1075 | 0x41840B3E | WNF_SEB_FREE_NETWORK_PRESENT | diagtrack.dll |
0xA3BC1075 | 0x41850721 | WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_OUT_OF_TOLERANCE | wlidsvc.dll |
0xA3BC1075 | 0x41870223 | WNF_NLA_ENTER_SUSPECT_STATE | ncsi.dll |
0xA3BC1075 | 0x41891D38 | WNF_USO_STATE_ATTENTION_REQUIRED | MusUpdateHandlers.dll |
0xA3BC1075 | 0x418A0B39 | WNF_TEL_CRASH_STATE | modernexecserver.dll |
0xA3BC1075 | 0x418B0223 | WNF_NLM_INTERNET_PRESENT | MapControlCore.dll |
0xA3BC1075 | 0x418B0D3A | WNF_WCM_SERVICE_STATUS | wcmsvc.dll |
0xA3BC1075 | 0x418B1E39 | WNF_TPM_DEVICEID_STATE | tbs.dll |
0xA3BC1075 | 0x4194063E | WNF_SHR_DHCP_IPv4_LEASE_LIST | wlansvc.dll |
0xA3BC1075 | 0x41941B20 | WNF_MUR_MEDIA_UI_REQUEST_LAN | dot3api.dll |
0xA3BC1075 | 0x41950029 | WNF_DNS_ALL_SERVER_TIMEOUT | dnsapi.dll |
0xA3BC1075 | 0x41950821 | WNF_LFS_RUNNING_STATE | Geolocation.dll |
0xA3BC1075 | 0x41C6013D | WNF_PO_COMPOSITE_BATTERY | Windows.Energy.dll |
0xA3BC1075 | 0x41C6072F | WNF_BI_USER_LOGON_CHANNEL | bisrv.dll |
0xA3BC1075 | 0x41C61439 | WNF_TZ_STORE_CHANGED | UserDataService.dll |
0xA3BC10F5 | 0xD891E2A | WNF_GPOL_USER_CHANGES | gpapi.dll |
0xA3BC10F5 | 0x41960A28 | WNF_EDP_IDENTITY_REVOKED | efscore.dll |
0xA3BC1475 | 0x418B1D29 | WNF_DSM_DSMAPPREMOVED | DeviceSetupManagerAPI.dll |
0xA3BC1475 | 0x41951A38 | WNF_UTS_LOCKSCREEN_DISMISSAL_TRIGGERED | authui.dll |
0xA3BC1835 | 0xF950324 | WNF_IMSN_IMMERSIVEMONITORCHANGED | dxgi.dll |
0xA3BC1835 | 0x41870A38 | WNF_UDA_APPOINTMENT_CHANGED | PimIndexMaintenance.dll |
0xA3BC1835 | 0x41C61629 | WNF_DX_OCCLUSION_CHANGE_NOTIFICATION | dxgi.dll |
0xA3BC1875 | 0x96003D | WNF_PNPA_VOLUMES_CHANGED | winsrv.dll |
0xA3BC1875 | 0x2831628 | WNF_EXEC_THERMAL_LIMITER | bisrv.dll |
0xA3BC1875 | 0x28A182C | WNF_AVLC_SHOW_VOLUMELIMITWARNING | audiosrv.dll |
0xA3BC1875 | 0xC960C38 | WNF_UBPM_FRMU_ALLOWED | dab.dll |
0xA3BC1875 | 0xD83063E | WNF_SHEL_LOGON_COMPLETE | wifinetworkmanager.dll |
0xA3BC1875 | 0xD8A0B2E | WNF_CELL_SYSTEM_TYPE_CAN0 | wwansvc.dll |
0xA3BC1875 | 0x12821A3F | WNF_RTDS_NAMED_PIPE_TRIGGER_CHANGED | dab.dll |
0xA3BC1875 | 0x12960F20 | WNF_MAPS_MAPLOADER_STATUS_CHANGE | mapsupdatetask.dll |
0xA3BC1875 | 0x13920028 | WNF_ENTR_SYSTEM_POLICY_VALUE_CHANGED | diagtrack.dll |
0xA3BC1875 | 0x1583002E | WNF_CNET_DPU_GLOBAL_STATE_OFF_TRACK | SubscriptionMgr.dll |
0xA3BC1875 | 0x4183182B | WNF_FVE_WIM_HASH_GENERATION_TRIGGER | WofTasks.dll |
0xA3BC1875 | 0x41841D38 | WNF_USB_PEER_DEVICE_STATE | UcmCx.dll |
0xA3BC1875 | 0x41850721 | WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_IN_TOLERANCE | wlidsvc.dll |
0xA3BC1875 | 0x41850923 | WNF_NGC_PRO_CSP_POLICY_CHANGED | NgcCtnrSvc.dll |
0xA3BC1875 | 0x41891D38 | WNF_USO_UPDATE_PROGRESS | MusUpdateHandlers.dll |
0xA3BC1875 | 0x418B0D3A | WNF_WCM_MAPPING_POLICY_UPDATED | wcmsvc.dll |
0xA3BC1875 | 0x41921C20 | WNF_MRT_PERSISTENT_QUALIFIER_CHANGED | MrmCoreR.dll |
0xA3BC1875 | 0x41950223 | WNF_NLS_USER_DEFAULT_LOCALE_CHANGED | KernelBase.dll |
0xA3BC1875 | 0x41950821 | WNF_LFS_MASTERSWITCH_STATE | WalletService.dll |
0xA3BC1875 | 0x41960A28 | WNF_EDP_DPL_KEYS_STATE | efscore.dll |
0xA3BC1875 | 0x41C6013D | WNF_PO_POWER_STATE_CHANGE | SettingsHandlers_OneCore_BatterySaver.dll |
0xA3BC1875 | 0x41C6072F | WNF_BI_USER_LOGOFF_CHANNEL | bisrv.dll |
0xA3BC1875 | 0x41C61439 | WNF_TZ_TIMEZONE_CHANGED | KernelBase.dll |
0xA3BC2035 | 0x96003D | WNF_PNPA_VOLUMES_CHANGED_SESSION | winsrv.dll |
0xA3BC2035 | 0x41870A38 | WNF_UDA_TASK_CHANGED | PimIndexMaintenance.dll |
0xA3BC2035 | 0x41C61629 | WNF_DX_NETWORK_DISPLAY_STATE_CHANGE_NOTIFICATION | DisplayManager.dll |
0xA3BC2075 | 0x880073A | WNF_WIFI_SERVICE_NOTIFICATIONS | wificonnapi.dll |
0xA3BC2075 | 0xD8A0B2E | WNF_CELL_REGISTRATION_STATUS_CAN0 | wwansvc.dll |
0xA3BC2075 | 0x12960F20 | WNF_MAPS_MAPLOADER_PACKAGE_CHANGE | SettingsHandlers_Maps.dll |
0xA3BC2075 | 0x1583002E | WNF_CNET_DPU_GLOBAL_STATE_ON_TRACK | SubscriptionMgr.dll |
0xA3BC2075 | 0x4183182B | WNF_FVE_WIM_HASH_GENERATION_COMPLETION | WofTasks.dll |
0xA3BC2075 | 0x41840B3E | WNF_SEB_NETWORK_STATE_CHANGES | APHostService.dll |
0xA3BC2075 | 0x41841D38 | WNF_USB_CHARGING_STATE | UcmCx.dll |
0xA3BC2075 | 0x41850721 | WNF_LIC_DEVICE_LICENSE_UPDATED | LicenseManagerSvc.dll |
0xA3BC2075 | 0x418B0D3A | WNF_WCM_PROFILE_CONFIG_UPDATED | wwansvc.dll |
0xA3BC2075 | 0x41950821 | WNF_LFS_GEOFENCETRACKING_STATE | LocationGeofences.dll |
0xA3BC2075 | 0x41C6013D | WNF_PO_ENERGY_SAVER_STATE | AuthExt.dll |
0xA3BC2075 | 0x41C6072F | WNF_BI_SESSION_CONNECT_CHANNEL | bisrv.dll |
0xA3BC2475 | 0xD83063E | WNF_SHEL_OOBE_USER_LOGON_COMPLETE | wifinetworkmanager.dll |
0xA3BC2835 | 0x41870A38 | WNF_UDA_CONTACT_SORT_CHANGED | PimIndexMaintenance.dll |
0xA3BC2835 | 0x41960A28 | WNF_EDP_DIALOG_CANCEL | efswrt.dll |
0xA3BC2835 | 0x41C61629 | WNF_DX_MONITOR_CHANGE_NOTIFICATION | ApplicationFrame.dll |
0xA3BC2875 | 0x96003D | WNF_PNPA_HARDWAREPROFILES_CHANGED | winsrv.dll |
0xA3BC2875 | 0x880073A | WNF_WIFI_HOTSPOT_HOST_READY | wifinetworkmanager.dll |
0xA3BC2875 | 0xD83063E | WNF_SHEL_VEEVENT_DISPATCHER_CLIENT_PIPE_CLOSED | twinui.dll |
0xA3BC2875 | 0xD8A0B2E | WNF_CELL_UICC_STATUS_SLOT0 | wwansvc.dll |
0xA3BC2875 | 0x1583002E | WNF_CNET_DPU_GLOBAL_STATE_UNDER_TRACK | SubscriptionMgr.dll |
0xA3BC2875 | 0x41840B3E | WNF_SEB_MBAE_NOTIFICATION_RECEIVED | tetheringservice.dll |
0xA3BC2875 | 0x41891D38 | WNF_USO_ACTIVE_SESSION | musdialoghandlers.dll |
0xA3BC2875 | 0x41950223 | WNF_NLS_LOCALE_INFO_CHANGED | KernelBase.dll |
0xA3BC2875 | 0x41C6013D | WNF_PO_ENERGY_SAVER_SETTING | Windows.Energy.dll |
0xA3BC2875 | 0x41C6072F | WNF_BI_SESSION_DISCONNECT_CHANNEL | bisrv.dll |
0xA3BC2875 | 0x41C61D22 | WNF_OS_BATTERY_AC_ONLINE | wpncore.dll |
0xA3BC3035 | 0x96003D | WNF_PNPA_HARDWAREPROFILES_CHANGED_SESSION | winsrv.dll |
0xA3BC3035 | 0xF950324 | WNF_IMSN_KILL_LOGICAL_FOCUS | dui70.dll |
0xA3BC3075 | 0x1583002E | WNF_CNET_DPU_GLOBAL_STATE_NOT_TRACKED | SubscriptionMgr.dll |
0xA3BC3075 | 0x41850721 | WNF_LIC_DEVICE_LICENSE_MISSING | wlidsvc.dll |
0xA3BC3075 | 0x41950223 | WNF_NLS_GEOID_CHANGED | kernel32.dll |
0xA3BC3075 | 0x41950821 | WNF_LFS_POSITION_AVAILABLE | LocationPeComposite.dll |
0xA3BC3075 | 0x41C6013D | WNF_PO_ENERGY_SAVER_OVERRIDE | SettingsHandlers_OneCore_BatterySaver.dll |
0xA3BC3075 | 0x41C6072F | WNF_BI_APPLICATION_UNINSTALL_CHANNEL | bisrv.dll |
0xA3BC3075 | 0x41C61D22 | WNF_OS_USER_PRESENCE | wpncore.dll |
0xA3BC30B5 | 0x41C61629 | WNF_DX_VIDMM_TRIM_NOTIFICATION | gdi32.dll |
0xA3BC3835 | 0xF950324 | WNF_IMSN_PROJECTIONDISPLAYAVAILABLE | twinapi.appcore.dll |
0xA3BC3875 | 0x96003D | WNF_PNPA_PORTS_CHANGED | winsrv.dll |
0xA3BC3875 | 0xD83063E | WNF_SHEL_NOTIFICATION_SETTINGS_CHANGED | NotificationController.dll |
0xA3BC3875 | 0xD8A0B2E | WNF_CELL_OPERATOR_NAME_CAN0 | wwansvc.dll |
0xA3BC3875 | 0x418A063E | WNF_SHL_START_READY | LocationPermissions.dll |
0xA3BC3875 | 0x41950821 | WNF_LFS_CLIENT_RECALCULATE_PERMISSIONS | LocationPermissions.dll |
0xA3BC3875 | 0x41C6072F | WNF_BI_APPLICATION_SERVICING_START_CHANNEL | bisrv.dll |
0xA3BC3875 | 0x41C61629 | WNF_DX_VIDMM_BUDGETCHANGE_NOTIFICATION | dxgi.dll |
0xA3BC4035 | 0x96003D | WNF_PNPA_PORTS_CHANGED_SESSION | winsrv.dll |
0xA3BC4075 | 0xD83063E | WNF_SHEL_SOFTLANDING_RULE_TRIGGERED | diagtrack.dll |
0xA3BC4075 | 0xD8A0B2E | WNF_CELL_CDMA_ACTIVATION_CAN0 | wwansvc.dll |
0xA3BC4075 | 0x13920028 | WNF_ENTR_BROWSER_POLICY_VALUE_CHANGED | EnterpriseAppMgmtSvc.dll |
0xA3BC4075 | 0x41840B3E | WNF_SEB_ONLINE_ID_CONNECTED_STATE_CHANGE | wlidsvc.dll |
0xA3BC4075 | 0x41950821 | WNF_LFS_PERMISSION_TO_SHOW_ICON_CHANGED | SettingsHandlers_Geolocation.dll |
0xA3BC4075 | 0x41C6072F | WNF_BI_APPLICATION_SERVICING_STOP_CHANNEL | bisrv.dll |
0xA3BC4075 | 0x41C61629 | WNF_DX_HARDWARE_CONTENT_PROTECTION_TILT_NOTIFICATION | dxgi.dll |
0xA3BC4075 | 0x41C61D22 | WNF_OS_BATTERY_SAVINGS_STATE | rascustom.dll |
0xA3BC4875 | 0x880073A | WNF_WIFI_AOAC_STATUS | wifinetworkmanager.dll |
0xA3BC4875 | 0xD83063E | WNF_SHEL_START_LAYOUT_READY | SharedStartModel.dll |
0xA3BC4875 | 0xD8A0B2E | WNF_CELL_NETWORK_TIME_CAN0 | wwansvc.dll |
0xA3BC4875 | 0x1583002E | WNF_CNET_CELLULAR_CONNECTIONS_AVAILABLE | wcmsvc.dll |
0xA3BC4875 | 0x41C6072F | WNF_BI_LOCK_SCREEN_UPDATE_CHANNEL | bisrv.dll |
0xA3BC4875 | 0x41C61629 | WNF_DX_INTERNAL_PANEL_DIMENSIONS | KernelBase.dll |
0xA3BC5035 | 0x41C61629 | WNF_DX_MODERN_OUTPUTDUPLICATION | uDWM.dll |
0xA3BC5075 | 0xD83063E | WNF_SHEL_APPRESOLVER_SCAN | shell32.dll |
0xA3BC5075 | 0xD8A0B2E | WNF_CELL_AVAILABLE_OPERATORS_CAN0 | wwansvc.dll |
0xA3BC5075 | 0x11900B29 | WNF_DEVP_ENTERPRISE_ENFORCE_POLICY | EnterpriseAppMgmtSvc.dll |
0xA3BC5075 | 0x1583002E | WNF_CNET_NON_CELLULAR_CONNECTIONS_AVAILABLE | wcmsvc.dll |
0xA3BC5075 | 0x19890C35 | WNF_XBOX_APPLICATION_NO_LONGER_RUNNING | XblAuthManager.til |
0xA3BC5075 | 0x41C6013D | WNF_PO_DISCHARGE_ESTIMATE | Windows.Energy.dll |
0xA3BC5075 | 0x41C6072F | WNF_BI_EVENT_DELETION | bisrv.dll |
0xA3BC5835 | 0xD83063E | WNF_SHEL_LOCKSCREEN_ACTIVE | LogonController.dll |
0xA3BC5835 | 0x41C61629 | WNF_DX_DISPLAY_CONFIG_CHANGE_NOTIFICATION | DisplayManager.dll |
0xA3BC5875 | 0xD8A0B2E | WNF_CELL_DEVICE_INFO_CAN0 | wwansvc.dll |
0xA3BC5875 | 0xF911D22 | WNF_OSWN_SYSTEM_CLOCK_CHANGED | StorSvc.dll |
0xA3BC5875 | 0x13920028 | WNF_ENTR_APPLICATIONMANAGEMENT_POLICY_VALUE_CHANGED | EnterpriseAppMgmtSvc.dll |
0xA3BC5875 | 0x41C6072F | WNF_BI_PSM_TEST_HOOK_CHANNEL | psmsrv.dll |
0xA3BC6075 | 0x880073A | WNF_WIFI_TILE_UPDATE | wifinetworkmanager.dll |
0xA3BC6075 | 0xD83063E | WNF_SHEL_START_APPLIFECYCLE_INSTALL_FINISHED | shell32.dll |
0xA3BC6075 | 0xF911D22 | WNF_OSWN_STORAGE_PRESENCE_CHANGE | StorSvc.dll |
0xA3BC6075 | 0x41C6013D | WNF_PO_CHARGE_ESTIMATE | SettingsHandlers_OneCore_BatterySaver.dll |
0xA3BC6075 | 0x41C6072F | WNF_BI_QUIET_MODE_UPDATE_CHANNEL | bisrv.dll |
0xA3BC6475 | 0xD8A0B2E | WNF_CELL_DATA_ENABLED_BY_USER_MODEM0 | wwansvc.dll |
0xA3BC6835 | 0xF840539 | WNF_TKBN_KEYBOARD_GESTURE | msctfuimanager.dll |
0xA3BC6835 | 0x41C6072F | WNF_BI_BI_READY | BrokerLib.dll |
0xA3BC6875 | 0x880073A | WNF_WIFI_AVERAGE_TRANSMIT | ncsi.dll |
0xA3BC6875 | 0xD83063E | WNF_SHEL_START_APPLIFECYCLE_DOWNLOAD_STARTED | shell32.dll |
0xA3BC6875 | 0xD8A0B2E | WNF_CELL_PHONE_NUMBER_CAN0 | wwansvc.dll |
0xA3BC6875 | 0xF911D22 | WNF_OSWN_STORAGE_VOLUME_STATUS_CHANGE | StorSvc.dll |
0xA3BC6875 | 0x1583002E | WNF_CNET_NON_CELLULAR_CONNECTED | qmgr.dll |
0xA3BC6875 | 0x41840B3E | WNF_SEB_USER_PRESENT | RDXTaskFactory.dll |
0xA3BC7035 | 0xF840539 | WNF_TKBN_RESTRICTED_KEYBOARD_GESTURE | msctfuimanager.dll |
0xA3BC7075 | 0x880073A | WNF_WIFI_MEDIA_STREAMING_MODE | wlansvc.dll |
0xA3BC7075 | 0xD8A0B2E | WNF_CELL_VOICEMAIL_NUMBER_CAN0 | wwansvc.dll |
0xA3BC7075 | 0xF911D22 | WNF_OSWN_STORAGE_FREE_SPACE_CHANGE | StorSvc.dll |
0xA3BC7075 | 0x1583002E | WNF_CNET_RADIO_ACTIVITY_OR_NON_CELLULAR_CONNECTED | wcmsvc.dll |
0xA3BC7075 | 0x19890C35 | WNF_XBOX_LIVE_CONNECTIVITY_CHANGED | XblAuthManager.til |
0xA3BC7075 | 0x41840B3E | WNF_SEB_SYSTEM_AC | diagtrack.dll |
0xA3BC7075 | 0x41C6072F | WNF_BI_NOTIFY_NEW_SESSION | bisrv.dll |
0xA3BC7835 | 0xF840539 | WNF_TKBN_CANDIDATE_WINDOW_STATE | msctfuimanager.dll |
0xA3BC7875 | 0x880073A | WNF_WIFI_TASK_TRIGGER | wifinetworkmanager.dll |
0xA3BC7875 | 0xF911D22 | WNF_OSWN_STORAGE_TEMP_CLEANUP_CHANGE | StorSvc.dll |
0xA3BC7875 | 0x13920028 | WNF_ENTR_ABOVELOCK_POLICY_VALUE_CHANGED | NotificationController.dll |
0xA3BC7875 | 0x41840B3E | WNF_SEB_MONITOR_ON | SyncController.dll |
0xA3BC7C75 | 0xD8A0B2E | WNF_CELL_REGISTRATION_PREFERENCES_CAN0 | wwansvc.dll |
0xA3BC8075 | 0x880073A | WNF_WIFI_L3_AUTH_STATE | wifinetworkmanager.dll |
0xA3BC8075 | 0xD8A0B2E | WNF_CELL_CAN_STATE_CAN0 | wwansvc.dll |
0xA3BC8C75 | 0xD8A0B2E | WNF_CELL_USER_PREFERRED_POWER_STATE_MODEM0 | wwansvc.dll |
0xA3BC9075 | 0xD83063E | WNF_SHEL_ENTERPRISE_START_LAYOUT_POLICY_VALUE_CHANGED | SharedStartModel.dll |
0xA3BC9075 | 0x41840B3E | WNF_SEB_BACKGROUND_WORK_COST_HIGH | psmsrv.dll |
0xA3BC9875 | 0xD8A0B2E | WNF_CELL_POSSIBLE_DATA_ACTIVITY_CHANGE_MODEM0 | wwansvc.dll |
0xA3BC9875 | 0x41840B3E | WNF_SEB_SYSTEM_LPE | wuaueng.dll |
0xA3BCA075 | 0xD83063E | WNF_SHEL_SOFTLANDING_RULES_UPDATED | diagtrack.dll |
0xA3BCA075 | 0x19890C35 | WNF_XBOX_SYSTEM_CONSTRAINED_MODE_STATUS_CHANGED | MiracastReceiver.dll |
0xA3BCA475 | 0xD8A0B2E | WNF_CELL_SYSTEM_CONFIG | wwansvc.dll |
0xA3BCA875 | 0xD83063E | WNF_SHEL_NOTIFICATIONS_CRITICAL | NotificationController.dll |
0xA3BCA875 | 0xD8A0B2E | WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN0 | wwansvc.dll |
0xA3BCA875 | 0x41840B3E | WNF_SEB_SYSTEM_MAINTENANCE | ubpm.dll |
0xA3BCAC75 | 0x41C6193F | WNF_RW_WALLET_HAS_WEBSERVICE_WORK | WalletService.dll |
0xA3BCB075 | 0xD83063E | WNF_SHEL_START_VISIBILITY_CHANGED | twinapi.appcore.dll |
0xA3BCB075 | 0xD8A0B2E | WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN0 | wwansvc.dll |
0xA3BCB075 | 0x41840B3E | WNF_SEB_GEOLOCATION | SystemEventsBrokerServer.dll |
0xA3BCB875 | 0xD8A0B2E | WNF_CELL_PERSO_STATUS_CAN0 | wwansvc.dll |
0xA3BCB875 | 0xF911D22 | WNF_OSWN_STORAGE_FINISHED_USAGE_CATEGORY_UPDATE | StorSvc.dll |
0xA3BCB875 | 0x41C6193F | WNF_RW_WALLET_GEOFENCE_STATECHANGED | WalletService.dll |
0xA3BCC075 | 0xD8A0B2E | WNF_CELL_HOME_OPERATOR_CAN0 | wwansvc.dll |
0xA3BCC075 | 0xF911D22 | WNF_OSWN_STORAGE_SHELLHWD_EVENT | StorSvc.dll |
0xA3BCC875 | 0xD8A0B2E | WNF_CELL_HOME_PRL_ID_CAN0 | wwansvc.dll |
0xA3BCD875 | 0x13920028 | WNF_ENTR_BLUETOOTH_POLICY_VALUE_CHANGED | bthserv.dll |
0xA3BCE075 | 0x13920028 | WNF_ENTR_EDPNETWORKING_POLICY_CHANGED | MPSSVC.dll |
0xA3BCE075 | 0x41840B3E | WNF_SEB_OFFLOADED_AUDIO | audiosrv.dll |
0xA3BCE875 | 0xD8A0B2E | WNF_CELL_UTK_SETUP_MENU_SLOT0 | MbaeApi.dll |
0xA3BCE875 | 0x19890C35 | WNF_XBOX_XAM_READY_FOR_DEVKIT_REBOOT | XblAuthManager.til |
0xA3BCE875 | 0x41840B3E | WNF_SEB_NON_OFFLOADED_AUDIO | audiosrv.dll |
0xA3BCF875 | 0x19890C35 | WNF_XBOX_EXIT_SILENT_BOOT_MODE | MiracastReceiver.dll |
0xA3BD0075 | 0xD8A0B2E | WNF_CELL_CALLFORWARDING_STATUS_CAN0 | CellularAPI.dll |
0xA3BD0C75 | 0xD8A0B2E | WNF_CELL_RADIO_TYPE_MODEM0 | wwansvc.dll |
0xA3BD1075 | 0xD8A0B2E | WNF_CELL_SIGNAL_STRENGTH_BARS_CAN1 | wwansvc.dll |
0xA3BD1875 | 0xD8A0B2E | WNF_CELL_SYSTEM_TYPE_CAN1 | wwansvc.dll |
0xA3BD2075 | 0xD8A0B2E | WNF_CELL_REGISTRATION_STATUS_CAN1 | wwansvc.dll |
0xA3BD2075 | 0x13920028 | WNF_ENTR_ALLOWUPDATESERVICE_POLICY_VALUE_CHANGED | wuaueng.dll |
0xA3BD2075 | 0x19890C35 | WNF_XBOX_MSA_ENVIRONMENT_CONFIGURED | XblAuthManager.til |
0xA3BD2875 | 0xD8A0B2E | WNF_CELL_UICC_STATUS_SLOT1 | wwansvc.dll |
0xA3BD2875 | 0x13920028 | WNF_ENTR_UPDATESERVICEURL_POLICY_VALUE_CHANGED | wuaueng.dll |
0xA3BD3075 | 0x13920028 | WNF_ENTR_ALLOWNONMICROSOFTSIGNEDUPDATE_POLICY_VALUE_CHANGED | wuaueng.dll |
0xA3BD3075 | 0x19890C35 | WNF_XBOX_SYSTEM_GAME_STREAMING_STATE_CHANGED | MiracastReceiver.dll |
0xA3BD4075 | 0xD8A0B2E | WNF_CELL_OPERATOR_NAME_CAN1 | wwansvc.dll |
0xA3BD4875 | 0xD8A0B2E | WNF_CELL_CDMA_ACTIVATION_CAN1 | wwansvc.dll |
0xA3BD4875 | 0x418A063E | WNF_SHL_OOBE_PROCESS_COMPLETE | wifinetworkmanager.dll |
0xA3BD5075 | 0xD8A0B2E | WNF_CELL_NETWORK_TIME_CAN1 | wwansvc.dll |
0xA3BD5875 | 0xD8A0B2E | WNF_CELL_AVAILABLE_OPERATORS_CAN1 | wwansvc.dll |
0xA3BD6075 | 0xD8A0B2E | WNF_CELL_DEVICE_INFO_CAN1 | wwansvc.dll |
0xA3BD7075 | 0xD8A0B2E | WNF_CELL_PHONE_NUMBER_CAN1 | wwansvc.dll |
0xA3BD7875 | 0x41840B3E | WNF_SEB_MOBILE_BROADBAND_REGISTRATION_STATE_CHANGE | wwansvc.dll |
0xA3BD8075 | 0x41840B3E | WNF_SEB_MOBILE_BROADBAND_RADIO_STATE_CHANGE | wwansvc.dll |
0xA3BD8875 | 0x41840B3E | WNF_SEB_MOBILE_BROADBAND_PIN_LOCK_STATE_CHANGE | wwansvc.dll |
0xA3BD8C75 | 0xD8A0B2E | WNF_CELL_REGISTRATION_PREFERENCES_CAN1 | wwansvc.dll |
0xA3BD9075 | 0xD8A0B2E | WNF_CELL_CAN_STATE_CAN1 | wwansvc.dll |
0xA3BD9075 | 0x41840B3E | WNF_SEB_MOBILE_BROADBAND_DEVICE_SERVICE_NOTIFICATION | wwansvc.dll |
0xA3BD9875 | 0xD8A0B2E | WNF_CELL_REGISTRATION_STATUS_DETAILS_CAN1 | wwansvc.dll |
0xA3BDA075 | 0xD8A0B2E | WNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN1 | wwansvc.dll |
0xA3BDA875 | 0xD8A0B2E | WNF_CELL_HOME_OPERATOR_CAN1 | wwansvc.dll |
0xA3BDB075 | 0xD8A0B2E | WNF_CELL_HOME_PRL_ID_CAN1 | wwansvc.dll |
0xA3BDC875 | 0x418A063E | WNF_SHL_DICTATION_RUNNING | DictationManager.dll |
0xA3BDD075 | 0xD8A0B2E | WNF_CELL_UTK_SETUP_MENU_SLOT1 | MbaeApi.dll |
0xA3BDE075 | 0xD8A0B2E | WNF_CELL_CALLFORWARDING_STATUS_CAN1 | CellularAPI.dll |
0xA3BDE875 | 0xD8A0B2E | WNF_CELL_PERSO_STATUS_CAN1 | wwansvc.dll |
0xA3BDF475 | 0xD8A0B2E | WNF_CELL_CONFIGURED_LINES_CAN0 | wwansvc.dll |
0xA3BDFC75 | 0xD8A0B2E | WNF_CELL_CONFIGURED_LINES_CAN1 | wwansvc.dll |
0xA3BE0075 | 0xD8A0B2E | WNF_CELL_UICC_STATUS_DETAILS_SLOT0 | wwansvc.dll |
0xA3BE0875 | 0xD8A0B2E | WNF_CELL_UICC_STATUS_DETAILS_SLOT1 | wwansvc.dll |
0xA3BE1075 | 0xD8A0B2E | WNF_CELL_PREFERRED_LANGUAGES_SLOT0 | wwansvc.dll |
0xA3BE1875 | 0xD8A0B2E | WNF_CELL_PREFERRED_LANGUAGES_SLOT1 | wwansvc.dll |
0xA3BE2075 | 0xD8A0B2E | WNF_CELL_IMSI_CAN0 | wwansvc.dll |
0xA3BE2875 | 0xD8A0B2E | WNF_CELL_IMSI_CAN1 | wwansvc.dll |
0xA3BE3075 | 0xD8A0B2E | WNF_CELL_LEGACY_SETTINGS_MIGRATION | CellularAPI.dll |
0xA3BE3875 | 0xD8A0B2E | WNF_CELL_UICC_ATR_SLOT0 | wwansvc.dll |
0xA3BE4075 | 0xD8A0B2E | WNF_CELL_UICC_ATR_SLOT1 | wwansvc.dll |
0xA3BE4875 | 0xD8A0B2E | WNF_CELL_UICC_SIMSEC_SLOT0 | wwansvc.dll |
0xA3BE5075 | 0xD8A0B2E | WNF_CELL_UICC_SIMSEC_SLOT1 | wwansvc.dll |
0xA3BE5875 | 0xD8A0B2E | WNF_CELL_CAN_CONFIGURATION_SET_COMPLETE_MODEM0 | wwansvc.dll |
0xA3BE6075 | 0xD8A0B2E | WNF_CELL_REGISTRATION_CHANGED_TRIGGER_MV | wwansvc.dll |
0xA3BE6875 | 0xD8A0B2E | WNF_CELL_EMERGENCY_CALLBACK_MODE_STATUS | wwansvc.dll |
0xA3BE7075 | 0xD8A0B2E | WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN0 | wwansvc.dll |
0xA3BE7875 | 0xD8A0B2E | WNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN1 | wwansvc.dll |
0xA3BE8075 | 0xD8A0B2E | WNF_CELL_IMS_STATUS_CAN0 | wwansvc.dll |
0xA3BE8875 | 0xD8A0B2E | WNF_CELL_IMS_STATUS_CAN1 | wwansvc.dll |
0xA3BE9075 | 0xD8A0B2E | WNF_CELL_IWLAN_AVAILABILITY_CAN0 | wwansvc.dll |
0xA3BE9875 | 0xD8A0B2E | WNF_CELL_IWLAN_AVAILABILITY_CAN1 | wwansvc.dll |