суббота, 5 декабря 2015 г.

WNF identifiers

I have made a mistake in my previous article about WNF. It seems that WNF idenificators are not standard IID but pair of DWORDs, so struct my_wnf_item actually looks like:
// struct can be ripped from ntdll!RtlpCreateWnfNameSubscription
struct wnf_name
{
/*  0x0 */  DWORD tag; // 0x980912 under x64, 0x700912 under x86
/*  0x4 */  DWORD unk4;
/*  0x8 */  DWORD unk8;
/*  0xC */  DWORD unkC;
/* 0x10 */  DWORD id1;
/* 0x14 */  DWORD id2;
};
 

struct my_wnf_item
{
  LIST_ENTRY List; // linked list of my_wnf_item
  wnf_name *wnfId;
  PBYTE notify;
};


Sample from windows 10 build 10586:
CheckProcess PID 420 (csrss.exe):
PEB.NtGlobalFlag: 0
PEB.Ldr: 00007FF946ED5200
PEB.GdiSharedHandleTable: 000001EFD8BC0000
WnfRoot: 000001EFD8A05BF0
 Wnf[0] at 000001EFD8A08238: id1 A3BC4035 id2 96003D (WNF_PNPA_PORTS_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[1] at 000001EFD8A080C8: id1 A3BC3875 id2 96003D (WNF_PNPA_PORTS_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[2] at 000001EFD8A07F58: id1 A3BC3035 id2 96003D (WNF_PNPA_HARDWAREPROFILES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[3] at 000001EFD8A07DE8: id1 A3BC2875 id2 96003D (WNF_PNPA_HARDWAREPROFILES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[4] at 000001EFD8A07C78: id1 A3BC2035 id2 96003D (WNF_PNPA_VOLUMES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[5] at 000001EFD8A07B08: id1 A3BC1875 id2 96003D (WNF_PNPA_VOLUMES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[6] at 000001EFD8A04EF8: id1 A3BC1035 id2 96003D (WNF_PNPA_DEVNODES_CHANGED_SESSION) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)
 Wnf[7] at 000001EFD8A05058: id1 A3BC0875 id2 96003D (WNF_PNPA_DEVNODES_CHANGED) - 00007FF943335410 (C:\Windows\system32\winsrv.DLL)


List of some WNF identifiers (sure is not completed):

Id1Id2NameModule
0xA3B95C750x41C6193FWNF_RW_CA_ENABLEDwifinetworkmanager.dll
0xA3BC08350xF810121WNF_LOGN_EOA_FLYOUT_POSITIONWindows.UI.Logon.dll
0xA3BC08350xF840539WNF_TKBN_KEYBOARD_VISIBILITYIMETIP.DLL
0xA3BC08350xF950324WNF_IMSN_MONITORMODECHANGEDtwinapi.dll
0xA3BC08350x13810338WNF_UMGR_SIHOST_READYfveskybackup.dll
0xA3BC08350x41870A38WNF_UDA_STORE_CHANGEDPimIndexMaintenance.dll
0xA3BC08350x41871D20WNF_MSA_ACCOUNTSTATECHANGEwlidsvc.dll
0xA3BC08350x418B0A38WNF_UDM_SERVICE_INITIALIZEDUserDataService.dll
0xA3BC08350x418F1E3EWNF_SPI_LOGICALDPIOVERRIDEApplicationFrame.dll
0xA3BC08750x96003DWNF_PNPA_DEVNODES_CHANGEDwinsrv.dll
0xA3BC08750x2831628WNF_EXEC_OSTASKCOMPLETION_REVOKEDmodernexecserver.dll
0xA3BC08750x28A182CWNF_AVLC_DRIVER_REQUESTaudiosrv.dll
0xA3BC08750x396003DWNF_PNPB_AWAITING_RESPONSEmodernexecserver.dll
0xA3BC08750x4960139WNF_TOPE_INP_POINTER_DEVICE_ACTIVITYSensorCustomAdbAlgorithm.dll
0xA3BC08750x5941822WNF_OVRD_OVERRIDESCALEUPDATEDApplicationFrame.dll
0xA3BC08750x6880F21WNF_LANG_FOD_INSTALLATION_STARTEDSettingsHandlers_nt.dll
0xA3BC08750x7851E3FWNF_RPCF_FWMAN_RUNNINGRpcEpMap.dll
0xA3BC08750x880073AWNF_WIFI_CONNECTION_STATUSwificonnapi.dll
0xA3BC08750x9920B39WNF_TETH_TETHERING_STATEtetheringclient.dll
0xA3BC08750xA811629WNF_DXGK_ADAPTER_TDR_NOTIFICATIONdcomp.dll
0xA3BC08750xA840A2BWNF_FDBK_QUESTION_NOTIFICATIONshell32.dll
0xA3BC08750xC960C38WNF_UBPM_POWER_SOURCEdab.dll
0xA3BC08750xD83063EWNF_SHEL_IMMERSIVE_SHELL_RUNNINGProximityServicePal.dll
0xA3BC08750xD891E2AWNF_GPOL_SYSTEM_CHANGESgpapi.dll
0xA3BC08750xD8A0B2EWNF_CELL_POWER_STATE_MODEM0wwansvc.dll
0xA3BC08750xF850339WNF_TMCN_ISTABLETMODEApplicationFrame.dll
0xA3BC08750xF87193AWNF_WWAN_OBJECT_LISTwwansvc.dll
0xA3BC08750x118F022EWNF_CLIP_CONTENT_CHANGEDClipboardServer.dll
0xA3BC08750x1192063AWNF_WHTP_WINHTTP_PROXY_DISCOVEREDncsi.dll
0xA3BC08750x12821A3FWNF_RTDS_RPC_INTERFACE_TRIGGER_CHANGEDdab.dll
0xA3BC08750x1287083AWNF_WFAS_FIREWALL_NETWORK_CHANGE_READYMPSSVC.dll
0xA3BC08750x128F0A23WNF_NDIS_ADAPTER_ARRIVALNetSetupSvc.dll
0xA3BC08750x12960F2EWNF_CAPS_CENTRAL_ACCESS_POLICIES_CHANGEDauthz.dll
0xA3BC08750x13891A3EWNF_STOR_CONFIGURATION_DEVICE_INFO_UPDATEDwuaueng.dll
0xA3BC08750x13920028WNF_ENTR_DEVICELOCK_POLICY_VALUE_CHANGEDNgcCtnrSvc.dll
0xA3BC08750x1583002EWNF_CNET_RADIO_ACTIVITYwcmsvc.dll
0xA3BC08750x159F022BWNF_FLYT_IDS_CHANGEDdiagtrack.dll
0xA3BC08750x17891C3DWNF_PROV_TURN_COMPLETEumpo.dll
0xA3BC08750x4182012BWNF_FOD_STATE_CHANGESettingsHandlers_nt.dll
0xA3BC08750x4183182BWNF_FVE_DE_SUPPORTshell32.dll
0xA3BC08750x41840B3EWNF_SEB_INTERNET_PRESENTdiagtrack.dll
0xA3BC08750x41840D23WNF_NCB_APP_AVAILABLEncbservice.dll
0xA3BC08750x41841D38WNF_USB_TYPE_C_PARTNER_STATEUcmCx.dll
0xA3BC08750x41850121WNF_LOC_DEVICE_BROKER_ACCESS_CHANGEDLocationPermissions.dll
0xA3BC08750x41851C3EWNF_SRC_SYSTEM_RADIO_CHANGEDauthui.dll
0xA3BC08750x41851D2EWNF_CSC_SERVICE_STARTcscsvc.dll
0xA3BC08750x41851D3AWNF_WSC_SECURITY_CENTER_USER_NOTIFICATIONwscapi.dll
0xA3BC08750x41870223WNF_NLA_CAPABILITY_CHANGEncsi.dll
0xA3BC08750x41870C29WNF_DBA_DEVICE_ACCESS_CHANGEDSensorService.dll
0xA3BC08750x4187182CWNF_AVA_SOUNDDETECTOR_PATTERN_MATCHNUIVoiceWBSAdapters.dll
0xA3BC08750x41880F3BWNF_VAN_VANUI_STATUSauthui.dll
0xA3BC08750x41891D38WNF_USO_STATE_CHANGEMusUpdateHandlers.dll
0xA3BC08750x418A063EWNF_SHL_DEVICE_LOCK_STATEmodernexecserver.dll
0xA3BC08750x418B0223WNF_NLM_VPN_RECONNECT_CHANGEnetprofmsvc.dll
0xA3BC08750x418B0D3AWNF_WCM_INTERFACE_LISTshell32.dll
0xA3BC08750x418B0D3EWNF_SCM_AUTOSTART_STATEumpo.dll
0xA3BC08750x418B1E39WNF_TPM_OWNERSHIP_TAKENbdesvc.dll
0xA3BC08750x41901D26WNF_KSV_STREAMSTATEauthui.dll
0xA3BC08750x4192022BWNF_FLT_RUNDOWN_WAITmodernexecserver.dll
0xA3BC08750x41921C3EWNF_SRT_WINRE_CONFIGURATION_CHANGEbdesvc.dll
0xA3BC08750x41940B3AWNF_WER_SERVICE_STARTmodernexecserver.dll
0xA3BC08750x41941B20WNF_MUR_MEDIA_UI_REQUEST_WLANWlanMediaManager.dll
0xA3BC08750x4195003AWNF_WNS_CONNECTIVITY_STATUSncbservice.dll
0xA3BC08750x4195083AWNF_WFS_SETTINGSwlidsvc.dll
0xA3BC08750x4196032FWNF_BMP_BG_PLAYSTATE_CHANGEDBackgroundMediaPolicy.dll
0xA3BC08750x41C6013DWNF_PO_SCENARIO_CHANGEmodernexecserver.dll
0xA3BC08750x41C60320WNF_MM_BAD_MEMORY_PENDING_REMOVALKernelBase.dll
0xA3BC08750x41C6072FWNF_BI_BROKER_WAKEUP_CHANNELsrumsvc.dll
0xA3BC08750x41C60C39WNF_TB_SYSTEM_TIME_CHANGEDWPTaskScheduler.dll
0xA3BC08750x41C61D3DWNF_PS_WAKE_CHARGE_RESOURCE_POLICYmodernexecserver.dll
0xA3BC08B50x2821B2CWNF_AUDC_CPUSET_IDRTWorkQ.dll
0xA3BC08B50xD920D2EWNF_CCTL_BUTTON_REQUESTSCallButtons.dll
0xA3BC08F50x13840539WNF_TKBR_CHANGE_SYSTEMAzureSettingSyncProvider.dll
0xA3BC08F50x41871B3AWNF_WUA_NUM_PER_USER_UPDATESWSShared.dll
0xA3BC0C750x418B1D29WNF_DSM_DSMAPPINSTALLEDDeviceSetupManagerAPI.dll
0xA3BC0C750x41960B29WNF_DEP_OOBE_COMPLETEbdesvc.dll
0xA3BC0C750x41C61629WNF_DX_STEREO_CONFIGdxgi.dll
0xA3BC10350x96003DWNF_PNPA_DEVNODES_CHANGED_SESSIONwinsrv.dll
0xA3BC10350xF840539WNF_TKBN_RESTRICTED_KEYBOARD_VISIBILITYIMETIP.DLL
0xA3BC10350xF950324WNF_IMSN_LAUNCHERVISIBILITYtwinapi.dll
0xA3BC10350x41870A38WNF_UDA_CALENDAR_FOLDER_ISHIDDEN_CHANGEDPimIndexMaintenance.dll
0xA3BC10350x41C61629WNF_DX_MODE_CHANGE_NOTIFICATIONApplicationFrame.dll
0xA3BC10750x2821B2CWNF_AUDC_PHONECALL_ACTIVEsapi_onecore.dll
0xA3BC10750x28A182CWNF_AVLC_VOLUME_WARNING_ACCEPTEDaudiosrv.dll
0xA3BC10750x880073AWNF_WIFI_CPL_STATUSwifinetworkmanager.dll
0xA3BC10750xD83063EWNF_SHEL_NOTIFICATIONSNotificationController.dll
0xA3BC10750xD8A0B2EWNF_CELL_SIGNAL_STRENGTH_BARS_CAN0wwansvc.dll
0xA3BC10750xD941D2BWNF_FSRL_OPLOCK_BREAKmodernexecserver.dll
0xA3BC10750x128F0A23WNF_NDIS_CORRUPTED_STORENetSetupSvc.dll
0xA3BC10750x12960F20WNF_MAPS_MAPLOADER_PROGRESSSettingsHandlers_Maps.dll
0xA3BC10750x13920028WNF_ENTR_WIFI_POLICY_VALUE_CHANGEDwifinetworkmanager.dll
0xA3BC10750x1583002EWNF_CNET_DPU_GLOBAL_STATE_OVER_LIMITwcmsvc.dll
0xA3BC10750x1589012FWNF_BOOT_INVALID_TIME_SOURCEmsoobeplugins.dll
0xA3BC10750x4183182BWNF_FVE_DE_MANAGED_VOLUMES_COUNTshell32.dll
0xA3BC10750x41840B3EWNF_SEB_FREE_NETWORK_PRESENTdiagtrack.dll
0xA3BC10750x41850721WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_OUT_OF_TOLERANCEwlidsvc.dll
0xA3BC10750x41870223WNF_NLA_ENTER_SUSPECT_STATEncsi.dll
0xA3BC10750x41891D38WNF_USO_STATE_ATTENTION_REQUIREDMusUpdateHandlers.dll
0xA3BC10750x418A0B39WNF_TEL_CRASH_STATEmodernexecserver.dll
0xA3BC10750x418B0223WNF_NLM_INTERNET_PRESENTMapControlCore.dll
0xA3BC10750x418B0D3AWNF_WCM_SERVICE_STATUSwcmsvc.dll
0xA3BC10750x418B1E39WNF_TPM_DEVICEID_STATEtbs.dll
0xA3BC10750x4194063EWNF_SHR_DHCP_IPv4_LEASE_LISTwlansvc.dll
0xA3BC10750x41941B20WNF_MUR_MEDIA_UI_REQUEST_LANdot3api.dll
0xA3BC10750x41950029WNF_DNS_ALL_SERVER_TIMEOUTdnsapi.dll
0xA3BC10750x41950821WNF_LFS_RUNNING_STATEGeolocation.dll
0xA3BC10750x41C6013DWNF_PO_COMPOSITE_BATTERYWindows.Energy.dll
0xA3BC10750x41C6072FWNF_BI_USER_LOGON_CHANNELbisrv.dll
0xA3BC10750x41C61439WNF_TZ_STORE_CHANGEDUserDataService.dll
0xA3BC10F50xD891E2AWNF_GPOL_USER_CHANGESgpapi.dll
0xA3BC10F50x41960A28WNF_EDP_IDENTITY_REVOKEDefscore.dll
0xA3BC14750x418B1D29WNF_DSM_DSMAPPREMOVEDDeviceSetupManagerAPI.dll
0xA3BC14750x41951A38WNF_UTS_LOCKSCREEN_DISMISSAL_TRIGGEREDauthui.dll
0xA3BC18350xF950324WNF_IMSN_IMMERSIVEMONITORCHANGEDdxgi.dll
0xA3BC18350x41870A38WNF_UDA_APPOINTMENT_CHANGEDPimIndexMaintenance.dll
0xA3BC18350x41C61629WNF_DX_OCCLUSION_CHANGE_NOTIFICATIONdxgi.dll
0xA3BC18750x96003DWNF_PNPA_VOLUMES_CHANGEDwinsrv.dll
0xA3BC18750x2831628WNF_EXEC_THERMAL_LIMITERbisrv.dll
0xA3BC18750x28A182CWNF_AVLC_SHOW_VOLUMELIMITWARNINGaudiosrv.dll
0xA3BC18750xC960C38WNF_UBPM_FRMU_ALLOWEDdab.dll
0xA3BC18750xD83063EWNF_SHEL_LOGON_COMPLETEwifinetworkmanager.dll
0xA3BC18750xD8A0B2EWNF_CELL_SYSTEM_TYPE_CAN0wwansvc.dll
0xA3BC18750x12821A3FWNF_RTDS_NAMED_PIPE_TRIGGER_CHANGEDdab.dll
0xA3BC18750x12960F20WNF_MAPS_MAPLOADER_STATUS_CHANGEmapsupdatetask.dll
0xA3BC18750x13920028WNF_ENTR_SYSTEM_POLICY_VALUE_CHANGEDdiagtrack.dll
0xA3BC18750x1583002EWNF_CNET_DPU_GLOBAL_STATE_OFF_TRACKSubscriptionMgr.dll
0xA3BC18750x4183182BWNF_FVE_WIM_HASH_GENERATION_TRIGGERWofTasks.dll
0xA3BC18750x41841D38WNF_USB_PEER_DEVICE_STATEUcmCx.dll
0xA3BC18750x41850721WNF_LIC_HARDWAREID_IN_DEVICE_LICENSE_IN_TOLERANCEwlidsvc.dll
0xA3BC18750x41850923WNF_NGC_PRO_CSP_POLICY_CHANGEDNgcCtnrSvc.dll
0xA3BC18750x41891D38WNF_USO_UPDATE_PROGRESSMusUpdateHandlers.dll
0xA3BC18750x418B0D3AWNF_WCM_MAPPING_POLICY_UPDATEDwcmsvc.dll
0xA3BC18750x41921C20WNF_MRT_PERSISTENT_QUALIFIER_CHANGEDMrmCoreR.dll
0xA3BC18750x41950223WNF_NLS_USER_DEFAULT_LOCALE_CHANGEDKernelBase.dll
0xA3BC18750x41950821WNF_LFS_MASTERSWITCH_STATEWalletService.dll
0xA3BC18750x41960A28WNF_EDP_DPL_KEYS_STATEefscore.dll
0xA3BC18750x41C6013DWNF_PO_POWER_STATE_CHANGESettingsHandlers_OneCore_BatterySaver.dll
0xA3BC18750x41C6072FWNF_BI_USER_LOGOFF_CHANNELbisrv.dll
0xA3BC18750x41C61439WNF_TZ_TIMEZONE_CHANGEDKernelBase.dll
0xA3BC20350x96003DWNF_PNPA_VOLUMES_CHANGED_SESSIONwinsrv.dll
0xA3BC20350x41870A38WNF_UDA_TASK_CHANGEDPimIndexMaintenance.dll
0xA3BC20350x41C61629WNF_DX_NETWORK_DISPLAY_STATE_CHANGE_NOTIFICATIONDisplayManager.dll
0xA3BC20750x880073AWNF_WIFI_SERVICE_NOTIFICATIONSwificonnapi.dll
0xA3BC20750xD8A0B2EWNF_CELL_REGISTRATION_STATUS_CAN0wwansvc.dll
0xA3BC20750x12960F20WNF_MAPS_MAPLOADER_PACKAGE_CHANGESettingsHandlers_Maps.dll
0xA3BC20750x1583002EWNF_CNET_DPU_GLOBAL_STATE_ON_TRACKSubscriptionMgr.dll
0xA3BC20750x4183182BWNF_FVE_WIM_HASH_GENERATION_COMPLETIONWofTasks.dll
0xA3BC20750x41840B3EWNF_SEB_NETWORK_STATE_CHANGESAPHostService.dll
0xA3BC20750x41841D38WNF_USB_CHARGING_STATEUcmCx.dll
0xA3BC20750x41850721WNF_LIC_DEVICE_LICENSE_UPDATEDLicenseManagerSvc.dll
0xA3BC20750x418B0D3AWNF_WCM_PROFILE_CONFIG_UPDATEDwwansvc.dll
0xA3BC20750x41950821WNF_LFS_GEOFENCETRACKING_STATELocationGeofences.dll
0xA3BC20750x41C6013DWNF_PO_ENERGY_SAVER_STATEAuthExt.dll
0xA3BC20750x41C6072FWNF_BI_SESSION_CONNECT_CHANNELbisrv.dll
0xA3BC24750xD83063EWNF_SHEL_OOBE_USER_LOGON_COMPLETEwifinetworkmanager.dll
0xA3BC28350x41870A38WNF_UDA_CONTACT_SORT_CHANGEDPimIndexMaintenance.dll
0xA3BC28350x41960A28WNF_EDP_DIALOG_CANCELefswrt.dll
0xA3BC28350x41C61629WNF_DX_MONITOR_CHANGE_NOTIFICATIONApplicationFrame.dll
0xA3BC28750x96003DWNF_PNPA_HARDWAREPROFILES_CHANGEDwinsrv.dll
0xA3BC28750x880073AWNF_WIFI_HOTSPOT_HOST_READYwifinetworkmanager.dll
0xA3BC28750xD83063EWNF_SHEL_VEEVENT_DISPATCHER_CLIENT_PIPE_CLOSEDtwinui.dll
0xA3BC28750xD8A0B2EWNF_CELL_UICC_STATUS_SLOT0wwansvc.dll
0xA3BC28750x1583002EWNF_CNET_DPU_GLOBAL_STATE_UNDER_TRACKSubscriptionMgr.dll
0xA3BC28750x41840B3EWNF_SEB_MBAE_NOTIFICATION_RECEIVEDtetheringservice.dll
0xA3BC28750x41891D38WNF_USO_ACTIVE_SESSIONmusdialoghandlers.dll
0xA3BC28750x41950223WNF_NLS_LOCALE_INFO_CHANGEDKernelBase.dll
0xA3BC28750x41C6013DWNF_PO_ENERGY_SAVER_SETTINGWindows.Energy.dll
0xA3BC28750x41C6072FWNF_BI_SESSION_DISCONNECT_CHANNELbisrv.dll
0xA3BC28750x41C61D22WNF_OS_BATTERY_AC_ONLINEwpncore.dll
0xA3BC30350x96003DWNF_PNPA_HARDWAREPROFILES_CHANGED_SESSIONwinsrv.dll
0xA3BC30350xF950324WNF_IMSN_KILL_LOGICAL_FOCUSdui70.dll
0xA3BC30750x1583002EWNF_CNET_DPU_GLOBAL_STATE_NOT_TRACKEDSubscriptionMgr.dll
0xA3BC30750x41850721WNF_LIC_DEVICE_LICENSE_MISSINGwlidsvc.dll
0xA3BC30750x41950223WNF_NLS_GEOID_CHANGEDkernel32.dll
0xA3BC30750x41950821WNF_LFS_POSITION_AVAILABLELocationPeComposite.dll
0xA3BC30750x41C6013DWNF_PO_ENERGY_SAVER_OVERRIDESettingsHandlers_OneCore_BatterySaver.dll
0xA3BC30750x41C6072FWNF_BI_APPLICATION_UNINSTALL_CHANNELbisrv.dll
0xA3BC30750x41C61D22WNF_OS_USER_PRESENCEwpncore.dll
0xA3BC30B50x41C61629WNF_DX_VIDMM_TRIM_NOTIFICATIONgdi32.dll
0xA3BC38350xF950324WNF_IMSN_PROJECTIONDISPLAYAVAILABLEtwinapi.appcore.dll
0xA3BC38750x96003DWNF_PNPA_PORTS_CHANGEDwinsrv.dll
0xA3BC38750xD83063EWNF_SHEL_NOTIFICATION_SETTINGS_CHANGEDNotificationController.dll
0xA3BC38750xD8A0B2EWNF_CELL_OPERATOR_NAME_CAN0wwansvc.dll
0xA3BC38750x418A063EWNF_SHL_START_READYLocationPermissions.dll
0xA3BC38750x41950821WNF_LFS_CLIENT_RECALCULATE_PERMISSIONSLocationPermissions.dll
0xA3BC38750x41C6072FWNF_BI_APPLICATION_SERVICING_START_CHANNELbisrv.dll
0xA3BC38750x41C61629WNF_DX_VIDMM_BUDGETCHANGE_NOTIFICATIONdxgi.dll
0xA3BC40350x96003DWNF_PNPA_PORTS_CHANGED_SESSIONwinsrv.dll
0xA3BC40750xD83063EWNF_SHEL_SOFTLANDING_RULE_TRIGGEREDdiagtrack.dll
0xA3BC40750xD8A0B2EWNF_CELL_CDMA_ACTIVATION_CAN0wwansvc.dll
0xA3BC40750x13920028WNF_ENTR_BROWSER_POLICY_VALUE_CHANGEDEnterpriseAppMgmtSvc.dll
0xA3BC40750x41840B3EWNF_SEB_ONLINE_ID_CONNECTED_STATE_CHANGEwlidsvc.dll
0xA3BC40750x41950821WNF_LFS_PERMISSION_TO_SHOW_ICON_CHANGEDSettingsHandlers_Geolocation.dll
0xA3BC40750x41C6072FWNF_BI_APPLICATION_SERVICING_STOP_CHANNELbisrv.dll
0xA3BC40750x41C61629WNF_DX_HARDWARE_CONTENT_PROTECTION_TILT_NOTIFICATIONdxgi.dll
0xA3BC40750x41C61D22WNF_OS_BATTERY_SAVINGS_STATErascustom.dll
0xA3BC48750x880073AWNF_WIFI_AOAC_STATUSwifinetworkmanager.dll
0xA3BC48750xD83063EWNF_SHEL_START_LAYOUT_READYSharedStartModel.dll
0xA3BC48750xD8A0B2EWNF_CELL_NETWORK_TIME_CAN0wwansvc.dll
0xA3BC48750x1583002EWNF_CNET_CELLULAR_CONNECTIONS_AVAILABLEwcmsvc.dll
0xA3BC48750x41C6072FWNF_BI_LOCK_SCREEN_UPDATE_CHANNELbisrv.dll
0xA3BC48750x41C61629WNF_DX_INTERNAL_PANEL_DIMENSIONSKernelBase.dll
0xA3BC50350x41C61629WNF_DX_MODERN_OUTPUTDUPLICATIONuDWM.dll
0xA3BC50750xD83063EWNF_SHEL_APPRESOLVER_SCANshell32.dll
0xA3BC50750xD8A0B2EWNF_CELL_AVAILABLE_OPERATORS_CAN0wwansvc.dll
0xA3BC50750x11900B29WNF_DEVP_ENTERPRISE_ENFORCE_POLICYEnterpriseAppMgmtSvc.dll
0xA3BC50750x1583002EWNF_CNET_NON_CELLULAR_CONNECTIONS_AVAILABLEwcmsvc.dll
0xA3BC50750x19890C35WNF_XBOX_APPLICATION_NO_LONGER_RUNNINGXblAuthManager.til
0xA3BC50750x41C6013DWNF_PO_DISCHARGE_ESTIMATEWindows.Energy.dll
0xA3BC50750x41C6072FWNF_BI_EVENT_DELETIONbisrv.dll
0xA3BC58350xD83063EWNF_SHEL_LOCKSCREEN_ACTIVELogonController.dll
0xA3BC58350x41C61629WNF_DX_DISPLAY_CONFIG_CHANGE_NOTIFICATIONDisplayManager.dll
0xA3BC58750xD8A0B2EWNF_CELL_DEVICE_INFO_CAN0wwansvc.dll
0xA3BC58750xF911D22WNF_OSWN_SYSTEM_CLOCK_CHANGEDStorSvc.dll
0xA3BC58750x13920028WNF_ENTR_APPLICATIONMANAGEMENT_POLICY_VALUE_CHANGEDEnterpriseAppMgmtSvc.dll
0xA3BC58750x41C6072FWNF_BI_PSM_TEST_HOOK_CHANNELpsmsrv.dll
0xA3BC60750x880073AWNF_WIFI_TILE_UPDATEwifinetworkmanager.dll
0xA3BC60750xD83063EWNF_SHEL_START_APPLIFECYCLE_INSTALL_FINISHEDshell32.dll
0xA3BC60750xF911D22WNF_OSWN_STORAGE_PRESENCE_CHANGEStorSvc.dll
0xA3BC60750x41C6013DWNF_PO_CHARGE_ESTIMATESettingsHandlers_OneCore_BatterySaver.dll
0xA3BC60750x41C6072FWNF_BI_QUIET_MODE_UPDATE_CHANNELbisrv.dll
0xA3BC64750xD8A0B2EWNF_CELL_DATA_ENABLED_BY_USER_MODEM0wwansvc.dll
0xA3BC68350xF840539WNF_TKBN_KEYBOARD_GESTUREmsctfuimanager.dll
0xA3BC68350x41C6072FWNF_BI_BI_READYBrokerLib.dll
0xA3BC68750x880073AWNF_WIFI_AVERAGE_TRANSMITncsi.dll
0xA3BC68750xD83063EWNF_SHEL_START_APPLIFECYCLE_DOWNLOAD_STARTEDshell32.dll
0xA3BC68750xD8A0B2EWNF_CELL_PHONE_NUMBER_CAN0wwansvc.dll
0xA3BC68750xF911D22WNF_OSWN_STORAGE_VOLUME_STATUS_CHANGEStorSvc.dll
0xA3BC68750x1583002EWNF_CNET_NON_CELLULAR_CONNECTEDqmgr.dll
0xA3BC68750x41840B3EWNF_SEB_USER_PRESENTRDXTaskFactory.dll
0xA3BC70350xF840539WNF_TKBN_RESTRICTED_KEYBOARD_GESTUREmsctfuimanager.dll
0xA3BC70750x880073AWNF_WIFI_MEDIA_STREAMING_MODEwlansvc.dll
0xA3BC70750xD8A0B2EWNF_CELL_VOICEMAIL_NUMBER_CAN0wwansvc.dll
0xA3BC70750xF911D22WNF_OSWN_STORAGE_FREE_SPACE_CHANGEStorSvc.dll
0xA3BC70750x1583002EWNF_CNET_RADIO_ACTIVITY_OR_NON_CELLULAR_CONNECTEDwcmsvc.dll
0xA3BC70750x19890C35WNF_XBOX_LIVE_CONNECTIVITY_CHANGEDXblAuthManager.til
0xA3BC70750x41840B3EWNF_SEB_SYSTEM_ACdiagtrack.dll
0xA3BC70750x41C6072FWNF_BI_NOTIFY_NEW_SESSIONbisrv.dll
0xA3BC78350xF840539WNF_TKBN_CANDIDATE_WINDOW_STATEmsctfuimanager.dll
0xA3BC78750x880073AWNF_WIFI_TASK_TRIGGERwifinetworkmanager.dll
0xA3BC78750xF911D22WNF_OSWN_STORAGE_TEMP_CLEANUP_CHANGEStorSvc.dll
0xA3BC78750x13920028WNF_ENTR_ABOVELOCK_POLICY_VALUE_CHANGEDNotificationController.dll
0xA3BC78750x41840B3EWNF_SEB_MONITOR_ONSyncController.dll
0xA3BC7C750xD8A0B2EWNF_CELL_REGISTRATION_PREFERENCES_CAN0wwansvc.dll
0xA3BC80750x880073AWNF_WIFI_L3_AUTH_STATEwifinetworkmanager.dll
0xA3BC80750xD8A0B2EWNF_CELL_CAN_STATE_CAN0wwansvc.dll
0xA3BC8C750xD8A0B2EWNF_CELL_USER_PREFERRED_POWER_STATE_MODEM0wwansvc.dll
0xA3BC90750xD83063EWNF_SHEL_ENTERPRISE_START_LAYOUT_POLICY_VALUE_CHANGEDSharedStartModel.dll
0xA3BC90750x41840B3EWNF_SEB_BACKGROUND_WORK_COST_HIGHpsmsrv.dll
0xA3BC98750xD8A0B2EWNF_CELL_POSSIBLE_DATA_ACTIVITY_CHANGE_MODEM0wwansvc.dll
0xA3BC98750x41840B3EWNF_SEB_SYSTEM_LPEwuaueng.dll
0xA3BCA0750xD83063EWNF_SHEL_SOFTLANDING_RULES_UPDATEDdiagtrack.dll
0xA3BCA0750x19890C35WNF_XBOX_SYSTEM_CONSTRAINED_MODE_STATUS_CHANGEDMiracastReceiver.dll
0xA3BCA4750xD8A0B2EWNF_CELL_SYSTEM_CONFIGwwansvc.dll
0xA3BCA8750xD83063EWNF_SHEL_NOTIFICATIONS_CRITICALNotificationController.dll
0xA3BCA8750xD8A0B2EWNF_CELL_REGISTRATION_STATUS_DETAILS_CAN0wwansvc.dll
0xA3BCA8750x41840B3EWNF_SEB_SYSTEM_MAINTENANCEubpm.dll
0xA3BCAC750x41C6193FWNF_RW_WALLET_HAS_WEBSERVICE_WORKWalletService.dll
0xA3BCB0750xD83063EWNF_SHEL_START_VISIBILITY_CHANGEDtwinapi.appcore.dll
0xA3BCB0750xD8A0B2EWNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN0wwansvc.dll
0xA3BCB0750x41840B3EWNF_SEB_GEOLOCATIONSystemEventsBrokerServer.dll
0xA3BCB8750xD8A0B2EWNF_CELL_PERSO_STATUS_CAN0wwansvc.dll
0xA3BCB8750xF911D22WNF_OSWN_STORAGE_FINISHED_USAGE_CATEGORY_UPDATEStorSvc.dll
0xA3BCB8750x41C6193FWNF_RW_WALLET_GEOFENCE_STATECHANGEDWalletService.dll
0xA3BCC0750xD8A0B2EWNF_CELL_HOME_OPERATOR_CAN0wwansvc.dll
0xA3BCC0750xF911D22WNF_OSWN_STORAGE_SHELLHWD_EVENTStorSvc.dll
0xA3BCC8750xD8A0B2EWNF_CELL_HOME_PRL_ID_CAN0wwansvc.dll
0xA3BCD8750x13920028WNF_ENTR_BLUETOOTH_POLICY_VALUE_CHANGEDbthserv.dll
0xA3BCE0750x13920028WNF_ENTR_EDPNETWORKING_POLICY_CHANGEDMPSSVC.dll
0xA3BCE0750x41840B3EWNF_SEB_OFFLOADED_AUDIOaudiosrv.dll
0xA3BCE8750xD8A0B2EWNF_CELL_UTK_SETUP_MENU_SLOT0MbaeApi.dll
0xA3BCE8750x19890C35WNF_XBOX_XAM_READY_FOR_DEVKIT_REBOOTXblAuthManager.til
0xA3BCE8750x41840B3EWNF_SEB_NON_OFFLOADED_AUDIOaudiosrv.dll
0xA3BCF8750x19890C35WNF_XBOX_EXIT_SILENT_BOOT_MODEMiracastReceiver.dll
0xA3BD00750xD8A0B2EWNF_CELL_CALLFORWARDING_STATUS_CAN0CellularAPI.dll
0xA3BD0C750xD8A0B2EWNF_CELL_RADIO_TYPE_MODEM0wwansvc.dll
0xA3BD10750xD8A0B2EWNF_CELL_SIGNAL_STRENGTH_BARS_CAN1wwansvc.dll
0xA3BD18750xD8A0B2EWNF_CELL_SYSTEM_TYPE_CAN1wwansvc.dll
0xA3BD20750xD8A0B2EWNF_CELL_REGISTRATION_STATUS_CAN1wwansvc.dll
0xA3BD20750x13920028WNF_ENTR_ALLOWUPDATESERVICE_POLICY_VALUE_CHANGEDwuaueng.dll
0xA3BD20750x19890C35WNF_XBOX_MSA_ENVIRONMENT_CONFIGUREDXblAuthManager.til
0xA3BD28750xD8A0B2EWNF_CELL_UICC_STATUS_SLOT1wwansvc.dll
0xA3BD28750x13920028WNF_ENTR_UPDATESERVICEURL_POLICY_VALUE_CHANGEDwuaueng.dll
0xA3BD30750x13920028WNF_ENTR_ALLOWNONMICROSOFTSIGNEDUPDATE_POLICY_VALUE_CHANGEDwuaueng.dll
0xA3BD30750x19890C35WNF_XBOX_SYSTEM_GAME_STREAMING_STATE_CHANGEDMiracastReceiver.dll
0xA3BD40750xD8A0B2EWNF_CELL_OPERATOR_NAME_CAN1wwansvc.dll
0xA3BD48750xD8A0B2EWNF_CELL_CDMA_ACTIVATION_CAN1wwansvc.dll
0xA3BD48750x418A063EWNF_SHL_OOBE_PROCESS_COMPLETEwifinetworkmanager.dll
0xA3BD50750xD8A0B2EWNF_CELL_NETWORK_TIME_CAN1wwansvc.dll
0xA3BD58750xD8A0B2EWNF_CELL_AVAILABLE_OPERATORS_CAN1wwansvc.dll
0xA3BD60750xD8A0B2EWNF_CELL_DEVICE_INFO_CAN1wwansvc.dll
0xA3BD70750xD8A0B2EWNF_CELL_PHONE_NUMBER_CAN1wwansvc.dll
0xA3BD78750x41840B3EWNF_SEB_MOBILE_BROADBAND_REGISTRATION_STATE_CHANGEwwansvc.dll
0xA3BD80750x41840B3EWNF_SEB_MOBILE_BROADBAND_RADIO_STATE_CHANGEwwansvc.dll
0xA3BD88750x41840B3EWNF_SEB_MOBILE_BROADBAND_PIN_LOCK_STATE_CHANGEwwansvc.dll
0xA3BD8C750xD8A0B2EWNF_CELL_REGISTRATION_PREFERENCES_CAN1wwansvc.dll
0xA3BD90750xD8A0B2EWNF_CELL_CAN_STATE_CAN1wwansvc.dll
0xA3BD90750x41840B3EWNF_SEB_MOBILE_BROADBAND_DEVICE_SERVICE_NOTIFICATIONwwansvc.dll
0xA3BD98750xD8A0B2EWNF_CELL_REGISTRATION_STATUS_DETAILS_CAN1wwansvc.dll
0xA3BDA0750xD8A0B2EWNF_CELL_SUPPORTED_SYSTEM_TYPES_CAN1wwansvc.dll
0xA3BDA8750xD8A0B2EWNF_CELL_HOME_OPERATOR_CAN1wwansvc.dll
0xA3BDB0750xD8A0B2EWNF_CELL_HOME_PRL_ID_CAN1wwansvc.dll
0xA3BDC8750x418A063EWNF_SHL_DICTATION_RUNNINGDictationManager.dll
0xA3BDD0750xD8A0B2EWNF_CELL_UTK_SETUP_MENU_SLOT1MbaeApi.dll
0xA3BDE0750xD8A0B2EWNF_CELL_CALLFORWARDING_STATUS_CAN1CellularAPI.dll
0xA3BDE8750xD8A0B2EWNF_CELL_PERSO_STATUS_CAN1wwansvc.dll
0xA3BDF4750xD8A0B2EWNF_CELL_CONFIGURED_LINES_CAN0wwansvc.dll
0xA3BDFC750xD8A0B2EWNF_CELL_CONFIGURED_LINES_CAN1wwansvc.dll
0xA3BE00750xD8A0B2EWNF_CELL_UICC_STATUS_DETAILS_SLOT0wwansvc.dll
0xA3BE08750xD8A0B2EWNF_CELL_UICC_STATUS_DETAILS_SLOT1wwansvc.dll
0xA3BE10750xD8A0B2EWNF_CELL_PREFERRED_LANGUAGES_SLOT0wwansvc.dll
0xA3BE18750xD8A0B2EWNF_CELL_PREFERRED_LANGUAGES_SLOT1wwansvc.dll
0xA3BE20750xD8A0B2EWNF_CELL_IMSI_CAN0wwansvc.dll
0xA3BE28750xD8A0B2EWNF_CELL_IMSI_CAN1wwansvc.dll
0xA3BE30750xD8A0B2EWNF_CELL_LEGACY_SETTINGS_MIGRATIONCellularAPI.dll
0xA3BE38750xD8A0B2EWNF_CELL_UICC_ATR_SLOT0wwansvc.dll
0xA3BE40750xD8A0B2EWNF_CELL_UICC_ATR_SLOT1wwansvc.dll
0xA3BE48750xD8A0B2EWNF_CELL_UICC_SIMSEC_SLOT0wwansvc.dll
0xA3BE50750xD8A0B2EWNF_CELL_UICC_SIMSEC_SLOT1wwansvc.dll
0xA3BE58750xD8A0B2EWNF_CELL_CAN_CONFIGURATION_SET_COMPLETE_MODEM0wwansvc.dll
0xA3BE60750xD8A0B2EWNF_CELL_REGISTRATION_CHANGED_TRIGGER_MVwwansvc.dll
0xA3BE68750xD8A0B2EWNF_CELL_EMERGENCY_CALLBACK_MODE_STATUSwwansvc.dll
0xA3BE70750xD8A0B2EWNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN0wwansvc.dll
0xA3BE78750xD8A0B2EWNF_CELL_SIGNAL_STRENGTH_DETAILS_CAN1wwansvc.dll
0xA3BE80750xD8A0B2EWNF_CELL_IMS_STATUS_CAN0wwansvc.dll
0xA3BE88750xD8A0B2EWNF_CELL_IMS_STATUS_CAN1wwansvc.dll
0xA3BE90750xD8A0B2EWNF_CELL_IWLAN_AVAILABILITY_CAN0wwansvc.dll
0xA3BE98750xD8A0B2EWNF_CELL_IWLAN_AVAILABILITY_CAN1wwansvc.dll

Комментариев нет:

Отправить комментарий