Ntquerywnfstatedata Ntdlldll Better _verified_ Here
NtQueryWnfStateData is the user‑mode API for reading the current data associated with a WNF state name. It is one of several WNF‑related functions exported by ntdll.dll , alongside NtSubscribeWnfStateChange , NtUpdateWnfStateData , and NtUnsubscribeWnfStateChange .