WMI_SEARCH_STARTED_EVENTID
WMI_SEARCH_STARTED_EVENTID, &reply, sizeof(reply), 300);
case WMI_SEARCH_STARTED_EVENTID: