#ifndef _NTEXAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
#if (PHNT_VERSION >= PHNT_WINDOWS_8)

/**
 * The NtCreateWnfStateName routine creates a new WNF (Windows Notification Facility) state name.
 *
 * \param StateName Pointer to a WNF_STATE_NAME structure that receives the created state name.
 * \param NameLifetime The lifetime of the state name (see WNF_STATE_NAME_LIFETIME).
 * \param DataScope The data scope for the state name (see WNF_DATA_SCOPE).
 * \param PersistData If TRUE, the state data is persistent.
 * \param TypeId Optional pointer to a WNF_TYPE_ID structure specifying the type of the state data.
 * \param MaximumStateSize The maximum size, in bytes, of the state data.
 * \param SecurityDescriptor Pointer to a security descriptor for the state name.
 * \return NTSTATUS Successful or errant status.
 */
NTSYSCALLAPI
NTSTATUS
NTAPI
NtCreateWnfStateName(
    _Out_ PWNF_STATE_NAME StateName,
    _In_ WNF_STATE_NAME_LIFETIME NameLifetime,
    _In_ WNF_DATA_SCOPE DataScope,
    _In_ BOOLEAN PersistData,
    _In_opt_ PCWNF_TYPE_ID TypeId,
    _In_ ULONG MaximumStateSize,
    _In_ PSECURITY_DESCRIPTOR SecurityDescriptor
    );

#endif
#endif
#endif
View code on GitHub

#ifndef _NTZWAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
ZwCreateWnfStateName(
    _Out_ PWNF_STATE_NAME StateName,
    _In_ WNF_STATE_NAME_LIFETIME NameLifetime,
    _In_ WNF_DATA_SCOPE DataScope,
    _In_ BOOLEAN PersistData,
    _In_opt_ PCWNF_TYPE_ID TypeId,
    _In_ ULONG MaximumStateSize,
    _In_ PSECURITY_DESCRIPTOR SecurityDescriptor
    );

#endif
View code on GitHub