#ifndef _NTEXAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
#if (PHNT_VERSION >= PHNT_WINDOWS_10)

/**
 * The NtGetCompleteWnfStateSubscription routine retrieves the complete WNF state subscription information.
 *
 * \param OldDescriptorStateName Optional pointer to the previous state name.
 * \param OldSubscriptionId Optional pointer to the previous subscription ID.
 * \param OldDescriptorEventMask Optional previous event mask.
 * \param OldDescriptorStatus Optional previous descriptor status.
 * \param NewDeliveryDescriptor Pointer to a buffer that receives the new delivery descriptor.
 * \param DescriptorSize The size, in bytes, of the delivery descriptor buffer.
 * \return NTSTATUS code indicating success or failure.
 */
NTSYSCALLAPI
NTSTATUS
NTAPI
NtGetCompleteWnfStateSubscription(
    _In_opt_ PWNF_STATE_NAME OldDescriptorStateName,
    _In_opt_ ULONG64 *OldSubscriptionId,
    _In_opt_ ULONG OldDescriptorEventMask,
    _In_opt_ ULONG OldDescriptorStatus,
    _Out_writes_bytes_(DescriptorSize) PWNF_DELIVERY_DESCRIPTOR NewDeliveryDescriptor,
    _In_ ULONG DescriptorSize
    );

#endif
#endif
#endif
View code on GitHub

#ifndef _NTZWAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
ZwGetCompleteWnfStateSubscription(
    _In_opt_ PWNF_STATE_NAME OldDescriptorStateName,
    _In_opt_ ULONG64 *OldSubscriptionId,
    _In_opt_ ULONG OldDescriptorEventMask,
    _In_opt_ ULONG OldDescriptorStatus,
    _Out_writes_bytes_(DescriptorSize) PWNF_DELIVERY_DESCRIPTOR NewDeliveryDescriptor,
    _In_ ULONG DescriptorSize
    );

#endif
View code on GitHub