PssNtCaptureSnapshot - NtDoc

#ifndef _NTPSAPI_H
// Reserve objects
#if (PHNT_MODE != PHNT_MODE_KERNEL)
// Process snapshotting
#if (PHNT_VERSION >= PHNT_WINBLUE)

// rev
NTSYSCALLAPI
NTSTATUS
NTAPI
PssNtCaptureSnapshot(
    _Out_ PHANDLE SnapshotHandle,
    _In_ HANDLE ProcessHandle,
    _In_ ULONG CaptureFlags,
    _In_ ULONG ThreadContextFlags
    );

#endif
#endif
#endif
View code on GitHub