42 if (PreviousCount) *PreviousCount = OldCount;
122 if (PreviousCount) *PreviousCount = OldCount;
335 *SuspendCount = Prev;
396 if (PreviousSuspendCount) *PreviousSuspendCount = Prev;
#define STATUS_INVALID_HANDLE
#define NT_SUCCESS(StatCode)
#define PsGetCurrentThread()
#define ExReleaseRundownProtection
#define ExGetPreviousMode
#define ExAcquireRundownProtection
_In_opt_ PFILE_OBJECT _In_opt_ PETHREAD Thread
_Must_inspect_result_ _In_ PLARGE_INTEGER _In_ PLARGE_INTEGER _In_ ULONG _In_ PFILE_OBJECT _In_ PVOID Process
#define PROCESS_SUSPEND_RESUME
#define EXCEPTION_EXECUTE_HANDLER
#define THREAD_SET_CONTEXT
#define THREAD_SUSPEND_RESUME
_In_opt_ HANDLE _In_opt_ PIO_APC_ROUTINE ApcRoutine
VOID(NTAPI * PKNORMAL_ROUTINE)(IN PVOID NormalContext OPTIONAL, IN PVOID SystemArgument1 OPTIONAL, IN PVOID SystemArgument2 OPTIONAL)
_In_ HANDLE ProcessHandle
ULONG NTAPI KeForceResumeThread(IN PKTHREAD Thread)
ULONG NTAPI KeSuspendThread(PKTHREAD Thread)
ULONG NTAPI KeResumeThread(IN PKTHREAD Thread)
BOOLEAN NTAPI KeAlertThread(IN PKTHREAD Thread, IN KPROCESSOR_MODE AlertMode)
BOOLEAN NTAPI KeTestAlertThread(IN KPROCESSOR_MODE AlertMode)
ULONG NTAPI KeAlertResumeThread(IN PKTHREAD Thread)
BOOLEAN NTAPI KeInsertQueueApc(IN PKAPC Apc, IN PVOID SystemArgument1, IN PVOID SystemArgument2, IN KPRIORITY PriorityBoost)
VOID NTAPI KeInitializeApc(IN PKAPC Apc, IN PKTHREAD Thread, IN KAPC_ENVIRONMENT TargetEnvironment, IN PKKERNEL_ROUTINE KernelRoutine, IN PKRUNDOWN_ROUTINE RundownRoutine OPTIONAL, IN PKNORMAL_ROUTINE NormalRoutine, IN KPROCESSOR_MODE Mode, IN PVOID Context)
POBJECT_TYPE PsProcessType
NTSTATUS NTAPI PsResumeProcess(IN PEPROCESS Process)
NTSTATUS NTAPI NtQueueApcThreadEx(IN HANDLE ThreadHandle, IN OPTIONAL HANDLE UserApcReserveHandle, IN PKNORMAL_ROUTINE ApcRoutine, IN PVOID NormalContext, IN OPTIONAL PVOID SystemArgument1, IN OPTIONAL PVOID SystemArgument2)
NTSTATUS NTAPI PsSuspendThread(IN PETHREAD Thread, OUT PULONG PreviousCount OPTIONAL)
NTSTATUS NTAPI NtQueueApcThread(IN HANDLE ThreadHandle, IN PKNORMAL_ROUTINE ApcRoutine, IN PVOID NormalContext, IN PVOID SystemArgument1, IN PVOID SystemArgument2)
NTSTATUS NTAPI NtAlertResumeThread(IN HANDLE ThreadHandle, OUT PULONG SuspendCount)
VOID NTAPI PspQueueApcSpecialApc(IN PKAPC Apc, IN OUT PKNORMAL_ROUTINE *NormalRoutine, IN OUT PVOID *NormalContext, IN OUT PVOID *SystemArgument1, IN OUT PVOID *SystemArgument2)
NTSTATUS NTAPI NtAlertThread(IN HANDLE ThreadHandle)
NTSTATUS NTAPI NtSuspendProcess(IN HANDLE ProcessHandle)
NTSTATUS NTAPI PsResumeThread(IN PETHREAD Thread, OUT PULONG PreviousCount OPTIONAL)
NTSTATUS NTAPI PsSuspendProcess(IN PEPROCESS Process)
NTSTATUS NTAPI NtTestAlert(VOID)
NTSTATUS NTAPI NtResumeProcess(IN HANDLE ProcessHandle)
NTSTATUS NTAPI NtResumeThread(IN HANDLE ThreadHandle, OUT PULONG SuspendCount OPTIONAL)
NTSTATUS NTAPI NtSuspendThread(IN HANDLE ThreadHandle, OUT PULONG PreviousSuspendCount OPTIONAL)
POBJECT_TYPE PsThreadType
#define STATUS_THREAD_IS_TERMINATING
#define STATUS_PROCESS_IS_TERMINATING
#define STATUS_SUSPEND_COUNT_EXCEEDED
NTSTATUS NTAPI ObReferenceObjectByHandle(IN HANDLE Handle, IN ACCESS_MASK DesiredAccess, IN POBJECT_TYPE ObjectType, IN KPROCESSOR_MODE AccessMode, OUT PVOID *Object, OUT POBJECT_HANDLE_INFORMATION HandleInformation OPTIONAL)
PETHREAD NTAPI PsGetNextProcessThread(IN PEPROCESS Process, IN PETHREAD Thread OPTIONAL)
#define _SEH2_GetExceptionCode()
#define _SEH2_EXCEPT(...)
#define _SEH2_YIELD(__stmt)
#define ProbeForWriteUlong(Ptr)
PULONG MinorVersion OPTIONAL
EX_RUNDOWN_REF RundownProtect
#define STATUS_UNSUCCESSFUL
_In_ WDF_POWER_DEVICE_STATE PreviousState
#define ExAllocatePoolWithQuotaTag(a, b, c)
#define POOL_QUOTA_FAIL_INSTEAD_OF_RAISE
_In_opt_ PVOID _In_opt_ PVOID SystemArgument1
_In_opt_ PVOID _In_opt_ PVOID _In_opt_ PVOID SystemArgument2
#define ObDereferenceObject
_In_ KPROCESSOR_MODE PreviousMode