pub unsafe extern "system" fn RtlCreateUserProcessEx(
    NtImagePathName: PUNICODE_STRING,
    ProcessParameters: PRTL_USER_PROCESS_PARAMETERS,
    InheritHandles: BOOLEAN,
    Flags: ULONG,
    ProcessInformation: PRTL_USER_PROCESS_INFORMATION
) -> NTSTATUS