pub unsafe extern "system" fn RtlValidateProcessHeaps() -> BOOLEAN