pub unsafe extern "system" fn RtlCheckSandboxedToken( TokenHandle: HANDLE, IsSandboxed: PBOOLEAN) -> NTSTATUS