pub unsafe extern "system" fn RtlCheckSandboxedToken(
    TokenHandle: HANDLE,
    IsSandboxed: PBOOLEAN
) -> NTSTATUS