pub unsafe extern "system" fn RtlCreateUserThread(
    Process: HANDLE,
    ThreadSecurityDescriptor: PSECURITY_DESCRIPTOR,
    CreateSuspended: BOOLEAN,
    ZeroBits: ULONG,
    MaximumStackSize: SIZE_T,
    CommittedStackSize: SIZE_T,
    StartAddress: PUSER_THREAD_START_ROUTINE,
    Parameter: PVOID,
    Thread: PHANDLE,
    ClientId: PCLIENT_ID
) -> NTSTATUS