pub unsafe extern "system" fn RtlDeriveCapabilitySidsFromName(
    UnicodeString: PUNICODE_STRING,
    CapabilityGroupSid: PSID,
    CapabilitySid: PSID
) -> NTSTATUS