pub unsafe extern "system" fn RtlGetUnloadEventTrace(
) -> PRTL_UNLOAD_EVENT_TRACE