pub unsafe extern "system" fn RtlCapabilityCheck(
    TokenHandle: HANDLE,
    CapabilityName: *mut UNICODE_STRING,
    HasCapability: *mut BOOLEAN
) -> NTSTATUS