Function PsSetCreateProcessNotifyRoutineEx 

pub unsafe extern "system" fn PsSetCreateProcessNotifyRoutineEx(
    notifyroutine: PCREATE_PROCESS_NOTIFY_ROUTINE_EX,
    remove: bool,
) -> NTSTATUS