Function PsSetCreateThreadNotifyRoutineEx 

pub unsafe extern "system" fn PsSetCreateThreadNotifyRoutineEx(
    notifytype: PSCREATETHREADNOTIFYTYPE,
    notifyinformation: *const c_void,
) -> NTSTATUS