pub unsafe extern "system" fn PsLookupProcessByProcessId( processid: HANDLE, process: *mut PEPROCESS, ) -> NTSTATUS