pub unsafe extern "system" fn KeQueryTotalCycleTimeThread(
    thread: PKTHREAD,
    cycletimestamp: *mut u64,
) -> u64