pub unsafe extern "system" fn CheckTokenCapability( tokenhandle: HANDLE, capabilitysidtocheck: PSID, hascapability: *mut BOOL, ) -> BOOL