pub unsafe extern "system" fn EventAccessQuery( guid: *const GUID, buffer: PSECURITY_DESCRIPTOR, buffersize: *mut u32, ) -> u32