Function PsLookupThreadByThreadId 

pub unsafe fn PsLookupThreadByThreadId(
    threadid: HANDLE,
    thread: *mut PETHREAD,
) -> NTSTATUS