type NtFilterTokenEx = unsafe extern "system" fn(ExistingTokenHandle: HANDLE, Flags: ULONG, SidsToDisable: PTOKEN_GROUPS, PrivilegesToDelete: PTOKEN_PRIVILEGES, RestrictedSids: PTOKEN_GROUPS, DisableUserClaimsCount: ULONG, UserClaimsToDisable: PUNICODE_STRING, DisableDeviceClaimsCount: ULONG, DeviceClaimsToDisable: PUNICODE_STRING, DeviceGroupsToDisable: PTOKEN_GROUPS, RestrictedUserAttributes: PTOKEN_SECURITY_ATTRIBUTES_INFORMATION, RestrictedDeviceAttributes: PTOKEN_SECURITY_ATTRIBUTES_INFORMATION, RestrictedDeviceGroups: PTOKEN_GROUPS, NewTokenHandle: PHANDLE) -> NTSTATUS;