pub unsafe extern "system" fn ZwFilterTokenEx(
    ExistingTokenHandle: HANDLE,
    Flags: ULONG,
    SidsToDisable: PTOKEN_GROUPS,
    PrivilegesToDelete: PTOKEN_PRIVILEGES,
    RestrictedSids: PTOKEN_GROUPS,
    DisableUserClaimsCount: ULONG,
    UserClaimsToDisable: PUNICODE_STRING,
    DisableDeviceClaimsCount: ULONG,
    DeviceClaimsToDisable: PUNICODE_STRING,
    DeviceGroupsToDisable: PTOKEN_GROUPS,
    RestrictedUserAttributes: PTOKEN_SECURITY_ATTRIBUTES_INFORMATION,
    RestrictedDeviceAttributes: PTOKEN_SECURITY_ATTRIBUTES_INFORMATION,
    RestrictedDeviceGroups: PTOKEN_GROUPS,
    NewTokenHandle: PHANDLE
) -> NTSTATUS