pub unsafe extern "system" fn NtFilterTokenEx(
    ExistingTokenHandle: HANDLE,
    Flags: u32,
    SidsToDisable: *mut TOKEN_GROUPS,
    PrivilegesToDelete: *mut TOKEN_PRIVILEGES,
    RestrictedSids: *mut TOKEN_GROUPS,
    DisableUserClaimsCount: u32,
    UserClaimsToDisable: *mut UNICODE_STRING,
    DisableDeviceClaimsCount: u32,
    DeviceClaimsToDisable: *mut UNICODE_STRING,
    DeviceGroupsToDisable: *mut TOKEN_GROUPS,
    RestrictedUserAttributes: *mut TOKEN_SECURITY_ATTRIBUTES_INFORMATION,
    RestrictedDeviceAttributes: *mut TOKEN_SECURITY_ATTRIBUTES_INFORMATION,
    RestrictedDeviceGroups: *mut TOKEN_GROUPS,
    NewTokenHandle: *mut HANDLE
) -> NTSTATUS