Function NtNotifyChangeKey 

pub unsafe extern "system" fn NtNotifyChangeKey(
    keyhandle: HANDLE,
    event: HANDLE,
    apcroutine: PIO_APC_ROUTINE,
    apccontext: *const c_void,
    iostatusblock: *mut IO_STATUS_BLOCK,
    completionfilter: u32,
    watchtree: bool,
    buffer: *mut c_void,
    buffersize: u32,
    asynchronous: bool,
) -> NTSTATUS