pub extern "ntdll" fn NtQueryAttributesFile( ObjectAttributes: *const OBJECT.ATTRIBUTES, FileAttributes: *FILE.BASIC_INFORMATION, ) callconv(.winapi) NTSTATUS