NtQueryEaFile

function NtQueryEaFile(

  FileHandle: HANDLE;

  IoStatusBlock: PIO_STATUS_BLOCK;

  Buffer: PFILE_FULL_EA_INFORMATION;

  BufferLength: ULONG;

  ReturnSingleEntry: Boolean;

  EaList: PFILE_GET_EA_INFORMATION;

  EaListLength: ULONG;

  EaIndex: PULONG;

  RestartScan: Boolean

):NTSTATUS;