dll.add_function('NtAllocateVirtualMemory', 'DWORD', [
                    ['DWORD', 'ProcessHandle', 'in'],
                    ['PBLOB', 'BaseAddress', 'inout'],
                    ['PDWORD', 'ZeroBits', 'in'],
                    ['PBLOB', 'RegionSize', 'inout'],