dll.add_function('NtQueryInformationProcess', 'DWORD', [
                    ['DWORD', 'ProcessHandle', 'in'],
                    ['DWORD', 'ProcessInformationClass', 'in'],
                    ['PBLOB', 'ProcessInformation', 'inout'],
                    ['DWORD', 'ProcessInformationLength', 'in'],