dll.add_function('NtQueryInformationThread', 'DWORD', [
                    ['DWORD', 'ThreadHandle', 'in'],
                    ['DWORD', 'ThreadInformationClass', 'in'],
                    ['PBLOB', 'ThreadInformation', 'inout'],
                    ['DWORD', 'ThreadInformationLength', 'in'],