pub unsafe extern "system" fn ZwGetWriteWatch(
    ProcessHandle: HANDLE,
    Flags: u32,
    BaseAddress: *mut c_void,
    RegionSize: usize,
    UserAddressArray: *mut *mut c_void,
    EntriesInUserAddressArray: *mut usize,
    Granularity: *mut u32
) -> NTSTATUS