Update unbacked misc for accuracy

[kevross33]

Update to allow for better process tracking and also freeing

[gemini-code-assist]

Code Review

This pull request updates several Windows signature classes in memory_unbacked_misc.py to track memory freeing APIs (NtFreeVirtualMemory and VirtualFree) and refactors their allocation tracking logic. The review feedback highlights significant code duplication across the signature classes and identifies a correctness bug in the VirtualAllocEx handler, where a process handle (hProcess) is incorrectly used as a process ID. To address these issues, the reviewer recommends introducing a shared helper function, handle_unbacked_memory_allocation, to centralize memory tracking and correctly resolve target process IDs.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.