RtlDecodeRemotePointer - NtDoc

#ifndef _NTRTL_H
#if (PHNT_VERSION >= PHNT_WINDOWS_10)

// rev
/**
 * Decodes a pointer in a specified process that was previously encoded with RtlEncodePointer or RtlEncodeRemotePointer.
 *
 * @param ProcessHandle Handle to the remote process that owns the pointer.
 * @param Pointer The pointer to be decoded.
 * @param EncodedPointer The decoded pointer.
 * @return NTSTATUS Successful or errant status.
 * @sa https://learn.microsoft.com/en-us/previous-versions/dn877133(v=vs.85)
 */
NTSYSAPI
NTSTATUS
NTAPI
RtlDecodeRemotePointer(
    _In_ HANDLE ProcessHandle,
    _In_ PVOID Pointer,
    _Out_ PVOID *DecodedPointer
    );

#endif
#endif
View code on GitHub