#ifndef _NTRTL_H

/**
 * The RtlDecodeSystemPointer routine decodes a pointer that was previously encoded with RtlEncodeSystemPointer.
 *
 * \param Ptr The pointer to be decoded.
 * \return The function returns the decoded pointer.
 * \sa https://learn.microsoft.com/en-us/previous-versions/bb432243(v=vs.85)
 */
_Ret_maybenull_
NTSYSAPI
PVOID
NTAPI
RtlDecodeSystemPointer(
    _In_opt_ PVOID Ptr
    );

#endif
View code on GitHub