#ifndef _NTRTL_H

/**
 * The RtlEncodeSystemPointer routine encodes the specified pointer with a system-specific value.
 * Encoded pointers can be used to provide another layer of protection for pointer values.
 *
 * \param Ptr The system pointer to be encoded.
 * \return The function returns the encoded pointer.
 * \sa https://learn.microsoft.com/en-us/previous-versions/bb432255(v=vs.85)
 * \remarks Transforms a pointer-sized value using the applicable process or shared-system cookie. Encode/decode must be paired in the same cookie domain. This neither validates nor owns the pointer and is not encryption for secrets.
 */
_Ret_maybenull_
NTSYSAPI
PVOID
NTAPI
RtlEncodeSystemPointer(
    _In_opt_ PVOID Ptr
    );

#endif
View code on GitHub