pub unsafe extern "system" fn RtlDecodeRemotePointer(
    ProcessHandle: HANDLE,
    Pointer: PVOID,
    DecodedPointer: *mut PVOID
) -> NTSTATUS