VfZwQueryValueKey

NTSTATUS __stdcall VfZwQueryValueKey(
        VOID *KeyHandle,
        _UNICODE_STRING *ValueName,
        _KEY_VALUE_INFORMATION_CLASS KeyValueInformationClass,
        VOID *KeyValueInformation,
        UINT64 Length,
        ULONG_PTR ResultLength){
  VOID *retaddr; 

  if( (unsigned int)ViZwShouldCheck() )
  {
    ViZwCheckUnicodeString(ValueName, retaddr);
    ViZwCheckVirtualAddress((UINT64)KeyValueInformation, retaddr);
    ViZwCheckVirtualAddress(*(UINT64 *)&ResultLength, retaddr);
  }
  return((__int64(__fastcall *)(VOID *, _UNICODE_STRING *, _QWORD, VOID *, _DWORD, _QWORD))pXdvZwQueryValueKey)(
           KeyHandle,
           ValueName,
           (unsigned int)KeyValueInformationClass,
           KeyValueInformation,
           Length,
           *(_QWORD *)&ResultLength);
}

Referenced by: