VfProbeAndCaptureUnicodeString

NTSTATUS __stdcall VfProbeAndCaptureUnicodeString(
        _UNICODE_STRING *Destination,
        _UNICODE_STRING *Source,
        POOL_TYPE PoolType){
  __int64 v3; 

  v3 = 0x7FFFFFFF0000i64;
  if( (unsigned __int64)Source < 0x7FFFFFFF0000i64 )
    v3 = (__int64)Source;
  *(_DWORD *)&Destination->Length = *(_DWORD *)v3;
  Destination->Buffer = *(wchar_t **)(v3 + 8);
  return VfProbeAndCaptureUnicodeStringBuffer(Destination, PoolType);
}

Referenced by:

NtSetSystemInformation
VfSetVerifierInformationEx